0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) [ 1631.533209][ T5081] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=b5.49 [ 1631.542767][ T5081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.550965][ T5081] usb 2-1: Product: syz [ 1631.555485][ T5081] usb 2-1: Manufacturer: syz [ 1631.560331][ T5081] usb 2-1: SerialNumber: syz [ 1631.687495][ T5081] usb 2-1: config 0 descriptor?? 22:55:25 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000200ea7000000000d87b0dc34eccc22c566b48c3d9925343701647e6a31a113f8d501c920e435ed80611ff3ecb317e298ebe510e73819539ca868a3b713b96172ca50000f0ff006b66e736f247a4be3b64bde703000000000000008c2942c070f7fdbd2b764549683ec4a2b8d8e30c4e606cf18a400085d89cc50fd321eec0afb2d34d3943a258347e4a2a44f6912fc070f62ae2bc5bb5e6d06a63047acc3107ba0cbee2e85ffc55b37bf064b0555f08fbdbd6d017f931118e886039a5f624c3beb5a8d593f3"]) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x7) [ 1631.749892][ T5081] radio-si470x 2-1:0.210: could not find interrupt in endpoint [ 1631.758481][ T5081] radio-si470x: probe of 2-1:0.210 failed with error -5 [ 1631.766326][ T5081] usbhid 2-1:0.210: couldn't find an input interrupt endpoint 22:55:25 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) r10 = accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_io_uring_submit(r9, r1, &(0x7f0000000880)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd, 0x100, {0x0, r10}, 0x7f, 0x8, 0x0, {0x0, r8, r11}}, 0x3) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r14 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r14, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) syz_io_uring_submit(r2, r13, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r0, 0xb449, 0x0, 0x6, 0x0, 0x1, {0x0, r8}}, 0x5933) syz_io_uring_submit(r6, 0x0, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r8}}, 0x10001) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r15, 0x40086607, &(0x7f0000000140)) 22:55:25 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:55:27 executing program 1: r0 = syz_usb_connect(0x5, 0xc7, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x75, 0x48, 0x51, 0x8, 0x12cf, 0x7111, 0xb549, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "494ad744a674"}, {0x5, 0x24, 0x0, 0x859}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x40, 0x3, 0x1f}, [@acm={0x4, 0x24, 0x2, 0x4}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "728c"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x3ff, 0xe}, [@mdlm={0x15, 0x24, 0x12, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x0, 0x101}, @mdlm_detail={0x46, 0x24, 0x13, 0x0, "cae45e61f8537f5749ed612702eb3563e2f83893becd99aa2c5494a40ebd1739b4d2f14e57c0e39be7f790eea6b5fecba216357fa73387b265bbe8a1cd79b6b40435"}]}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000104000000c490375ea21dea432a4d39bdcd97c6fef8bab446c4714a215298fec989874fb64e460adf82ea714022832db3f843e93ae9654618536b9396b7aa34f8f1780f68142bc264775e4acacd4c8ae7aca228d8169d55e5749d9e9b372246d829b5cce3da4638c079c27ef3f61ae200ac3073fb4a20"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:55:27 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00006c5000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) io_uring_enter(r2, 0x5a94, 0x6100, 0x0, &(0x7f0000000140)={[0xbe1a]}, 0x8) r6 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x20003580, r7) syz_io_uring_submit(r3, r5, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x9, 0x0, @fd_index=0x9, 0x0, 0x0, 0x54d, 0x0, 0x1, {0x0, r7, r1}}, 0x40ae) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r8, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:55:27 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000200ea7000000000d87b0dc34eccc22c566b48c3d9925343701647e6a31a113f8d501c920e435ed80611ff3ecb317e298ebe510e73819539ca868a3b713b96172ca50000f0ff006b66e736f247a4be3b64bde703000000000000008c2942c070f7fdbd2b764549683ec4a2b8d8e30c4e606cf18a400085d89cc50fd321eec0afb2d34d3943a258347e4a2a44f6912fc070f62ae2bc5bb5e6d06a63047acc3107ba0cbee2e85ffc55b37bf064b0555f08fbdbd6d017f931118e886039a5f624c3beb5a8d593f3"]) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000200ea7000000000d87b0dc34eccc22c566b48c3d9925343701647e6a31a113f8d501c920e435ed80611ff3ecb317e298ebe510e73819539ca868a3b713b96172ca50000f0ff006b66e736f247a4be3b64bde703000000000000008c2942c070f7fdbd2b764549683ec4a2b8d8e30c4e606cf18a400085d89cc50fd321eec0afb2d34d3943a258347e4a2a44f6912fc070f62ae2bc5bb5e6d06a63047acc3107ba0cbee2e85ffc55b37bf064b0555f08fbdbd6d017f931118e886039a5f624c3beb5a8d593f3"]) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)) (async) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x7) (async) 22:55:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f00006c3000/0x4000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) 22:55:27 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:55:27 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) r10 = accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_io_uring_submit(r9, r1, &(0x7f0000000880)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd, 0x100, {0x0, r10}, 0x7f, 0x8, 0x0, {0x0, r8, r11}}, 0x3) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r14 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r14, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) syz_io_uring_submit(r2, r13, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r0, 0xb449, 0x0, 0x6, 0x0, 0x1, {0x0, r8}}, 0x5933) syz_io_uring_submit(r6, 0x0, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r8}}, 0x10001) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1633.643066][T19792] usb 2-1: USB disconnect, device number 110 [ 1633.692785][T28826] xt_ct_set_helper: 61 callbacks suppressed [ 1633.692847][T28826] xt_CT: You must specify a L4 protocol and not use inversions on it 22:55:27 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000200ea7000000000d87b0dc34eccc22c566b48c3d9925343701647e6a31a113f8d501c920e435ed80611ff3ecb317e298ebe510e73819539ca868a3b713b96172ca50000f0ff006b66e736f247a4be3b64bde703000000000000008c2942c070f7fdbd2b764549683ec4a2b8d8e30c4e606cf18a400085d89cc50fd321eec0afb2d34d3943a258347e4a2a44f6912fc070f62ae2bc5bb5e6d06a63047acc3107ba0cbee2e85ffc55b37bf064b0555f08fbdbd6d017f931118e886039a5f624c3beb5a8d593f3"]) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000200ea7000000000d87b0dc34eccc22c566b48c3d9925343701647e6a31a113f8d501c920e435ed80611ff3ecb317e298ebe510e73819539ca868a3b713b96172ca50000f0ff006b66e736f247a4be3b64bde703000000000000008c2942c070f7fdbd2b764549683ec4a2b8d8e30c4e606cf18a400085d89cc50fd321eec0afb2d34d3943a258347e4a2a44f6912fc070f62ae2bc5bb5e6d06a63047acc3107ba0cbee2e85ffc55b37bf064b0555f08fbdbd6d017f931118e886039a5f624c3beb5a8d593f3"]) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)) (async) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x7) (async) 22:55:27 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x412, 0x0, 0x0, 0x0, 0xfffffe01}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x124, 0xcb, &(0x7f00000001c0)=""/203, 0x41100, 0x3, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xe, 0x800, 0x10000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0, r0, r0, r0, r0, 0xffffffffffffffff, r0, r0, r0]}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000340)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) sendfile(r2, r1, 0x0, 0x2000007389a) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x54, 0x13, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "7db0c875"}]}, 0x54}}, 0x0) recvmmsg(r3, &(0x7f0000003100)=[{{&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001580)=[{&(0x7f0000000400)}, {&(0x7f0000000440)=""/68, 0x44}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/168, 0xa8}], 0x4, &(0x7f00000015c0)=""/55, 0x37}, 0x1b22f0d3}, {{&(0x7f0000001600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001680)=""/151, 0x97}, {&(0x7f0000001740)=""/12, 0xc}, {&(0x7f0000001780)=""/97, 0x61}, {&(0x7f0000001800)=""/185, 0xb9}, {&(0x7f00000018c0)=""/216, 0xd8}], 0x5, &(0x7f0000001a40)=""/142, 0x8e}, 0x2}, {{&(0x7f0000001b00)=@generic, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001b80)=""/195, 0xc3}, {&(0x7f0000001c80)=""/62, 0x3e}, {&(0x7f0000001cc0)=""/51, 0x33}, {&(0x7f0000001d00)=""/169, 0xa9}, {&(0x7f0000001dc0)=""/37, 0x25}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/159, 0x9f}], 0x7, &(0x7f0000002f40)=""/56, 0x38}, 0x2b09}, {{&(0x7f0000002f80)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003080)=[{&(0x7f0000003000)=""/87, 0x57}], 0x1, &(0x7f00000030c0)=""/62, 0x3e}}], 0x4, 0x40, &(0x7f0000003200)={0x77359400}) 22:55:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f00006c3000/0x4000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) 22:55:28 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000000c0)) openat2(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x80, 0x10}, 0x18) sendfile(r0, r1, 0x0, 0x200) [ 1634.142752][T28845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1634.162261][T19792] usb 2-1: new high-speed USB device number 111 using dummy_hcd 22:55:28 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x412, 0x0, 0x0, 0x0, 0xfffffe01}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x124, 0xcb, &(0x7f00000001c0)=""/203, 0x41100, 0x3, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xe, 0x800, 0x10000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0, r0, r0, r0, r0, 0xffffffffffffffff, r0, r0, r0]}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000340)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) sendfile(r2, r1, 0x0, 0x2000007389a) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x54, 0x13, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "7db0c875"}]}, 0x54}}, 0x0) recvmmsg(r3, &(0x7f0000003100)=[{{&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001580)=[{&(0x7f0000000400)}, {&(0x7f0000000440)=""/68, 0x44}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/168, 0xa8}], 0x4, &(0x7f00000015c0)=""/55, 0x37}, 0x1b22f0d3}, {{&(0x7f0000001600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001680)=""/151, 0x97}, {&(0x7f0000001740)=""/12, 0xc}, {&(0x7f0000001780)=""/97, 0x61}, {&(0x7f0000001800)=""/185, 0xb9}, {&(0x7f00000018c0)=""/216, 0xd8}], 0x5, &(0x7f0000001a40)=""/142, 0x8e}, 0x2}, {{&(0x7f0000001b00)=@generic, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001b80)=""/195, 0xc3}, {&(0x7f0000001c80)=""/62, 0x3e}, {&(0x7f0000001cc0)=""/51, 0x33}, {&(0x7f0000001d00)=""/169, 0xa9}, {&(0x7f0000001dc0)=""/37, 0x25}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/159, 0x9f}], 0x7, &(0x7f0000002f40)=""/56, 0x38}, 0x2b09}, {{&(0x7f0000002f80)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003080)=[{&(0x7f0000003000)=""/87, 0x57}], 0x1, &(0x7f00000030c0)=""/62, 0x3e}}], 0x4, 0x40, &(0x7f0000003200)={0x77359400}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x412, 0x0, 0x0, 0x0, 0xfffffe01}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x124, 0xcb, &(0x7f00000001c0)=""/203, 0x41100, 0x3, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xe, 0x800, 0x10000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0, r0, r0, r0, r0, 0xffffffffffffffff, r0, r0, r0]}, 0x80) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000340)) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) sendfile(r2, r1, 0x0, 0x2000007389a) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x54, 0x13, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "7db0c875"}]}, 0x54}}, 0x0) (async) recvmmsg(r3, &(0x7f0000003100)=[{{&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001580)=[{&(0x7f0000000400)}, {&(0x7f0000000440)=""/68, 0x44}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/168, 0xa8}], 0x4, &(0x7f00000015c0)=""/55, 0x37}, 0x1b22f0d3}, {{&(0x7f0000001600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001680)=""/151, 0x97}, {&(0x7f0000001740)=""/12, 0xc}, {&(0x7f0000001780)=""/97, 0x61}, {&(0x7f0000001800)=""/185, 0xb9}, {&(0x7f00000018c0)=""/216, 0xd8}], 0x5, &(0x7f0000001a40)=""/142, 0x8e}, 0x2}, {{&(0x7f0000001b00)=@generic, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001b80)=""/195, 0xc3}, {&(0x7f0000001c80)=""/62, 0x3e}, {&(0x7f0000001cc0)=""/51, 0x33}, {&(0x7f0000001d00)=""/169, 0xa9}, {&(0x7f0000001dc0)=""/37, 0x25}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/159, 0x9f}], 0x7, &(0x7f0000002f40)=""/56, 0x38}, 0x2b09}, {{&(0x7f0000002f80)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003080)=[{&(0x7f0000003000)=""/87, 0x57}], 0x1, &(0x7f00000030c0)=""/62, 0x3e}}], 0x4, 0x40, &(0x7f0000003200)={0x77359400}) (async) 22:55:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f00006c3000/0x4000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) [ 1634.412061][T19792] usb 2-1: Using ep0 maxpacket: 8 [ 1634.531106][T28860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1634.541103][T19792] usb 2-1: config 0 has an invalid interface number: 210 but max is 0 [ 1634.549977][T19792] usb 2-1: config 0 has no interface number 0 [ 1634.723134][T19792] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=b5.49 [ 1634.732504][T19792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.740706][T19792] usb 2-1: Product: syz [ 1634.745163][T19792] usb 2-1: Manufacturer: syz [ 1634.749943][T19792] usb 2-1: SerialNumber: syz [ 1634.798465][T19792] usb 2-1: config 0 descriptor?? [ 1634.849210][T19792] radio-si470x 2-1:0.210: could not find interrupt in endpoint [ 1634.857336][T19792] radio-si470x: probe of 2-1:0.210 failed with error -5 [ 1634.865223][T19792] usbhid 2-1:0.210: couldn't find an input interrupt endpoint [ 1636.268507][T12459] kworker/dying (12459) used greatest stack depth: 4088 bytes left 22:55:30 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000360a6208ef171e72edb901020301090212000100008b130000090400000002060000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x0, 0x0, 0x4, "c490375e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:55:30 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000000c0)) (async) openat2(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x80, 0x10}, 0x18) sendfile(r0, r1, 0x0, 0x200) 22:55:30 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x412, 0x0, 0x0, 0x0, 0xfffffe01}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x124, 0xcb, &(0x7f00000001c0)=""/203, 0x41100, 0x3, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xe, 0x800, 0x10000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0, r0, r0, r0, r0, 0xffffffffffffffff, r0, r0, r0]}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000340)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) sendfile(r2, r1, 0x0, 0x2000007389a) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x54, 0x13, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "7db0c875"}]}, 0x54}}, 0x0) recvmmsg(r3, &(0x7f0000003100)=[{{&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001580)=[{&(0x7f0000000400)}, {&(0x7f0000000440)=""/68, 0x44}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/168, 0xa8}], 0x4, &(0x7f00000015c0)=""/55, 0x37}, 0x1b22f0d3}, {{&(0x7f0000001600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001680)=""/151, 0x97}, {&(0x7f0000001740)=""/12, 0xc}, {&(0x7f0000001780)=""/97, 0x61}, {&(0x7f0000001800)=""/185, 0xb9}, {&(0x7f00000018c0)=""/216, 0xd8}], 0x5, &(0x7f0000001a40)=""/142, 0x8e}, 0x2}, {{&(0x7f0000001b00)=@generic, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001b80)=""/195, 0xc3}, {&(0x7f0000001c80)=""/62, 0x3e}, {&(0x7f0000001cc0)=""/51, 0x33}, {&(0x7f0000001d00)=""/169, 0xa9}, {&(0x7f0000001dc0)=""/37, 0x25}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/159, 0x9f}], 0x7, &(0x7f0000002f40)=""/56, 0x38}, 0x2b09}, {{&(0x7f0000002f80)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003080)=[{&(0x7f0000003000)=""/87, 0x57}], 0x1, &(0x7f00000030c0)=""/62, 0x3e}}], 0x4, 0x40, &(0x7f0000003200)={0x77359400}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x412, 0x0, 0x0, 0x0, 0xfffffe01}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x124, 0xcb, &(0x7f00000001c0)=""/203, 0x41100, 0x3, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xe, 0x800, 0x10000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0, r0, r0, r0, r0, 0xffffffffffffffff, r0, r0, r0]}, 0x80) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000340)) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) sendfile(r2, r1, 0x0, 0x2000007389a) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x54, 0x13, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "7db0c875"}]}, 0x54}}, 0x0) (async) recvmmsg(r3, &(0x7f0000003100)=[{{&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000001580)=[{&(0x7f0000000400)}, {&(0x7f0000000440)=""/68, 0x44}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/168, 0xa8}], 0x4, &(0x7f00000015c0)=""/55, 0x37}, 0x1b22f0d3}, {{&(0x7f0000001600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001680)=""/151, 0x97}, {&(0x7f0000001740)=""/12, 0xc}, {&(0x7f0000001780)=""/97, 0x61}, {&(0x7f0000001800)=""/185, 0xb9}, {&(0x7f00000018c0)=""/216, 0xd8}], 0x5, &(0x7f0000001a40)=""/142, 0x8e}, 0x2}, {{&(0x7f0000001b00)=@generic, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001b80)=""/195, 0xc3}, {&(0x7f0000001c80)=""/62, 0x3e}, {&(0x7f0000001cc0)=""/51, 0x33}, {&(0x7f0000001d00)=""/169, 0xa9}, {&(0x7f0000001dc0)=""/37, 0x25}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/159, 0x9f}], 0x7, &(0x7f0000002f40)=""/56, 0x38}, 0x2b09}, {{&(0x7f0000002f80)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003080)=[{&(0x7f0000003000)=""/87, 0x57}], 0x1, &(0x7f00000030c0)=""/62, 0x3e}}], 0x4, 0x40, &(0x7f0000003200)={0x77359400}) (async) 22:55:30 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00006c5000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) io_uring_enter(r2, 0x5a94, 0x6100, 0x0, &(0x7f0000000140)={[0xbe1a]}, 0x8) r6 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x20003580, r7) syz_io_uring_submit(r3, r5, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x9, 0x0, @fd_index=0x9, 0x0, 0x0, 0x54d, 0x0, 0x1, {0x0, r7, r1}}, 0x40ae) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r8, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f00006c5000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) (async) io_uring_enter(r2, 0x5a94, 0x6100, 0x0, &(0x7f0000000140)={[0xbe1a]}, 0x8) (async) syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x20003580, r7) (async) syz_io_uring_submit(r3, r5, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x9, 0x0, @fd_index=0x9, 0x0, 0x0, 0x54d, 0x0, 0x1, {0x0, r7, r1}}, 0x40ae) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r8, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:55:30 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) r10 = accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_io_uring_submit(r9, r1, &(0x7f0000000880)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd, 0x100, {0x0, r10}, 0x7f, 0x8, 0x0, {0x0, r8, r11}}, 0x3) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r14 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r14, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) syz_io_uring_submit(r2, r13, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r0, 0xb449, 0x0, 0x6, 0x0, 0x1, {0x0, r8}}, 0x5933) syz_io_uring_submit(r6, 0x0, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r8}}, 0x10001) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:55:30 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1636.767571][T19792] usb 2-1: USB disconnect, device number 111 22:55:31 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000000c0)) (async) openat2(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x80, 0x10}, 0x18) (async) sendfile(r0, r1, 0x0, 0x200) 22:55:31 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:55:31 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28102, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:55:31 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x540, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x3) 22:55:31 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00006c5000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) io_uring_enter(r2, 0x5a94, 0x6100, 0x0, &(0x7f0000000140)={[0xbe1a]}, 0x8) r6 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x20003580, r7) syz_io_uring_submit(r3, r5, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x9, 0x0, @fd_index=0x9, 0x0, 0x0, 0x54d, 0x0, 0x1, {0x0, r7, r1}}, 0x40ae) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r8, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f00006c5000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) (async) io_uring_enter(r2, 0x5a94, 0x6100, 0x0, &(0x7f0000000140)={[0xbe1a]}, 0x8) (async) syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x20003580, r7) (async) syz_io_uring_submit(r3, r5, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x9, 0x0, @fd_index=0x9, 0x0, 0x0, 0x54d, 0x0, 0x1, {0x0, r7, r1}}, 0x40ae) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r8, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) [ 1637.372811][T19792] usb 2-1: new high-speed USB device number 112 using dummy_hcd 22:55:31 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) r10 = accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_io_uring_submit(r9, r1, &(0x7f0000000880)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd, 0x100, {0x0, r10}, 0x7f, 0x8, 0x0, {0x0, r8, r11}}, 0x3) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r14 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r14, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) syz_io_uring_submit(r2, r13, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r0, 0xb449, 0x0, 0x6, 0x0, 0x1, {0x0, r8}}, 0x5933) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1637.632294][T19792] usb 2-1: Using ep0 maxpacket: 8 [ 1637.782673][T19792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.793626][T19792] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1637.974291][T19792] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=b9.ed [ 1637.984048][T19792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.992553][T19792] usb 2-1: Product: syz [ 1637.997043][T19792] usb 2-1: Manufacturer: syz [ 1638.002011][T19792] usb 2-1: SerialNumber: syz [ 1638.104504][T19792] usb 2-1: config 0 descriptor?? 22:55:34 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000360a6208ef171e72edb901020301090212000100008b130000090400000002060000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x0, 0x0, 0x4, "c490375e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:55:34 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:55:34 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28102, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:55:34 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) r10 = accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_io_uring_submit(r9, r1, &(0x7f0000000880)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd, 0x100, {0x0, r10}, 0x7f, 0x8, 0x0, {0x0, r8, r11}}, 0x3) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r14 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r14, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) syz_io_uring_submit(r2, r13, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r0, 0xb449, 0x0, 0x6, 0x0, 0x1, {0x0, r8}}, 0x5933) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:55:34 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x10, 0x3f8, 0x400, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x80c8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r10}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002680)=ANY=[@ANYBLOB="38000000100039040000000000000000000003e4", @ANYRES32=r10, @ANYBLOB="00000000000000001800128008000100736974000c00028008000f00", @ANYRES32=r9, @ANYRES64=r6], 0x38}}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x80, @vifc_lcl_ifindex=r10, @multicast2}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000004200)={0x78, 0xfffffffffffffffe, r11, {0x0, 0x0, 0x0, {0x2, 0x0, 0x3, 0x5, 0x7, 0x2, 0x7fff, 0x0, 0x4, 0x8000, 0x7, r12, 0x0, 0x8628}}}, 0x78) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@migrate={0x1c8, 0x21, 0x302, 0x70bd2c, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e20, 0xccd, 0x4e23, 0x0, 0x2, 0x80, 0x0, 0x33, r10, r12}, 0x6e6bb7, 0x1}, [@migrate={0xe8, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, @in6=@empty, @in6=@remote, @in=@broadcast, 0xff, 0x3, 0x0, 0x3500, 0xa, 0x2}, {@in=@multicast2, @in=@remote, @in6=@private0, @in6=@empty, 0x33, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast2, @in6=@mcast2, @in=@local, @in6=@private0, 0x2b, 0x2, 0x0, 0x3506, 0xa, 0x2}]}, @etimer_thresh={0x8, 0xc, 0x3}, @policy_type={0xa}, @algo_auth={0x65, 0x1, {{'sha256-ni\x00'}, 0xe8, "05f774e67018fc3b701cc228660ef0dfe779b6fc15b5dcc1ec12320c19"}}, @proto={0x5, 0x19, 0x3c}, @lastused={0xc, 0xf, 0x10000}]}, 0x1c8}}, 0x4048004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002100), 0xc, &(0x7f0000002400)={&(0x7f00000026c0)=@expire={0x208, 0x18, 0x8, 0x70bd27, 0x25dfdbff, {{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4e20, 0x3, 0x4e22, 0x1, 0x2, 0x120, 0x20, 0x2e, r8, r12}, {@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4d6, 0x2b}, @in6=@private1, {0xffffffffffffff76, 0x1, 0x1fa, 0x4, 0x7, 0x1000, 0x5, 0x9}, {0x3, 0x80000000, 0x0, 0x3}, {0x5, 0x3, 0x1}, 0x70bd25, 0x3503, 0x6, 0x4, 0xff, 0x38}, 0x6}, [@address_filter={0x28, 0x1a, {@in=@broadcast, @in=@local, 0xa, 0x3, 0x1f}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010100, @in6=@remote, 0x0, 0x2}}, @tfcpad={0x8}, @offload={0xc, 0x1c, {0x0, 0x2}}, @algo_auth_trunc={0x7f, 0x14, {{'sha224-arm64\x00'}, 0x198, 0x180, "796345045a5d65f84c869ff35451eb9a5fd0595824c04829dd0f8ba460400b9a596e15ee4a7a6721e28a6fd4cf8881a9492133"}}, @mark={0xc, 0x15, {0x35075a, 0x9}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e22, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}]}, 0x208}, 0x1, 0x0, 0x0, 0x810}, 0x8000) r13 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000580)=0x0) r15 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) [ 1639.932389][ T5087] usb 2-1: USB disconnect, device number 112 sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)=[{&(0x7f0000000440)={0xa8, 0x1f, 0x2, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x25}]}, @generic="0d83796ed65a6b126aa401160d9017904f96bdde5924d784dd3cac647b2879468a554331f46fcd4325505a642f22a44c56596976007023d6b4dc98fba0a557cc2704a848f920ebe10934f643c3ac611ca508a307ddce854d940034e994b4872b7ffc7062f7ef", @generic="f1c41cc6fa753b9f359f6c8816ec33283e841efe4deec5b4c2f830ca4945cc", @typed={0x8, 0x7c, 0x0, 0x0, @fd}]}, 0xa8}, {&(0x7f0000000c80)={0x1208, 0x38, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@generic="76ba101f82515ea37521363f8f8b9b052e49cae0eeef264e36c74192fc9014a1d96b9731b209cdf0a300854381df7c9bb835daa3358430664ba9cc1497a9aaa916ca9d39ea448e82b065e6fd3bd73f82d416d10353d535df7a0b4ac91a4a23da4024", @typed={0x8, 0x1b, 0x0, 0x0, @uid}, @generic="1c478be16992a0fa5465a77cccac14569a8653fe0039de7d78236e5a8939e159b5566d8599dab4856d7b7f0c9844518ddc95c356a5b242e5e56513adc6fe1c409e4b63be67dda2213f910b1efd11c4f216a71b772381f8fd8dd35d758b3342fcc6b3086bb3e9625b489f734667784ad2276ebae01b85c390ca8168df", @generic="a411c91e3bf76eaab0cec545ce03fb520649fd3cdf3a47f2e68b321e3286e443814493079fe6308c4214466ffb933e4f75805c0d349b12fe87d8f0145f20298a52b461c2f3ae9911ada3ac7bae53277f7d387d36695761072381e530d44bffbab62a787dd9c68f0089597ae77dc21552dcd7418ea944fa96ea7005", @generic="f2a610d29b74145ac42714533d63f79d0f33b77a84cc9db0212a94c284c7a484b61f75e578157443de8e5057faceeec28dbb01324ba3a343719b7047fa68f3cac2158554648409f731f9ea46444280eafbcceae8d56f2a0acc42489fcfadb343aef6d9a0fd44e6a5dc7f0e500d6df8fc94ec50abed6a90b33587d575859d1a1e3d34ae39e7696a414ac7cc083cf6cc16858dad40", @generic="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"]}, 0x1208}, {&(0x7f00000027c0)={0x123c, 0x39, 0x200, 0x70bd28, 0x25dfdbfe, "", [@generic="89f496923591ed30b9c804ac4f5c6cfa7ad73dfe956c89d06ac498", @generic="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", @typed={0x8, 0x76, 0x0, 0x0, @uid}, @typed={0x8, 0x59, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xb2, 0x5d, 0x0, 0x0, @binary="cba9e2294e6ed1e329fc9229b0e632ad0184b63ae5686315b0078b638dc2ee88043f36e05197292553565e37fc6241d3da4144390a6f722e2ef3e0422da706fd751d7d763c8c6e2b7c6bd465f847be054b2206c716d62f215dbd69198256a255d0839b33226d0e626151deb1b8ccfc6914b47edc88785e352b17dc27f303286a7e4961146a9af28413f6a6758b7ff19d17209b2d518adb1a0266b9df9e74e90d3014e3409b5239135d638332e00a"}, @nested={0x14, 0x43, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd}, @typed={0x7, 0xc, 0x0, 0x0, @str='CT\x00'}]}, @nested={0x12a, 0x45, 0x0, 0x1, [@generic="fbb08aae34fbe1737cebfb68df2db901021e069732de465d73dfcf4e26a1896a8d1bd8bca74f6500d6ee8bb7ff7668ab42901a509ac73ba2afebbb1126dfd70ed8d2e1c6e7585feed5a09fc489f37c0c00f74465b1be3e55d5066d52ef2f6e3836d7554c6ee7544ffbba9e8374bdd6450d7aa7e3e158dfba8dd2d312265b7d3ccdeb742fff76fab7e0b6220e7c53d151fed1ee9c6483c0b6987a4262a3f69c", @typed={0xc, 0x88, 0x0, 0x0, @u64=0x1ff}, @typed={0xc, 0x12, 0x0, 0x0, @u64=0x3}, @typed={0x6c, 0x71, 0x0, 0x0, @binary="94e20a543a0e8ab28a6a52642bce91bd72a06498f6fdbbf74b11a0aec01867d61363c6f348b07be0a0a724427b3d231a33c917f5b31934cb4d9d3826a1be3911615ad5c57216ade9d963355567d302b458e5a5d0346fc6338a15854c43949a07ce6b711428f56f99"}, @generic="af4d4e"]}, @typed={0x4, 0x91}, @typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x123c}, {&(0x7f0000003a00)={0x11d0, 0x34, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x1151, 0x14, 0x0, 0x1, [@typed={0x8, 0x2d, 0x0, 0x0, @u32=0xea99}, @generic="fac107ed709197d7deb8923cb5cfa4508171889327a6064b1fb3dc55b5a43af6c96ce2cb2e864c3e02dddcad38a54747abc3ff30cbf634e906f3da861c9e1fd140b346eff39eb741c0ea01e462c95a02c32bb35a5b275a6d68d3306d7db7c7bf70ccc8fe343630d0d5528e1ed97eb11c663d117225bfbe59f853218734e220717997c4994c23e9747017627b2372ea35f51c8c73b8b4310f32686f70428e5b8d4620af91d36b054624d4d1827435821496e16d5e6fb5c19e782e2720fc68b76a804d0a1f6181775b", @typed={0x4, 0x22}, @generic="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", @typed={0x8, 0x30, 0x0, 0x0, @uid=r12}, @generic="6ed330748565847aa407aecfda11b277923524d15d8fe6675d9610d7c51c73b2210f378c78bfcf08cbea3e52b8c0212e64bfd4460235f2d5186f7cdf0b0e2e5bbcd3fb28c320221f7b7ee7ebf0d33d9047f1a1d49c073fc495e40f51510041c333d19a2a722d9d7855b142d77c1d7f383c"]}, @nested={0x6a, 0x1, 0x0, 0x1, [@generic="19012b0848db49a4eac84f410ea8bb9ab9e560eaa429435e86293758059339a3ae5689e10339a5137c0797aceca84f53", @generic="07d5feafd310d38955b1235e8efab4e31b67cd99e3a8f843e3527945bb6f4b18d25e52cc0deaa1a4efaeb9b6367c614d6237e50c8308"]}]}, 0x11d0}, {&(0x7f0000004c00)={0x13dc, 0x19, 0x400, 0x70bd29, 0x25dfdbfd, "", [@generic="7853116c6b3e63ada874ca1d4d2b53b78e3410ed3ab21a8cafd6355095c46a11d8f74b5e1c7b531bf362cbd6d203536beae58520a6a6cbe49e36cd6b206a1d88a822a55fb3f99a0c2d8cd4cde9476267215338f49794725572061d0bb83176e85597a1718b186b254d088a90447c2947ebc005aff5e756ddc0d18bbdbef91180f0c44edc366d70425cf2a406261569b0b3d7a6cf1312e23283c12169ef1ad801083c", @typed={0x4, 0x7f}, @generic="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", @nested={0x17a, 0x5c, 0x0, 0x1, [@generic="3c8b51a8400d30ee525de9e376751b0c3e42f1d8636a6f50ad299ba0fcc21dd5c915153c1d16a5c635c905b6001d152dbb7494ca94a50a5ecd616537d01232e7692547f59a933f0e43b37495994d0d28d874ab675ea3628b321cad32376e3e860b9a189c18d76c9fe3af2a4f77d6773c", @typed={0xd1, 0x1f, 0x0, 0x0, @binary="02fb63331d7afdf15634f4e0be50dd9b4080f58def564aa4a2fb14c9702c8391f62dee58c5a51fc5bb844188e9595e4709e6e783c1aafc813c5898a7b9b3e7d687c2bc822a8d242c8e5ba0b02b3122fc32e972afd2e4997eabfee27e059e5237d13697e24d55bc926de31b7ce0b5cabceab37e17866e480265009999f64b1deeff94f0b3a240d59f2b239f0ae2c6482278a9b8398d00d552bd6fac755c9860d50144e49165ed7531a4aea67d9a213b9a86f14331ad18fe9772246b60cdca854089895af01f9faabc41a63da1bb"}, @generic="a31da3de206ea3deac9fedf8699f7ba15a946a36981cb72eee635f80c84302dab15fe8f29873b8d5929ed90aea62b91f34a7"]}, @generic="f9713c80f6d176c81d532d74155ae1cd10e94fec05e2bee41bdfb622f522c57ff5ead5e12d17ed380ae30e89cd3e3c65d6e0b693fab065e346209d98afa2ce91606b8ef21237f1ac8797904321b6caedc57a9b5c7451d5e85da342278a90c251ba7a595c9c21d453bc312582de43feb90b065dbe4d6d12b5a840eca7dd903cf790b3ca920ddef7237308d5bff351a0b064248b30eb26576f59502600d79f4d6579feef4ebcbbf141f985dc2532fa120947ffa174cebe9c3698f04bfa85733c35cc1f4c3420b49c62aa7b8c0461f6ce6d692aaa6dfa373d366f2e6e4b1e2e9f91300988d06fdfba88e09c864399038c07dc17fe007c", @nested={0xb4, 0x45, 0x0, 0x1, [@typed={0xad, 0x30, 0x0, 0x0, @binary="3bb9736900a0c25bd6735109045e31429a220fa89aef10c45de58553efe6bc908b1e80988551b2119807189c557443a4fbaaa2a5abdc48860b060ad028a1d430b20d8cb654d936bb3a5cf40e9b25c90295819955abaaab1557369df44663d8b4eee7ca86a48cc2e6fdeb53c90f2c196150eb3e628587a36564a4c733559576523c6ee43628e3b0449aa119cf9a7a4e002d014d4ef250dc95468763d49807413de9a5abd581cb6a1851"}]}]}, 0x13dc}, {&(0x7f00000005c0)={0x244, 0x17, 0x1, 0x70bd29, 0x25dfdbfe, "", [@typed={0x8, 0x5e, 0x0, 0x0, @fd=r13}, @nested={0x4, 0x3b}, @generic="ce12b7e747a90aa1fd5299876ece9186bcc50c96341a784cd5e2e41a946268067a53f7fa1aa6a25bcb87f7a1173ba87bd420bb91b286468efdbcc78401f4497b27c7243b37c773b41291604b1b7607d32b97931d5a7b3d7b2290f568c4ef5d48c30f7504cdab4d4a723c312e6bd6b878f777aadc7a23bc94fb015d195cd862438fd6e30a90069a7697c82b0341021a1027eb1e2a7bc85c6759f85f552c179bb513ebec10b2c7884f3f36add80b7c2212de444eb8173cb8cb78f2bad939bdf6ab846574356e273b46c474ed48f4470f04b5d020b291cf219547bb17cc7136e5f5a8af16de9c7d9d89f6aa4a192ad9", @generic="aa447ed136fafdda605ef33d1349c6ea70db5f56f35413dd162719c3f5bdd2caf344b1fa51f1094372215824a46781d2b74b7fd369e69898090398b6f70ce4937fb5eec98710cc0638822fdf4dabd7e9203fe93143b75016ce2ba73f8ad5e6016b6127c73fa38ab3120eebabf31acf4850a64236d8869a1fb29bfde0abca06847d82df046d6da921e68e3a32c908fa13198653776a3380f1e087b0084295f3cead567c8fe1b8ab0e9fe1c759b545bf0bd28dc4d55710e27360022f7eceebcc682177a2648bfe44899b2bbb73304625a760dea463c2e8cd23af", @generic="9c95aa996c2ffadafae92244b0c8b75821607155a00f8337187286faeb834b21", @generic="3216934d06802ee22397c419b4a5271986dbf7937121128f4462c3338c445587af901bb1e1225e6c6504361a6c97840b1438865ac8893b", @typed={0x8, 0xd, 0x0, 0x0, @pid=r14}]}, 0x244}, {&(0x7f0000001ec0)={0x354, 0x33, 0x8, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x28d, 0x4d, 0x0, 0x1, [@generic="3d79d79455e7db5daf245c7c03cc305f49b1445a7b789d86a6c939301988a576db44dd1bceab38dabef8313db96588a551bebdbaf2e98e430396ca3d6feafc3e618971569ff0e73f13d2327368c9c71fdb16afdbde25444eb2d67181bbc997922ca83d9c523d58c71f56e3cf80c8ec8882df24807d76bf00747180eb6fb309ba7231885c73ca8a4b9480cc7e5941b062bdbcc1231e2745158fcf6e19d070cf96d6b7065ed5930fd029ed8a81ff3bfcf082f0daec24c689d81d", @generic="534d2a627c9c3adc35ea172ae91f82a9ea6f42da79ce091dd1feb2502a328ba81eed6792575ed6a17b3d81717ea1b1a29dc65b39681bfc8bb70a80c0185a0f96e28e65d4295e42973d6a4dfac3db2413fea5bf2120be4b8ee0d4ba454347bd657f9c82276c2e44c30f6a42249773cf71b24867f321b22efd5ab7dc7c920e0f006961a4137b38bf281b1ab0cde68d4add4b5a95f05830d1c2fce126c0c6adf2e50f66a972e9e29a2c5ebd2ab2bb5bf8570ff5fc619a27bb5622a6b4c3fba048c45631d02f1d75aed2d7f905a1b81f801fcc360dbe00313c5aea37a0e25c77f32c81", @typed={0xc, 0x68, 0x0, 0x0, @u64=0x2}, @generic="00dcfb5f663c7af6d1b8f6103912ae5b99852d8a461c1fa084c140acd3a90ba54cc2edf1daebb8222f9c70196e2d36914987b1001fb11e04327e0d56236d38a10db970e5b1990fafa3840de61365d0529f8ff0cb8ca669eba31f84bf14ccfdfafc5935737b1d9732d635b1aec7e4a23998828f796ba5b26163da421c91a237da8824636404734aeee5fbd8b2a290d968bc053c8ed827277b22ae11ca84a148cc308b1f31787bc4ec82ae886b9777c814d26930c526a9d73ed5e52229f6b13fc5f2242e3c16a4fb43d17bf58c11e0b56bd7a677428a015b8072bc2ddd0129dfd722eddb"]}, @typed={0x7, 0x7f, 0x0, 0x0, @str='%+\x00'}, @generic="9b95fd650408de0f3da8845514d3dc1e10a81997b1a3954216289cc69101fe36de78a9ae07bcdc1f15f6422b1b87b3c5187d4a4a64a57604b7af69ee73b0dd984f0648d41f46f6339402ed2626933ccf77c4bfceba44a9dfd8900e8fe54f62c1d59069dcf0523041090b43651361f75f77999311a96635c11cf5b85b9936267cb3668bad4a6957028c9666eb3b7e0aca31e7fa05e042f5bc6c87ad7a5069eb13d1d801c745e2a8e893"]}, 0x354}], 0x7, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [r15, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}], 0x30, 0x20008040}, 0x84) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4c, 0x0, @fd_index=0x9, 0x2040000000000, 0x0, 0x80, 0x5}, 0x4) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x34a, 0x0, r3}) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r16, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:55:34 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x540, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x3) [ 1640.218726][T28934] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1640.260917][T28928] xt_CT: You must specify a L4 protocol and not use inversions on it 22:55:34 executing program 5: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000100), 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x40, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000140)=""/84, 0x54}, {&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f00000005c0)=""/179, 0xb3}, {&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000000740)=""/246, 0xf6}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000840)=""/154, 0x9a}, {&(0x7f0000001c80)=""/233, 0xe9}, {&(0x7f0000001d80)=""/118, 0x76}], &(0x7f00000001c0)=[0x8fac, 0x1, 0xffffffffffffff00, 0x9], 0xa}, 0x20) preadv(r0, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000900), 0x7, 0x400a00) close_range(r3, r3, 0x0) 22:55:34 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28102, 0x0) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (rerun: 64) sendfile(r0, r1, 0x0, 0x20000023896) 22:55:34 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) r10 = accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_io_uring_submit(r9, r1, &(0x7f0000000880)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd, 0x100, {0x0, r10}, 0x7f, 0x8, 0x0, {0x0, r8, r11}}, 0x3) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r14 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r14, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1640.495800][T28937] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1640.572813][ T5087] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1640.826785][ T5087] usb 2-1: Using ep0 maxpacket: 8 22:55:34 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x540, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x3) 22:55:35 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) r10 = accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_io_uring_submit(r9, r1, &(0x7f0000000880)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd, 0x100, {0x0, r10}, 0x7f, 0x8, 0x0, {0x0, r8, r11}}, 0x3) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$rds(0x15, 0x5, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1640.972951][ T5087] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1640.984073][ T5087] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 22:55:35 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000005, 0x10010, r1, 0x8000000) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x40040, 0xb2, 0x1}, 0x18) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000280)={0x3, 0x0, 0x9, 0x553c, 0x7, "5308a3fe1b70c63fdcb77f86db50ebf05537bc"}) r6 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r6, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x7c, 0x6000, @fd=r1, 0xe767acd, &(0x7f0000000080)="51305eb0d3bafe37949241b54346aca444e5acb37922386379775c89eaa3b2a33b7b595c4ae7010b84d7eb307eff9c4765a76137347299f0ea564ea5972803f5f0a156e89e3c6dd2de28aedc5d645740799796b06e297e818659ad16e1fba66c910bde5201e1690db3babbe260319976ca04fd3012f44a24dd26c745cfbacbd48c4f1c802e1c624167e0da9c0c034e3cf23898728d401bc71a867254328ef6f6207f15ac4929dde077a545720619157580bce09adae5b9fe4e571c442aff64d1b5b88bc3575cab7943dc78c882a784349e767c8ac25062addece79b7765b4e3deadb2c4f9db90ae4b2a375cae4", 0xed, 0x8, 0x1}, 0x85) sendfile(r0, r1, 0x0, 0x20000023896) [ 1641.192995][ T5087] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=b9.ed [ 1641.202566][ T5087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.210898][ T5087] usb 2-1: Product: syz [ 1641.215510][ T5087] usb 2-1: Manufacturer: syz [ 1641.220417][ T5087] usb 2-1: SerialNumber: syz [ 1641.292393][ T5087] usb 2-1: config 0 descriptor?? 22:55:37 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000360a6208ef171e72edb901020301090212000100008b130000090400000002060000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x0, 0x0, 0x4, "c490375e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:55:37 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r3 = socket$rxrpc(0x21, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x20000023896) 22:55:37 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x10, 0x3f8, 0x400, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x80c8) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async, rerun: 64) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r10}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002680)=ANY=[@ANYBLOB="38000000100039040000000000000000000003e4", @ANYRES32=r10, @ANYBLOB="00000000000000001800128008000100736974000c00028008000f00", @ANYRES32=r9, @ANYRES64=r6], 0x38}}, 0x0) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x80, @vifc_lcl_ifindex=r10, @multicast2}, 0x10) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000004200)={0x78, 0xfffffffffffffffe, r11, {0x0, 0x0, 0x0, {0x2, 0x0, 0x3, 0x5, 0x7, 0x2, 0x7fff, 0x0, 0x4, 0x8000, 0x7, r12, 0x0, 0x8628}}}, 0x78) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@migrate={0x1c8, 0x21, 0x302, 0x70bd2c, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e20, 0xccd, 0x4e23, 0x0, 0x2, 0x80, 0x0, 0x33, r10, r12}, 0x6e6bb7, 0x1}, [@migrate={0xe8, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, @in6=@empty, @in6=@remote, @in=@broadcast, 0xff, 0x3, 0x0, 0x3500, 0xa, 0x2}, {@in=@multicast2, @in=@remote, @in6=@private0, @in6=@empty, 0x33, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast2, @in6=@mcast2, @in=@local, @in6=@private0, 0x2b, 0x2, 0x0, 0x3506, 0xa, 0x2}]}, @etimer_thresh={0x8, 0xc, 0x3}, @policy_type={0xa}, @algo_auth={0x65, 0x1, {{'sha256-ni\x00'}, 0xe8, "05f774e67018fc3b701cc228660ef0dfe779b6fc15b5dcc1ec12320c19"}}, @proto={0x5, 0x19, 0x3c}, @lastused={0xc, 0xf, 0x10000}]}, 0x1c8}}, 0x4048004) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002100), 0xc, &(0x7f0000002400)={&(0x7f00000026c0)=@expire={0x208, 0x18, 0x8, 0x70bd27, 0x25dfdbff, {{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4e20, 0x3, 0x4e22, 0x1, 0x2, 0x120, 0x20, 0x2e, r8, r12}, {@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4d6, 0x2b}, @in6=@private1, {0xffffffffffffff76, 0x1, 0x1fa, 0x4, 0x7, 0x1000, 0x5, 0x9}, {0x3, 0x80000000, 0x0, 0x3}, {0x5, 0x3, 0x1}, 0x70bd25, 0x3503, 0x6, 0x4, 0xff, 0x38}, 0x6}, [@address_filter={0x28, 0x1a, {@in=@broadcast, @in=@local, 0xa, 0x3, 0x1f}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010100, @in6=@remote, 0x0, 0x2}}, @tfcpad={0x8}, @offload={0xc, 0x1c, {0x0, 0x2}}, @algo_auth_trunc={0x7f, 0x14, {{'sha224-arm64\x00'}, 0x198, 0x180, "796345045a5d65f84c869ff35451eb9a5fd0595824c04829dd0f8ba460400b9a596e15ee4a7a6721e28a6fd4cf8881a9492133"}}, @mark={0xc, 0x15, {0x35075a, 0x9}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e22, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}]}, 0x208}, 0x1, 0x0, 0x0, 0x810}, 0x8000) (async) r13 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000580)=0x0) (async, rerun: 64) r15 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) (rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)=[{&(0x7f0000000440)={0xa8, 0x1f, 0x2, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x25}]}, @generic="0d83796ed65a6b126aa401160d9017904f96bdde5924d784dd3cac647b2879468a554331f46fcd4325505a642f22a44c56596976007023d6b4dc98fba0a557cc2704a848f920ebe10934f643c3ac611ca508a307ddce854d940034e994b4872b7ffc7062f7ef", @generic="f1c41cc6fa753b9f359f6c8816ec33283e841efe4deec5b4c2f830ca4945cc", @typed={0x8, 0x7c, 0x0, 0x0, @fd}]}, 0xa8}, {&(0x7f0000000c80)={0x1208, 0x38, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@generic="76ba101f82515ea37521363f8f8b9b052e49cae0eeef264e36c74192fc9014a1d96b9731b209cdf0a300854381df7c9bb835daa3358430664ba9cc1497a9aaa916ca9d39ea448e82b065e6fd3bd73f82d416d10353d535df7a0b4ac91a4a23da4024", @typed={0x8, 0x1b, 0x0, 0x0, @uid}, @generic="1c478be16992a0fa5465a77cccac14569a8653fe0039de7d78236e5a8939e159b5566d8599dab4856d7b7f0c9844518ddc95c356a5b242e5e56513adc6fe1c409e4b63be67dda2213f910b1efd11c4f216a71b772381f8fd8dd35d758b3342fcc6b3086bb3e9625b489f734667784ad2276ebae01b85c390ca8168df", @generic="a411c91e3bf76eaab0cec545ce03fb520649fd3cdf3a47f2e68b321e3286e443814493079fe6308c4214466ffb933e4f75805c0d349b12fe87d8f0145f20298a52b461c2f3ae9911ada3ac7bae53277f7d387d36695761072381e530d44bffbab62a787dd9c68f0089597ae77dc21552dcd7418ea944fa96ea7005", @generic="f2a610d29b74145ac42714533d63f79d0f33b77a84cc9db0212a94c284c7a484b61f75e578157443de8e5057faceeec28dbb01324ba3a343719b7047fa68f3cac2158554648409f731f9ea46444280eafbcceae8d56f2a0acc42489fcfadb343aef6d9a0fd44e6a5dc7f0e500d6df8fc94ec50abed6a90b33587d575859d1a1e3d34ae39e7696a414ac7cc083cf6cc16858dad40", @generic="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"]}, 0x1208}, {&(0x7f00000027c0)={0x123c, 0x39, 0x200, 0x70bd28, 0x25dfdbfe, "", [@generic="89f496923591ed30b9c804ac4f5c6cfa7ad73dfe956c89d06ac498", @generic="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", @typed={0x8, 0x76, 0x0, 0x0, @uid}, @typed={0x8, 0x59, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xb2, 0x5d, 0x0, 0x0, @binary="cba9e2294e6ed1e329fc9229b0e632ad0184b63ae5686315b0078b638dc2ee88043f36e05197292553565e37fc6241d3da4144390a6f722e2ef3e0422da706fd751d7d763c8c6e2b7c6bd465f847be054b2206c716d62f215dbd69198256a255d0839b33226d0e626151deb1b8ccfc6914b47edc88785e352b17dc27f303286a7e4961146a9af28413f6a6758b7ff19d17209b2d518adb1a0266b9df9e74e90d3014e3409b5239135d638332e00a"}, @nested={0x14, 0x43, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd}, @typed={0x7, 0xc, 0x0, 0x0, @str='CT\x00'}]}, @nested={0x12a, 0x45, 0x0, 0x1, [@generic="fbb08aae34fbe1737cebfb68df2db901021e069732de465d73dfcf4e26a1896a8d1bd8bca74f6500d6ee8bb7ff7668ab42901a509ac73ba2afebbb1126dfd70ed8d2e1c6e7585feed5a09fc489f37c0c00f74465b1be3e55d5066d52ef2f6e3836d7554c6ee7544ffbba9e8374bdd6450d7aa7e3e158dfba8dd2d312265b7d3ccdeb742fff76fab7e0b6220e7c53d151fed1ee9c6483c0b6987a4262a3f69c", @typed={0xc, 0x88, 0x0, 0x0, @u64=0x1ff}, @typed={0xc, 0x12, 0x0, 0x0, @u64=0x3}, @typed={0x6c, 0x71, 0x0, 0x0, @binary="94e20a543a0e8ab28a6a52642bce91bd72a06498f6fdbbf74b11a0aec01867d61363c6f348b07be0a0a724427b3d231a33c917f5b31934cb4d9d3826a1be3911615ad5c57216ade9d963355567d302b458e5a5d0346fc6338a15854c43949a07ce6b711428f56f99"}, @generic="af4d4e"]}, @typed={0x4, 0x91}, @typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x123c}, {&(0x7f0000003a00)={0x11d0, 0x34, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x1151, 0x14, 0x0, 0x1, [@typed={0x8, 0x2d, 0x0, 0x0, @u32=0xea99}, @generic="fac107ed709197d7deb8923cb5cfa4508171889327a6064b1fb3dc55b5a43af6c96ce2cb2e864c3e02dddcad38a54747abc3ff30cbf634e906f3da861c9e1fd140b346eff39eb741c0ea01e462c95a02c32bb35a5b275a6d68d3306d7db7c7bf70ccc8fe343630d0d5528e1ed97eb11c663d117225bfbe59f853218734e220717997c4994c23e9747017627b2372ea35f51c8c73b8b4310f32686f70428e5b8d4620af91d36b054624d4d1827435821496e16d5e6fb5c19e782e2720fc68b76a804d0a1f6181775b", @typed={0x4, 0x22}, @generic="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", @typed={0x8, 0x30, 0x0, 0x0, @uid=r12}, @generic="6ed330748565847aa407aecfda11b277923524d15d8fe6675d9610d7c51c73b2210f378c78bfcf08cbea3e52b8c0212e64bfd4460235f2d5186f7cdf0b0e2e5bbcd3fb28c320221f7b7ee7ebf0d33d9047f1a1d49c073fc495e40f51510041c333d19a2a722d9d7855b142d77c1d7f383c"]}, @nested={0x6a, 0x1, 0x0, 0x1, [@generic="19012b0848db49a4eac84f410ea8bb9ab9e560eaa429435e86293758059339a3ae5689e10339a5137c0797aceca84f53", @generic="07d5feafd310d38955b1235e8efab4e31b67cd99e3a8f843e3527945bb6f4b18d25e52cc0deaa1a4efaeb9b6367c614d6237e50c8308"]}]}, 0x11d0}, {&(0x7f0000004c00)={0x13dc, 0x19, 0x400, 0x70bd29, 0x25dfdbfd, "", [@generic="7853116c6b3e63ada874ca1d4d2b53b78e3410ed3ab21a8cafd6355095c46a11d8f74b5e1c7b531bf362cbd6d203536beae58520a6a6cbe49e36cd6b206a1d88a822a55fb3f99a0c2d8cd4cde9476267215338f49794725572061d0bb83176e85597a1718b186b254d088a90447c2947ebc005aff5e756ddc0d18bbdbef91180f0c44edc366d70425cf2a406261569b0b3d7a6cf1312e23283c12169ef1ad801083c", @typed={0x4, 0x7f}, @generic="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", @nested={0x17a, 0x5c, 0x0, 0x1, [@generic="3c8b51a8400d30ee525de9e376751b0c3e42f1d8636a6f50ad299ba0fcc21dd5c915153c1d16a5c635c905b6001d152dbb7494ca94a50a5ecd616537d01232e7692547f59a933f0e43b37495994d0d28d874ab675ea3628b321cad32376e3e860b9a189c18d76c9fe3af2a4f77d6773c", @typed={0xd1, 0x1f, 0x0, 0x0, @binary="02fb63331d7afdf15634f4e0be50dd9b4080f58def564aa4a2fb14c9702c8391f62dee58c5a51fc5bb844188e9595e4709e6e783c1aafc813c5898a7b9b3e7d687c2bc822a8d242c8e5ba0b02b3122fc32e972afd2e4997eabfee27e059e5237d13697e24d55bc926de31b7ce0b5cabceab37e17866e480265009999f64b1deeff94f0b3a240d59f2b239f0ae2c6482278a9b8398d00d552bd6fac755c9860d50144e49165ed7531a4aea67d9a213b9a86f14331ad18fe9772246b60cdca854089895af01f9faabc41a63da1bb"}, @generic="a31da3de206ea3deac9fedf8699f7ba15a946a36981cb72eee635f80c84302dab15fe8f29873b8d5929ed90aea62b91f34a7"]}, @generic="f9713c80f6d176c81d532d74155ae1cd10e94fec05e2bee41bdfb622f522c57ff5ead5e12d17ed380ae30e89cd3e3c65d6e0b693fab065e346209d98afa2ce91606b8ef21237f1ac8797904321b6caedc57a9b5c7451d5e85da342278a90c251ba7a595c9c21d453bc312582de43feb90b065dbe4d6d12b5a840eca7dd903cf790b3ca920ddef7237308d5bff351a0b064248b30eb26576f59502600d79f4d6579feef4ebcbbf141f985dc2532fa120947ffa174cebe9c3698f04bfa85733c35cc1f4c3420b49c62aa7b8c0461f6ce6d692aaa6dfa373d366f2e6e4b1e2e9f91300988d06fdfba88e09c864399038c07dc17fe007c", @nested={0xb4, 0x45, 0x0, 0x1, [@typed={0xad, 0x30, 0x0, 0x0, @binary="3bb9736900a0c25bd6735109045e31429a220fa89aef10c45de58553efe6bc908b1e80988551b2119807189c557443a4fbaaa2a5abdc48860b060ad028a1d430b20d8cb654d936bb3a5cf40e9b25c90295819955abaaab1557369df44663d8b4eee7ca86a48cc2e6fdeb53c90f2c196150eb3e628587a36564a4c733559576523c6ee43628e3b0449aa119cf9a7a4e002d014d4ef250dc95468763d49807413de9a5abd581cb6a1851"}]}]}, 0x13dc}, {&(0x7f00000005c0)={0x244, 0x17, 0x1, 0x70bd29, 0x25dfdbfe, "", [@typed={0x8, 0x5e, 0x0, 0x0, @fd=r13}, @nested={0x4, 0x3b}, @generic="ce12b7e747a90aa1fd5299876ece9186bcc50c96341a784cd5e2e41a946268067a53f7fa1aa6a25bcb87f7a1173ba87bd420bb91b286468efdbcc78401f4497b27c7243b37c773b41291604b1b7607d32b97931d5a7b3d7b2290f568c4ef5d48c30f7504cdab4d4a723c312e6bd6b878f777aadc7a23bc94fb015d195cd862438fd6e30a90069a7697c82b0341021a1027eb1e2a7bc85c6759f85f552c179bb513ebec10b2c7884f3f36add80b7c2212de444eb8173cb8cb78f2bad939bdf6ab846574356e273b46c474ed48f4470f04b5d020b291cf219547bb17cc7136e5f5a8af16de9c7d9d89f6aa4a192ad9", @generic="aa447ed136fafdda605ef33d1349c6ea70db5f56f35413dd162719c3f5bdd2caf344b1fa51f1094372215824a46781d2b74b7fd369e69898090398b6f70ce4937fb5eec98710cc0638822fdf4dabd7e9203fe93143b75016ce2ba73f8ad5e6016b6127c73fa38ab3120eebabf31acf4850a64236d8869a1fb29bfde0abca06847d82df046d6da921e68e3a32c908fa13198653776a3380f1e087b0084295f3cead567c8fe1b8ab0e9fe1c759b545bf0bd28dc4d55710e27360022f7eceebcc682177a2648bfe44899b2bbb73304625a760dea463c2e8cd23af", @generic="9c95aa996c2ffadafae92244b0c8b75821607155a00f8337187286faeb834b21", @generic="3216934d06802ee22397c419b4a5271986dbf7937121128f4462c3338c445587af901bb1e1225e6c6504361a6c97840b1438865ac8893b", @typed={0x8, 0xd, 0x0, 0x0, @pid=r14}]}, 0x244}, {&(0x7f0000001ec0)={0x354, 0x33, 0x8, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x28d, 0x4d, 0x0, 0x1, [@generic="3d79d79455e7db5daf245c7c03cc305f49b1445a7b789d86a6c939301988a576db44dd1bceab38dabef8313db96588a551bebdbaf2e98e430396ca3d6feafc3e618971569ff0e73f13d2327368c9c71fdb16afdbde25444eb2d67181bbc997922ca83d9c523d58c71f56e3cf80c8ec8882df24807d76bf00747180eb6fb309ba7231885c73ca8a4b9480cc7e5941b062bdbcc1231e2745158fcf6e19d070cf96d6b7065ed5930fd029ed8a81ff3bfcf082f0daec24c689d81d", @generic="534d2a627c9c3adc35ea172ae91f82a9ea6f42da79ce091dd1feb2502a328ba81eed6792575ed6a17b3d81717ea1b1a29dc65b39681bfc8bb70a80c0185a0f96e28e65d4295e42973d6a4dfac3db2413fea5bf2120be4b8ee0d4ba454347bd657f9c82276c2e44c30f6a42249773cf71b24867f321b22efd5ab7dc7c920e0f006961a4137b38bf281b1ab0cde68d4add4b5a95f05830d1c2fce126c0c6adf2e50f66a972e9e29a2c5ebd2ab2bb5bf8570ff5fc619a27bb5622a6b4c3fba048c45631d02f1d75aed2d7f905a1b81f801fcc360dbe00313c5aea37a0e25c77f32c81", @typed={0xc, 0x68, 0x0, 0x0, @u64=0x2}, @generic="00dcfb5f663c7af6d1b8f6103912ae5b99852d8a461c1fa084c140acd3a90ba54cc2edf1daebb8222f9c70196e2d36914987b1001fb11e04327e0d56236d38a10db970e5b1990fafa3840de61365d0529f8ff0cb8ca669eba31f84bf14ccfdfafc5935737b1d9732d635b1aec7e4a23998828f796ba5b26163da421c91a237da8824636404734aeee5fbd8b2a290d968bc053c8ed827277b22ae11ca84a148cc308b1f31787bc4ec82ae886b9777c814d26930c526a9d73ed5e52229f6b13fc5f2242e3c16a4fb43d17bf58c11e0b56bd7a677428a015b8072bc2ddd0129dfd722eddb"]}, @typed={0x7, 0x7f, 0x0, 0x0, @str='%+\x00'}, @generic="9b95fd650408de0f3da8845514d3dc1e10a81997b1a3954216289cc69101fe36de78a9ae07bcdc1f15f6422b1b87b3c5187d4a4a64a57604b7af69ee73b0dd984f0648d41f46f6339402ed2626933ccf77c4bfceba44a9dfd8900e8fe54f62c1d59069dcf0523041090b43651361f75f77999311a96635c11cf5b85b9936267cb3668bad4a6957028c9666eb3b7e0aca31e7fa05e042f5bc6c87ad7a5069eb13d1d801c745e2a8e893"]}, 0x354}], 0x7, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [r15, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}], 0x30, 0x20008040}, 0x84) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4c, 0x0, @fd_index=0x9, 0x2040000000000, 0x0, 0x80, 0x5}, 0x4) (async, rerun: 32) [ 1643.152833][ T5087] usb 2-1: USB disconnect, device number 113 setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async, rerun: 32) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x34a, 0x0, r3}) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r16, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 22:55:37 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000005, 0x10010, r1, 0x8000000) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x40040, 0xb2, 0x1}, 0x18) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000280)={0x3, 0x0, 0x9, 0x553c, 0x7, "5308a3fe1b70c63fdcb77f86db50ebf05537bc"}) r6 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r6, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x7c, 0x6000, @fd=r1, 0xe767acd, &(0x7f0000000080)="51305eb0d3bafe37949241b54346aca444e5acb37922386379775c89eaa3b2a33b7b595c4ae7010b84d7eb307eff9c4765a76137347299f0ea564ea5972803f5f0a156e89e3c6dd2de28aedc5d645740799796b06e297e818659ad16e1fba66c910bde5201e1690db3babbe260319976ca04fd3012f44a24dd26c745cfbacbd48c4f1c802e1c624167e0da9c0c034e3cf23898728d401bc71a867254328ef6f6207f15ac4929dde077a545720619157580bce09adae5b9fe4e571c442aff64d1b5b88bc3575cab7943dc78c882a784349e767c8ac25062addece79b7765b4e3deadb2c4f9db90ae4b2a375cae4", 0xed, 0x8, 0x1}, 0x85) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000005, 0x10010, r1, 0x8000000) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x40040, 0xb2, 0x1}, 0x18) (async) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000280)={0x3, 0x0, 0x9, 0x553c, 0x7, "5308a3fe1b70c63fdcb77f86db50ebf05537bc"}) (async) socket$rds(0x15, 0x5, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r6, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) (async) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x7c, 0x6000, @fd=r1, 0xe767acd, &(0x7f0000000080)="51305eb0d3bafe37949241b54346aca444e5acb37922386379775c89eaa3b2a33b7b595c4ae7010b84d7eb307eff9c4765a76137347299f0ea564ea5972803f5f0a156e89e3c6dd2de28aedc5d645740799796b06e297e818659ad16e1fba66c910bde5201e1690db3babbe260319976ca04fd3012f44a24dd26c745cfbacbd48c4f1c802e1c624167e0da9c0c034e3cf23898728d401bc71a867254328ef6f6207f15ac4929dde077a545720619157580bce09adae5b9fe4e571c442aff64d1b5b88bc3575cab7943dc78c882a784349e767c8ac25062addece79b7765b4e3deadb2c4f9db90ae4b2a375cae4", 0xed, 0x8, 0x1}, 0x85) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:55:37 executing program 5: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000100), 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x40, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000140)=""/84, 0x54}, {&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f00000005c0)=""/179, 0xb3}, {&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000000740)=""/246, 0xf6}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000840)=""/154, 0x9a}, {&(0x7f0000001c80)=""/233, 0xe9}, {&(0x7f0000001d80)=""/118, 0x76}], &(0x7f00000001c0)=[0x8fac, 0x1, 0xffffffffffffff00, 0x9], 0xa}, 0x20) preadv(r0, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000900), 0x7, 0x400a00) close_range(r3, r3, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r1) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000100), 0x1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x40, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000140)=""/84, 0x54}, {&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f00000005c0)=""/179, 0xb3}, {&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000000740)=""/246, 0xf6}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000840)=""/154, 0x9a}, {&(0x7f0000001c80)=""/233, 0xe9}, {&(0x7f0000001d80)=""/118, 0x76}], &(0x7f00000001c0)=[0x8fac, 0x1, 0xffffffffffffff00, 0x9], 0xa}, 0x20) (async) preadv(r0, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000900), 0x7, 0x400a00) (async) close_range(r3, r3, 0x0) (async) 22:55:37 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) r10 = accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_io_uring_submit(r9, r1, &(0x7f0000000880)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd, 0x100, {0x0, r10}, 0x7f, 0x8, 0x0, {0x0, r8, r11}}, 0x3) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$rds(0x15, 0x5, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1643.310564][T28959] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1643.338766][T28962] xt_CT: You must specify a L4 protocol and not use inversions on it 22:55:37 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x10, 0x3f8, 0x400, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x80c8) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r10}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002680)=ANY=[@ANYBLOB="38000000100039040000000000000000000003e4", @ANYRES32=r10, @ANYBLOB="00000000000000001800128008000100736974000c00028008000f00", @ANYRES32=r9, @ANYRES64=r6], 0x38}}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x80, @vifc_lcl_ifindex=r10, @multicast2}, 0x10) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000004200)={0x78, 0xfffffffffffffffe, r11, {0x0, 0x0, 0x0, {0x2, 0x0, 0x3, 0x5, 0x7, 0x2, 0x7fff, 0x0, 0x4, 0x8000, 0x7, r12, 0x0, 0x8628}}}, 0x78) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@migrate={0x1c8, 0x21, 0x302, 0x70bd2c, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e20, 0xccd, 0x4e23, 0x0, 0x2, 0x80, 0x0, 0x33, r10, r12}, 0x6e6bb7, 0x1}, [@migrate={0xe8, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, @in6=@empty, @in6=@remote, @in=@broadcast, 0xff, 0x3, 0x0, 0x3500, 0xa, 0x2}, {@in=@multicast2, @in=@remote, @in6=@private0, @in6=@empty, 0x33, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast2, @in6=@mcast2, @in=@local, @in6=@private0, 0x2b, 0x2, 0x0, 0x3506, 0xa, 0x2}]}, @etimer_thresh={0x8, 0xc, 0x3}, @policy_type={0xa}, @algo_auth={0x65, 0x1, {{'sha256-ni\x00'}, 0xe8, "05f774e67018fc3b701cc228660ef0dfe779b6fc15b5dcc1ec12320c19"}}, @proto={0x5, 0x19, 0x3c}, @lastused={0xc, 0xf, 0x10000}]}, 0x1c8}}, 0x4048004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002100), 0xc, &(0x7f0000002400)={&(0x7f00000026c0)=@expire={0x208, 0x18, 0x8, 0x70bd27, 0x25dfdbff, {{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4e20, 0x3, 0x4e22, 0x1, 0x2, 0x120, 0x20, 0x2e, r8, r12}, {@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4d6, 0x2b}, @in6=@private1, {0xffffffffffffff76, 0x1, 0x1fa, 0x4, 0x7, 0x1000, 0x5, 0x9}, {0x3, 0x80000000, 0x0, 0x3}, {0x5, 0x3, 0x1}, 0x70bd25, 0x3503, 0x6, 0x4, 0xff, 0x38}, 0x6}, [@address_filter={0x28, 0x1a, {@in=@broadcast, @in=@local, 0xa, 0x3, 0x1f}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010100, @in6=@remote, 0x0, 0x2}}, @tfcpad={0x8}, @offload={0xc, 0x1c, {0x0, 0x2}}, @algo_auth_trunc={0x7f, 0x14, {{'sha224-arm64\x00'}, 0x198, 0x180, "796345045a5d65f84c869ff35451eb9a5fd0595824c04829dd0f8ba460400b9a596e15ee4a7a6721e28a6fd4cf8881a9492133"}}, @mark={0xc, 0x15, {0x35075a, 0x9}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e22, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}]}, 0x208}, 0x1, 0x0, 0x0, 0x810}, 0x8000) r13 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000580)=0x0) r15 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)=[{&(0x7f0000000440)={0xa8, 0x1f, 0x2, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x25}]}, @generic="0d83796ed65a6b126aa401160d9017904f96bdde5924d784dd3cac647b2879468a554331f46fcd4325505a642f22a44c56596976007023d6b4dc98fba0a557cc2704a848f920ebe10934f643c3ac611ca508a307ddce854d940034e994b4872b7ffc7062f7ef", @generic="f1c41cc6fa753b9f359f6c8816ec33283e841efe4deec5b4c2f830ca4945cc", @typed={0x8, 0x7c, 0x0, 0x0, @fd}]}, 0xa8}, {&(0x7f0000000c80)={0x1208, 0x38, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@generic="76ba101f82515ea37521363f8f8b9b052e49cae0eeef264e36c74192fc9014a1d96b9731b209cdf0a300854381df7c9bb835daa3358430664ba9cc1497a9aaa916ca9d39ea448e82b065e6fd3bd73f82d416d10353d535df7a0b4ac91a4a23da4024", @typed={0x8, 0x1b, 0x0, 0x0, @uid}, @generic="1c478be16992a0fa5465a77cccac14569a8653fe0039de7d78236e5a8939e159b5566d8599dab4856d7b7f0c9844518ddc95c356a5b242e5e56513adc6fe1c409e4b63be67dda2213f910b1efd11c4f216a71b772381f8fd8dd35d758b3342fcc6b3086bb3e9625b489f734667784ad2276ebae01b85c390ca8168df", @generic="a411c91e3bf76eaab0cec545ce03fb520649fd3cdf3a47f2e68b321e3286e443814493079fe6308c4214466ffb933e4f75805c0d349b12fe87d8f0145f20298a52b461c2f3ae9911ada3ac7bae53277f7d387d36695761072381e530d44bffbab62a787dd9c68f0089597ae77dc21552dcd7418ea944fa96ea7005", @generic="f2a610d29b74145ac42714533d63f79d0f33b77a84cc9db0212a94c284c7a484b61f75e578157443de8e5057faceeec28dbb01324ba3a343719b7047fa68f3cac2158554648409f731f9ea46444280eafbcceae8d56f2a0acc42489fcfadb343aef6d9a0fd44e6a5dc7f0e500d6df8fc94ec50abed6a90b33587d575859d1a1e3d34ae39e7696a414ac7cc083cf6cc16858dad40", @generic="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"]}, 0x1208}, {&(0x7f00000027c0)={0x123c, 0x39, 0x200, 0x70bd28, 0x25dfdbfe, "", [@generic="89f496923591ed30b9c804ac4f5c6cfa7ad73dfe956c89d06ac498", @generic="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", @typed={0x8, 0x76, 0x0, 0x0, @uid}, @typed={0x8, 0x59, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xb2, 0x5d, 0x0, 0x0, @binary="cba9e2294e6ed1e329fc9229b0e632ad0184b63ae5686315b0078b638dc2ee88043f36e05197292553565e37fc6241d3da4144390a6f722e2ef3e0422da706fd751d7d763c8c6e2b7c6bd465f847be054b2206c716d62f215dbd69198256a255d0839b33226d0e626151deb1b8ccfc6914b47edc88785e352b17dc27f303286a7e4961146a9af28413f6a6758b7ff19d17209b2d518adb1a0266b9df9e74e90d3014e3409b5239135d638332e00a"}, @nested={0x14, 0x43, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd}, @typed={0x7, 0xc, 0x0, 0x0, @str='CT\x00'}]}, @nested={0x12a, 0x45, 0x0, 0x1, [@generic="fbb08aae34fbe1737cebfb68df2db901021e069732de465d73dfcf4e26a1896a8d1bd8bca74f6500d6ee8bb7ff7668ab42901a509ac73ba2afebbb1126dfd70ed8d2e1c6e7585feed5a09fc489f37c0c00f74465b1be3e55d5066d52ef2f6e3836d7554c6ee7544ffbba9e8374bdd6450d7aa7e3e158dfba8dd2d312265b7d3ccdeb742fff76fab7e0b6220e7c53d151fed1ee9c6483c0b6987a4262a3f69c", @typed={0xc, 0x88, 0x0, 0x0, @u64=0x1ff}, @typed={0xc, 0x12, 0x0, 0x0, @u64=0x3}, @typed={0x6c, 0x71, 0x0, 0x0, @binary="94e20a543a0e8ab28a6a52642bce91bd72a06498f6fdbbf74b11a0aec01867d61363c6f348b07be0a0a724427b3d231a33c917f5b31934cb4d9d3826a1be3911615ad5c57216ade9d963355567d302b458e5a5d0346fc6338a15854c43949a07ce6b711428f56f99"}, @generic="af4d4e"]}, @typed={0x4, 0x91}, @typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x123c}, {&(0x7f0000003a00)={0x11d0, 0x34, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x1151, 0x14, 0x0, 0x1, [@typed={0x8, 0x2d, 0x0, 0x0, @u32=0xea99}, @generic="fac107ed709197d7deb8923cb5cfa4508171889327a6064b1fb3dc55b5a43af6c96ce2cb2e864c3e02dddcad38a54747abc3ff30cbf634e906f3da861c9e1fd140b346eff39eb741c0ea01e462c95a02c32bb35a5b275a6d68d3306d7db7c7bf70ccc8fe343630d0d5528e1ed97eb11c663d117225bfbe59f853218734e220717997c4994c23e9747017627b2372ea35f51c8c73b8b4310f32686f70428e5b8d4620af91d36b054624d4d1827435821496e16d5e6fb5c19e782e2720fc68b76a804d0a1f6181775b", @typed={0x4, 0x22}, @generic="c1ebe18a537d18a06c29218cf8151c918f1044461b2008bf045b075cc89a3dbfb4aa56c056932d827ba83c693bdddeb20092c7c57fb5fb9d002e5adc9f00d00eb60edeab9d23f44c3b0f0b08e47d4c59995bbf370d83f4839b40f5f28a03890ced520cadaea0ff2861e60dad1ec885e8d7e177ea9f5fd66abbf5a993ea3a422bf6a25a6b36d38ffde828ddf6d2e11503ff8389846db91ecc0cd9f18e091e8c56df3563e285f652ad89a6a6553013f8678305abf187464c3f0a553739b1bbdf712b0fad8cc321ab4e5df2a0d77fa779c0ae480f1766d1d6cb693ae35beb61b95f59a01f1fad5b24d3cff3ceb9457b34b42517018432bd1f3e820262040652accb22e48ca837b68d93318fd36371dd9d896b5bde65c8e1de1b50b977f219f4a6cbe9ba6822e2c22fa1bf55e3c75b4518da317c162db859f63c39fdfdfac3946fd9ad801fca66a35d3147d95745050da6e3339912f6c367a092b6c891b879347c424d46afa49d1d9d9579d129b82071e5529bc64f41ec5a7b08a0412e6e7fd0d0d349eba3ed9068599772a9663b2bc219fbbd33582910865400857b5084fd1d00c9e054392dbf63838aafd80877db482069338d6d092acca215adb9719d891a19ec4109224a115887ff86fa49d6f1f27cc973107277e6c6e4d701b84ec731ed104df01bc6c7df2642a293686f198cbb360bee77799ed0c9c261e442198e779e7487d6ac4be3a5a336b6021b4f85ed7ac2c42e9d07fe926daca91fa5488894811005f8db9d6dc05528fecbe18de3f85f197b9d6b2e9da4f758100e1dc59988fabd460152797fe523da4446595e7e721ef020db41338914653ae5363fd920ba980867ce14246573dc070dbcd8548ace95c60c53918dcbc4a5dca1f1802ef1525d3099fdf187a6d51addf7b1ddab694c5e83d16610b122a28c055ac6cc85063bfbd0cf099bdef54d04d290109183350149769a24a08b46b1b4e71ecba4cb927b64540dbc3f3a1ba929f504fcba6690650f02f1cdb8f4c1aae7c343f5308e3311331d736ccd7ba84a76c3ccffdfae21a947f10fd179a03381fdf34e7c85f7783718121640515aff9522774b078a9749a16f05f78d819ed32af1e2410b3a540041cdeceed3db29cb1f3dbb0a9cbf7cc8300e41be4e08f2043f96219238af3c7844b1bf721bbc8adbf9c8ca2703ddd70a15bcafe35e03d6ab3c04615d46a85e64d01eea120467e96a40a1f86c7409a34afe572174c2ad79ed4752f857c733cb6e7e7561afc7bbb3708df4479bf7d44889376a376115141f3fffcb5616f4aed86efdbc37315185da17c600bd4d341d118b13e2de03691b91a15cee968958a24afd697e8cc4e1d44429644e4960eff55cec0360b7f0d40c802676253296462a29e66036e34bdd70a68529037f35ec5c6bb9f52a2fdba6c4f78b2f9f7749484f64ab3eaa11d1640aa75f970488a22785fcd2c1588245a3ad5b84cc3738240579282163bb5b4700afccb02cb2f1693c551046f2bd975ffe465310910414bdc2ea87adb5405c32da14d0d12b8139b4fba7c8c9347abcade9955a5aa5bc2aaf691c6b4ea989438590aae67b4e73ba6478952e4bde93e218b00c667bd8ec4a1811bd9138cb0f5d1a4f601a3a436f50c3395517c3cd97f1fe1af6585868e50456b9bd6ed083f5b139b38f930462da109c70522d4b8deedc1372840eef7c01e5f48d0d3ecb231c49ad178d81057d64fb5262ad2c1993308bdf556ea009cf40f03ae11ee7af4934fab4e25cb25641531ce473f1937544e307495c8e9349112f5e46027262a7b5c6f9387684b9448f023088dacb8466f5b5443671f05158137f235347f317773716663e85dec804aec13c34df6c098d3066ad29fff5717697eff5e699ca88217a0f30042c79ef9d8754d0139d710b30f5a6502dab7b4852cf1ed0b63af22000e14791fdff4394ef7d1d07313a01660dbeae80d1072f7d116c30b5c69ecd956f19ca81b6f4d9d786b894f6e7d88d85c2460dceab23426559d16402897276cd5b758d090cbba5d25220320d083490c8838d33d80f3c893ad008c4375645ceb7fd697700e17b5bef4f91756d5afd30583d2345900c5a917bc85775bcc2862d1baa8ff4df529b09df2efd16dce70f29a71e1981950fc9019bb221976911934c6091327c1459cf37a65949cf7d926414fd758993c9625408261632268b892a25c9eee4827a250bb619b5a75de01348a3df1bd8ee063a4b05053e2ae057825e085269c413b28b9aa67a9a7a1725e14204847e4ba9ead7c823051e3dfe9e1863011d4ada0678b53753dbe05757c0f83b36c4e258638c34aa5ac86027b5420dab6222cac91af68180d3dfa9c35d99f11bae13882cb12980fd47ea688acd51b9d25f3b3a02a33fa9c0f31490da0a19fd313b3f02d6323af3a21500770e4be27625a0df710dd1b868ba23058843c228b0ec731a95904c8fb0ede1d6c73bdc8d7f178f69244c8060e06d74cbbe38a839f5179ef1e94280f3fa48f4614713026d95a47dfa2b13cbbb499f5d05fe8c3134da63c097ed800e9086ddde26235b2fc30aa0a2df2192d340e1f0d50ea37a2d79ee36563e5c1e6f62cf94abbfe8f69797c1312f53294fd2a3e996fe5c469246c5ca74f27e974dcb5d0e192def8ccad85d2753a5ac394445e2615c826894216e8678e4e76712001f3de9a589abef5f7aab08eb52aefbf8bfa11113735f762163e92179b4ef53307743f576f1497798b84433bca4d08d975db556faece572bd5ae0ef2bde9031e153d0eb240946e3afabc053ef523b2049672f3a3736057d94167c1c778bad9d208ea2bf97373471b9f889c67d81e233601202838ac4688f5b32c3650d9c51b0311a2c8323d2ce9c233a31ac6ce5f966764c8dae9f1a468279200aa2266c01885eebdbf8d3d92d0ec3c48879a81abd006480f00be1cd2db798c989c13bf8df036623e09b736b9e651936f0001b5201cd51fdc2fdd973d9bdffd27ea7ebd94e6dabe5e26ceb32b07dddfc575817d484b01461252c45c087395b476bc13b511b35cd0ea8366a82989abbacf7b19dadd54c957a4548a0bf3e524d3f8df3abca6e87eafffaed1718b2895779e6482acc1eb466e202de9cf18cc48ebe9a873840231c3782357d7aff0b22705b7344f048286a375908083e00e99d3a70a3fb8ab4349483d59cda94ff962d33d623287e9a5677b7160f239277e1f8cf53eaa57591090fe48a93ffca752df25cadec95c549d7545371c3ec773763a9a73c3762e7abe7cf98b13f2fc49f9255cd5b972f4205de0e5a1754951bd86171d1eb7474edc2b04e4cf331ddedb89569932648a151a41c2c83c7044d103e2ad60e532c089e0d3c444d44f80af13bbaedbf6d682325e6046138662f81caf1313daf12d6bb18aec104bfa4e8030a6ce3e2681f520b641b72ad090ef0980c782613c8359a2e08dc0af4bcf74ad9f35fa834e9e501bf23fff3be5a8de891eb735e44d01c445a3aa9636b7fc4f11c0b8c7d579cece5ee2ce47a686119e49100e2942c91f7d4572b585b298a7443ad91eaf04817e5788e4e39b02c5325e7af4df376b8901df89cdc6eed86eefb0c8614dcee79b01386a649451fa16d9ae18decafe7eb4d3d9c1773557ab9a7235ce8f5bd1a1254689027b523cc3137c8eb7665c91d266b4a780fbbefa2fe9cfcd6eccc504a1a695ab2f1f6d0f511614f76bca25548f19c578b563ea3544e46af4b2720dedb4d103fff98ee9874b290daf2982538bd340ec90f8e90266f634d135e025af7fff401378c7ed6d5af2585afb0cad038247cabf2e18d03441ed9d1e9a96304aade4049b936b68109a95bf17ef5234dcc1da706688ced98726c9ea33cfad4c49bf13c4028745b2ebe5a78cca5f136dc93c5d99f07ae213f471947760a504e13987d50d988a8720501a5f0a4cfbde36dd03d3d88a5d92358bdc09a2b4e12ffc7007dcd3176652369fa225469f0d9a878a0a07c374b9abee66c615624a2185b8df7d25847c0818d5f9cc0b213b02b9be9df5a5582f7641adbe9b84f06d3a28076fcf750fd8e72f6a911665a15ac1f6963ad48196e54ff2783ffe0da9bf44f4132d048a59e88ec509f16f7a7bf0a9cc25e8388838948a2e744d6680d64cf09b637b78d8b90a5f951946e34c97aa1a87adbbc68d0e075ac79408624fc18b68d9d8365a1b7a2f49332322070a2a0d536b9a22e81ec9376c2d4c4bd4df79fea89e75f08badc156e8cb1d39dd3a405d3bec5c5f5d9a14e17e48c09efc3191cb5a8fca2c0762ef9f113123cb1f5235667a25cc63aab468574b7b04e0ff562e8eea9b043150426228a64fd234c7b1a2814dffd7326454de975d1a0cccd65a2185b0ce534f5f73d691d39c7a260d5c3700833183e212363501b17ade6bac64a27565ebd85d928723afa86b3548c160c74ee83f073ecb4886df62b4f6597985556213334455127f92df4fa496da3a14d747c813bf01abb95e33ba05fa619cf9fcb1bf292807995dceb1a6f570b10079fd54f466f8055def8d608b5b541366dd1c5508e75cb25d7d22b9267a24a3698854b8f732ff3cb563d0f2e4ad2d6866eb752ebfc57987d7b922c930fb06c3870ddd19182ae1f1d3cc8a524fd1cd7420021b864d519bcc4eadad8da95ba62b91448c9cc7f7834c63c2221da7f16565b8ac60cffcaa707a57af5ffbb2b38baf86ae7e0dd12f67d60bc0b8faf77fd6f8feb1f5723e8a399646386765ed0ff5f274532470a91e979facf9645173e790ebca84bcdc05747b1bc71fdecf98e1daf8cab6a1ae439cb8dc217b017141edf701427425a87ed4bf0f1b9e6ffd319944988eb02452fcaabd5e6ce5f45c7b3e1b6cefac6ef8dd80f32c372025565c9fffc66cce250f7b6dc71dbce17d44f344b41c3600e7378cfbc6b77a6db8749ff5fc6a891827ee5baf123143f45272ab9eba22a1133799ad0a5ff3c70f5c6fb7feae8ce2e2dc1efad5ada200005dace7b5386d546d4addb47ba65aca8cd6d9f76918b0c0b7bc360dfb1d52595ca508554d64186b52dff566a03ded57edf16b50db136c7fe2b9b43b96cd588910e6cc190eff608ef0ad26ac472ff373cd27a1c604b9a4334f0f215e8ae997205b29d5aeadaef224061e8ef0634a9ef29c888582a7b2b03dffeb3701d1e815d02f671a4aadd2da5ee9359c3947ce092e93a3a7c11412bec2f505639846071363fa35bd073e662af2a045d5215ffa1cd24387d7e8f55428b926ace22a516305627c31e6d12b0bac2b1f339aeb43cb5994d09115b0389d757cfd5fcf66843a820ff13d2b39865f65ffde7a4b119ff434a0e6c392174268e437786b0fbd6c0bfbbd15431665b2504b76df948b4812ed36ffdec1f4a2686648e741c24f34ac70f43a57fd62354b8c8f9ded1cc51d6aad7acf8c05db7279e0cd90b01bc72865ece35138e0e6187e438a57e5016979a52ea511abda17b72fd2866e6c19b5419e48f3cffe2f77838388e9b64ec54c82ea573844dde8c33154d93046b0a2e67683bfbe6124aa3076f81d6b6c9ecfe7d1724c3fc5201b29cdc64d5978dce716cba12dd9d9d79e9b27981d0160b87733fdd1ec5d5bcb5012ccfd20da7e2720eef3b8ef97063694fbbf89d12ebd7602a256a56d3a25314bcac8ac23c662ccbd7727942fecd49651d2f3a739eff99295cea4159356106fee6ec48e2ede26243176f5deee612aa5334ec032af588096613880a098432bd26b9fb66588cd09abdf0ff90f209a286d23c54956749c49ce794f3afb63fb51f2dc9d6821b605a7c5cb78643f9", @typed={0x8, 0x30, 0x0, 0x0, @uid=r12}, @generic="6ed330748565847aa407aecfda11b277923524d15d8fe6675d9610d7c51c73b2210f378c78bfcf08cbea3e52b8c0212e64bfd4460235f2d5186f7cdf0b0e2e5bbcd3fb28c320221f7b7ee7ebf0d33d9047f1a1d49c073fc495e40f51510041c333d19a2a722d9d7855b142d77c1d7f383c"]}, @nested={0x6a, 0x1, 0x0, 0x1, [@generic="19012b0848db49a4eac84f410ea8bb9ab9e560eaa429435e86293758059339a3ae5689e10339a5137c0797aceca84f53", @generic="07d5feafd310d38955b1235e8efab4e31b67cd99e3a8f843e3527945bb6f4b18d25e52cc0deaa1a4efaeb9b6367c614d6237e50c8308"]}]}, 0x11d0}, {&(0x7f0000004c00)={0x13dc, 0x19, 0x400, 0x70bd29, 0x25dfdbfd, "", [@generic="7853116c6b3e63ada874ca1d4d2b53b78e3410ed3ab21a8cafd6355095c46a11d8f74b5e1c7b531bf362cbd6d203536beae58520a6a6cbe49e36cd6b206a1d88a822a55fb3f99a0c2d8cd4cde9476267215338f49794725572061d0bb83176e85597a1718b186b254d088a90447c2947ebc005aff5e756ddc0d18bbdbef91180f0c44edc366d70425cf2a406261569b0b3d7a6cf1312e23283c12169ef1ad801083c", @typed={0x4, 0x7f}, @generic="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", @nested={0x17a, 0x5c, 0x0, 0x1, [@generic="3c8b51a8400d30ee525de9e376751b0c3e42f1d8636a6f50ad299ba0fcc21dd5c915153c1d16a5c635c905b6001d152dbb7494ca94a50a5ecd616537d01232e7692547f59a933f0e43b37495994d0d28d874ab675ea3628b321cad32376e3e860b9a189c18d76c9fe3af2a4f77d6773c", @typed={0xd1, 0x1f, 0x0, 0x0, @binary="02fb63331d7afdf15634f4e0be50dd9b4080f58def564aa4a2fb14c9702c8391f62dee58c5a51fc5bb844188e9595e4709e6e783c1aafc813c5898a7b9b3e7d687c2bc822a8d242c8e5ba0b02b3122fc32e972afd2e4997eabfee27e059e5237d13697e24d55bc926de31b7ce0b5cabceab37e17866e480265009999f64b1deeff94f0b3a240d59f2b239f0ae2c6482278a9b8398d00d552bd6fac755c9860d50144e49165ed7531a4aea67d9a213b9a86f14331ad18fe9772246b60cdca854089895af01f9faabc41a63da1bb"}, @generic="a31da3de206ea3deac9fedf8699f7ba15a946a36981cb72eee635f80c84302dab15fe8f29873b8d5929ed90aea62b91f34a7"]}, @generic="f9713c80f6d176c81d532d74155ae1cd10e94fec05e2bee41bdfb622f522c57ff5ead5e12d17ed380ae30e89cd3e3c65d6e0b693fab065e346209d98afa2ce91606b8ef21237f1ac8797904321b6caedc57a9b5c7451d5e85da342278a90c251ba7a595c9c21d453bc312582de43feb90b065dbe4d6d12b5a840eca7dd903cf790b3ca920ddef7237308d5bff351a0b064248b30eb26576f59502600d79f4d6579feef4ebcbbf141f985dc2532fa120947ffa174cebe9c3698f04bfa85733c35cc1f4c3420b49c62aa7b8c0461f6ce6d692aaa6dfa373d366f2e6e4b1e2e9f91300988d06fdfba88e09c864399038c07dc17fe007c", @nested={0xb4, 0x45, 0x0, 0x1, [@typed={0xad, 0x30, 0x0, 0x0, @binary="3bb9736900a0c25bd6735109045e31429a220fa89aef10c45de58553efe6bc908b1e80988551b2119807189c557443a4fbaaa2a5abdc48860b060ad028a1d430b20d8cb654d936bb3a5cf40e9b25c90295819955abaaab1557369df44663d8b4eee7ca86a48cc2e6fdeb53c90f2c196150eb3e628587a36564a4c733559576523c6ee43628e3b0449aa119cf9a7a4e002d014d4ef250dc95468763d49807413de9a5abd581cb6a1851"}]}]}, 0x13dc}, {&(0x7f00000005c0)={0x244, 0x17, 0x1, 0x70bd29, 0x25dfdbfe, "", [@typed={0x8, 0x5e, 0x0, 0x0, @fd=r13}, @nested={0x4, 0x3b}, @generic="ce12b7e747a90aa1fd5299876ece9186bcc50c96341a784cd5e2e41a946268067a53f7fa1aa6a25bcb87f7a1173ba87bd420bb91b286468efdbcc78401f4497b27c7243b37c773b41291604b1b7607d32b97931d5a7b3d7b2290f568c4ef5d48c30f7504cdab4d4a723c312e6bd6b878f777aadc7a23bc94fb015d195cd862438fd6e30a90069a7697c82b0341021a1027eb1e2a7bc85c6759f85f552c179bb513ebec10b2c7884f3f36add80b7c2212de444eb8173cb8cb78f2bad939bdf6ab846574356e273b46c474ed48f4470f04b5d020b291cf219547bb17cc7136e5f5a8af16de9c7d9d89f6aa4a192ad9", @generic="aa447ed136fafdda605ef33d1349c6ea70db5f56f35413dd162719c3f5bdd2caf344b1fa51f1094372215824a46781d2b74b7fd369e69898090398b6f70ce4937fb5eec98710cc0638822fdf4dabd7e9203fe93143b75016ce2ba73f8ad5e6016b6127c73fa38ab3120eebabf31acf4850a64236d8869a1fb29bfde0abca06847d82df046d6da921e68e3a32c908fa13198653776a3380f1e087b0084295f3cead567c8fe1b8ab0e9fe1c759b545bf0bd28dc4d55710e27360022f7eceebcc682177a2648bfe44899b2bbb73304625a760dea463c2e8cd23af", @generic="9c95aa996c2ffadafae92244b0c8b75821607155a00f8337187286faeb834b21", @generic="3216934d06802ee22397c419b4a5271986dbf7937121128f4462c3338c445587af901bb1e1225e6c6504361a6c97840b1438865ac8893b", @typed={0x8, 0xd, 0x0, 0x0, @pid=r14}]}, 0x244}, {&(0x7f0000001ec0)={0x354, 0x33, 0x8, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x28d, 0x4d, 0x0, 0x1, [@generic="3d79d79455e7db5daf245c7c03cc305f49b1445a7b789d86a6c939301988a576db44dd1bceab38dabef8313db96588a551bebdbaf2e98e430396ca3d6feafc3e618971569ff0e73f13d2327368c9c71fdb16afdbde25444eb2d67181bbc997922ca83d9c523d58c71f56e3cf80c8ec8882df24807d76bf00747180eb6fb309ba7231885c73ca8a4b9480cc7e5941b062bdbcc1231e2745158fcf6e19d070cf96d6b7065ed5930fd029ed8a81ff3bfcf082f0daec24c689d81d", @generic="534d2a627c9c3adc35ea172ae91f82a9ea6f42da79ce091dd1feb2502a328ba81eed6792575ed6a17b3d81717ea1b1a29dc65b39681bfc8bb70a80c0185a0f96e28e65d4295e42973d6a4dfac3db2413fea5bf2120be4b8ee0d4ba454347bd657f9c82276c2e44c30f6a42249773cf71b24867f321b22efd5ab7dc7c920e0f006961a4137b38bf281b1ab0cde68d4add4b5a95f05830d1c2fce126c0c6adf2e50f66a972e9e29a2c5ebd2ab2bb5bf8570ff5fc619a27bb5622a6b4c3fba048c45631d02f1d75aed2d7f905a1b81f801fcc360dbe00313c5aea37a0e25c77f32c81", @typed={0xc, 0x68, 0x0, 0x0, @u64=0x2}, @generic="00dcfb5f663c7af6d1b8f6103912ae5b99852d8a461c1fa084c140acd3a90ba54cc2edf1daebb8222f9c70196e2d36914987b1001fb11e04327e0d56236d38a10db970e5b1990fafa3840de61365d0529f8ff0cb8ca669eba31f84bf14ccfdfafc5935737b1d9732d635b1aec7e4a23998828f796ba5b26163da421c91a237da8824636404734aeee5fbd8b2a290d968bc053c8ed827277b22ae11ca84a148cc308b1f31787bc4ec82ae886b9777c814d26930c526a9d73ed5e52229f6b13fc5f2242e3c16a4fb43d17bf58c11e0b56bd7a677428a015b8072bc2ddd0129dfd722eddb"]}, @typed={0x7, 0x7f, 0x0, 0x0, @str='%+\x00'}, @generic="9b95fd650408de0f3da8845514d3dc1e10a81997b1a3954216289cc69101fe36de78a9ae07bcdc1f15f6422b1b87b3c5187d4a4a64a57604b7af69ee73b0dd984f0648d41f46f6339402ed2626933ccf77c4bfceba44a9dfd8900e8fe54f62c1d59069dcf0523041090b43651361f75f77999311a96635c11cf5b85b9936267cb3668bad4a6957028c9666eb3b7e0aca31e7fa05e042f5bc6c87ad7a5069eb13d1d801c745e2a8e893"]}, 0x354}], 0x7, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [r15, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}], 0x30, 0x20008040}, 0x84) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4c, 0x0, @fd_index=0x9, 0x2040000000000, 0x0, 0x80, 0x5}, 0x4) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x34a, 0x0, r3}) (async) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r16, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 22:55:37 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000005, 0x10010, r1, 0x8000000) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x40040, 0xb2, 0x1}, 0x18) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000280)={0x3, 0x0, 0x9, 0x553c, 0x7, "5308a3fe1b70c63fdcb77f86db50ebf05537bc"}) r6 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r6, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x7c, 0x6000, @fd=r1, 0xe767acd, &(0x7f0000000080)="51305eb0d3bafe37949241b54346aca444e5acb37922386379775c89eaa3b2a33b7b595c4ae7010b84d7eb307eff9c4765a76137347299f0ea564ea5972803f5f0a156e89e3c6dd2de28aedc5d645740799796b06e297e818659ad16e1fba66c910bde5201e1690db3babbe260319976ca04fd3012f44a24dd26c745cfbacbd48c4f1c802e1c624167e0da9c0c034e3cf23898728d401bc71a867254328ef6f6207f15ac4929dde077a545720619157580bce09adae5b9fe4e571c442aff64d1b5b88bc3575cab7943dc78c882a784349e767c8ac25062addece79b7765b4e3deadb2c4f9db90ae4b2a375cae4", 0xed, 0x8, 0x1}, 0x85) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000005, 0x10010, r1, 0x8000000) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x40040, 0xb2, 0x1}, 0x18) (async) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000280)={0x3, 0x0, 0x9, 0x553c, 0x7, "5308a3fe1b70c63fdcb77f86db50ebf05537bc"}) (async) socket$rds(0x15, 0x5, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r6, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) (async) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x7c, 0x6000, @fd=r1, 0xe767acd, &(0x7f0000000080)="51305eb0d3bafe37949241b54346aca444e5acb37922386379775c89eaa3b2a33b7b595c4ae7010b84d7eb307eff9c4765a76137347299f0ea564ea5972803f5f0a156e89e3c6dd2de28aedc5d645740799796b06e297e818659ad16e1fba66c910bde5201e1690db3babbe260319976ca04fd3012f44a24dd26c745cfbacbd48c4f1c802e1c624167e0da9c0c034e3cf23898728d401bc71a867254328ef6f6207f15ac4929dde077a545720619157580bce09adae5b9fe4e571c442aff64d1b5b88bc3575cab7943dc78c882a784349e767c8ac25062addece79b7765b4e3deadb2c4f9db90ae4b2a375cae4", 0xed, 0x8, 0x1}, 0x85) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:55:37 executing program 5: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000100), 0x1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x40, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000140)=""/84, 0x54}, {&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f00000005c0)=""/179, 0xb3}, {&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000000740)=""/246, 0xf6}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000840)=""/154, 0x9a}, {&(0x7f0000001c80)=""/233, 0xe9}, {&(0x7f0000001d80)=""/118, 0x76}], &(0x7f00000001c0)=[0x8fac, 0x1, 0xffffffffffffff00, 0x9], 0xa}, 0x20) (async) preadv(r0, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000000900), 0x7, 0x400a00) close_range(r3, r3, 0x0) 22:55:37 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) r10 = accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_io_uring_submit(r9, r1, &(0x7f0000000880)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd, 0x100, {0x0, r10}, 0x7f, 0x8, 0x0, {0x0, r8, r11}}, 0x3) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1643.723125][ T5087] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1643.737117][T28988] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1643.839665][T28987] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1643.933439][T28997] xt_CT: You must specify a L4 protocol and not use inversions on it 22:55:38 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r3 = socket$rxrpc(0x21, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x20000023896) [ 1643.983536][ T5087] usb 2-1: Using ep0 maxpacket: 8 22:55:38 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) [ 1644.105361][T29004] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1644.109118][ T5087] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.124290][ T5087] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1644.323291][ T5087] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=b9.ed [ 1644.333070][ T5087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.341410][ T5087] usb 2-1: Product: syz [ 1644.346098][ T5087] usb 2-1: Manufacturer: syz [ 1644.351031][ T5087] usb 2-1: SerialNumber: syz [ 1644.371150][ T5087] usb 2-1: config 0 descriptor?? 22:55:40 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) r3 = socket$rxrpc(0x21, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x20000023896) 22:55:40 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) r10 = accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_io_uring_submit(r9, r1, &(0x7f0000000880)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd, 0x100, {0x0, r10}, 0x7f, 0x8, 0x0, {0x0, r8, r11}}, 0x3) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:55:40 executing program 3: r0 = syz_io_uring_setup(0x169c, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c3000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)) r2 = io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x52, 0x0, @fd=r2, 0x0, 0x0, 0x3, 0x2, 0x0, {0x0, 0x0, r3}}, 0x7fff) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:55:40 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r3 = syz_io_uring_setup(0x7d08, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x1, 0x18a, 0x0, r1}, &(0x7f00006c5000/0x1000)=nil, &(0x7f00006c3000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000440)={0x26, 0x20, '\x00', 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0]}) close_range(r0, 0xffffffffffffffff, 0x0) 22:55:40 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023892) (async) [ 1646.331184][ T5087] usb 2-1: USB disconnect, device number 114 22:55:40 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x36, 0xa, 0x62, 0x8, 0x17ef, 0x721e, 0xb9ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000072190108710402035e35000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x1a, 0x2}, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000020c0)={0x2c, &(0x7f0000001f80)={0x0, 0xb, 0x39, {0x39, 0xd, "c58b8dbba984c3e3b8c1e678dcc837878b7d4e592c79e9f67c0710ea9b7304f50a36919e776fbbd20765771f98568f5746f3fe9d991019"}}, &(0x7f0000001fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc4c}}, &(0x7f0000002000)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x3, 0x8}]}}, &(0x7f0000002040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x4, 0x0, 0x20, "fb34b817", "baab8cff"}}, &(0x7f0000002080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x17, 0x60, 0xfa, 0x5, 0x1, 0x8, 0x1ff}}}, &(0x7f0000002580)={0x84, &(0x7f0000002100)={0x40, 0x15, 0xaa, "a96d16ebe1e373f619d80f52dddfea4264c5f9d4dd4c0d7e4de5a1a05852326f57def8df16e53d174e87cea7381f82d4d5f1de172b7d6af81c35cd435d640b3dae5a5856e5cb97c132075fbfcc13b1b114b4a8e33ed37da0e7fd8386a6e8ba11ee13c6113202995dd2c2fa57ceb75cfc3f4c27a05d88ff3da426645d39f78511f3091c3d422957b61a05bf047d69bf46ced2ad3b05cfe0243ef21b2afc76ae3f068f4cd3e33fdf5d768e"}, &(0x7f00000021c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002240)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000002280)={0x20, 0x0, 0x8, {0x140, 0x1, [0xff0]}}, &(0x7f00000022c0)={0x40, 0x7, 0x2}, &(0x7f0000002300)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000002340)={0x40, 0xb, 0x2, "83e2"}, &(0x7f0000002380)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000023c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000002400)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002440)={0x40, 0x19, 0x2, "c544"}, &(0x7f0000002480)={0x40, 0x1a, 0x2}, &(0x7f00000024c0)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000002500)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000002540)={0x40, 0x21, 0x1, 0x20}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000d00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0xa0, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0xae0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0xfb, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0x7, 0x4}}]}}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x200, 0x2, 0x3f, 0x3, 0x20, 0x4}, 0x1ef, &(0x7f0000000d80)={0x5, 0xf, 0x1ef, 0x6, [@generic={0xd8, 0x10, 0xb, "b65b4be41336ebdc9eb95ac594986d7ebd1182783e4576a9b53119dcde61d4de2d7041e89db511dc79beafa2ff18a6aefff5afa416bdd817a08817768b4a22fbb557651ca3744b62951d390e830641fd3637c612cefe2480e43b48796188eff0909226df361230ce9636eafff7bf7ac109183f6536920dc523242cada75023b161e0a7ea5e9712ab7e710eb6dc91a103f3c20744dadbb626470ec8e4dddd31d01bbc3a23f094fdad7b24a4a930530fe744fff7007e9bb6ad0765f25ed3918cfbe96e45b3705824204b1e28667b9f5c52fe8ab0ab54"}, @generic={0xdc, 0x10, 0xe, "ff2909635b4b07a7616a305e29ad78d2182eb383288509e700b747f9916d6761a7a8714441f0ea2925a480150482d0945903553f5b2485a92595e02d963ed2602a4e0bccbfca086179a8b61e27f1b7d2fac01f86de2c4e1965a6d6cf1888b93a07d85d2695e3a00819452e240abba1e013c214aabae21cf76dd5ee3e4d51f50c3b31ed77887dc117365bd090fefbca443a5514128b252302d3406514c4e676fb768ba58ca682688aeb0dfdd0a3c184693d3ca3d222434a0b83d01ee8657f9ed1992c692af601f3c0a5256c04bbe6328673caa1aa1d25594715"}, @ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x7bf1, 0xf0f, 0x8, [0xc000]}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc4, 0x2, 0x5, 0xfc01, 0x1}, @wireless={0xb, 0x10, 0x1, 0x0, 0x8, 0x9, 0x8, 0x6, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x10001, 0x0, 0xd55, [0xff00c0]}]}, 0x2, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0xfcff}}, {0xdf, &(0x7f0000000fc0)=@string={0xdf, 0x3, "ca9fb958b019852490b66b2ed0e176fe623dc6149d239e048ada660785f349aef049743de18c06436dfb5ed36e4b80a8972cb9979ef69830afbd6f3db2e2f066f08b4ad4c601ebe71313ba951a113463bd2d2f99df16362ff885fb27a00db28805683f7d588e89121c1e9c46b09f9851e90e314a6d212e145c944d0c12bd85fb6f41530f583fd477cebe5f1b20c3df6020d2f9591ef9e47ffba0192f81474797d6e21358f0dac5ac591dd1b24bdc30f994fb8dc024fb1cc69adb65198adeb823b2b8e326885e2626326341a732f7367cff8b738bdb77131fc9b63f81a9"}}]}) syz_usb_control_io(r2, &(0x7f0000001280)={0x2c, &(0x7f0000001100)={0x0, 0x23, 0x1d, {0x1d, 0x31, "4e58d561714b9642d7b2ab25db53f71570f0165da300d8ef5e1040"}}, &(0x7f0000001140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f0000001180)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x4, 0x11, 0x0, [0xf0, 0xff0030, 0xff00cf, 0xff0000, 0xff3f60, 0x3f00]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xfc, 0xfe, 0x80, 0x4, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x80, 0xa9, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x8, 0x5}]}}, &(0x7f0000001200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x3, 0x20, 0x7f, "1213fe79", "71f58b76"}}, &(0x7f0000001240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x0, 0x6, 0x5, 0x81, 0x5}}}, &(0x7f00000016c0)={0x84, &(0x7f00000012c0)={0x40, 0x1, 0x26, "0fedff9cca0a5121a26300a3d9102d3f7b1a64aaf87bd6cc16fe758a7cc09068726bcb9dd613"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001380)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000013c0)={0x20, 0x0, 0x8, {0x80, 0x4, [0xf00f]}}, &(0x7f0000001400)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000001440)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000001480)={0x40, 0xb, 0x2, '5<'}, &(0x7f00000014c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000001500)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001540)={0x40, 0x17, 0x6, @local}, &(0x7f0000001580)={0x40, 0x19, 0x2, "9786"}, &(0x7f00000015c0)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000001600)={0x40, 0x1c, 0x1, 0xf2}, &(0x7f0000001640)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000001680)={0x40, 0x21, 0x1, 0x1}}) r3 = syz_usb_connect(0x3, 0x2b0, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0x90, 0x72, 0xdf, 0x20, 0x1199, 0x9009, 0x635a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29e, 0x1, 0x2, 0x7f, 0x40, 0x2, [{{0x9, 0x4, 0xa5, 0x8, 0x6, 0xa3, 0x99, 0x35, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x81, 0xd6}, [@processing_unit={0xd, 0x24, 0x7, 0x6, 0x0, 0xc1, "4b241106f6b1"}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x9, "213ad535c9"}, @mixer_unit={0x7, 0x24, 0x4, 0xe3, 0x5, 'Bb'}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x5, 0x2, "ad0005"}, @selector_unit={0xb, 0x24, 0x5, 0x2, 0x8, "4b95937d3f3e"}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x9, "cd84"}]}], [{{0x9, 0x5, 0x0, 0x4, 0x400, 0x3, 0xc8, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x8}, @generic={0xff, 0x21, "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"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x2, 0x7, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4f}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x1f, 0x6c, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x6}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x2, 0xfa, 0xa0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x1, 0x2, 0x10, [@generic={0xca, 0x30, "e14faef06654e0f7ee181032c9e748d98ef49e2e6802e7c227c5d2a5f05c8891519020aa0519e6a91e8abe5f83b0247a8fa56e008d23c27feccb66d37d796c7fc8479a8bebd17c43dfb153f09815864a229772ab856f05a398f0cc7aa0e5a55c94496e45c0ba80ab4bb86a1dc9e093cb7226031dc21c246170a606ea418d404a481b364853f07d033a885d221ca633ec32d2989ff0ea7a9822e3c345ffcd5186795c52c3ba59dc98f7f41be6c65d388bb8dd3a81e2a24abb3f70fb86f38a31d4848b71bc90cabf8e"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xc9, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xaf, 0x1}, @generic={0x27, 0x22, "c525648a7abfd738de368f966a16b1cab451597085d27bd9a2312aa01d9d75f7c86e6da245"}]}}]}}]}}]}}, &(0x7f0000001bc0)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x200, 0x3f, 0x2, 0x2f, 0x40, 0x20}, 0x19, &(0x7f0000001a80)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "6dc63ebf95d8eb5b78c8068d7c7b7351"}]}, 0x4, [{0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x81d}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000001d80)={0x14, &(0x7f0000001c40)={0x0, 0x0, 0xc0, {0xc0, 0x5, "55371c721713f9daa676cba47c2b4776e12ee7ef35c1c6d4fa9fd20f80d46bbd0136cdb8614a1cd6fff37675297d681a6b51cb62cdc48393fe7423fd66fc930f556077a79e44dcaaf08cfa2912b261dcdcd5f8bb0e56ba30e2a702b05ca57ee8aae6f1d390912bc4cb3dd80a9bfafd4e1e02694e737d81226423f3b8c71cdfe7721195fcceef56f48661571c8d6e1ee09bec491d8f962fd17ef0f3fa2774928236943cc9e934027bdb626ba4cd86564f50a3e626aeee117853d035142aeb"}}, &(0x7f0000001d40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001f40)={0x1c, &(0x7f0000001dc0)={0x0, 0x12, 0xd7, "4eab34ae2877de1605aad27f8a47bf565e699af2d2059753c4ed002b98cb229d610bb01200aacbebfcf2df49d3931ec84c83113d24a497d38ff143b4a6d5bc3f85f44af96bf8cf0d3e92b4df80020b1512c1eb02f78c7aa059528ba667c511f8139d9687e263a774bf4b8baa17493c91ab72d159986f8b53c0efe12ac7eaa6f69605ec7d89ee835a6ae343a9fb7605567bd66cbab974ccecd7f51d17686e5fdfebdd882032662662cf1784b5f6a0c1637b588ac80dac85195b5643efa1fb6ee1b9fd28ed6efa011376887ecbe4cfcc6484613b788f1398"}, &(0x7f0000001ec0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001f00)={0x0, 0x8, 0x1, 0x5}}) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000ac0)={0x24, &(0x7f00000009c0)={0x40, 0xb, 0x22, {0x22, 0x22, "684ada3eba63a71386052eb969d057893ccd1cff0274f26f246136aeeba09bfe"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f0000000a40)={0x0, 0x22, 0x28, {[@local=@item_012={0x0, 0x2, 0x7}, @main=@item_4={0x3, 0x0, 0xb, "54f91ade"}, @global=@item_4={0x3, 0x1, 0x2, "bbdf7349"}, @global=@item_4={0x3, 0x1, 0x0, "aeaaaf61"}, @local=@item_4={0x3, 0x2, 0xa, "157321d4"}, @global=@item_4={0x3, 0x1, 0x2, "baea1105"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x5, "fe86fe28"}, @global=@item_012={0x2, 0x1, 0x6, "7ceb"}, @local=@item_4={0x3, 0x2, 0x0, "d347c77e"}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xfb, 0x1, {0x22, 0x5f4}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b00)={0x40, 0xb, 0x5e, "8c52e8f2d1ebc400ffbceb775883c9ebaf2e24119a49e92f5e81138c7e6a8b03d3d8ecd0d13745afd03985daf10dd55446da13b4810d0191cad61bebd3f8f5a66591442619380d1e41086f48e6efcbcf4b9428bf154ea8d5cc864820522f"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000c00)={0x20, 0x1, 0x75, "5ab603d7b771daba4458344768bdccff7f01cea3d9e8c0eb88ada670356e8086da34c66a370b53bfd5751f1f7864fcdddcede16f080f0b3ab21475ddff5a578dcce8406d5549256ce237256ffa98bc4566bf5f557f7f1022899652443a0f98cb99741a4156c37caa0f92e88e4f40dbacb2dd408f27"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x40, 0x30, 0x71, {0x71, 0x11, "f7c7e67734f922fa0455a727f1475420b7d711b68c1e46b1f386a1c6be918be124cc2ed9fbc022a99b0ab0ba09ee641ab0d8473a0d3fa9da33da3171b701db8d1401315342b257a2f07c75b7be6917dd7a76a4e1d42c61f6099354e6dc710559265985236d4be11b087474d4051c09"}}, &(0x7f0000000080)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "fd9cca38fbf2b46b3b33f63068d5a49da9e536da8b474e7b022e0a7716e58e70ab1c629eb8f6c79d953fa7419c238e4abcb2203cf42da92eb5d8ad05530c8289074cf385ca3b669b31160752f65a92a587c5854e8443fc361d3e29b643ffb1e3c04f5262adc303d54b4bb854bb86c8cd373e638782a202b9591fa0d8ea980695bbb66f4f5a7e53660e6c95"}}, &(0x7f00000001c0)={0x0, 0xf, 0xd9, {0x5, 0xf, 0xd9, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "2dc1fddc78afc046429f2b1da9773ee4"}, @ss_container_id={0x14, 0x10, 0x4, 0xee, "33c9629d9ec5222e870003e7c125c303"}, @generic={0x9f, 0x10, 0x2, "712ef5d6a64da007a32dce94aea029e63b716daa90232fcb737c1233c67f146721bef067bdc77bf189bd4972968f5a39c3ec59bc893fa8cffd626b7c8f203e9ac34fca1d0a65b0962d17e7ebc36cce55a011c117951bb6b4d89d26b4f8bf1133d964265ef76d2e7bd2d31e4dd31bd8bfd528fd75da4750e3df60c0de532de27c20042f6de9eff3791af5f3a88496dd7cd1b1bd3ad9a9c04d8e2892fe"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x2, 0x1, 0xff}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xef, 0x4, 0xfe, 0x6, "799b2b38", "9e92ab09"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x33, 0x1, 0x3f, 0x1f, 0x6, 0x9, 0x6}}}, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0xc8, "48b4bc1dfccc478d610cdb1100214c1bbd20f44a406e6572779a63c4967616886da605af76dea83fcf7d070fd06f3cf9375619cb4fcd7e89b718a4901f0c07863fdb488928697bf6529fbed5d6f11ac6f5de85567c9fd619c76ff866303f16316e77d09cf141a1d49b4f02a833c927e02701b531da8123cf5f6abe2ec17cc952c802e7982af1fdd9e842f116e42dee9b380119afc7e126107d466933c5031e4552b44a5f9157252f62da35960ffdf6b569983733dec3a57d87dfbf0b8a8373c597f7d3c9ae1fae65"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xf5}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000600)={0x40, 0xb, 0x2, "5ece"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000680)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "afc2"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x2f}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x0, 0x0, 0x4, "c490375e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1646.496183][T29020] xt_CT: You must specify a L4 protocol and not use inversions on it 22:55:40 executing program 3: r0 = syz_io_uring_setup(0x169c, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c3000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)) (async) r2 = io_uring_setup(0xc80, &(0x7f0000000080)) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x52, 0x0, @fd=r2, 0x0, 0x0, 0x3, 0x2, 0x0, {0x0, 0x0, r3}}, 0x7fff) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:55:40 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x7d08, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x1, 0x18a, 0x0, r1}, &(0x7f00006c5000/0x1000)=nil, &(0x7f00006c3000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000440)={0x26, 0x20, '\x00', 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0]}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:55:41 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) r10 = accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_io_uring_submit(r9, r1, &(0x7f0000000880)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd, 0x100, {0x0, r10}, 0x7f, 0x8, 0x0, {0x0, r8, r11}}, 0x3) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0), &(0x7f0000000180)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1646.952384][ T5087] usb 2-1: new high-speed USB device number 115 using dummy_hcd 22:55:41 executing program 3: r0 = syz_io_uring_setup(0x169c, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c3000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)) r2 = io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x52, 0x0, @fd=r2, 0x0, 0x0, 0x3, 0x2, 0x0, {0x0, 0x0, r3}}, 0x7fff) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x169c, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c3000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x52, 0x0, @fd=r2, 0x0, 0x0, 0x3, 0x2, 0x0, {0x0, 0x0, r3}}, 0x7fff) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:55:41 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x7d08, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x1, 0x18a, 0x0, r1}, &(0x7f00006c5000/0x1000)=nil, &(0x7f00006c3000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000440)={0x26, 0x20, '\x00', 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0]}) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 1647.202254][ T5087] usb 2-1: Using ep0 maxpacket: 8 22:55:41 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) [ 1647.493322][ T5087] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=b9.ed [ 1647.503083][ T5087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.511456][ T5087] usb 2-1: Product: syz [ 1647.516335][ T5087] usb 2-1: Manufacturer: syz [ 1647.521260][ T5087] usb 2-1: SerialNumber: syz 22:55:41 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023892) (async) 22:55:41 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) r10 = accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_io_uring_submit(r9, r1, &(0x7f0000000880)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd, 0x100, {0x0, r10}, 0x7f, 0x8, 0x0, {0x0, r8, r11}}, 0x3) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0), &(0x7f0000000180)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1647.636902][ T5087] usb 2-1: config 0 descriptor?? 22:55:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2, 0xb, 0x8, 0x8, 0x1b, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x4, 0x5, 0x9, 0x6, 0xd6}, @sadb_x_nat_t_type={0x1, 0x14, 0x29}, @sadb_x_sa2={0x2, 0x13, 0x49, 0x0, 0x0, 0x70bd2b, 0x3503}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18, 0x14, 0xc}, @sadb_x_sec_ctx={0x5, 0x18, 0x80, 0x4, 0x1a, "4e0a5364d6489797509cfe9074875331c466975d2e30bbadeff9"}, @sadb_ident={0x2, 0x0, 0x0, 0x0, 0xd1}, @sadb_x_sec_ctx={0x4, 0x18, 0x1, 0x2, 0x18, "5ed5122e2226b8f22f9be6a9cd21b0d84177a9857c052aa1"}]}, 0xd8}}, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0xffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'tunl0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 22:55:42 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r3, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x20, 0x0, @fd=r6, 0xf3d, {0x0, r0}, 0x401, 0x8, 0x1}, 0x6) io_uring_setup(0xc80, &(0x7f0000000080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$tun(r7, &(0x7f0000000100)={@val={0x0, 0x88e7}, @val={0x1, 0x3, 0x8001, 0x1, 0x401, 0xff}, @arp=@generic={0x30c, 0x88e7, 0x6, 0x5, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, "12f80df019", @random="0bf0e53f2f33", "70ccbf6fcb47d287e5c50ad5c99f"}}, 0x35) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r10 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x13, 0x20003580, r11) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, r11) preadv(r7, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1647.889921][T29023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.899839][T29023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.912884][ T5087] r8152 2-1:0.0: Unknown version 0x0000 [ 1648.009155][T29023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1648.018803][T29023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 22:55:42 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x90) (async) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) [ 1648.131285][T29063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1648.134081][T29023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1648.149154][T29023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1648.281032][T29059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1648.383099][ T5087] r8153_ecm 2-1:0.0: Unknown version 0x1cb0 [ 1648.389472][ T5087] usb 2-1: bad CDC descriptors 22:55:43 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x36, 0xa, 0x62, 0x8, 0x17ef, 0x721e, 0xb9ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000072190108710402035e35000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x1a, 0x2}, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r1, 0x0, 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000020c0)={0x2c, &(0x7f0000001f80)={0x0, 0xb, 0x39, {0x39, 0xd, "c58b8dbba984c3e3b8c1e678dcc837878b7d4e592c79e9f67c0710ea9b7304f50a36919e776fbbd20765771f98568f5746f3fe9d991019"}}, &(0x7f0000001fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc4c}}, &(0x7f0000002000)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x3, 0x8}]}}, &(0x7f0000002040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x4, 0x0, 0x20, "fb34b817", "baab8cff"}}, &(0x7f0000002080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x17, 0x60, 0xfa, 0x5, 0x1, 0x8, 0x1ff}}}, &(0x7f0000002580)={0x84, &(0x7f0000002100)={0x40, 0x15, 0xaa, "a96d16ebe1e373f619d80f52dddfea4264c5f9d4dd4c0d7e4de5a1a05852326f57def8df16e53d174e87cea7381f82d4d5f1de172b7d6af81c35cd435d640b3dae5a5856e5cb97c132075fbfcc13b1b114b4a8e33ed37da0e7fd8386a6e8ba11ee13c6113202995dd2c2fa57ceb75cfc3f4c27a05d88ff3da426645d39f78511f3091c3d422957b61a05bf047d69bf46ced2ad3b05cfe0243ef21b2afc76ae3f068f4cd3e33fdf5d768e"}, &(0x7f00000021c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002240)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000002280)={0x20, 0x0, 0x8, {0x140, 0x1, [0xff0]}}, &(0x7f00000022c0)={0x40, 0x7, 0x2}, &(0x7f0000002300)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000002340)={0x40, 0xb, 0x2, "83e2"}, &(0x7f0000002380)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000023c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000002400)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002440)={0x40, 0x19, 0x2, "c544"}, &(0x7f0000002480)={0x40, 0x1a, 0x2}, &(0x7f00000024c0)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000002500)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000002540)={0x40, 0x21, 0x1, 0x20}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000d00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0xa0, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0xae0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0xfb, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0x7, 0x4}}]}}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x200, 0x2, 0x3f, 0x3, 0x20, 0x4}, 0x1ef, &(0x7f0000000d80)={0x5, 0xf, 0x1ef, 0x6, [@generic={0xd8, 0x10, 0xb, "b65b4be41336ebdc9eb95ac594986d7ebd1182783e4576a9b53119dcde61d4de2d7041e89db511dc79beafa2ff18a6aefff5afa416bdd817a08817768b4a22fbb557651ca3744b62951d390e830641fd3637c612cefe2480e43b48796188eff0909226df361230ce9636eafff7bf7ac109183f6536920dc523242cada75023b161e0a7ea5e9712ab7e710eb6dc91a103f3c20744dadbb626470ec8e4dddd31d01bbc3a23f094fdad7b24a4a930530fe744fff7007e9bb6ad0765f25ed3918cfbe96e45b3705824204b1e28667b9f5c52fe8ab0ab54"}, @generic={0xdc, 0x10, 0xe, "ff2909635b4b07a7616a305e29ad78d2182eb383288509e700b747f9916d6761a7a8714441f0ea2925a480150482d0945903553f5b2485a92595e02d963ed2602a4e0bccbfca086179a8b61e27f1b7d2fac01f86de2c4e1965a6d6cf1888b93a07d85d2695e3a00819452e240abba1e013c214aabae21cf76dd5ee3e4d51f50c3b31ed77887dc117365bd090fefbca443a5514128b252302d3406514c4e676fb768ba58ca682688aeb0dfdd0a3c184693d3ca3d222434a0b83d01ee8657f9ed1992c692af601f3c0a5256c04bbe6328673caa1aa1d25594715"}, @ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x7bf1, 0xf0f, 0x8, [0xc000]}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc4, 0x2, 0x5, 0xfc01, 0x1}, @wireless={0xb, 0x10, 0x1, 0x0, 0x8, 0x9, 0x8, 0x6, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x10001, 0x0, 0xd55, [0xff00c0]}]}, 0x2, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0xfcff}}, {0xdf, &(0x7f0000000fc0)=@string={0xdf, 0x3, "ca9fb958b019852490b66b2ed0e176fe623dc6149d239e048ada660785f349aef049743de18c06436dfb5ed36e4b80a8972cb9979ef69830afbd6f3db2e2f066f08b4ad4c601ebe71313ba951a113463bd2d2f99df16362ff885fb27a00db28805683f7d588e89121c1e9c46b09f9851e90e314a6d212e145c944d0c12bd85fb6f41530f583fd477cebe5f1b20c3df6020d2f9591ef9e47ffba0192f81474797d6e21358f0dac5ac591dd1b24bdc30f994fb8dc024fb1cc69adb65198adeb823b2b8e326885e2626326341a732f7367cff8b738bdb77131fc9b63f81a9"}}]}) syz_usb_control_io(r2, &(0x7f0000001280)={0x2c, &(0x7f0000001100)={0x0, 0x23, 0x1d, {0x1d, 0x31, "4e58d561714b9642d7b2ab25db53f71570f0165da300d8ef5e1040"}}, &(0x7f0000001140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f0000001180)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x4, 0x11, 0x0, [0xf0, 0xff0030, 0xff00cf, 0xff0000, 0xff3f60, 0x3f00]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xfc, 0xfe, 0x80, 0x4, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x80, 0xa9, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x8, 0x5}]}}, &(0x7f0000001200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x3, 0x20, 0x7f, "1213fe79", "71f58b76"}}, &(0x7f0000001240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x0, 0x6, 0x5, 0x81, 0x5}}}, &(0x7f00000016c0)={0x84, &(0x7f00000012c0)={0x40, 0x1, 0x26, "0fedff9cca0a5121a26300a3d9102d3f7b1a64aaf87bd6cc16fe758a7cc09068726bcb9dd613"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001380)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000013c0)={0x20, 0x0, 0x8, {0x80, 0x4, [0xf00f]}}, &(0x7f0000001400)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000001440)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000001480)={0x40, 0xb, 0x2, '5<'}, &(0x7f00000014c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000001500)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001540)={0x40, 0x17, 0x6, @local}, &(0x7f0000001580)={0x40, 0x19, 0x2, "9786"}, &(0x7f00000015c0)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000001600)={0x40, 0x1c, 0x1, 0xf2}, &(0x7f0000001640)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000001680)={0x40, 0x21, 0x1, 0x1}}) (async, rerun: 64) r3 = syz_usb_connect(0x3, 0x2b0, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0x90, 0x72, 0xdf, 0x20, 0x1199, 0x9009, 0x635a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29e, 0x1, 0x2, 0x7f, 0x40, 0x2, [{{0x9, 0x4, 0xa5, 0x8, 0x6, 0xa3, 0x99, 0x35, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x81, 0xd6}, [@processing_unit={0xd, 0x24, 0x7, 0x6, 0x0, 0xc1, "4b241106f6b1"}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x9, "213ad535c9"}, @mixer_unit={0x7, 0x24, 0x4, 0xe3, 0x5, 'Bb'}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x5, 0x2, "ad0005"}, @selector_unit={0xb, 0x24, 0x5, 0x2, 0x8, "4b95937d3f3e"}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x9, "cd84"}]}], [{{0x9, 0x5, 0x0, 0x4, 0x400, 0x3, 0xc8, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x8}, @generic={0xff, 0x21, "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"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x2, 0x7, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4f}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x1f, 0x6c, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x6}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x2, 0xfa, 0xa0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x1, 0x2, 0x10, [@generic={0xca, 0x30, "e14faef06654e0f7ee181032c9e748d98ef49e2e6802e7c227c5d2a5f05c8891519020aa0519e6a91e8abe5f83b0247a8fa56e008d23c27feccb66d37d796c7fc8479a8bebd17c43dfb153f09815864a229772ab856f05a398f0cc7aa0e5a55c94496e45c0ba80ab4bb86a1dc9e093cb7226031dc21c246170a606ea418d404a481b364853f07d033a885d221ca633ec32d2989ff0ea7a9822e3c345ffcd5186795c52c3ba59dc98f7f41be6c65d388bb8dd3a81e2a24abb3f70fb86f38a31d4848b71bc90cabf8e"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xc9, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xaf, 0x1}, @generic={0x27, 0x22, "c525648a7abfd738de368f966a16b1cab451597085d27bd9a2312aa01d9d75f7c86e6da245"}]}}]}}]}}]}}, &(0x7f0000001bc0)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x200, 0x3f, 0x2, 0x2f, 0x40, 0x20}, 0x19, &(0x7f0000001a80)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "6dc63ebf95d8eb5b78c8068d7c7b7351"}]}, 0x4, [{0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x81d}}]}) (rerun: 64) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000001d80)={0x14, &(0x7f0000001c40)={0x0, 0x0, 0xc0, {0xc0, 0x5, "55371c721713f9daa676cba47c2b4776e12ee7ef35c1c6d4fa9fd20f80d46bbd0136cdb8614a1cd6fff37675297d681a6b51cb62cdc48393fe7423fd66fc930f556077a79e44dcaaf08cfa2912b261dcdcd5f8bb0e56ba30e2a702b05ca57ee8aae6f1d390912bc4cb3dd80a9bfafd4e1e02694e737d81226423f3b8c71cdfe7721195fcceef56f48661571c8d6e1ee09bec491d8f962fd17ef0f3fa2774928236943cc9e934027bdb626ba4cd86564f50a3e626aeee117853d035142aeb"}}, &(0x7f0000001d40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001f40)={0x1c, &(0x7f0000001dc0)={0x0, 0x12, 0xd7, "4eab34ae2877de1605aad27f8a47bf565e699af2d2059753c4ed002b98cb229d610bb01200aacbebfcf2df49d3931ec84c83113d24a497d38ff143b4a6d5bc3f85f44af96bf8cf0d3e92b4df80020b1512c1eb02f78c7aa059528ba667c511f8139d9687e263a774bf4b8baa17493c91ab72d159986f8b53c0efe12ac7eaa6f69605ec7d89ee835a6ae343a9fb7605567bd66cbab974ccecd7f51d17686e5fdfebdd882032662662cf1784b5f6a0c1637b588ac80dac85195b5643efa1fb6ee1b9fd28ed6efa011376887ecbe4cfcc6484613b788f1398"}, &(0x7f0000001ec0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001f00)={0x0, 0x8, 0x1, 0x5}}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(r1, &(0x7f0000000ac0)={0x24, &(0x7f00000009c0)={0x40, 0xb, 0x22, {0x22, 0x22, "684ada3eba63a71386052eb969d057893ccd1cff0274f26f246136aeeba09bfe"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f0000000a40)={0x0, 0x22, 0x28, {[@local=@item_012={0x0, 0x2, 0x7}, @main=@item_4={0x3, 0x0, 0xb, "54f91ade"}, @global=@item_4={0x3, 0x1, 0x2, "bbdf7349"}, @global=@item_4={0x3, 0x1, 0x0, "aeaaaf61"}, @local=@item_4={0x3, 0x2, 0xa, "157321d4"}, @global=@item_4={0x3, 0x1, 0x2, "baea1105"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x5, "fe86fe28"}, @global=@item_012={0x2, 0x1, 0x6, "7ceb"}, @local=@item_4={0x3, 0x2, 0x0, "d347c77e"}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xfb, 0x1, {0x22, 0x5f4}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b00)={0x40, 0xb, 0x5e, "8c52e8f2d1ebc400ffbceb775883c9ebaf2e24119a49e92f5e81138c7e6a8b03d3d8ecd0d13745afd03985daf10dd55446da13b4810d0191cad61bebd3f8f5a66591442619380d1e41086f48e6efcbcf4b9428bf154ea8d5cc864820522f"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000c00)={0x20, 0x1, 0x75, "5ab603d7b771daba4458344768bdccff7f01cea3d9e8c0eb88ada670356e8086da34c66a370b53bfd5751f1f7864fcdddcede16f080f0b3ab21475ddff5a578dcce8406d5549256ce237256ffa98bc4566bf5f557f7f1022899652443a0f98cb99741a4156c37caa0f92e88e4f40dbacb2dd408f27"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x40, 0x30, 0x71, {0x71, 0x11, "f7c7e67734f922fa0455a727f1475420b7d711b68c1e46b1f386a1c6be918be124cc2ed9fbc022a99b0ab0ba09ee641ab0d8473a0d3fa9da33da3171b701db8d1401315342b257a2f07c75b7be6917dd7a76a4e1d42c61f6099354e6dc710559265985236d4be11b087474d4051c09"}}, &(0x7f0000000080)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "fd9cca38fbf2b46b3b33f63068d5a49da9e536da8b474e7b022e0a7716e58e70ab1c629eb8f6c79d953fa7419c238e4abcb2203cf42da92eb5d8ad05530c8289074cf385ca3b669b31160752f65a92a587c5854e8443fc361d3e29b643ffb1e3c04f5262adc303d54b4bb854bb86c8cd373e638782a202b9591fa0d8ea980695bbb66f4f5a7e53660e6c95"}}, &(0x7f00000001c0)={0x0, 0xf, 0xd9, {0x5, 0xf, 0xd9, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "2dc1fddc78afc046429f2b1da9773ee4"}, @ss_container_id={0x14, 0x10, 0x4, 0xee, "33c9629d9ec5222e870003e7c125c303"}, @generic={0x9f, 0x10, 0x2, "712ef5d6a64da007a32dce94aea029e63b716daa90232fcb737c1233c67f146721bef067bdc77bf189bd4972968f5a39c3ec59bc893fa8cffd626b7c8f203e9ac34fca1d0a65b0962d17e7ebc36cce55a011c117951bb6b4d89d26b4f8bf1133d964265ef76d2e7bd2d31e4dd31bd8bfd528fd75da4750e3df60c0de532de27c20042f6de9eff3791af5f3a88496dd7cd1b1bd3ad9a9c04d8e2892fe"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x2, 0x1, 0xff}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xef, 0x4, 0xfe, 0x6, "799b2b38", "9e92ab09"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x33, 0x1, 0x3f, 0x1f, 0x6, 0x9, 0x6}}}, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0xc8, "48b4bc1dfccc478d610cdb1100214c1bbd20f44a406e6572779a63c4967616886da605af76dea83fcf7d070fd06f3cf9375619cb4fcd7e89b718a4901f0c07863fdb488928697bf6529fbed5d6f11ac6f5de85567c9fd619c76ff866303f16316e77d09cf141a1d49b4f02a833c927e02701b531da8123cf5f6abe2ec17cc952c802e7982af1fdd9e842f116e42dee9b380119afc7e126107d466933c5031e4552b44a5f9157252f62da35960ffdf6b569983733dec3a57d87dfbf0b8a8373c597f7d3c9ae1fae65"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xf5}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000600)={0x40, 0xb, 0x2, "5ece"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000680)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "afc2"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x2f}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x0, 0x0, 0x4, "c490375e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1649.612751][T19792] usb 2-1: USB disconnect, device number 115 22:55:43 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) sendfile(r0, r1, 0x0, 0x20000023896) 22:55:43 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) r10 = accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_io_uring_submit(r9, r1, &(0x7f0000000880)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd, 0x100, {0x0, r10}, 0x7f, 0x8, 0x0, {0x0, r8, r11}}, 0x3) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0), &(0x7f0000000180)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:55:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2, 0xb, 0x8, 0x8, 0x1b, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x4, 0x5, 0x9, 0x6, 0xd6}, @sadb_x_nat_t_type={0x1, 0x14, 0x29}, @sadb_x_sa2={0x2, 0x13, 0x49, 0x0, 0x0, 0x70bd2b, 0x3503}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18, 0x14, 0xc}, @sadb_x_sec_ctx={0x5, 0x18, 0x80, 0x4, 0x1a, "4e0a5364d6489797509cfe9074875331c466975d2e30bbadeff9"}, @sadb_ident={0x2, 0x0, 0x0, 0x0, 0xd1}, @sadb_x_sec_ctx={0x4, 0x18, 0x1, 0x2, 0x18, "5ed5122e2226b8f22f9be6a9cd21b0d84177a9857c052aa1"}]}, 0xd8}}, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0xffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'tunl0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2, 0xb, 0x8, 0x8, 0x1b, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x4, 0x5, 0x9, 0x6, 0xd6}, @sadb_x_nat_t_type={0x1, 0x14, 0x29}, @sadb_x_sa2={0x2, 0x13, 0x49, 0x0, 0x0, 0x70bd2b, 0x3503}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18, 0x14, 0xc}, @sadb_x_sec_ctx={0x5, 0x18, 0x80, 0x4, 0x1a, "4e0a5364d6489797509cfe9074875331c466975d2e30bbadeff9"}, @sadb_ident={0x2, 0x0, 0x0, 0x0, 0xd1}, @sadb_x_sec_ctx={0x4, 0x18, 0x1, 0x2, 0x18, "5ed5122e2226b8f22f9be6a9cd21b0d84177a9857c052aa1"}]}, 0xd8}}, 0x0) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0xffffffff}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'tunl0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) (async) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) 22:55:43 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r3, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x20, 0x0, @fd=r6, 0xf3d, {0x0, r0}, 0x401, 0x8, 0x1}, 0x6) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) write$tun(r7, &(0x7f0000000100)={@val={0x0, 0x88e7}, @val={0x1, 0x3, 0x8001, 0x1, 0x401, 0xff}, @arp=@generic={0x30c, 0x88e7, 0x6, 0x5, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, "12f80df019", @random="0bf0e53f2f33", "70ccbf6fcb47d287e5c50ad5c99f"}}, 0x35) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) r10 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x13, 0x20003580, r11) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, r11) (async, rerun: 32) preadv(r7, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) 22:55:43 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x90) (async, rerun: 64) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) (rerun: 64) [ 1649.725308][T29077] xt_CT: You must specify a L4 protocol and not use inversions on it 22:55:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2, 0xb, 0x8, 0x8, 0x1b, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x4, 0x5, 0x9, 0x6, 0xd6}, @sadb_x_nat_t_type={0x1, 0x14, 0x29}, @sadb_x_sa2={0x2, 0x13, 0x49, 0x0, 0x0, 0x70bd2b, 0x3503}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18, 0x14, 0xc}, @sadb_x_sec_ctx={0x5, 0x18, 0x80, 0x4, 0x1a, "4e0a5364d6489797509cfe9074875331c466975d2e30bbadeff9"}, @sadb_ident={0x2, 0x0, 0x0, 0x0, 0xd1}, @sadb_x_sec_ctx={0x4, 0x18, 0x1, 0x2, 0x18, "5ed5122e2226b8f22f9be6a9cd21b0d84177a9857c052aa1"}]}, 0xd8}}, 0x0) (async) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0xffffffff}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'tunl0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) 22:55:44 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) sendfile(r0, r1, 0x0, 0x20000023896) 22:55:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x8c03, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xbd, 0x6, 0x4, 0x1, 0x3, 0x3, 0x0, 0xbc, 0x40, 0x2fe, 0x9, 0x8, 0x38, 0x2, 0xac6, 0x200, 0x6}, [{0x4, 0xb5, 0x7, 0x100000000, 0x8, 0x1, 0x80, 0x100000000}, {0x7, 0x26, 0x0, 0x7fffffff, 0x8, 0x7, 0xa7c6, 0x20}], "592d05497b1f968d237e8b70c63e7ec1b9e0adc15f671c6fc50ae2f2bd5acc3a0d53ad3ac037d1b16a2da08a2ba3465c47d7c623048823f73ce9a04e9a64eef6669788ab421f8e2d15067e4dc2adac2d8e454f43e44a493ce9ccee1b8bb13402b650d10d96f4ce5a2515c9de72dab54ba970fb798ef38f980f0f92b4dd57a70b85e8318c55ebbd05814172b8e3dbc535f1860565553a79e07b9489023155496b26ed268fd551a5e477b52d8c30e6d9dc723713021f364cdb03c6c0641cfa9c14c50d20cb9bfe5a6c5ed4f746b86ac6134252efa1dec1cb29ffa23a5943f5ad337f12f73f4f2f5e0f72cd26a521b83766b3a89a84f9bc31e0a434385c0238b2b59b424e476dfb7368fe97166e11ceede6e8aca0c270148ee22bd045e16a2e47d2229f92cfb9c05ed3367c0ba2e6a824909d13c6f9f107d623bfe3e2dc6d54b5d7d6b23e644d6a3049d5cf5f560925b3c85a48e0d2f4d4539bf7410f155711c9b83e9d697b6e9d21f6f3cc87cd660c71f9f135882787d929c9b3b77090d8434cad30dcd4ea8d22d889b4381849714f9fdbce600acb8ce8cdd5cec4d2e8e47ca147ce562f3a3d77dbb6859e0efda5d07fcce53cc881aa022875d46a43cae97f3fab85ffc4155bf4135b3e7fcbe7b9350dbec913f4e564d7c75963eb0159a93642dbcd79d609fe91ebc738313057d675bbfbb6bb1633a68fb201d8d6e64bcf76b3c9b0cc04318bc83630925c326fcc719fc4053176306e95689d7ac4a60bd96e830f2b842299d795add53252415c48e8fb893f5bbb0c6aab660d645e178f771aae58e6329a7b209023e87b289d052f5ee5801e81b80fff4e6a94768e9a24e78ec30df560925bf28a61771a83b2d553d5d28299ec5fc8e38a0ce601d6be452832477e4d9e6f485f588a93f753429c331fa09484f600d972b11915725587b3ae5f450572570c4dea1b16e2db4d11959590aa308d1d9a138486b3c58374ba9aaedad3361db7495e76795c4d8a9d48b5a49fcae91c80785309ea8c226bd133a93f614193a6fa9f49d021dd489bd5a3e5356e6c3362d2df2c447772675bc13462ac20e1e1e8dc4bec844c7329b705631731a9522500c4ce2467d8a439f653c14e6a688665d125fc122fc902c772720b5e769f81c5611a25005aa2bead776dab8552f51c7a9b379b0a3cc9bbd8da8b043947af80610181b693385270c71db4849f3de21380c26cc9260b72b6692c8cfcabf3d574acb996230270806d8d485f641d049aa7f4222bbb1889415e43620d78a5ed4cc3e4911498614f357b4976d930b0f0e8f67647c35b4d44a3faeee4d2ab90d86128a04e522900223eb60d24ea6268a65f49e8cef69808b0a57da7920a4220a620d3c46ba5dfd0379f421005fb2e21f9f14cfbc6f06b0675e274415b841ba5f8df3c0ff4b1c62b329df6ab0c6dbe8861d6b63a8a910d1ca3202ef8056abeda332cecc71db05ef6efacc14894fad04c977055d824c4da29197a33e3b9c13b7b8477264f78c60a61e9f62365b374ccb495b97b4f3f38242492466af6dea8c482fa0df1d236b26a419aeeca93afc1d6d3affa78302e06b2425c6e8203244f235111dda619b2399d38bc7410312ed298d51a76e4a030dc2ffa971d569fe089bcac05ff23e750dd3825c4ef4ec3a2799cf0bf9ba5aa162b8fb8f2721ef77113de5f0ed66915f800d35a9bae38707c7ff6931e9c6e1d01e0ae1b8b84b5d091d7c0b53e78e2e2d42dbf7c93bd8c7e7d504f6a53ed9e2163dbee3e28c1323a64489861419986d1f1c6cadeb78ef8e797e237c9043ee4af6700ffb1464880d2f91e0253180b06435724a492a357e6b16cc0046db406620a7e670fd46f4cfa4ce6ddaf75ec615971589d18e314a69d9fb4ed6a7bdcc50acd491810db82c63ebf3b5659012301eddd221f64699c05adc6b7130b70a2dcefdaae819eef8e0e18819912d8077d012078f4fc2a191a01a87857e59e8eb99742783eaf4bcc02be3b83a33a310f759b3c45ba55dc8a9d56cacd0c8c0e0ea2217abf1eebe874ee7fc8284ea6b2e39f40fda72bcdbfc80a633a3babf6b31c4122572b81c126decd521864fd792aea69934928b424e21e9cf812fd30f5f4c450e66d040e904648bdf100ee8bf6f63db716d13035fb3d3e74a40aa91394f8884a3810ce944d140e81b27ddcb94372102a2cde3201900122effd56a4bc5c86a9b361f4d43af02c553820fe78bcafe0aa8d88cbceb05d374674b25c004714fea967385c1f62c4a48dc688e7f824d092635a19d5fe7f1044427879724b2cf9debbd7da3b776e303b0889cafdb33076ed3e9d8fa30d8b0c778e9c4f56ac7c695f6f78d2d9453dce2643944ee4623a92602205e0e6ba3f491035c22524eef76fefc6c8f0eb7c7edf7a6ed0074ca976d10e091b94f3b171882d8263b91377ea257a61de18712caddd0f1b378d665e8bcf47c4f9e83c09641efae252dd834637964e45614d337904e31f7a3cf297f287eda2fac474cdbde147b60a380bb5a26828e6b5d95dc1e85cc5b42fb1929b7cbdf2f4075eb34d08ce67a8b0bcb922fa5bb0d791ad994adf12b0ac8ca7a5cee77b7d11c5219544c902fa6cbf12c49f7bc90c1933982ca92ea99e9b6007a7ecc148df754042ed094ee52ca25c1cbe6f7fda5b9997a13ec83cff7fc18a8af84b6b692f4cf7c7de1e929c13c2df5f6f7c6a7335e4a144ff9922749ae1e7da969b3d8a2cde4bd1d14332e255b23ae932ee994fa50e3de810ae30d24f2493fb01e55f45517012c7b6ce0d9be24816747ecd04bd8142b1e60b6ea2331078bb917b3bac8ac22df763fe916528d8f72a1cdf06be43295d015b3c617bb8b0ebfca18e61278068a5c4e09e93eecfe16dbcd007c0a47e96fb441b3f33eba9cabba589003404481b0b86f5d704ecb61b8dbf92ebce4772700f352ab6dfcecaf4467602d51e2073869a4025f6c2fe04f5ce4884b9a3fedc704262ab8f995359484329b113b32b71bf49d14a6a5cde2ae7dd1004125000564068c07852bb9e9cfa3a240e999b28c34d6cc4c47f70cacd00a1b088e09d08c8f0d80059bbb25882c968fbff5de7381953df72290fcd497fabe155993796e35189d545832ef1a5f787e379c2d12b1269e2086856bd0e2d4016929d0d6e4c1158240d48ed032e3d3dd7ead1e07132fe7aaabfdf418918faaeaa9e140be828b715e932a5c93d43cf344f1b8c7901424051a44c63e241f7a0c4c9e5ad22c67c58966f2e6eb5cc1a11cd49503dc41db136758d9f17d90ff0a574d64d1e5e9d781e29c37de99f6603b2cac637c54cf9495917b934091e66bf44edc4d79953861b55b6c2cbfb8e596fc6e2236f0b3a1cab2aeb7f6a07d6794c7b9a0f527b3566b51c535874232e0b52b8a4df168fa2a08f0df34a48c774c55b890545aaf7dd3194f7d89adf195d0f5f837b798c485656c81986d9b5fa959e84b453ef897bbf9ed9b1453287789ed33e77e81b0ce9fc85f8dfc2c7c917338d7dd7d199e3ff383251056e037aa9a71ffa0ead01a11c9659dab541a51bd4260b95ca5000b64a415ddba5335e4c04dedbac8c958f9179aba625b2e3f43503770d6f2625e78905be679b92e55fe134739071caefe95ce1af0725c1aa0782f62483d9b5f4155fc4bc91216eb8b83f862247b223b5ed92de9a994902e156bae0e730cc2c8ac2f054a452b78d8274bb8f457fe178f4d9c17927b5ad9cbe5c87ac9a21483fa74fdf4013fac029c1e7c386460a64f54556b4dc7c6a6bfe375ede6afa33f808d4329ea97a70e8017d0280737d5394257e4cbbadccfb51077e73da04101f0e637849c21002f954a489c93c61892ef1defc96193a8e73c94b708e03d1e2fbb2695ec62b10fc4d864f202b87416aef2b19d10cbdf299d35b1453dbc73f2918eac70e4eb22afd3361a2a51aa5758fd9641893b9fbb6a82996f5f913d07614ac252b3876e52bb04289773cb93ab93268b266ad08614cd6ea7a0474eec738f182beb2e182866a4ffb197de6b7506ff953c0178ddfe74036ee909c19789780103b4260ce54019dc7c3515fec14fc831d2bff017ba64e6a55e7930832ced89dd13c1fa641da87e43fa40e440cedca3c78b4331589f78da35dc43136b661ff9d9636afd9cc92751379f48995c1b4487dd1fde5c2ce0bf7eba2c4caffbbb20b9ed93d9882ea56e50f33e75108ca496f685e80e6f087e855fd2cad244023f3d013dad6aa8bed4f114fa1448f1da3e5b132dd35b456497555ceb18b5a799968f3fc07c679315f7b039b242ecb33af33f5254e899b65419a970880c54de87c5b153a13148db7081c34bb5481dadb28818b6f4953230d46445fe1b1a9214c3e05d16d46af3f84009108997e28efe907ef986e58ec906bb4829e1dc32ab15b23028c777b8f1d11174329289d1294c3fa657c765bbcc7d7f060cead43ec763553211873908d5125e904ab0dd1f079796813024c2d43060f8f9ebc36eb6565b84c8ee3efc0526a282be9bc49357f33e9eef6e721e4485a65c65e710fadc3f76beb7c9530ae9d297084bf609c3e5a524d747641511dbbb58d5baccf0cc4e0840f6451f6098aa6bf8e3f662968f8edd7e527e77a161d3fccefe1a22b8db90c43c77b824fac65d53e8888e71ed03e9a8cd87c19db70509bebf77d1a29cf97753649a78a3805455ced14af04ab9902d56ad6b1b8bc9f6905f28a4d2157c32e1ecd4b692c536e6afbbd82d472555c2f37f84178c6463b5c72c91190bd84a26dd93c43c4cf2ec18743b39fba66ad9c5125cc5775c8771c50dfa8b1ca13f9d25134078ed6cbdb912280e7004ed68b7ef0cd63b2ee8ddb4adb43f4ff2d4a5182f74cf5ee672f4cf4ceecf5e79116080b3205e24c709cfedd42806af707122af237c51b4c618576f75d27a928bac8fc38d3fe22e37fe7ffb35bae9fa517d329b583d163841b4c14128d3c62f767e2900fb1d22590fd2e8e6fbdbebc4986cc0a872d29248e462684104dcd18988257b5a58243a1057bc3ff20aa4b980d947fd3c1950899488a88b7b5aee81dd64d62295cb7e87d009316f396852b4d74fc0501d84727168eca82cb97751491e0da5f70f907be3b70301b5e30a31e5106f8294007e789b191aa6bc24e02d5a3288d9459a8d0380dec76b9f47c4b22a8f53a516f2e629e0d49b28b038a30de96b0ceffce4e542c0f2f0f623b25e4468e2e44aeb73c28121aa2b7c0fb21f91bc8f49136e4d0aae735fdddff9ea4e05f57a96a3033cc36e360064efc13796d6092813a313ac804cc8916b2defcd1b324fe998888763f2549347505975b9040add388aac2e1fba6fc4acb981e984155944cf19623187c74168b711ee01e4ec228e6e73242164006601212842e486958a732dff7f466626879ae8d8111f4aebed4bc1dccf41b111be7550ebfccd9d571637678821d6fed3d3bf8e152891f7d3c45ba8cdb266df9c51f0c3d764598e9d64104728205ed2a064b85b7f280c8c405e1a7daed16fa7fa174622dab86dc13e9eecd2042b664f01d0681b476aebf3ad9383658f9e6eb7203cd74bf016f2a6d902369e4d226c3fd6d2177785b62d0a521a2c962a19a0ae67420539268fefc5893c32c59b215d951aae72bf9cc0bc125e794ff111017cc84f1023ad6cec518635815125d9434038cfc0b5a60e18e6f1e529b254d6f1306660d89fb2303e0e136d434ac01d3fb45d9479ceab1fbe413672e4b7cdd089f2f4a815763fb0d1dbe61cf2c1fedf95c344e0621ac7498fa25a59102cfeca7f32c39618a5d2d7581c44f5c5e79d3"}, 0x10b0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) close_range(0xffffffffffffffff, r2, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000000)=0x1) [ 1650.059269][T29093] xt_CT: You must specify a L4 protocol and not use inversions on it 22:55:44 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r3, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x20, 0x0, @fd=r6, 0xf3d, {0x0, r0}, 0x401, 0x8, 0x1}, 0x6) (async) io_uring_setup(0xc80, &(0x7f0000000080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$tun(r7, &(0x7f0000000100)={@val={0x0, 0x88e7}, @val={0x1, 0x3, 0x8001, 0x1, 0x401, 0xff}, @arp=@generic={0x30c, 0x88e7, 0x6, 0x5, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, "12f80df019", @random="0bf0e53f2f33", "70ccbf6fcb47d287e5c50ad5c99f"}}, 0x35) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) r10 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) (async) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x13, 0x20003580, r11) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, r11) preadv(r7, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:55:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x8c03, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xbd, 0x6, 0x4, 0x1, 0x3, 0x3, 0x0, 0xbc, 0x40, 0x2fe, 0x9, 0x8, 0x38, 0x2, 0xac6, 0x200, 0x6}, [{0x4, 0xb5, 0x7, 0x100000000, 0x8, 0x1, 0x80, 0x100000000}, {0x7, 0x26, 0x0, 0x7fffffff, 0x8, 0x7, 0xa7c6, 0x20}], "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"}, 0x10b0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) close_range(0xffffffffffffffff, r2, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000000)=0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x8c03, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xbd, 0x6, 0x4, 0x1, 0x3, 0x3, 0x0, 0xbc, 0x40, 0x2fe, 0x9, 0x8, 0x38, 0x2, 0xac6, 0x200, 0x6}, [{0x4, 0xb5, 0x7, 0x100000000, 0x8, 0x1, 0x80, 0x100000000}, {0x7, 0x26, 0x0, 0x7fffffff, 0x8, 0x7, 0xa7c6, 0x20}], "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"}, 0x10b0) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) close_range(0xffffffffffffffff, r2, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000000)=0x1) (async) [ 1650.183029][T19792] usb 2-1: new high-speed USB device number 116 using dummy_hcd 22:55:44 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x24242, 0x0, 0xf}, 0x18) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, r1}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x2c0, 0x10b) syz_io_uring_setup(0xe25, &(0x7f0000000440)={0x0, 0x2094, 0x1, 0x1, 0x39b, 0x0, r2}, &(0x7f00006d6000/0x1000)=nil, &(0x7f00006c4000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1650.432206][T19792] usb 2-1: Using ep0 maxpacket: 8 [ 1650.490396][T29100] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1650.733038][T19792] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=b9.ed [ 1650.742604][T19792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.750795][T19792] usb 2-1: Product: syz [ 1650.755566][T19792] usb 2-1: Manufacturer: syz [ 1650.760313][T19792] usb 2-1: SerialNumber: syz [ 1650.774966][T19792] usb 2-1: config 0 descriptor?? [ 1651.016334][T29084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.025797][T29084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.034163][T19792] r8152 2-1:0.0: Unknown version 0x0000 22:55:45 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x36, 0xa, 0x62, 0x8, 0x17ef, 0x721e, 0xb9ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000072190108710402035e35000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x1a, 0x2}, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000020c0)={0x2c, &(0x7f0000001f80)={0x0, 0xb, 0x39, {0x39, 0xd, "c58b8dbba984c3e3b8c1e678dcc837878b7d4e592c79e9f67c0710ea9b7304f50a36919e776fbbd20765771f98568f5746f3fe9d991019"}}, &(0x7f0000001fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc4c}}, &(0x7f0000002000)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x3, 0x8}]}}, &(0x7f0000002040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x4, 0x0, 0x20, "fb34b817", "baab8cff"}}, &(0x7f0000002080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x17, 0x60, 0xfa, 0x5, 0x1, 0x8, 0x1ff}}}, &(0x7f0000002580)={0x84, &(0x7f0000002100)={0x40, 0x15, 0xaa, "a96d16ebe1e373f619d80f52dddfea4264c5f9d4dd4c0d7e4de5a1a05852326f57def8df16e53d174e87cea7381f82d4d5f1de172b7d6af81c35cd435d640b3dae5a5856e5cb97c132075fbfcc13b1b114b4a8e33ed37da0e7fd8386a6e8ba11ee13c6113202995dd2c2fa57ceb75cfc3f4c27a05d88ff3da426645d39f78511f3091c3d422957b61a05bf047d69bf46ced2ad3b05cfe0243ef21b2afc76ae3f068f4cd3e33fdf5d768e"}, &(0x7f00000021c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002240)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000002280)={0x20, 0x0, 0x8, {0x140, 0x1, [0xff0]}}, &(0x7f00000022c0)={0x40, 0x7, 0x2}, &(0x7f0000002300)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000002340)={0x40, 0xb, 0x2, "83e2"}, &(0x7f0000002380)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000023c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000002400)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002440)={0x40, 0x19, 0x2, "c544"}, &(0x7f0000002480)={0x40, 0x1a, 0x2}, &(0x7f00000024c0)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000002500)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000002540)={0x40, 0x21, 0x1, 0x20}}) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000d00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0xa0, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0xae0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0xfb, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0x7, 0x4}}]}}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x200, 0x2, 0x3f, 0x3, 0x20, 0x4}, 0x1ef, &(0x7f0000000d80)={0x5, 0xf, 0x1ef, 0x6, [@generic={0xd8, 0x10, 0xb, "b65b4be41336ebdc9eb95ac594986d7ebd1182783e4576a9b53119dcde61d4de2d7041e89db511dc79beafa2ff18a6aefff5afa416bdd817a08817768b4a22fbb557651ca3744b62951d390e830641fd3637c612cefe2480e43b48796188eff0909226df361230ce9636eafff7bf7ac109183f6536920dc523242cada75023b161e0a7ea5e9712ab7e710eb6dc91a103f3c20744dadbb626470ec8e4dddd31d01bbc3a23f094fdad7b24a4a930530fe744fff7007e9bb6ad0765f25ed3918cfbe96e45b3705824204b1e28667b9f5c52fe8ab0ab54"}, @generic={0xdc, 0x10, 0xe, "ff2909635b4b07a7616a305e29ad78d2182eb383288509e700b747f9916d6761a7a8714441f0ea2925a480150482d0945903553f5b2485a92595e02d963ed2602a4e0bccbfca086179a8b61e27f1b7d2fac01f86de2c4e1965a6d6cf1888b93a07d85d2695e3a00819452e240abba1e013c214aabae21cf76dd5ee3e4d51f50c3b31ed77887dc117365bd090fefbca443a5514128b252302d3406514c4e676fb768ba58ca682688aeb0dfdd0a3c184693d3ca3d222434a0b83d01ee8657f9ed1992c692af601f3c0a5256c04bbe6328673caa1aa1d25594715"}, @ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x7bf1, 0xf0f, 0x8, [0xc000]}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc4, 0x2, 0x5, 0xfc01, 0x1}, @wireless={0xb, 0x10, 0x1, 0x0, 0x8, 0x9, 0x8, 0x6, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x10001, 0x0, 0xd55, [0xff00c0]}]}, 0x2, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0xfcff}}, {0xdf, &(0x7f0000000fc0)=@string={0xdf, 0x3, "ca9fb958b019852490b66b2ed0e176fe623dc6149d239e048ada660785f349aef049743de18c06436dfb5ed36e4b80a8972cb9979ef69830afbd6f3db2e2f066f08b4ad4c601ebe71313ba951a113463bd2d2f99df16362ff885fb27a00db28805683f7d588e89121c1e9c46b09f9851e90e314a6d212e145c944d0c12bd85fb6f41530f583fd477cebe5f1b20c3df6020d2f9591ef9e47ffba0192f81474797d6e21358f0dac5ac591dd1b24bdc30f994fb8dc024fb1cc69adb65198adeb823b2b8e326885e2626326341a732f7367cff8b738bdb77131fc9b63f81a9"}}]}) syz_usb_control_io(r2, &(0x7f0000001280)={0x2c, &(0x7f0000001100)={0x0, 0x23, 0x1d, {0x1d, 0x31, "4e58d561714b9642d7b2ab25db53f71570f0165da300d8ef5e1040"}}, &(0x7f0000001140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f0000001180)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x4, 0x11, 0x0, [0xf0, 0xff0030, 0xff00cf, 0xff0000, 0xff3f60, 0x3f00]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xfc, 0xfe, 0x80, 0x4, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x80, 0xa9, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x8, 0x5}]}}, &(0x7f0000001200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x3, 0x20, 0x7f, "1213fe79", "71f58b76"}}, &(0x7f0000001240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x0, 0x6, 0x5, 0x81, 0x5}}}, &(0x7f00000016c0)={0x84, &(0x7f00000012c0)={0x40, 0x1, 0x26, "0fedff9cca0a5121a26300a3d9102d3f7b1a64aaf87bd6cc16fe758a7cc09068726bcb9dd613"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001380)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000013c0)={0x20, 0x0, 0x8, {0x80, 0x4, [0xf00f]}}, &(0x7f0000001400)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000001440)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000001480)={0x40, 0xb, 0x2, '5<'}, &(0x7f00000014c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000001500)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001540)={0x40, 0x17, 0x6, @local}, &(0x7f0000001580)={0x40, 0x19, 0x2, "9786"}, &(0x7f00000015c0)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000001600)={0x40, 0x1c, 0x1, 0xf2}, &(0x7f0000001640)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000001680)={0x40, 0x21, 0x1, 0x1}}) r3 = syz_usb_connect(0x3, 0x2b0, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0x90, 0x72, 0xdf, 0x20, 0x1199, 0x9009, 0x635a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29e, 0x1, 0x2, 0x7f, 0x40, 0x2, [{{0x9, 0x4, 0xa5, 0x8, 0x6, 0xa3, 0x99, 0x35, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x81, 0xd6}, [@processing_unit={0xd, 0x24, 0x7, 0x6, 0x0, 0xc1, "4b241106f6b1"}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x9, "213ad535c9"}, @mixer_unit={0x7, 0x24, 0x4, 0xe3, 0x5, 'Bb'}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x5, 0x2, "ad0005"}, @selector_unit={0xb, 0x24, 0x5, 0x2, 0x8, "4b95937d3f3e"}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x9, "cd84"}]}], [{{0x9, 0x5, 0x0, 0x4, 0x400, 0x3, 0xc8, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x8}, @generic={0xff, 0x21, "6152711d1560d4897baad88408eacb030ff939f0cf28bcecfb40eb14f1cfc945b6b8d97916f5ed8d5a927e19b1583e920541e4badd0f0b567e5c411004a87682e2ee297bedd137f27219de851d3fd3035678ac6490b15c2a004a6fe2750ecfe08688635130b8a3c9cb90ddde3338184a990c91bd51391fe52e7571698d0e50965c00a2cbe848c7cc8f32abb32d8b7c19a0d80ffdf270dee2c44e1787e90cc2ba290990375a38e9d62cd7a0e32da0da58fd32890554af9273f7b93a4892dc90d264593339942f484a906df15686148820e22a4b6aa69bbd485b42c4115587b2652899fdeb2068c2fc34aebbc97dd2c84167ae0b355f0dc7a438c72241fd"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x2, 0x7, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4f}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x1f, 0x6c, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x6}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x2, 0xfa, 0xa0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x1, 0x2, 0x10, [@generic={0xca, 0x30, "e14faef06654e0f7ee181032c9e748d98ef49e2e6802e7c227c5d2a5f05c8891519020aa0519e6a91e8abe5f83b0247a8fa56e008d23c27feccb66d37d796c7fc8479a8bebd17c43dfb153f09815864a229772ab856f05a398f0cc7aa0e5a55c94496e45c0ba80ab4bb86a1dc9e093cb7226031dc21c246170a606ea418d404a481b364853f07d033a885d221ca633ec32d2989ff0ea7a9822e3c345ffcd5186795c52c3ba59dc98f7f41be6c65d388bb8dd3a81e2a24abb3f70fb86f38a31d4848b71bc90cabf8e"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xc9, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xaf, 0x1}, @generic={0x27, 0x22, "c525648a7abfd738de368f966a16b1cab451597085d27bd9a2312aa01d9d75f7c86e6da245"}]}}]}}]}}]}}, &(0x7f0000001bc0)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x200, 0x3f, 0x2, 0x2f, 0x40, 0x20}, 0x19, &(0x7f0000001a80)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "6dc63ebf95d8eb5b78c8068d7c7b7351"}]}, 0x4, [{0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x81d}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000001d80)={0x14, &(0x7f0000001c40)={0x0, 0x0, 0xc0, {0xc0, 0x5, "55371c721713f9daa676cba47c2b4776e12ee7ef35c1c6d4fa9fd20f80d46bbd0136cdb8614a1cd6fff37675297d681a6b51cb62cdc48393fe7423fd66fc930f556077a79e44dcaaf08cfa2912b261dcdcd5f8bb0e56ba30e2a702b05ca57ee8aae6f1d390912bc4cb3dd80a9bfafd4e1e02694e737d81226423f3b8c71cdfe7721195fcceef56f48661571c8d6e1ee09bec491d8f962fd17ef0f3fa2774928236943cc9e934027bdb626ba4cd86564f50a3e626aeee117853d035142aeb"}}, &(0x7f0000001d40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001f40)={0x1c, &(0x7f0000001dc0)={0x0, 0x12, 0xd7, "4eab34ae2877de1605aad27f8a47bf565e699af2d2059753c4ed002b98cb229d610bb01200aacbebfcf2df49d3931ec84c83113d24a497d38ff143b4a6d5bc3f85f44af96bf8cf0d3e92b4df80020b1512c1eb02f78c7aa059528ba667c511f8139d9687e263a774bf4b8baa17493c91ab72d159986f8b53c0efe12ac7eaa6f69605ec7d89ee835a6ae343a9fb7605567bd66cbab974ccecd7f51d17686e5fdfebdd882032662662cf1784b5f6a0c1637b588ac80dac85195b5643efa1fb6ee1b9fd28ed6efa011376887ecbe4cfcc6484613b788f1398"}, &(0x7f0000001ec0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001f00)={0x0, 0x8, 0x1, 0x5}}) (async, rerun: 64) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$hid(r1, &(0x7f0000000ac0)={0x24, &(0x7f00000009c0)={0x40, 0xb, 0x22, {0x22, 0x22, "684ada3eba63a71386052eb969d057893ccd1cff0274f26f246136aeeba09bfe"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f0000000a40)={0x0, 0x22, 0x28, {[@local=@item_012={0x0, 0x2, 0x7}, @main=@item_4={0x3, 0x0, 0xb, "54f91ade"}, @global=@item_4={0x3, 0x1, 0x2, "bbdf7349"}, @global=@item_4={0x3, 0x1, 0x0, "aeaaaf61"}, @local=@item_4={0x3, 0x2, 0xa, "157321d4"}, @global=@item_4={0x3, 0x1, 0x2, "baea1105"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x5, "fe86fe28"}, @global=@item_012={0x2, 0x1, 0x6, "7ceb"}, @local=@item_4={0x3, 0x2, 0x0, "d347c77e"}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xfb, 0x1, {0x22, 0x5f4}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b00)={0x40, 0xb, 0x5e, "8c52e8f2d1ebc400ffbceb775883c9ebaf2e24119a49e92f5e81138c7e6a8b03d3d8ecd0d13745afd03985daf10dd55446da13b4810d0191cad61bebd3f8f5a66591442619380d1e41086f48e6efcbcf4b9428bf154ea8d5cc864820522f"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000c00)={0x20, 0x1, 0x75, "5ab603d7b771daba4458344768bdccff7f01cea3d9e8c0eb88ada670356e8086da34c66a370b53bfd5751f1f7864fcdddcede16f080f0b3ab21475ddff5a578dcce8406d5549256ce237256ffa98bc4566bf5f557f7f1022899652443a0f98cb99741a4156c37caa0f92e88e4f40dbacb2dd408f27"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x40, 0x30, 0x71, {0x71, 0x11, "f7c7e67734f922fa0455a727f1475420b7d711b68c1e46b1f386a1c6be918be124cc2ed9fbc022a99b0ab0ba09ee641ab0d8473a0d3fa9da33da3171b701db8d1401315342b257a2f07c75b7be6917dd7a76a4e1d42c61f6099354e6dc710559265985236d4be11b087474d4051c09"}}, &(0x7f0000000080)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "fd9cca38fbf2b46b3b33f63068d5a49da9e536da8b474e7b022e0a7716e58e70ab1c629eb8f6c79d953fa7419c238e4abcb2203cf42da92eb5d8ad05530c8289074cf385ca3b669b31160752f65a92a587c5854e8443fc361d3e29b643ffb1e3c04f5262adc303d54b4bb854bb86c8cd373e638782a202b9591fa0d8ea980695bbb66f4f5a7e53660e6c95"}}, &(0x7f00000001c0)={0x0, 0xf, 0xd9, {0x5, 0xf, 0xd9, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "2dc1fddc78afc046429f2b1da9773ee4"}, @ss_container_id={0x14, 0x10, 0x4, 0xee, "33c9629d9ec5222e870003e7c125c303"}, @generic={0x9f, 0x10, 0x2, "712ef5d6a64da007a32dce94aea029e63b716daa90232fcb737c1233c67f146721bef067bdc77bf189bd4972968f5a39c3ec59bc893fa8cffd626b7c8f203e9ac34fca1d0a65b0962d17e7ebc36cce55a011c117951bb6b4d89d26b4f8bf1133d964265ef76d2e7bd2d31e4dd31bd8bfd528fd75da4750e3df60c0de532de27c20042f6de9eff3791af5f3a88496dd7cd1b1bd3ad9a9c04d8e2892fe"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x2, 0x1, 0xff}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xef, 0x4, 0xfe, 0x6, "799b2b38", "9e92ab09"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x33, 0x1, 0x3f, 0x1f, 0x6, 0x9, 0x6}}}, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0xc8, "48b4bc1dfccc478d610cdb1100214c1bbd20f44a406e6572779a63c4967616886da605af76dea83fcf7d070fd06f3cf9375619cb4fcd7e89b718a4901f0c07863fdb488928697bf6529fbed5d6f11ac6f5de85567c9fd619c76ff866303f16316e77d09cf141a1d49b4f02a833c927e02701b531da8123cf5f6abe2ec17cc952c802e7982af1fdd9e842f116e42dee9b380119afc7e126107d466933c5031e4552b44a5f9157252f62da35960ffdf6b569983733dec3a57d87dfbf0b8a8373c597f7d3c9ae1fae65"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xf5}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000600)={0x40, 0xb, 0x2, "5ece"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000680)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "afc2"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x2f}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x1}}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x0, 0x0, 0x4, "c490375e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:55:45 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) r10 = accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_io_uring_submit(r9, r1, &(0x7f0000000880)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd, 0x100, {0x0, r10}, 0x7f, 0x8, 0x0, {0x0, r8, r11}}, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1651.085958][T19792] r8153_ecm 2-1:0.0: Unknown version 0x0000 [ 1651.093597][T19792] usb 2-1: bad CDC descriptors 22:55:45 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) sendfile(r0, r1, 0x0, 0x20000023896) 22:55:45 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x8c03, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xbd, 0x6, 0x4, 0x1, 0x3, 0x3, 0x0, 0xbc, 0x40, 0x2fe, 0x9, 0x8, 0x38, 0x2, 0xac6, 0x200, 0x6}, [{0x4, 0xb5, 0x7, 0x100000000, 0x8, 0x1, 0x80, 0x100000000}, {0x7, 0x26, 0x0, 0x7fffffff, 0x8, 0x7, 0xa7c6, 0x20}], "592d05497b1f968d237e8b70c63e7ec1b9e0adc15f671c6fc50ae2f2bd5acc3a0d53ad3ac037d1b16a2da08a2ba3465c47d7c623048823f73ce9a04e9a64eef6669788ab421f8e2d15067e4dc2adac2d8e454f43e44a493ce9ccee1b8bb13402b650d10d96f4ce5a2515c9de72dab54ba970fb798ef38f980f0f92b4dd57a70b85e8318c55ebbd05814172b8e3dbc535f1860565553a79e07b9489023155496b26ed268fd551a5e477b52d8c30e6d9dc723713021f364cdb03c6c0641cfa9c14c50d20cb9bfe5a6c5ed4f746b86ac6134252efa1dec1cb29ffa23a5943f5ad337f12f73f4f2f5e0f72cd26a521b83766b3a89a84f9bc31e0a434385c0238b2b59b424e476dfb7368fe97166e11ceede6e8aca0c270148ee22bd045e16a2e47d2229f92cfb9c05ed3367c0ba2e6a824909d13c6f9f107d623bfe3e2dc6d54b5d7d6b23e644d6a3049d5cf5f560925b3c85a48e0d2f4d4539bf7410f155711c9b83e9d697b6e9d21f6f3cc87cd660c71f9f135882787d929c9b3b77090d8434cad30dcd4ea8d22d889b4381849714f9fdbce600acb8ce8cdd5cec4d2e8e47ca147ce562f3a3d77dbb6859e0efda5d07fcce53cc881aa022875d46a43cae97f3fab85ffc4155bf4135b3e7fcbe7b9350dbec913f4e564d7c75963eb0159a93642dbcd79d609fe91ebc738313057d675bbfbb6bb1633a68fb201d8d6e64bcf76b3c9b0cc04318bc83630925c326fcc719fc4053176306e95689d7ac4a60bd96e830f2b842299d795add53252415c48e8fb893f5bbb0c6aab660d645e178f771aae58e6329a7b209023e87b289d052f5ee5801e81b80fff4e6a94768e9a24e78ec30df560925bf28a61771a83b2d553d5d28299ec5fc8e38a0ce601d6be452832477e4d9e6f485f588a93f753429c331fa09484f600d972b11915725587b3ae5f450572570c4dea1b16e2db4d11959590aa308d1d9a138486b3c58374ba9aaedad3361db7495e76795c4d8a9d48b5a49fcae91c80785309ea8c226bd133a93f614193a6fa9f49d021dd489bd5a3e5356e6c3362d2df2c447772675bc13462ac20e1e1e8dc4bec844c7329b705631731a9522500c4ce2467d8a439f653c14e6a688665d125fc122fc902c772720b5e769f81c5611a25005aa2bead776dab8552f51c7a9b379b0a3cc9bbd8da8b043947af80610181b693385270c71db4849f3de21380c26cc9260b72b6692c8cfcabf3d574acb996230270806d8d485f641d049aa7f4222bbb1889415e43620d78a5ed4cc3e4911498614f357b4976d930b0f0e8f67647c35b4d44a3faeee4d2ab90d86128a04e522900223eb60d24ea6268a65f49e8cef69808b0a57da7920a4220a620d3c46ba5dfd0379f421005fb2e21f9f14cfbc6f06b0675e274415b841ba5f8df3c0ff4b1c62b329df6ab0c6dbe8861d6b63a8a910d1ca3202ef8056abeda332cecc71db05ef6efacc14894fad04c977055d824c4da29197a33e3b9c13b7b8477264f78c60a61e9f62365b374ccb495b97b4f3f38242492466af6dea8c482fa0df1d236b26a419aeeca93afc1d6d3affa78302e06b2425c6e8203244f235111dda619b2399d38bc7410312ed298d51a76e4a030dc2ffa971d569fe089bcac05ff23e750dd3825c4ef4ec3a2799cf0bf9ba5aa162b8fb8f2721ef77113de5f0ed66915f800d35a9bae38707c7ff6931e9c6e1d01e0ae1b8b84b5d091d7c0b53e78e2e2d42dbf7c93bd8c7e7d504f6a53ed9e2163dbee3e28c1323a64489861419986d1f1c6cadeb78ef8e797e237c9043ee4af6700ffb1464880d2f91e0253180b06435724a492a357e6b16cc0046db406620a7e670fd46f4cfa4ce6ddaf75ec615971589d18e314a69d9fb4ed6a7bdcc50acd491810db82c63ebf3b5659012301eddd221f64699c05adc6b7130b70a2dcefdaae819eef8e0e18819912d8077d012078f4fc2a191a01a87857e59e8eb99742783eaf4bcc02be3b83a33a310f759b3c45ba55dc8a9d56cacd0c8c0e0ea2217abf1eebe874ee7fc8284ea6b2e39f40fda72bcdbfc80a633a3babf6b31c4122572b81c126decd521864fd792aea69934928b424e21e9cf812fd30f5f4c450e66d040e904648bdf100ee8bf6f63db716d13035fb3d3e74a40aa91394f8884a3810ce944d140e81b27ddcb94372102a2cde3201900122effd56a4bc5c86a9b361f4d43af02c553820fe78bcafe0aa8d88cbceb05d374674b25c004714fea967385c1f62c4a48dc688e7f824d092635a19d5fe7f1044427879724b2cf9debbd7da3b776e303b0889cafdb33076ed3e9d8fa30d8b0c778e9c4f56ac7c695f6f78d2d9453dce2643944ee4623a92602205e0e6ba3f491035c22524eef76fefc6c8f0eb7c7edf7a6ed0074ca976d10e091b94f3b171882d8263b91377ea257a61de18712caddd0f1b378d665e8bcf47c4f9e83c09641efae252dd834637964e45614d337904e31f7a3cf297f287eda2fac474cdbde147b60a380bb5a26828e6b5d95dc1e85cc5b42fb1929b7cbdf2f4075eb34d08ce67a8b0bcb922fa5bb0d791ad994adf12b0ac8ca7a5cee77b7d11c5219544c902fa6cbf12c49f7bc90c1933982ca92ea99e9b6007a7ecc148df754042ed094ee52ca25c1cbe6f7fda5b9997a13ec83cff7fc18a8af84b6b692f4cf7c7de1e929c13c2df5f6f7c6a7335e4a144ff9922749ae1e7da969b3d8a2cde4bd1d14332e255b23ae932ee994fa50e3de810ae30d24f2493fb01e55f45517012c7b6ce0d9be24816747ecd04bd8142b1e60b6ea2331078bb917b3bac8ac22df763fe916528d8f72a1cdf06be43295d015b3c617bb8b0ebfca18e61278068a5c4e09e93eecfe16dbcd007c0a47e96fb441b3f33eba9cabba589003404481b0b86f5d704ecb61b8dbf92ebce4772700f352ab6dfcecaf4467602d51e2073869a4025f6c2fe04f5ce4884b9a3fedc704262ab8f995359484329b113b32b71bf49d14a6a5cde2ae7dd1004125000564068c07852bb9e9cfa3a240e999b28c34d6cc4c47f70cacd00a1b088e09d08c8f0d80059bbb25882c968fbff5de7381953df72290fcd497fabe155993796e35189d545832ef1a5f787e379c2d12b1269e2086856bd0e2d4016929d0d6e4c1158240d48ed032e3d3dd7ead1e07132fe7aaabfdf418918faaeaa9e140be828b715e932a5c93d43cf344f1b8c7901424051a44c63e241f7a0c4c9e5ad22c67c58966f2e6eb5cc1a11cd49503dc41db136758d9f17d90ff0a574d64d1e5e9d781e29c37de99f6603b2cac637c54cf9495917b934091e66bf44edc4d79953861b55b6c2cbfb8e596fc6e2236f0b3a1cab2aeb7f6a07d6794c7b9a0f527b3566b51c535874232e0b52b8a4df168fa2a08f0df34a48c774c55b890545aaf7dd3194f7d89adf195d0f5f837b798c485656c81986d9b5fa959e84b453ef897bbf9ed9b1453287789ed33e77e81b0ce9fc85f8dfc2c7c917338d7dd7d199e3ff383251056e037aa9a71ffa0ead01a11c9659dab541a51bd4260b95ca5000b64a415ddba5335e4c04dedbac8c958f9179aba625b2e3f43503770d6f2625e78905be679b92e55fe134739071caefe95ce1af0725c1aa0782f62483d9b5f4155fc4bc91216eb8b83f862247b223b5ed92de9a994902e156bae0e730cc2c8ac2f054a452b78d8274bb8f457fe178f4d9c17927b5ad9cbe5c87ac9a21483fa74fdf4013fac029c1e7c386460a64f54556b4dc7c6a6bfe375ede6afa33f808d4329ea97a70e8017d0280737d5394257e4cbbadccfb51077e73da04101f0e637849c21002f954a489c93c61892ef1defc96193a8e73c94b708e03d1e2fbb2695ec62b10fc4d864f202b87416aef2b19d10cbdf299d35b1453dbc73f2918eac70e4eb22afd3361a2a51aa5758fd9641893b9fbb6a82996f5f913d07614ac252b3876e52bb04289773cb93ab93268b266ad08614cd6ea7a0474eec738f182beb2e182866a4ffb197de6b7506ff953c0178ddfe74036ee909c19789780103b4260ce54019dc7c3515fec14fc831d2bff017ba64e6a55e7930832ced89dd13c1fa641da87e43fa40e440cedca3c78b4331589f78da35dc43136b661ff9d9636afd9cc92751379f48995c1b4487dd1fde5c2ce0bf7eba2c4caffbbb20b9ed93d9882ea56e50f33e75108ca496f685e80e6f087e855fd2cad244023f3d013dad6aa8bed4f114fa1448f1da3e5b132dd35b456497555ceb18b5a799968f3fc07c679315f7b039b242ecb33af33f5254e899b65419a970880c54de87c5b153a13148db7081c34bb5481dadb28818b6f4953230d46445fe1b1a9214c3e05d16d46af3f84009108997e28efe907ef986e58ec906bb4829e1dc32ab15b23028c777b8f1d11174329289d1294c3fa657c765bbcc7d7f060cead43ec763553211873908d5125e904ab0dd1f079796813024c2d43060f8f9ebc36eb6565b84c8ee3efc0526a282be9bc49357f33e9eef6e721e4485a65c65e710fadc3f76beb7c9530ae9d297084bf609c3e5a524d747641511dbbb58d5baccf0cc4e0840f6451f6098aa6bf8e3f662968f8edd7e527e77a161d3fccefe1a22b8db90c43c77b824fac65d53e8888e71ed03e9a8cd87c19db70509bebf77d1a29cf97753649a78a3805455ced14af04ab9902d56ad6b1b8bc9f6905f28a4d2157c32e1ecd4b692c536e6afbbd82d472555c2f37f84178c6463b5c72c91190bd84a26dd93c43c4cf2ec18743b39fba66ad9c5125cc5775c8771c50dfa8b1ca13f9d25134078ed6cbdb912280e7004ed68b7ef0cd63b2ee8ddb4adb43f4ff2d4a5182f74cf5ee672f4cf4ceecf5e79116080b3205e24c709cfedd42806af707122af237c51b4c618576f75d27a928bac8fc38d3fe22e37fe7ffb35bae9fa517d329b583d163841b4c14128d3c62f767e2900fb1d22590fd2e8e6fbdbebc4986cc0a872d29248e462684104dcd18988257b5a58243a1057bc3ff20aa4b980d947fd3c1950899488a88b7b5aee81dd64d62295cb7e87d009316f396852b4d74fc0501d84727168eca82cb97751491e0da5f70f907be3b70301b5e30a31e5106f8294007e789b191aa6bc24e02d5a3288d9459a8d0380dec76b9f47c4b22a8f53a516f2e629e0d49b28b038a30de96b0ceffce4e542c0f2f0f623b25e4468e2e44aeb73c28121aa2b7c0fb21f91bc8f49136e4d0aae735fdddff9ea4e05f57a96a3033cc36e360064efc13796d6092813a313ac804cc8916b2defcd1b324fe998888763f2549347505975b9040add388aac2e1fba6fc4acb981e984155944cf19623187c74168b711ee01e4ec228e6e73242164006601212842e486958a732dff7f466626879ae8d8111f4aebed4bc1dccf41b111be7550ebfccd9d571637678821d6fed3d3bf8e152891f7d3c45ba8cdb266df9c51f0c3d764598e9d64104728205ed2a064b85b7f280c8c405e1a7daed16fa7fa174622dab86dc13e9eecd2042b664f01d0681b476aebf3ad9383658f9e6eb7203cd74bf016f2a6d902369e4d226c3fd6d2177785b62d0a521a2c962a19a0ae67420539268fefc5893c32c59b215d951aae72bf9cc0bc125e794ff111017cc84f1023ad6cec518635815125d9434038cfc0b5a60e18e6f1e529b254d6f1306660d89fb2303e0e136d434ac01d3fb45d9479ceab1fbe413672e4b7cdd089f2f4a815763fb0d1dbe61cf2c1fedf95c344e0621ac7498fa25a59102cfeca7f32c39618a5d2d7581c44f5c5e79d3"}, 0x10b0) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) close_range(0xffffffffffffffff, r2, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000000)=0x1) 22:55:45 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x24242, 0x0, 0xf}, 0x18) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, r1}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x2c0, 0x10b) syz_io_uring_setup(0xe25, &(0x7f0000000440)={0x0, 0x2094, 0x1, 0x1, 0x39b, 0x0, r2}, &(0x7f00006d6000/0x1000)=nil, &(0x7f00006c4000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x24242, 0x0, 0xf}, 0x18) (async) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, r1}) (async) open(&(0x7f0000000180)='./file0\x00', 0x2c0, 0x10b) (async) syz_io_uring_setup(0xe25, &(0x7f0000000440)={0x0, 0x2094, 0x1, 0x1, 0x39b, 0x0, r2}, &(0x7f00006d6000/0x1000)=nil, &(0x7f00006c4000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:55:45 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf7, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x14) [ 1651.192780][T19792] usb 2-1: USB disconnect, device number 116 22:55:45 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20000023896) 22:55:45 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x4b0002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000000)={0x1, 0x8, 0xfff, 0x4, 0xff, "0227f4d752b04840e6735ce7b6bfe3b01de57e", 0x2, 0x1}) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f00000000c0)) 22:55:45 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x24242, 0x0, 0xf}, 0x18) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, r1}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x2c0, 0x10b) syz_io_uring_setup(0xe25, &(0x7f0000000440)={0x0, 0x2094, 0x1, 0x1, 0x39b, 0x0, r2}, &(0x7f00006d6000/0x1000)=nil, &(0x7f00006c4000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x24242, 0x0, 0xf}, 0x18) (async) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, r1}) (async) open(&(0x7f0000000180)='./file0\x00', 0x2c0, 0x10b) (async) syz_io_uring_setup(0xe25, &(0x7f0000000440)={0x0, 0x2094, 0x1, 0x1, 0x39b, 0x0, r2}, &(0x7f00006d6000/0x1000)=nil, &(0x7f00006c4000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:55:45 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf7, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x14) [ 1651.672455][T19792] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1651.673276][T29138] xt_CT: You must specify a L4 protocol and not use inversions on it 22:55:45 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1651.822517][T29143] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1651.922304][T19792] usb 2-1: Using ep0 maxpacket: 8 22:55:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x4b0002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000000)={0x1, 0x8, 0xfff, 0x4, 0xff, "0227f4d752b04840e6735ce7b6bfe3b01de57e", 0x2, 0x1}) (async) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f00000000c0)) [ 1652.203151][T19792] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=b9.ed [ 1652.212783][T19792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.221127][T19792] usb 2-1: Product: syz [ 1652.225881][T19792] usb 2-1: Manufacturer: syz [ 1652.230814][T19792] usb 2-1: SerialNumber: syz [ 1652.280026][T29159] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1652.320205][T19792] usb 2-1: config 0 descriptor?? [ 1652.565761][T29130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1652.575555][T29130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1652.590300][T19792] r8152 2-1:0.0: Unknown version 0x0000 22:55:46 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000360a6208eff91d72edb901020301090212000100000000090400000002060000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x0, 0x0, 0x4, "c490375e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:55:46 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf7, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x14) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) connect$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf7, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x14) (async) 22:55:46 executing program 5: r0 = syz_io_uring_setup(0x7c1, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'bond0\x00', 0x1a00}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000004c0)={0x5, &(0x7f0000000480)=[{0x8, 0x80, 0x1, 0x3}, {0x6, 0x9, 0x9, 0xcc3f}, {0x100, 0x0, 0x3, 0x100}, {0x400, 0x6, 0x5, 0x6}, {0xffff, 0x5, 0x80, 0x8000}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000500)=0x1) preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000340)=""/204, 0xcc}], 0x1, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x12002, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000140)="756d4bb2ac94ff7f7f2c8f6d9b7daf03dbd5359df30940d6375684e86ca64548e071ebf6c0add4ed97b22852512c5e3dbba11eb69a214cf33defe4e863ed213e87cb74", 0x43) 22:55:46 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20000023896) 22:55:46 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:55:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x4b0002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000000)={0x1, 0x8, 0xfff, 0x4, 0xff, "0227f4d752b04840e6735ce7b6bfe3b01de57e", 0x2, 0x1}) (async) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f00000000c0)) [ 1652.652966][T19792] r8153_ecm 2-1:0.0: Unknown version 0x0000 [ 1652.659328][T19792] usb 2-1: bad CDC descriptors [ 1652.773646][T29169] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1652.814291][T19792] usb 2-1: USB disconnect, device number 117 [ 1652.822877][T29173] xt_CT: You must specify a L4 protocol and not use inversions on it 22:55:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x1cd781, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:55:47 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:55:47 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) r3 = dup2(r0, r2) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r3}, 0x8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'vcan0\x00', 0x200}) [ 1653.217705][T19792] usb 2-1: new high-speed USB device number 118 using dummy_hcd 22:55:47 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x1cd781, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:55:47 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r1) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r3, 0x0, 0x20000023896) (async) [ 1653.472784][T19792] usb 2-1: Using ep0 maxpacket: 8 [ 1653.588243][T29202] xt_CT: You must specify a L4 protocol and not use inversions on it 22:55:47 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x1cd781, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) [ 1653.764455][T19792] usb 2-1: New USB device found, idVendor=f9ef, idProduct=721d, bcdDevice=b9.ed [ 1653.774237][T19792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.782734][T19792] usb 2-1: Product: syz [ 1653.787224][T19792] usb 2-1: Manufacturer: syz [ 1653.792276][T19792] usb 2-1: SerialNumber: syz [ 1653.874866][T19792] usb 2-1: config 0 descriptor?? [ 1653.953481][T19792] usb 2-1: bad CDC descriptors 22:55:49 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000360a6208eff91d72edb901020301090212000100000000090400000002060000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x0, 0x0, 0x4, "c490375e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:55:49 executing program 5: r0 = syz_io_uring_setup(0x7c1, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'bond0\x00', 0x1a00}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000004c0)={0x5, &(0x7f0000000480)=[{0x8, 0x80, 0x1, 0x3}, {0x6, 0x9, 0x9, 0xcc3f}, {0x100, 0x0, 0x3, 0x100}, {0x400, 0x6, 0x5, 0x6}, {0xffff, 0x5, 0x80, 0x8000}]}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000500)=0x1) preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000340)=""/204, 0xcc}], 0x1, 0x4, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x12002, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000140)="756d4bb2ac94ff7f7f2c8f6d9b7daf03dbd5359df30940d6375684e86ca64548e071ebf6c0add4ed97b22852512c5e3dbba11eb69a214cf33defe4e863ed213e87cb74", 0x43) 22:55:49 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:55:49 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x220002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) sendfile(r0, r1, 0x0, 0x20000023896) 22:55:49 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:55:49 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) r3 = dup2(r0, r2) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r3}, 0x8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'vcan0\x00', 0x200}) [ 1655.746083][ T5084] usb 2-1: USB disconnect, device number 118 22:55:50 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) (rerun: 32) sendfile(r0, r1, 0x0, 0x20000023896) 22:55:50 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x220002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x220002, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:55:50 executing program 5: r0 = syz_io_uring_setup(0x7c1, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async, rerun: 64) io_uring_setup(0xc80, &(0x7f0000000080)) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'bond0\x00', 0x1a00}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000004c0)={0x5, &(0x7f0000000480)=[{0x8, 0x80, 0x1, 0x3}, {0x6, 0x9, 0x9, 0xcc3f}, {0x100, 0x0, 0x3, 0x100}, {0x400, 0x6, 0x5, 0x6}, {0xffff, 0x5, 0x80, 0x8000}]}) (async, rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async, rerun: 32) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000500)=0x1) preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000340)=""/204, 0xcc}], 0x1, 0x4, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) (async, rerun: 64) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x12002, 0x0) (rerun: 64) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000140)="756d4bb2ac94ff7f7f2c8f6d9b7daf03dbd5359df30940d6375684e86ca64548e071ebf6c0add4ed97b22852512c5e3dbba11eb69a214cf33defe4e863ed213e87cb74", 0x43) 22:55:50 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) r3 = dup2(r0, r2) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r3}, 0x8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'vcan0\x00', 0x200}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) dup2(r0, r2) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r3}, 0x8) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'vcan0\x00', 0x200}) (async) [ 1656.322521][ T5084] usb 2-1: new high-speed USB device number 119 using dummy_hcd 22:55:50 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:55:50 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="010101040900c207a2000008276c53182c62e55cb56183d2e27bce3a00e735850ad76f10bc1efb89dba4afd256277ac3692e47815703455ab1c904c5c41fcbf93550ab89c34a9ab92f863963b8e47d2b1949773658eddded1d5f27731ab880987b5cd05a7ca237e9557207e82b9dd3bc63aa4e7c14de952014de313bace3445d093d78cc4db7f35ac3c9bbc1cc92ab5c8cf282c36c57e12e64708091faa34f2d5bf8ab3127809a5e0d0a3169b8e6b2e9f9b0007c2cfd552caf227360c8f47a5c3ef1226e438fc71193"], 0xcd) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1656.571929][ T5084] usb 2-1: Using ep0 maxpacket: 8 [ 1656.880438][ T5084] usb 2-1: New USB device found, idVendor=f9ef, idProduct=721d, bcdDevice=b9.ed [ 1656.889838][ T5084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.898134][ T5084] usb 2-1: Product: syz [ 1656.902532][ T5084] usb 2-1: Manufacturer: syz [ 1656.907309][ T5084] usb 2-1: SerialNumber: syz [ 1656.922887][ T5084] usb 2-1: config 0 descriptor?? [ 1656.965193][ T5084] usb 2-1: bad CDC descriptors 22:55:52 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000360a6208eff91d72edb901020301090212000100000000090400000002060000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x0, 0x0, 0x4, "c490375e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:55:52 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x220002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) sendfile(r0, r1, 0x0, 0x20000023896) 22:55:52 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r2 = mmap$IORING_OFF_SQES(&(0x7f00006c3000/0x2000)=nil, 0x2000, 0x1, 0x30, r0, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x15, 0x0, 0x0, 0x0, &(0x7f00006c2000/0x3000)=nil, 0x3000, 0x15, 0x0, {0x0, r3}}, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) syz_io_uring_setup(0x725a, &(0x7f0000000100)={0x0, 0x717f, 0x100, 0x1, 0x2e3, 0x0, r6}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) close_range(r0, 0xffffffffffffffff, 0x0) 22:55:52 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000007, 0x12, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x10000, 0x69, 0x5}, &(0x7f0000000100)='./file0\x00', 0x18}, 0x7) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20000023896) 22:55:52 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:55:52 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="010101040900c207a2000008276c53182c62e55cb56183d2e27bce3a00e735850ad76f10bc1efb89dba4afd256277ac3692e47815703455ab1c904c5c41fcbf93550ab89c34a9ab92f863963b8e47d2b1949773658eddded1d5f27731ab880987b5cd05a7ca237e9557207e82b9dd3bc63aa4e7c14de952014de313bace3445d093d78cc4db7f35ac3c9bbc1cc92ab5c8cf282c36c57e12e64708091faa34f2d5bf8ab3127809a5e0d0a3169b8e6b2e9f9b0007c2cfd552caf227360c8f47a5c3ef1226e438fc71193"], 0xcd) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="010101040900c207a2000008276c53182c62e55cb56183d2e27bce3a00e735850ad76f10bc1efb89dba4afd256277ac3692e47815703455ab1c904c5c41fcbf93550ab89c34a9ab92f863963b8e47d2b1949773658eddded1d5f27731ab880987b5cd05a7ca237e9557207e82b9dd3bc63aa4e7c14de952014de313bace3445d093d78cc4db7f35ac3c9bbc1cc92ab5c8cf282c36c57e12e64708091faa34f2d5bf8ab3127809a5e0d0a3169b8e6b2e9f9b0007c2cfd552caf227360c8f47a5c3ef1226e438fc71193"], 0xcd) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) [ 1658.923637][T19792] usb 2-1: USB disconnect, device number 119 [ 1659.146792][T29274] xt_CT: You must specify a L4 protocol and not use inversions on it 22:55:53 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x5) dup2(r0, r1) 22:55:53 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="010101040900c207a2000008276c53182c62e55cb56183d2e27bce3a00e735850ad76f10bc1efb89dba4afd256277ac3692e47815703455ab1c904c5c41fcbf93550ab89c34a9ab92f863963b8e47d2b1949773658eddded1d5f27731ab880987b5cd05a7ca237e9557207e82b9dd3bc63aa4e7c14de952014de313bace3445d093d78cc4db7f35ac3c9bbc1cc92ab5c8cf282c36c57e12e64708091faa34f2d5bf8ab3127809a5e0d0a3169b8e6b2e9f9b0007c2cfd552caf227360c8f47a5c3ef1226e438fc71193"], 0xcd) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:55:53 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r2 = mmap$IORING_OFF_SQES(&(0x7f00006c3000/0x2000)=nil, 0x2000, 0x1, 0x30, r0, 0x10000000) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x15, 0x0, 0x0, 0x0, &(0x7f00006c2000/0x3000)=nil, 0x3000, 0x15, 0x0, {0x0, r3}}, 0x6) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) syz_io_uring_setup(0x725a, &(0x7f0000000100)={0x0, 0x717f, 0x100, 0x1, 0x2e3, 0x0, r6}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 1659.492223][T19792] usb 2-1: new high-speed USB device number 120 using dummy_hcd 22:55:53 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) accept4$unix(r5, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:55:53 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000007, 0x12, 0xffffffffffffffff, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x10000, 0x69, 0x5}, &(0x7f0000000100)='./file0\x00', 0x18}, 0x7) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20000023896) 22:55:53 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x5) (async) dup2(r0, r1) [ 1659.732176][T19792] usb 2-1: Using ep0 maxpacket: 8 [ 1659.770013][T29292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1660.035437][T19792] usb 2-1: New USB device found, idVendor=f9ef, idProduct=721d, bcdDevice=b9.ed [ 1660.045040][T19792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.053387][T19792] usb 2-1: Product: syz [ 1660.057740][T19792] usb 2-1: Manufacturer: syz [ 1660.062809][T19792] usb 2-1: SerialNumber: syz [ 1660.095417][T19792] usb 2-1: config 0 descriptor?? [ 1660.155160][T19792] usb 2-1: bad CDC descriptors 22:55:56 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x5) (async) dup2(r0, r1) 22:55:56 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100), 0x1) r3 = syz_io_uring_setup(0xd8a, &(0x7f0000000140)={0x0, 0xdaf9, 0x20, 0x2, 0x2bf, 0x0, r1}, &(0x7f00006c4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) io_uring_enter(r3, 0x5ad1, 0xc249, 0x2, &(0x7f0000000440)={[0x9]}, 0x8) 22:55:56 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000007, 0x12, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x10000, 0x69, 0x5}, &(0x7f0000000100)='./file0\x00', 0x18}, 0x7) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000007, 0x12, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x10000, 0x69, 0x5}, &(0x7f0000000100)='./file0\x00', 0x18}, 0x7) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r3, 0x0, 0x20000023896) (async) 22:55:56 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:55:56 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000440), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r2 = mmap$IORING_OFF_SQES(&(0x7f00006c3000/0x2000)=nil, 0x2000, 0x1, 0x30, r0, 0x10000000) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x15, 0x0, 0x0, 0x0, &(0x7f00006c2000/0x3000)=nil, 0x3000, 0x15, 0x0, {0x0, r3}}, 0x6) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) syz_io_uring_setup(0x725a, &(0x7f0000000100)={0x0, 0x717f, 0x100, 0x1, 0x2e3, 0x0, r6}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) close_range(r0, 0xffffffffffffffff, 0x0) [ 1662.065324][T19792] usb 2-1: USB disconnect, device number 120 22:55:56 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="da14d0c3c8badf80d219250169b0010203010902120401ff0f000009040600009ea3aa00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x0, 0x0, 0x4, "c490375e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000072190108710402035e35000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x1a, 0x2}, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x0, 0x2, 0x95, {0x95, 0x30, "8fe40ad604ae981c8bacd6f5ad230de724d53a6700e5ab24715600ae6b5b0b29cfde09c55bf51980e50a543bbc516945bc414e524914813043098ffae9dfe072abcff20c52df3f26e71180cd2da287177d1eb0d915ec082b62de8013ba9e488db4c6329b048a01be341cd2f091777c40b4b7d86f44769f08029a5b52c2654e20355f05ccbf4716e434c41ec89d614523ea1ef1"}}, &(0x7f0000000100)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, &(0x7f0000000240)={0x0, 0xf, 0x35, {0x5, 0xf, 0x35, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x9, 0x6, 0x0, 0x1}, @generic={0x1b, 0x10, 0x4, "9c259410e048e8784fffbdcce6d2844ed4ee697e576f2367"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x62, 0x0, 0x7f}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x6, 0x52, 0x0, "53a56740", "d55567aa"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x4, 0xff, 0x3, 0x25, 0x0, 0x1}}}, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x0, 0x11, 0x8d, "a8c8311d96a5ec191772d66f664d13f019cbf09dd9eea1cc041a263a2aede4a6f8217417e086775657ce9fa4adc9b171bc2e9047185586c7a2f59a3460783c63468b4ceb13b1f607c911296c50a28473c752dc6c42d297403a167f6f571aa4c98cc908229dba7b814e0f8822bb3285a1621f6af98e8dccb1a85a5d2a40247f0eddef50dc6d7f25be8781519918"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xee}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x80, 0x2, [0xf0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x8e}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "b6f2"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "9a00"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x40}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xff}}) 22:55:56 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0xa, 0x1, 0x7fff, 0x3, 0xc, "04ea4d49920eee3e"}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x99c) 22:55:56 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100), 0x1) r3 = syz_io_uring_setup(0xd8a, &(0x7f0000000140)={0x0, 0xdaf9, 0x20, 0x2, 0x2bf, 0x0, r1}, &(0x7f00006c4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) io_uring_enter(r3, 0x5ad1, 0xc249, 0x2, &(0x7f0000000440)={[0x9]}, 0x8) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100), 0x1) (async) syz_io_uring_setup(0xd8a, &(0x7f0000000140)={0x0, 0xdaf9, 0x20, 0x2, 0x2bf, 0x0, r1}, &(0x7f00006c4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) (async) io_uring_enter(r3, 0x5ad1, 0xc249, 0x2, &(0x7f0000000440)={[0x9]}, 0x8) (async) 22:55:56 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000140), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$netlink(r3, &(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x4800000}, 0xc) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)) statx(r4, &(0x7f0000000740)='./file0\x00', 0x0, 0x25, &(0x7f0000000780)) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000005d80)={@private0, @private0}) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000005d80)={@private0, @private0}) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) getgid() close_range(r1, r2, 0x2) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/132, 0x84}, {&(0x7f0000000600)=""/89, 0x59}], 0x2, 0x7, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r6, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:55:56 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) (rerun: 64) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0xa, 0x1, 0x7fff, 0x3, 0xc, "04ea4d49920eee3e"}) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x99c) 22:55:56 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:55:56 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) [ 1662.702223][T19792] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1662.902308][T19792] usb 2-1: device descriptor read/64, error 18 22:55:57 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0xa, 0x1, 0x7fff, 0x3, 0xc, "04ea4d49920eee3e"}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x99c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0xa, 0x1, 0x7fff, 0x3, 0xc, "04ea4d49920eee3e"}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r2, 0x0, 0x99c) (async) 22:55:57 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100), 0x1) (async) r3 = syz_io_uring_setup(0xd8a, &(0x7f0000000140)={0x0, 0xdaf9, 0x20, 0x2, 0x2bf, 0x0, r1}, &(0x7f00006c4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) io_uring_enter(r3, 0x5ad1, 0xc249, 0x2, &(0x7f0000000440)={[0x9]}, 0x8) [ 1663.192387][T19792] usb 2-1: new high-speed USB device number 122 using dummy_hcd 22:55:57 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:55:57 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1663.382373][T19792] usb 2-1: device descriptor read/64, error 18 22:55:57 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000000)=0x1, 0x4) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x2c0083) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x20000010}) fcntl$setlease(r1, 0x400, 0x0) [ 1663.502408][T19792] usb usb2-port1: attempt power cycle [ 1663.926882][T19792] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1664.132113][T19792] usb 2-1: device descriptor read/8, error -61 [ 1664.421802][T19792] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1664.622198][T19792] usb 2-1: device descriptor read/8, error -61 [ 1664.743082][T19792] usb usb2-port1: unable to enumerate USB device 22:55:59 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="da14d0c3c8badf80d219250169b0010203010902120401ff0f000009040600009ea3aa00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x0, 0x0, 0x4, "c490375e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000072190108710402035e35000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) (rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x1a, 0x2}, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x0, 0x2, 0x95, {0x95, 0x30, "8fe40ad604ae981c8bacd6f5ad230de724d53a6700e5ab24715600ae6b5b0b29cfde09c55bf51980e50a543bbc516945bc414e524914813043098ffae9dfe072abcff20c52df3f26e71180cd2da287177d1eb0d915ec082b62de8013ba9e488db4c6329b048a01be341cd2f091777c40b4b7d86f44769f08029a5b52c2654e20355f05ccbf4716e434c41ec89d614523ea1ef1"}}, &(0x7f0000000100)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, &(0x7f0000000240)={0x0, 0xf, 0x35, {0x5, 0xf, 0x35, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x9, 0x6, 0x0, 0x1}, @generic={0x1b, 0x10, 0x4, "9c259410e048e8784fffbdcce6d2844ed4ee697e576f2367"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x62, 0x0, 0x7f}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x6, 0x52, 0x0, "53a56740", "d55567aa"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x4, 0xff, 0x3, 0x25, 0x0, 0x1}}}, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x0, 0x11, 0x8d, "a8c8311d96a5ec191772d66f664d13f019cbf09dd9eea1cc041a263a2aede4a6f8217417e086775657ce9fa4adc9b171bc2e9047185586c7a2f59a3460783c63468b4ceb13b1f607c911296c50a28473c752dc6c42d297403a167f6f571aa4c98cc908229dba7b814e0f8822bb3285a1621f6af98e8dccb1a85a5d2a40247f0eddef50dc6d7f25be8781519918"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xee}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x80, 0x2, [0xf0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x8e}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "b6f2"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "9a00"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x40}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xff}}) 22:55:59 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x66b3}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) io_uring_setup(0xc7f, &(0x7f0000000080)={0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000440)=[0x10001, 0x7ff], 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$BLKRRPART(r8, 0x125f, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f00000001c0)={0x10001, 0x8, [0x0, 0xde8d, 0xf7c, 0x9], &(0x7f0000000180)=[0x0]}) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000140)={'pim6reg0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000480)=""/197, 0xc5}], 0x1, 0x0, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 22:55:59 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000140), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) (async) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bind$netlink(r3, &(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x4800000}, 0xc) (async) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)) (async) statx(r4, &(0x7f0000000740)='./file0\x00', 0x0, 0x25, &(0x7f0000000780)) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000005d80)={@private0, @private0}) (async, rerun: 32) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000005d80)={@private0, @private0}) (async, rerun: 32) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) getgid() (async) close_range(r1, r2, 0x2) (async, rerun: 32) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/132, 0x84}, {&(0x7f0000000600)=""/89, 0x59}], 0x2, 0x7, 0x0) (rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r6, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 22:55:59 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r2) io_uring_enter(r5, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:55:59 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000000)=0x1, 0x4) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x2c0083) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x20000010}) fcntl$setlease(r1, 0x400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000000)=0x1, 0x4) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) (async) syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x2c0083) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x20000010}) (async) fcntl$setlease(r1, 0x400, 0x0) (async) 22:55:59 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) [ 1665.442065][T29387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1665.526694][T29387] xt_CT: You must specify a L4 protocol and not use inversions on it 22:55:59 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000140), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) (async) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bind$netlink(r3, &(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x4800000}, 0xc) (async) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)) (async) statx(r4, &(0x7f0000000740)='./file0\x00', 0x0, 0x25, &(0x7f0000000780)) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000005d80)={@private0, @private0}) (async) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000005d80)={@private0, @private0}) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) getgid() (async) close_range(r1, r2, 0x2) (async) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/132, 0x84}, {&(0x7f0000000600)=""/89, 0x59}], 0x2, 0x7, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r6, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:55:59 executing program 4: ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f00000001c0)={0x6d8, 0x10000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:55:59 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000000)=0x1, 0x4) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x2c0083) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x20000010}) (async) fcntl$setlease(r1, 0x400, 0x0) [ 1665.742991][ T5084] usb 2-1: new high-speed USB device number 125 using dummy_hcd 22:55:59 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x66b3}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) io_uring_setup(0xc7f, &(0x7f0000000080)={0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000440)=[0x10001, 0x7ff], 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$BLKRRPART(r8, 0x125f, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f00000001c0)={0x10001, 0x8, [0x0, 0xde8d, 0xf7c, 0x9], &(0x7f0000000180)=[0x0]}) (async) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000140)={'pim6reg0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000480)=""/197, 0xc5}], 0x1, 0x0, 0x8) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 1665.932563][ T5084] usb 2-1: device descriptor read/64, error 18 [ 1666.002307][T29418] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:00 executing program 3: r0 = syz_io_uring_setup(0xe71, &(0x7f00000002c0)={0x0, 0x1feb}, &(0x7f00006c5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1666.042730][T29418] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1666.202289][ T5084] usb 2-1: new high-speed USB device number 126 using dummy_hcd 22:56:00 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x66b3}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) io_uring_setup(0xc7f, &(0x7f0000000080)={0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, r2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000440)=[0x10001, 0x7ff], 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$BLKRRPART(r8, 0x125f, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f00000001c0)={0x10001, 0x8, [0x0, 0xde8d, 0xf7c, 0x9], &(0x7f0000000180)=[0x0]}) (async) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000140)={'pim6reg0\x00'}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000480)=""/197, 0xc5}], 0x1, 0x0, 0x8) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 1666.412373][ T5084] usb 2-1: device descriptor read/64, error 18 [ 1666.438213][T29426] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1666.458413][T29426] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1666.532389][ T5084] usb usb2-port1: attempt power cycle [ 1666.942020][ T5084] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1667.118560][ T5084] usb 2-1: device descriptor read/8, error -61 [ 1667.391926][ T5084] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1667.562536][ T5084] usb 2-1: device descriptor read/8, error -61 [ 1667.682374][ T5084] usb usb2-port1: unable to enumerate USB device 22:56:02 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="da14d0c3c8badf80d219250169b0010203010902120401ff0f000009040600009ea3aa00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x0, 0x0, 0x4, "c490375e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000072190108710402035e35000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x1a, 0x2}, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x0, 0x2, 0x95, {0x95, 0x30, "8fe40ad604ae981c8bacd6f5ad230de724d53a6700e5ab24715600ae6b5b0b29cfde09c55bf51980e50a543bbc516945bc414e524914813043098ffae9dfe072abcff20c52df3f26e71180cd2da287177d1eb0d915ec082b62de8013ba9e488db4c6329b048a01be341cd2f091777c40b4b7d86f44769f08029a5b52c2654e20355f05ccbf4716e434c41ec89d614523ea1ef1"}}, &(0x7f0000000100)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, &(0x7f0000000240)={0x0, 0xf, 0x35, {0x5, 0xf, 0x35, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x9, 0x6, 0x0, 0x1}, @generic={0x1b, 0x10, 0x4, "9c259410e048e8784fffbdcce6d2844ed4ee697e576f2367"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x62, 0x0, 0x7f}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x6, 0x52, 0x0, "53a56740", "d55567aa"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x4, 0xff, 0x3, 0x25, 0x0, 0x1}}}, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x0, 0x11, 0x8d, "a8c8311d96a5ec191772d66f664d13f019cbf09dd9eea1cc041a263a2aede4a6f8217417e086775657ce9fa4adc9b171bc2e9047185586c7a2f59a3460783c63468b4ceb13b1f607c911296c50a28473c752dc6c42d297403a167f6f571aa4c98cc908229dba7b814e0f8822bb3285a1621f6af98e8dccb1a85a5d2a40247f0eddef50dc6d7f25be8781519918"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xee}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x80, 0x2, [0xf0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x8e}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "b6f2"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "9a00"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x40}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xff}}) 22:56:02 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000140)) sendfile(r0, r1, 0x0, 0x20000023896) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneigh={0x14, 0x1e, 0x20, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24000000) 22:56:02 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_complete(r2) io_uring_enter(r4, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:02 executing program 4: ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f00000001c0)={0x6d8, 0x10000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:02 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f0000000140), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x50, 0x0, @fd_index=0x1, 0x7fffffffffffffff, 0x0, 0x401, 0x2}, 0x2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:02 executing program 3: r0 = syz_io_uring_setup(0xe71, &(0x7f00000002c0)={0x0, 0x1feb}, &(0x7f00006c5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 1668.650243][T29444] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:02 executing program 3: r0 = syz_io_uring_setup(0xe71, &(0x7f00000002c0)={0x0, 0x1feb}, &(0x7f00006c5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 22:56:02 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f0000000140), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x50, 0x0, @fd_index=0x1, 0x7fffffffffffffff, 0x0, 0x401, 0x2}, 0x2) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:02 executing program 4: ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f00000001c0)={0x6d8, 0x10000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) [ 1668.932047][ T5084] usb 2-1: new high-speed USB device number 3 using dummy_hcd 22:56:03 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_complete(r2) io_uring_enter(r4, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1669.122159][ T5084] usb 2-1: device descriptor read/64, error 18 22:56:03 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f0000000140), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x50, 0x0, @fd_index=0x1, 0x7fffffffffffffff, 0x0, 0x401, 0x2}, 0x2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f0000000140), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x50, 0x0, @fd_index=0x1, 0x7fffffffffffffff, 0x0, 0x401, 0x2}, 0x2) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:03 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000100)={'veth0_to_bond\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1669.393777][ T5084] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1669.591938][ T5084] usb 2-1: device descriptor read/64, error 18 [ 1669.713615][ T5084] usb usb2-port1: attempt power cycle [ 1670.121884][ T5084] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1670.292098][ T5084] usb 2-1: device descriptor read/8, error -61 [ 1670.561918][ T5084] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1670.732066][ T5084] usb 2-1: device descriptor read/8, error -61 [ 1670.852312][ T5084] usb usb2-port1: unable to enumerate USB device 22:56:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$netlink(r0, 0x0, &(0x7f00000001c0)) 22:56:05 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000140)) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneigh={0x14, 0x1e, 0x20, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24000000) 22:56:05 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000100)={'veth0_to_bond\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000100)={'veth0_to_bond\x00'}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:05 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:05 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_complete(r2) io_uring_enter(r4, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:05 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) remap_file_pages(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) syz_io_uring_setup(0x259a, &(0x7f0000000100)={0x0, 0xea23, 0x10, 0x0, 0x71, 0x0, r0}, &(0x7f00006c2000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:05 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) [ 1671.770543][T29474] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:05 executing program 1: msgget(0x3, 0x51058e123f190f81) 22:56:06 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) remap_file_pages(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) syz_io_uring_setup(0x259a, &(0x7f0000000100)={0x0, 0xea23, 0x10, 0x0, 0x71, 0x0, r0}, &(0x7f00006c2000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:06 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000100)={'veth0_to_bond\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000100)={'veth0_to_bond\x00'}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:06 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) 22:56:06 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000140)) sendfile(r0, r1, 0x0, 0x20000023896) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneigh={0x14, 0x1e, 0x20, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24000000) 22:56:06 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:06 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) remap_file_pages(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) syz_io_uring_setup(0x259a, &(0x7f0000000100)={0x0, 0xea23, 0x10, 0x0, 0x71, 0x0, r0}, &(0x7f00006c2000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:06 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) flock(r0, 0x8) [ 1672.549536][T29516] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:06 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600200, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:06 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x8000, 0x80000000], 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:06 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_complete(r2) io_uring_enter(r4, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:06 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x4000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xcb4, &(0x7f0000000100)={0x0, 0xaf12, 0x0, 0x0, 0x0, 0x0, r0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) io_uring_enter(r4, 0x1df1, 0x3bfb, 0x0, &(0x7f00000000c0)={[0x2000001]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) 22:56:06 executing program 1: open$dir(&(0x7f00000001c0)='./file0\x00', 0xd6c5928ad004e2b0, 0x0) 22:56:07 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600200, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) [ 1673.016209][T29534] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:07 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x80000000, 0x9, 0x1, "db76c3503d345b3cad0b7ef21632ff17df81f7ffa45cc0b1c028bb54ca2b22ab", 0x47314356}) 22:56:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) flock(r0, 0x0) 22:56:07 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x4000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xcb4, &(0x7f0000000100)={0x0, 0xaf12, 0x0, 0x0, 0x0, 0x0, r0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) io_uring_enter(r4, 0x1df1, 0x3bfb, 0x0, &(0x7f00000000c0)={[0x2000001]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x4000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xcb4, &(0x7f0000000100)={0x0, 0xaf12, 0x0, 0x0, 0x0, 0x0, r0}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r2) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) (async) io_uring_enter(r4, 0x1df1, 0x3bfb, 0x0, &(0x7f00000000c0)={[0x2000001]}, 0x8) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) (async) 22:56:07 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600200, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:07 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x8000, 0x80000000], 0x2) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:07 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_complete(r2) io_uring_enter(r4, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1673.472986][T29551] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:07 executing program 1: syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @random="0177513dff2e", @val, {@ipv4}}, 0x0) 22:56:07 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x4000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xcb4, &(0x7f0000000100)={0x0, 0xaf12, 0x0, 0x0, 0x0, 0x0, r0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) io_uring_enter(r4, 0x1df1, 0x3bfb, 0x0, &(0x7f00000000c0)={[0x2000001]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x4000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xcb4, &(0x7f0000000100)={0x0, 0xaf12, 0x0, 0x0, 0x0, 0x0, r0}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r2) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) (async) io_uring_enter(r4, 0x1df1, 0x3bfb, 0x0, &(0x7f00000000c0)={[0x2000001]}, 0x8) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) (async) 22:56:07 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x4, 0x5a5, 0xd9c6, 0x0]}, &(0x7f0000000080)=0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x5, @remote, 0x5}], 0x2c) ioctl$TCXONC(r0, 0x540a, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000140)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x83, &(0x7f00000004c0)={r6}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={r6, 0x3e, "7a615adc2f66b4b72a1907a4a9d483388d55bb0f38c23f17485b4627c8e73a2f1c2ab8b891869523275aa5ccaa36d3e5fea5a7161da44d07683ecdf48fe7"}, &(0x7f0000000140)=0x46) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f00000000c0)={r1}) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:07 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) (async) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x80000000, 0x9, 0x1, "db76c3503d345b3cad0b7ef21632ff17df81f7ffa45cc0b1c028bb54ca2b22ab", 0x47314356}) 22:56:07 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/228, 0x1a, 0xe4, 0x8}, 0x20) 22:56:07 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x8000, 0x80000000], 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x8000, 0x80000000], 0x2) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) [ 1674.002015][T29579] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:08 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000140)=""/4085, 0x2e, 0xff5, 0x1}, 0x20) 22:56:08 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x80000000, 0x9, 0x1, "db76c3503d345b3cad0b7ef21632ff17df81f7ffa45cc0b1c028bb54ca2b22ab", 0x47314356}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x80000000, 0x9, 0x1, "db76c3503d345b3cad0b7ef21632ff17df81f7ffa45cc0b1c028bb54ca2b22ab", 0x47314356}) (async) 22:56:08 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) io_uring_enter(r1, 0x66eb, 0x8722, 0x8, &(0x7f0000000100)={[0x6]}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x181402, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x13) writev(r3, &(0x7f0000000780)=[{&(0x7f0000000800)="a9", 0x1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x206c, &(0x7f0000000140)={0x0, 0xfcf1, 0x400, 0x3, 0x12}, &(0x7f00006d6000/0x1000)=nil, &(0x7f00006c2000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) 22:56:08 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_complete(r2) io_uring_enter(r4, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:08 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x66040000}]}}, &(0x7f0000000140)=""/4085, 0x26, 0xff5, 0x1}, 0x20) 22:56:08 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x4, 0x5a5, 0xd9c6, 0x0]}, &(0x7f0000000080)=0xc) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x90) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x5, @remote, 0x5}], 0x2c) (async) ioctl$TCXONC(r0, 0x540a, 0x2) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4}, 0xe) (async) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000140)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x83, &(0x7f00000004c0)={r6}, &(0x7f0000000500)=0x8) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={r6, 0x3e, "7a615adc2f66b4b72a1907a4a9d483388d55bb0f38c23f17485b4627c8e73a2f1c2ab8b891869523275aa5ccaa36d3e5fea5a7161da44d07683ecdf48fe7"}, &(0x7f0000000140)=0x46) (async) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f00000000c0)={r1}) (async) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:08 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x8a000, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000080)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x10000, 0x1000}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x20000023896) 22:56:08 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000200ea78ec8b965abbbbbbbbbb8881bf4d52202228aeef9d302bbb"]) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x2}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 22:56:08 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x4, 0x5a5, 0xd9c6, 0x0]}, &(0x7f0000000080)=0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x5, @remote, 0x5}], 0x2c) ioctl$TCXONC(r0, 0x540a, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000140)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x83, &(0x7f00000004c0)={r6}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={r6, 0x3e, "7a615adc2f66b4b72a1907a4a9d483388d55bb0f38c23f17485b4627c8e73a2f1c2ab8b891869523275aa5ccaa36d3e5fea5a7161da44d07683ecdf48fe7"}, &(0x7f0000000140)=0x46) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f00000000c0)={r1}) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x4, 0x5a5, 0xd9c6, 0x0]}, &(0x7f0000000080)=0xc) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x90) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x5, @remote, 0x5}], 0x2c) (async) ioctl$TCXONC(r0, 0x540a, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4}, 0xe) (async) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000140)=0x10) (async) socket$inet(0x2, 0x80001, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x83, &(0x7f00000004c0)={r6}, &(0x7f0000000500)=0x8) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={r6, 0x3e, "7a615adc2f66b4b72a1907a4a9d483388d55bb0f38c23f17485b4627c8e73a2f1c2ab8b891869523275aa5ccaa36d3e5fea5a7161da44d07683ecdf48fe7"}, &(0x7f0000000140)=0x46) (async) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f00000000c0)={r1}) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:56:09 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) io_uring_enter(r1, 0x66eb, 0x8722, 0x8, &(0x7f0000000100)={[0x6]}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x181402, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x13) (async) writev(r3, &(0x7f0000000780)=[{&(0x7f0000000800)="a9", 0x1}], 0x1) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_io_uring_setup(0x206c, &(0x7f0000000140)={0x0, 0xfcf1, 0x400, 0x3, 0x12}, &(0x7f00006d6000/0x1000)=nil, &(0x7f00006c2000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) 22:56:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x2}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)=0x1) 22:56:09 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000200ea78ec8b965abbbbbbbbbb8881bf4d52202228aeef9d302bbb"]) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8) (async, rerun: 32) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:09 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async, rerun: 32) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) (rerun: 32) io_uring_enter(r1, 0x66eb, 0x8722, 0x8, &(0x7f0000000100)={[0x6]}, 0x8) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x181402, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x13) writev(r3, &(0x7f0000000780)=[{&(0x7f0000000800)="a9", 0x1}], 0x1) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_io_uring_setup(0x206c, &(0x7f0000000140)={0x0, 0xfcf1, 0x400, 0x3, 0x12}, &(0x7f00006d6000/0x1000)=nil, &(0x7f00006c2000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) (rerun: 64) 22:56:09 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x8a000, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000080)) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x10000, 0x1000}) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x20000023896) 22:56:09 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_complete(r2) io_uring_enter(r4, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:09 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000200)=0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x6f, "64691deb5c79e36939b26aa714ebad891ac925699416a7464ca3a3f45d15154a02587fae3c1cb063aa72d49481e666e41afd5216f69fc44bbe05e99431a5ea6285f9fc4ffaca421a2158d3817e185fd7eb2b5cbb200dc7a7a1bbafb4e1ab22b6f383154bd53ae7ded7fa81aaa8edef"}, &(0x7f00000001c0)=0x93) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000080)={0x0, 0x2}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)=0x400, 0x4) 22:56:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 22:56:09 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000200ea78ec8b965abbbbbbbbbb8881bf4d52202228aeef9d302bbb"]) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 1675.790834][T29661] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:09 executing program 5: r0 = syz_io_uring_setup(0x2991, &(0x7f00000002c0)={0x0, 0x0, 0x400}, &(0x7f00006c3000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, r0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000028a"]) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'vlan0\x00', @multicast}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/209, 0xd1}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1675.852025][T29661] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x401, 0x200, 0x2}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={&(0x7f0000000140)='#', 0x0, 0x0, 0x0, 0x5, r0}, 0x38) 22:56:10 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x8a000, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000080)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x10000, 0x1000}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x20000023896) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x8a000, 0x0) (async) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000080)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) (async) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x10000, 0x1000}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r3, 0x0, 0x20000023896) (async) 22:56:10 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_complete(r2) io_uring_enter(r4, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:10 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x18, 0x8, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=""/72}, 0x20) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) 22:56:10 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000200)=0x5) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x6f, "64691deb5c79e36939b26aa714ebad891ac925699416a7464ca3a3f45d15154a02587fae3c1cb063aa72d49481e666e41afd5216f69fc44bbe05e99431a5ea6285f9fc4ffaca421a2158d3817e185fd7eb2b5cbb200dc7a7a1bbafb4e1ab22b6f383154bd53ae7ded7fa81aaa8edef"}, &(0x7f00000001c0)=0x93) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async, rerun: 64) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000080)={0x0, 0x2}) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)=0x400, 0x4) 22:56:10 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0xfffffffc}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d7000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)) r2 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x10000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xd, 0x0, r4, &(0x7f0000000440), &(0x7f0000000140)='./file0\x00', 0x1, 0x2000}, 0x3) r5 = io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x40}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$sndseq(r7, &(0x7f00000006c0)=[{0x80, 0x9, 0x3d, 0x2, @tick=0x4, {0x81, 0x9}, {0xd4, 0x19}, @ext={0xef, &(0x7f00000005c0)="bc7ca00d3497d5cf791f15d83e676c62345ee13e86166c57f31f27551313d8c29809e3a80cbe868d6a690a4752e2e3b5436147e19adae2b79b35869f921507a1cb8488238f03ac3b3ebafb5f5f61cf6baedb857801d7b8cc4c59e1abc3785f1167c0fa198186f77d6fd7b50e3ae3aa0c0e0f2209b1fc4fea6128c5678bedb44423795758a3f46477079e34f0bd131afa4a89c887f8952fc9748423bba2e7d54cd8c06a0da9ace70a47fbe6d00b7e1184696988a4d55e2cfaf76bbd43603ba9ce342694a84ba7f7094ff6b7af75f228826661a7069cfced2ba73870dd89eac7947f2ac33bd066e78ee6b2a5f5dc1690"}}, {0x9b, 0x1f, 0xd6, 0x6, @time={0x1f, 0x7}, {0x6c, 0x80}, {0xb7, 0x2}, @raw32={[0x5, 0x9, 0xd3d]}}, {0x7, 0x2, 0x5, 0xca, @time={0x1f, 0x2}, {0x8, 0x5}, {0x3, 0xfa}, @note={0xa2, 0x9, 0x9b, 0x80, 0xca}}, {0x2, 0x25, 0xff, 0x1, @time={0xffffffff, 0x3}, {0x7f, 0x12}, {0x4, 0x1}, @raw8={"a736b3ee27a5dbd23cf99f75"}}], 0x70) io_uring_enter(r0, 0x1df0, 0x61c2, 0x2, &(0x7f0000000100)={[0x800]}, 0x8) r8 = mmap$IORING_OFF_SQES(&(0x7f00006c2000/0x2000)=nil, 0x2000, 0x2, 0x110, r5, 0x10000000) syz_io_uring_submit(r1, r8, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x58, 0x0, 0x0, 0x0, 0x12345}, 0x8) r9 = syz_open_dev$audion(&(0x7f00000001c0), 0x1f, 0x400) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@RTA_PREF={0x5}]}, 0x24}}, 0x0) preadv(r6, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:10 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "ecd25b8c36e9e3b1ea157207e3db509481d405ba3c9cf778a42f0f8753db3b6376fee369b5961501305324f0870c11f24d3957ba8556964e0ddfbb1c5efa3de14f533d98294a10c9926e2fd00deead6454df54e71c39227653074240dd94bfcd1fcd17bab7cce836324ba47728b16674fb899d312234281652944f49480dbbba1c7ea9385131c6c07ff6b35d4c08192324562c2690bf9ed947fd82ce"}, 0xa7) 22:56:10 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_complete(r2) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1676.726008][T29690] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1676.782838][T29693] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:10 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) (async) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "ecd25b8c36e9e3b1ea157207e3db509481d405ba3c9cf778a42f0f8753db3b6376fee369b5961501305324f0870c11f24d3957ba8556964e0ddfbb1c5efa3de14f533d98294a10c9926e2fd00deead6454df54e71c39227653074240dd94bfcd1fcd17bab7cce836324ba47728b16674fb899d312234281652944f49480dbbba1c7ea9385131c6c07ff6b35d4c08192324562c2690bf9ed947fd82ce"}, 0xa7) 22:56:11 executing program 5: r0 = syz_io_uring_setup(0x2991, &(0x7f00000002c0)={0x0, 0x0, 0x400}, &(0x7f00006c3000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, r0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000028a"]) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'vlan0\x00', @multicast}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/209, 0xd1}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2991, &(0x7f00000002c0)={0x0, 0x0, 0x400}, &(0x7f00006c3000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, r0}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000028a"]) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'vlan0\x00', @multicast}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/209, 0xd1}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:11 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000200)=0x5) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x6f, "64691deb5c79e36939b26aa714ebad891ac925699416a7464ca3a3f45d15154a02587fae3c1cb063aa72d49481e666e41afd5216f69fc44bbe05e99431a5ea6285f9fc4ffaca421a2158d3817e185fd7eb2b5cbb200dc7a7a1bbafb4e1ab22b6f383154bd53ae7ded7fa81aaa8edef"}, &(0x7f00000001c0)=0x93) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000080)={0x0, 0x2}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)=0x400, 0x4) 22:56:11 executing program 1: r0 = socket(0x18, 0x0, 0x2) getsockname$packet(r0, 0x0, &(0x7f0000000080)) 22:56:11 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "ecd25b8c36e9e3b1ea157207e3db509481d405ba3c9cf778a42f0f8753db3b6376fee369b5961501305324f0870c11f24d3957ba8556964e0ddfbb1c5efa3de14f533d98294a10c9926e2fd00deead6454df54e71c39227653074240dd94bfcd1fcd17bab7cce836324ba47728b16674fb899d312234281652944f49480dbbba1c7ea9385131c6c07ff6b35d4c08192324562c2690bf9ed947fd82ce"}, 0xa7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "ecd25b8c36e9e3b1ea157207e3db509481d405ba3c9cf778a42f0f8753db3b6376fee369b5961501305324f0870c11f24d3957ba8556964e0ddfbb1c5efa3de14f533d98294a10c9926e2fd00deead6454df54e71c39227653074240dd94bfcd1fcd17bab7cce836324ba47728b16674fb899d312234281652944f49480dbbba1c7ea9385131c6c07ff6b35d4c08192324562c2690bf9ed947fd82ce"}, 0xa7) (async) [ 1677.244092][T29709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1677.310827][T29711] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:11 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_complete(r2) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:11 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0xfffffffc}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d7000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)) r2 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x10000000) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xd, 0x0, r4, &(0x7f0000000440), &(0x7f0000000140)='./file0\x00', 0x1, 0x2000}, 0x3) r5 = io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x40}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$sndseq(r7, &(0x7f00000006c0)=[{0x80, 0x9, 0x3d, 0x2, @tick=0x4, {0x81, 0x9}, {0xd4, 0x19}, @ext={0xef, &(0x7f00000005c0)="bc7ca00d3497d5cf791f15d83e676c62345ee13e86166c57f31f27551313d8c29809e3a80cbe868d6a690a4752e2e3b5436147e19adae2b79b35869f921507a1cb8488238f03ac3b3ebafb5f5f61cf6baedb857801d7b8cc4c59e1abc3785f1167c0fa198186f77d6fd7b50e3ae3aa0c0e0f2209b1fc4fea6128c5678bedb44423795758a3f46477079e34f0bd131afa4a89c887f8952fc9748423bba2e7d54cd8c06a0da9ace70a47fbe6d00b7e1184696988a4d55e2cfaf76bbd43603ba9ce342694a84ba7f7094ff6b7af75f228826661a7069cfced2ba73870dd89eac7947f2ac33bd066e78ee6b2a5f5dc1690"}}, {0x9b, 0x1f, 0xd6, 0x6, @time={0x1f, 0x7}, {0x6c, 0x80}, {0xb7, 0x2}, @raw32={[0x5, 0x9, 0xd3d]}}, {0x7, 0x2, 0x5, 0xca, @time={0x1f, 0x2}, {0x8, 0x5}, {0x3, 0xfa}, @note={0xa2, 0x9, 0x9b, 0x80, 0xca}}, {0x2, 0x25, 0xff, 0x1, @time={0xffffffff, 0x3}, {0x7f, 0x12}, {0x4, 0x1}, @raw8={"a736b3ee27a5dbd23cf99f75"}}], 0x70) (async) io_uring_enter(r0, 0x1df0, 0x61c2, 0x2, &(0x7f0000000100)={[0x800]}, 0x8) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f00006c2000/0x2000)=nil, 0x2000, 0x2, 0x110, r5, 0x10000000) syz_io_uring_submit(r1, r8, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x58, 0x0, 0x0, 0x0, 0x12345}, 0x8) (async) r9 = syz_open_dev$audion(&(0x7f00000001c0), 0x1f, 0x400) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@RTA_PREF={0x5}]}, 0x24}}, 0x0) preadv(r6, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:11 executing program 5: r0 = syz_io_uring_setup(0x2991, &(0x7f00000002c0)={0x0, 0x0, 0x400}, &(0x7f00006c3000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, r0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000028a"]) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'vlan0\x00', @multicast}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/209, 0xd1}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2991, &(0x7f00000002c0)={0x0, 0x0, 0x400}, &(0x7f00006c3000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, r0}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000028a"]) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'vlan0\x00', @multicast}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/209, 0xd1}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "aaf01e000000000000000000000000005bf300"}) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x1454}, {r1}], 0x2, 0x0, 0x0, 0x0) 22:56:11 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = memfd_secret(0x80000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000080), &(0x7f00000001c0)={0x0, 0xfb, 0xa7, 0x5, 0x20, "4f57b332c837d2162d744bab5c9d2b22", "bac75837794c4560eec4a6347186ee6921d0cfd9b68ced322cf841d85af41389f3d24ee2f06cdb67ef2cc38d0919c4f60f767a141fbb6d3f2a32ebd9ac2f0fe6c8b3ba3d5c8c53d3ec14248d604b59fdcdbb69e0ee0d8028034176b51305ab5461130661a45c76c6f3136b9f821cf7467cdf67e940e55e04822395bf248b332a43e62520094c143dddb8dfa6afd45004242f"}, 0xa7, 0x2) sendfile(r0, r1, 0x0, 0x1f) 22:56:11 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x18, 0x800, 0x7f) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x7, 0xe911, 0x80000000, 0x1, 0x1a, "5a6c1c62faac2eb7eb9f41c4a188efd2a38a8b"}) sendfile(r0, r1, 0x0, 0x20000023896) [ 1677.766410][T29727] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1677.930289][T29743] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:12 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = memfd_secret(0x80000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000080), &(0x7f00000001c0)={0x0, 0xfb, 0xa7, 0x5, 0x20, "4f57b332c837d2162d744bab5c9d2b22", "bac75837794c4560eec4a6347186ee6921d0cfd9b68ced322cf841d85af41389f3d24ee2f06cdb67ef2cc38d0919c4f60f767a141fbb6d3f2a32ebd9ac2f0fe6c8b3ba3d5c8c53d3ec14248d604b59fdcdbb69e0ee0d8028034176b51305ab5461130661a45c76c6f3136b9f821cf7467cdf67e940e55e04822395bf248b332a43e62520094c143dddb8dfa6afd45004242f"}, 0xa7, 0x2) sendfile(r0, r1, 0x0, 0x1f) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) memfd_secret(0x80000) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000080), &(0x7f00000001c0)={0x0, 0xfb, 0xa7, 0x5, 0x20, "4f57b332c837d2162d744bab5c9d2b22", "bac75837794c4560eec4a6347186ee6921d0cfd9b68ced322cf841d85af41389f3d24ee2f06cdb67ef2cc38d0919c4f60f767a141fbb6d3f2a32ebd9ac2f0fe6c8b3ba3d5c8c53d3ec14248d604b59fdcdbb69e0ee0d8028034176b51305ab5461130661a45c76c6f3136b9f821cf7467cdf67e940e55e04822395bf248b332a43e62520094c143dddb8dfa6afd45004242f"}, 0xa7, 0x2) (async) sendfile(r0, r1, 0x0, 0x1f) (async) 22:56:12 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_complete(r2) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:12 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0xfffffffc}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d7000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)) r2 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x10000000) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xd, 0x0, r4, &(0x7f0000000440), &(0x7f0000000140)='./file0\x00', 0x1, 0x2000}, 0x3) r5 = io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x40}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) write$sndseq(r7, &(0x7f00000006c0)=[{0x80, 0x9, 0x3d, 0x2, @tick=0x4, {0x81, 0x9}, {0xd4, 0x19}, @ext={0xef, &(0x7f00000005c0)="bc7ca00d3497d5cf791f15d83e676c62345ee13e86166c57f31f27551313d8c29809e3a80cbe868d6a690a4752e2e3b5436147e19adae2b79b35869f921507a1cb8488238f03ac3b3ebafb5f5f61cf6baedb857801d7b8cc4c59e1abc3785f1167c0fa198186f77d6fd7b50e3ae3aa0c0e0f2209b1fc4fea6128c5678bedb44423795758a3f46477079e34f0bd131afa4a89c887f8952fc9748423bba2e7d54cd8c06a0da9ace70a47fbe6d00b7e1184696988a4d55e2cfaf76bbd43603ba9ce342694a84ba7f7094ff6b7af75f228826661a7069cfced2ba73870dd89eac7947f2ac33bd066e78ee6b2a5f5dc1690"}}, {0x9b, 0x1f, 0xd6, 0x6, @time={0x1f, 0x7}, {0x6c, 0x80}, {0xb7, 0x2}, @raw32={[0x5, 0x9, 0xd3d]}}, {0x7, 0x2, 0x5, 0xca, @time={0x1f, 0x2}, {0x8, 0x5}, {0x3, 0xfa}, @note={0xa2, 0x9, 0x9b, 0x80, 0xca}}, {0x2, 0x25, 0xff, 0x1, @time={0xffffffff, 0x3}, {0x7f, 0x12}, {0x4, 0x1}, @raw8={"a736b3ee27a5dbd23cf99f75"}}], 0x70) (async) io_uring_enter(r0, 0x1df0, 0x61c2, 0x2, &(0x7f0000000100)={[0x800]}, 0x8) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f00006c2000/0x2000)=nil, 0x2000, 0x2, 0x110, r5, 0x10000000) syz_io_uring_submit(r1, r8, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x58, 0x0, 0x0, 0x0, 0x12345}, 0x8) r9 = syz_open_dev$audion(&(0x7f00000001c0), 0x1f, 0x400) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@RTA_PREF={0x5}]}, 0x24}}, 0x0) (async) preadv(r6, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:12 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) io_uring_setup(0x2c1b, &(0x7f0000000140)={0x0, 0xcfee, 0x200, 0x0, 0x1c, 0x0, r0}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x20, 0x0, @fd=r4, 0xcaf, 0x0, 0xfffff000}, 0x3) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:12 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x18, 0x800, 0x7f) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x7, 0xe911, 0x80000000, 0x1, 0x1a, "5a6c1c62faac2eb7eb9f41c4a188efd2a38a8b"}) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x18, 0x800, 0x7f) (async) dup(r2) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x7, 0xe911, 0x80000000, 0x1, 0x1a, "5a6c1c62faac2eb7eb9f41c4a188efd2a38a8b"}) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:56:12 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = memfd_secret(0x80000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000080), &(0x7f00000001c0)={0x0, 0xfb, 0xa7, 0x5, 0x20, "4f57b332c837d2162d744bab5c9d2b22", "bac75837794c4560eec4a6347186ee6921d0cfd9b68ced322cf841d85af41389f3d24ee2f06cdb67ef2cc38d0919c4f60f767a141fbb6d3f2a32ebd9ac2f0fe6c8b3ba3d5c8c53d3ec14248d604b59fdcdbb69e0ee0d8028034176b51305ab5461130661a45c76c6f3136b9f821cf7467cdf67e940e55e04822395bf248b332a43e62520094c143dddb8dfa6afd45004242f"}, 0xa7, 0x2) (async) sendfile(r0, r1, 0x0, 0x1f) [ 1678.479773][T29762] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1678.628037][T29770] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:12 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) io_uring_setup(0x2c1b, &(0x7f0000000140)={0x0, 0xcfee, 0x200, 0x0, 0x1c, 0x0, r0}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x20, 0x0, @fd=r4, 0xcaf, 0x0, 0xfffff000}, 0x3) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) io_uring_setup(0x2c1b, &(0x7f0000000140)={0x0, 0xcfee, 0x200, 0x0, 0x1c, 0x0, r0}) (async) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x20, 0x0, @fd=r4, 0xcaf, 0x0, 0xfffff000}, 0x3) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:12 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000100), 0x260101, 0x1a4) fallocate(r2, 0x4d, 0x8fd0, 0xf6) 22:56:12 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x18, 0x800, 0x7f) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x7, 0xe911, 0x80000000, 0x1, 0x1a, "5a6c1c62faac2eb7eb9f41c4a188efd2a38a8b"}) (async) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:12 executing program 1: getpid() syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x40008400, 0x0, 0x0, 0x0, 0x0, 0x0) 22:56:13 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendfile(r0, r1, 0x0, 0x20000023896) [ 1679.147221][T29790] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:13 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) io_uring_setup(0x2c1b, &(0x7f0000000140)={0x0, 0xcfee, 0x200, 0x0, 0x1c, 0x0, r0}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x20, 0x0, @fd=r4, 0xcaf, 0x0, 0xfffff000}, 0x3) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) io_uring_setup(0x2c1b, &(0x7f0000000140)={0x0, 0xcfee, 0x200, 0x0, 0x1c, 0x0, r0}) (async) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x20, 0x0, @fd=r4, 0xcaf, 0x0, 0xfffff000}, 0x3) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:13 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1679.394666][T29796] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:13 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:13 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x8000000) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x521000, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x400}}, 0x1) io_uring_setup(0xc80, &(0x7f0000000080)) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x45, 0x0, 0x40, 0x2, &(0x7f0000000440)="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", 0x9, 0x0, 0x0, {0x1}}, 0x93f2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r5, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:13 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:13 executing program 1: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f00000000c0)={0x13}, 0x0) 22:56:14 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async, rerun: 64) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:14 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x8000000) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x521000, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x400}}, 0x1) io_uring_setup(0xc80, &(0x7f0000000080)) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x45, 0x0, 0x40, 0x2, &(0x7f0000000440)="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", 0x9, 0x0, 0x0, {0x1}}, 0x93f2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r5, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x8000000) (async) open$dir(&(0x7f0000000180)='./file0\x00', 0x521000, 0x8) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x400}}, 0x1) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x45, 0x0, 0x40, 0x2, &(0x7f0000000440)="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", 0x9, 0x0, 0x0, {0x1}}, 0x93f2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r5, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:14 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) r2 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000100), 0x260101, 0x1a4) fallocate(r2, 0x4d, 0x8fd0, 0xf6) [ 1680.229303][T29822] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:56:14 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x1) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (rerun: 64) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:14 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x8000000) (async) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x521000, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x400}}, 0x1) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x45, 0x0, 0x40, 0x2, &(0x7f0000000440)="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", 0x9, 0x0, 0x0, {0x1}}, 0x93f2) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r5, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:14 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:15 executing program 1: syz_clone(0xc280000, 0x0, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)="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") 22:56:15 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:15 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x7b, 0x1, 0x0, "a0cb59374978c7d0d4e6d5e7dc8e0bd1", "d7645059aa10d55f8ef49d107a8c40c0f09070cd2cd18d1af9a8424a5bfb63e3dfbcdc8e577c4142a83ce3b3a22cb0985ebe21623ec9b9e80ecc8dbaa78346f3d467e0ab217c4787993a970b34b31c5f8abea8dbfa789fb38a1b2f4fc872f09aca380905177b"}, 0x7b, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:15 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$TCSBRKP(r0, 0x5425, 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:56:15 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000100), 0x260101, 0x1a4) fallocate(r2, 0x4d, 0x8fd0, 0xf6) 22:56:15 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x4, 0x440502) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000080)=0x8) 22:56:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:56:15 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async, rerun: 32) io_uring_setup(0xc80, &(0x7f0000000080)) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async, rerun: 32) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x7b, 0x1, 0x0, "a0cb59374978c7d0d4e6d5e7dc8e0bd1", "d7645059aa10d55f8ef49d107a8c40c0f09070cd2cd18d1af9a8424a5bfb63e3dfbcdc8e577c4142a83ce3b3a22cb0985ebe21623ec9b9e80ecc8dbaa78346f3d467e0ab217c4787993a970b34b31c5f8abea8dbfa789fb38a1b2f4fc872f09aca380905177b"}, 0x7b, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:16 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001380)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x0, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000001300)="2c7b5950a6979247aa6b8f192c7867e796b5606a8aa2ab7cfce69160268fb2f2b5015c0929", 0x25}, 0x0) 22:56:16 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x4, 0x440502) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000080)=0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) syz_open_dev$hiddev(&(0x7f0000000000), 0x4, 0x440502) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000080)=0x8) (async) 22:56:16 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:16 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001f40)=@delchain={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_getneigh={0x38, 0x1e, 0x2, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x4012, 0x2800}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) 22:56:16 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x7b, 0x1, 0x0, "a0cb59374978c7d0d4e6d5e7dc8e0bd1", "d7645059aa10d55f8ef49d107a8c40c0f09070cd2cd18d1af9a8424a5bfb63e3dfbcdc8e577c4142a83ce3b3a22cb0985ebe21623ec9b9e80ecc8dbaa78346f3d467e0ab217c4787993a970b34b31c5f8abea8dbfa789fb38a1b2f4fc872f09aca380905177b"}, 0x7b, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x7b, 0x1, 0x0, "a0cb59374978c7d0d4e6d5e7dc8e0bd1", "d7645059aa10d55f8ef49d107a8c40c0f09070cd2cd18d1af9a8424a5bfb63e3dfbcdc8e577c4142a83ce3b3a22cb0985ebe21623ec9b9e80ecc8dbaa78346f3d467e0ab217c4787993a970b34b31c5f8abea8dbfa789fb38a1b2f4fc872f09aca380905177b"}, 0x7b, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:16 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:16 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:56:16 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) [ 1682.672695][T29901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:56:16 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x4, 0x440502) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000080)=0x8) 22:56:17 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x60}]}) 22:56:17 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x19) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/189) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x3000, 0x3, 0x8e, 0x4}, {0x9, 0x40, 0x81, 0x1}]}) splice(0xffffffffffffffff, &(0x7f0000000100)=0xffffffff00000001, r0, &(0x7f0000000140)=0x2, 0x866, 0x3) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000440)=""/148, 0x94) 22:56:17 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001f40)=@delchain={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_getneigh={0x38, 0x1e, 0x2, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x4012, 0x2800}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) 22:56:17 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:17 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x20c3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x3000, 0x3, 0x8e, 0x4}, {0x9, 0x40, 0x81, 0x1}]}) (async) splice(0xffffffffffffffff, &(0x7f0000000100)=0xffffffff00000001, r0, &(0x7f0000000140)=0x2, 0x866, 0x3) (async, rerun: 64) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (rerun: 64) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) io_uring_setup(0xc80, &(0x7f0000000080)) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) read(r2, &(0x7f0000000440)=""/148, 0x94) 22:56:17 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 22:56:18 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x20c3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:18 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async, rerun: 32) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001f40)=@delchain={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_getneigh={0x38, 0x1e, 0x2, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x4012, 0x2800}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) 22:56:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x2}, 0x0) 22:56:18 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:18 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x19) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/189) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x19) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/189) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:56:18 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x20c3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x20c3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:56:18 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000040)=""/242, 0xf2) 22:56:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x3000, 0x3, 0x8e, 0x4}, {0x9, 0x40, 0x81, 0x1}]}) splice(0xffffffffffffffff, &(0x7f0000000100)=0xffffffff00000001, r0, &(0x7f0000000140)=0x2, 0x866, 0x3) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async, rerun: 64) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 64) read(r2, &(0x7f0000000440)=""/148, 0x94) 22:56:18 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:18 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$tipc(0x1e, 0x2b3ce58134c2c155, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000100)={0x0, 0x100000000, 0x33d5}) 22:56:18 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x19) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/189) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x19) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/189) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:56:18 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:19 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(0xffffffffffffffff, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:19 executing program 1: r0 = socket$igmp(0xa, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000000)) 22:56:19 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fstatfs(r1, &(0x7f0000000100)=""/214) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:19 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:19 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:19 executing program 1: r0 = socket$igmp(0xa, 0x3, 0x2) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 22:56:19 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:19 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fstatfs(r1, &(0x7f0000000100)=""/214) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) fstatfs(r1, &(0x7f0000000100)=""/214) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:19 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(0xffffffffffffffff, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:19 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$tipc(0x1e, 0x2b3ce58134c2c155, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000100)={0x0, 0x100000000, 0x33d5}) 22:56:19 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 22:56:20 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x228081, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) ioctl$TCSBRKP(r1, 0x5425, 0x3f) 22:56:20 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:56:20 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) io_uring_setup(0xc80, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(0xffffffffffffffff, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:20 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fstatfs(r1, &(0x7f0000000100)=""/214) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) fstatfs(r1, &(0x7f0000000100)=""/214) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:20 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x200000e1, &(0x7f0000000100)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:56:20 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:56:20 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x8}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$inet_tcp(0x2, 0x1, 0x0) 22:56:20 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:20 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r4, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="e1258d8b8d288831d1f8b87027a65b535dcc496059997107114e0ac1eb2c189639a529476e0acc500cac8d26d87f14fd0d8cccae90084156be6a62e7c6639aa46e674fc9990afc1787f2d26fde74869fe0781a62f04e9f427e2c5b8e7f0c8818d7dda5fa1aa5", 0x66, 0x4950, 0x1}, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:20 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) dup(r2) sendfile(r0, r1, 0x0, 0x20000023896) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x3) 22:56:21 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r2 = socket$tipc(0x1e, 0x2b3ce58134c2c155, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000100)={0x0, 0x100000000, 0x33d5}) 22:56:21 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x228081, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) (async) ioctl$TCSBRKP(r1, 0x5425, 0x3f) [ 1687.072061][T19792] usb 2-1: new full-speed USB device number 7 using dummy_hcd 22:56:21 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) dup(r2) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x3) 22:56:21 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r4, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_submit(r2, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="e1258d8b8d288831d1f8b87027a65b535dcc496059997107114e0ac1eb2c189639a529476e0acc500cac8d26d87f14fd0d8cccae90084156be6a62e7c6639aa46e674fc9990afc1787f2d26fde74869fe0781a62f04e9f427e2c5b8e7f0c8818d7dda5fa1aa5", 0x66, 0x4950, 0x1}, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:21 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) dup(r2) sendfile(r0, r1, 0x0, 0x20000023896) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) (async) dup(r2) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r3) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x3) (async) 22:56:21 executing program 3: syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x29c0, 0x40}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r0, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000200ea78ec8b96dabbbbbbbb5ddb"]) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x280200, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x1, 0x4, 0x6, 0x5, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x16}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x13e, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000240)='GPL\x00', 0x69, 0xa0, &(0x7f0000000440)=""/160, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x9, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) close_range(0xffffffffffffffff, r2, 0x0) [ 1687.473088][T19792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1687.522892][T19792] usb 2-1: not running at top speed; connect to a high speed hub 22:56:21 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r4, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="e1258d8b8d288831d1f8b87027a65b535dcc496059997107114e0ac1eb2c189639a529476e0acc500cac8d26d87f14fd0d8cccae90084156be6a62e7c6639aa46e674fc9990afc1787f2d26fde74869fe0781a62f04e9f427e2c5b8e7f0c8818d7dda5fa1aa5", 0x66, 0x4950, 0x1}, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socket$rds(0x15, 0x5, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r4, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_submit(r2, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="e1258d8b8d288831d1f8b87027a65b535dcc496059997107114e0ac1eb2c189639a529476e0acc500cac8d26d87f14fd0d8cccae90084156be6a62e7c6639aa46e674fc9990afc1787f2d26fde74869fe0781a62f04e9f427e2c5b8e7f0c8818d7dda5fa1aa5", 0x66, 0x4950, 0x1}, 0x1) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) [ 1687.602838][T19792] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1687.614497][T19792] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1687.625503][T19792] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 22:56:21 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1688.032681][T19792] usb 2-1: string descriptor 0 read error: -22 [ 1688.039558][T19792] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1688.048948][T19792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.084012][T30052] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1688.362458][T19792] cdc_ncm 2-1:1.0: bind() failure [ 1688.377640][T19792] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1688.385980][T19792] cdc_ncm 2-1:1.1: bind() failure [ 1688.438299][T19792] usb 2-1: USB disconnect, device number 7 22:56:22 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:22 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11100, 0x0, {0x3}}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:22 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x228081, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) ioctl$TCSBRKP(r1, 0x5425, 0x3f) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x228081, 0x0) (async) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r2, 0x0, 0x20000023896) (async) ioctl$TCSBRKP(r1, 0x5425, 0x3f) (async) 22:56:22 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000402505a8a44000010203010902"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 22:56:22 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sync() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x7f71, &(0x7f0000000100)={0x0, 0x5e4a, 0x9ba7d8ff0f5201b4, 0x3, 0x37, 0x0, r0}, &(0x7f00006c4000/0x4000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000240)) r4 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x4, 0x80010, r1, 0x10000000) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x8}, 0x10) r6 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x20003580, r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) syz_io_uring_submit(r3, r4, &(0x7f0000000480)=@IORING_OP_SPLICE={0x1e, 0x40, 0x0, @fd=r0, 0xcf2e, {0x0, r5}, 0xedf4, 0x2, 0x1, {0x0, r7, r8}}, 0x5) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:22 executing program 3: syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x29c0, 0x40}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r0, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000200ea78ec8b96dabbbbbbbb5ddb"]) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x280200, 0x0) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x1, 0x4, 0x6, 0x5, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x16}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x13e, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000240)='GPL\x00', 0x69, 0xa0, &(0x7f0000000440)=""/160, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x9, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) close_range(0xffffffffffffffff, r2, 0x0) [ 1689.033597][ T24] audit: type=1326 audit(1675464983.085:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30100 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7857a8c0c9 code=0x7ffc0000 [ 1689.079344][ T24] audit: type=1326 audit(1675464983.115:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30100 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f7857a8c0c9 code=0x7ffc0000 [ 1689.103591][ T24] audit: type=1326 audit(1675464983.125:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30100 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7857a8c0c9 code=0x7ffc0000 22:56:23 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x17) sendfile(r2, r1, 0x0, 0x100000000004) [ 1689.126772][ T24] audit: type=1326 audit(1675464983.125:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30100 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7857a8c0c9 code=0x7ffc0000 [ 1689.149990][ T24] audit: type=1326 audit(1675464983.125:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30100 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7857a8c0c9 code=0x7ffc0000 [ 1689.173123][ T24] audit: type=1326 audit(1675464983.125:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30100 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7857a8c0c9 code=0x7ffc0000 [ 1689.196289][ T24] audit: type=1326 audit(1675464983.125:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30100 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7857a8c112 code=0x7ffc0000 [ 1689.219226][ T24] audit: type=1326 audit(1675464983.125:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30100 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7857a8c112 code=0x7ffc0000 [ 1689.242171][ T24] audit: type=1326 audit(1675464983.125:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30100 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7857a8c0c9 code=0x7ffc0000 [ 1689.265364][ T24] audit: type=1326 audit(1675464983.125:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30100 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7857a8c0c9 code=0x7ffc0000 22:56:23 executing program 3: syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x29c0, 0x40}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r0, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000200ea78ec8b96dabbbbbbbb5ddb"]) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x280200, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x1, 0x4, 0x6, 0x5, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x16}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x13e, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000240)='GPL\x00', 0x69, 0xa0, &(0x7f0000000440)=""/160, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x9, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) close_range(0xffffffffffffffff, r2, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x29c0, 0x40}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r0, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000200ea78ec8b96dabbbbbbbb5ddb"]) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x280200, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x1, 0x4, 0x6, 0x5, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x16}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x13e, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000240)='GPL\x00', 0x69, 0xa0, &(0x7f0000000440)=""/160, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x9, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) close_range(0xffffffffffffffff, r2, 0x0) (async) [ 1689.475388][ T5084] usb 2-1: new high-speed USB device number 8 using dummy_hcd 22:56:23 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) r1 = io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) sync() (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_io_uring_setup(0x7f71, &(0x7f0000000100)={0x0, 0x5e4a, 0x9ba7d8ff0f5201b4, 0x3, 0x37, 0x0, r0}, &(0x7f00006c4000/0x4000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000240)) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x4, 0x80010, r1, 0x10000000) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x8}, 0x10) r6 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x20003580, r7) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000480)=@IORING_OP_SPLICE={0x1e, 0x40, 0x0, @fd=r0, 0xcf2e, {0x0, r5}, 0xedf4, 0x2, 0x1, {0x0, r7, r8}}, 0x5) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:23 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:23 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x17) (async) sendfile(r2, r1, 0x0, 0x100000000004) 22:56:23 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:23 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x17) (async) sendfile(r2, r1, 0x0, 0x100000000004) [ 1689.883042][ T5084] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1689.972624][ T5084] usb 2-1: config 0 has no interfaces? [ 1690.134310][ T5084] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1690.144263][ T5084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.152683][ T5084] usb 2-1: Product: syz [ 1690.157035][ T5084] usb 2-1: Manufacturer: syz [ 1690.161948][ T5084] usb 2-1: SerialNumber: syz [ 1690.237515][ T5084] usb 2-1: config 0 descriptor?? [ 1690.493614][ T5084] usb 2-1: USB disconnect, device number 8 22:56:25 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)={0x28, r0, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}]}]}, 0x28}}, 0x0) 22:56:25 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendfile(r2, r3, &(0x7f0000000000)=0x4a1, 0x1) r4 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TIOCNXCL(r4, 0x540d) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x20000023896) 22:56:25 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:25 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) r1 = io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sync() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x7f71, &(0x7f0000000100)={0x0, 0x5e4a, 0x9ba7d8ff0f5201b4, 0x3, 0x37, 0x0, r0}, &(0x7f00006c4000/0x4000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000240)) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x4, 0x80010, r1, 0x10000000) (async) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x8}, 0x10) r6 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x20003580, r7) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000480)=@IORING_OP_SPLICE={0x1e, 0x40, 0x0, @fd=r0, 0xcf2e, {0x0, r5}, 0xedf4, 0x2, 0x1, {0x0, r7, r8}}, 0x5) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:25 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:25 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x13, 0x20003580, r5) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x80800, 0x1, {0x0, r5}}, 0x2) r6 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x20003580, r7) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0xfff) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1691.168061][T30153] xt_ct_set_helper: 64 callbacks suppressed [ 1691.168124][T30153] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1691.229057][T30157] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 22:56:25 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)={0x28, r0, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}]}]}, 0x28}}, 0x0) 22:56:25 executing program 2: io_uring_setup(0xc80, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r0, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:25 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x20, 0x100440) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3b4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x25}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x83}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x631}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x99}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x26244c524f2ab1ea}], @NL80211_ATTR_BSS_BASIC_RATES={0x1d, 0x24, [{0x20}, {0x1b}, {0x60, 0x1}, {0x29, 0x1}, {}, {0x1, 0x1}, {0x6}, {0xb, 0x1}, {0x36, 0x1}, {0x1b, 0x1}, {0xf, 0x1}, {0xb}, {0x2, 0x1}, {0x18}, {0x36, 0x1}, {0x48}, {0x36, 0x1}, {0x16, 0x1}, {0x3, 0x1}, {0xc, 0x1}, {0x5}, {0xc}, {0x6, 0x1}, {0x3}, {0x6c, 0x1}]}, @NL80211_ATTR_TX_RATES={0x314, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x200, 0xde, 0xff, 0x8001, 0x3, 0x2, 0x5a8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1000, 0x46f, 0xef9, 0x0, 0x40, 0x401, 0x1]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x2, 0x2, 0x1eb2, 0xcb4, 0x2, 0x40]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x2, 0x12, 0x30, 0x18, 0xc, 0x60, 0x12, 0x3, 0x24, 0x6c, 0x60, 0x1, 0x18, 0x16, 0x30, 0xc, 0x3, 0x1, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8228, 0x0, 0x0, 0x4, 0x401, 0x4, 0x8001, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff7f, 0x5, 0x3, 0x0, 0x5, 0x264, 0xe0, 0x1f]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x15, 0x60, 0x6, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x6}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x800, 0x3e, 0x1f, 0x20, 0x9, 0x40, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0xc2, 0x0, 0x1000, 0xfe, 0x0, 0x40]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x30, 0x12, 0x1, 0x2, 0x36, 0x6, 0x9, 0x5a, 0x18, 0xb, 0xc, 0x5a, 0x3, 0x2, 0x1b, 0x48, 0x1b, 0x6f, 0x2, 0x24, 0x30, 0x36, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x36, 0x30, 0x16, 0x36, 0x7, 0x0, 0x24, 0x3, 0x6, 0x30, 0x60, 0x6c, 0xc, 0x4, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xff, 0xff, 0x9, 0xa7, 0x401, 0x6, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x4, 0x401, 0x80, 0x7, 0x6, 0x81]}}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x24, 0x6c, 0x6c, 0x30, 0x30, 0x18, 0x2, 0x57d29e7f537911c9, 0x1, 0x12, 0x15, 0x30, 0x48, 0x1, 0x16, 0x16, 0x30, 0x18, 0x4, 0x4, 0x1a, 0x48, 0x1b, 0x18, 0x48, 0x18, 0xc, 0xb, 0x9]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x16, 0x1b, 0x18, 0x48, 0x30, 0x9, 0x1b, 0x32, 0xb, 0x1b, 0x60, 0x48, 0x1, 0x12, 0x9, 0xb, 0x1b, 0x12, 0x36, 0x60, 0x2, 0x18, 0xb, 0x16, 0x1b, 0x3, 0x12, 0x5, 0x1b, 0x6, 0x12, 0x16]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x4}, {0x7, 0x6}, {0x0, 0x4}, {0x4, 0x4}, {0x5, 0x5}, {0x0, 0x5}, {0x7, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x2, 0x8}, {0x2, 0x7}, {0x5, 0xa}, {0x1, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0x5}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x2}, {0x2, 0x4}, {0x1, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x4, 0x6}, {0x0, 0x2}, {0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x7}, {0x0, 0x2}, {0x6, 0x7}, {0x5}, {0x4, 0x1}, {0x7, 0x4}, {0x7, 0x8}, {0x2, 0x2}, {0x5, 0x5}, {0x2, 0x3}, {0x7, 0x5}, {0x2, 0x2}, {0x0, 0x2}, {0x5}, {0x0, 0x9}, {0x5, 0x1}, {0x6}, {0x0, 0x2}, {0x6, 0x9}, {0x0, 0x5}, {}, {0x1, 0x1}, {0x7, 0xa}, {0x6, 0x5}, {0x3, 0x7}, {0x6, 0x2}, {0x2, 0x2}, {0x6, 0x1}, {0x5}, {0x6, 0xa}, {0x2, 0x8}, {0x7, 0x1}, {0x7, 0x1}, {0x7}, {0x7, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x3ff, 0x0, 0x1, 0x305, 0x128, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4fd7, 0x1, 0x40, 0x9f6, 0x1, 0x7f, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x4, 0xc7c0, 0x5, 0x7, 0x4000, 0x9, 0x200]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x20, 0x4, 0xab48, 0x40, 0x81, 0xe84, 0xffff]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x34, 0x101, 0x1, 0x80, 0xe31, 0xd94, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6d, 0xbae7, 0x8, 0xfe01, 0x7ff, 0x9, 0x4, 0x94]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x3b4}}, 0x4010) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:25 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0xa7ae, 0x100}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/cpuid', 0x400080, 0x40) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x810283, 0x0) openat(r3, &(0x7f0000000440)='./file0\x00', 0x280000, 0x41) io_uring_enter(r2, 0x4561, 0x345e, 0x4, &(0x7f00000001c0), 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x5a5a42, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'wg1\x00', 0x400}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r7 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x20003580, r8) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:25 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x13, 0x20003580, r5) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x80800, 0x1, {0x0, r5}}, 0x2) (async, rerun: 32) r6 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x20003580, r7) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0xfff) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1691.677212][T30163] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1691.795674][T30174] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:25 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)={0x28, r0, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}]}]}, 0x28}}, 0x0) 22:56:25 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x13, 0x20003580, r5) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x80800, 0x1, {0x0, r5}}, 0x2) r6 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000140)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x20003580, r7) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0xfff) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async, rerun: 64) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:26 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendfile(r2, r3, &(0x7f0000000000)=0x4a1, 0x1) (async) r4 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TIOCNXCL(r4, 0x540d) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x20000023896) 22:56:26 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0xa7ae, 0x100}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/cpuid', 0x400080, 0x40) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x810283, 0x0) openat(r3, &(0x7f0000000440)='./file0\x00', 0x280000, 0x41) io_uring_enter(r2, 0x4561, 0x345e, 0x4, &(0x7f00000001c0), 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x5a5a42, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'wg1\x00', 0x400}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r7 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x20003580, r8) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0xa7ae, 0x100}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/cpuid', 0x400080, 0x40) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x810283, 0x0) (async) openat(r3, &(0x7f0000000440)='./file0\x00', 0x280000, 0x41) (async) io_uring_enter(r2, 0x4561, 0x345e, 0x4, &(0x7f00000001c0), 0x8) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x5a5a42, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'wg1\x00', 0x400}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r5) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x20003580, r8) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) [ 1692.068545][T30177] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 22:56:26 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)={0x28, r0, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}]}]}, 0x28}}, 0x0) 22:56:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r2 = syz_io_uring_setup(0x7c6c, &(0x7f00000002c0)={0x0, 0x0, 0x200, 0x0, 0x24f, 0x0, r1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0x59e0, &(0x7f0000000480)={0x0, 0xa2c2, 0x4, 0x3, 0x46, 0x0, r2}) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000008fcffff03074667970200000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x10044}, 0x4800) r5 = syz_open_dev$vcsu(&(0x7f0000000500), 0xef68d79, 0x880) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000540)=r4, 0x1) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000140)={'pim6reg0\x00'}) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) close_range(r2, 0xffffffffffffffff, 0x0) [ 1692.366548][T30187] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1692.402866][T30186] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:26 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x20, 0x100440) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3b4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x25}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x83}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x631}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x99}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x26244c524f2ab1ea}], @NL80211_ATTR_BSS_BASIC_RATES={0x1d, 0x24, [{0x20}, {0x1b}, {0x60, 0x1}, {0x29, 0x1}, {}, {0x1, 0x1}, {0x6}, {0xb, 0x1}, {0x36, 0x1}, {0x1b, 0x1}, {0xf, 0x1}, {0xb}, {0x2, 0x1}, {0x18}, {0x36, 0x1}, {0x48}, {0x36, 0x1}, {0x16, 0x1}, {0x3, 0x1}, {0xc, 0x1}, {0x5}, {0xc}, {0x6, 0x1}, {0x3}, {0x6c, 0x1}]}, @NL80211_ATTR_TX_RATES={0x314, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x200, 0xde, 0xff, 0x8001, 0x3, 0x2, 0x5a8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1000, 0x46f, 0xef9, 0x0, 0x40, 0x401, 0x1]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x2, 0x2, 0x1eb2, 0xcb4, 0x2, 0x40]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x2, 0x12, 0x30, 0x18, 0xc, 0x60, 0x12, 0x3, 0x24, 0x6c, 0x60, 0x1, 0x18, 0x16, 0x30, 0xc, 0x3, 0x1, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8228, 0x0, 0x0, 0x4, 0x401, 0x4, 0x8001, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff7f, 0x5, 0x3, 0x0, 0x5, 0x264, 0xe0, 0x1f]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x15, 0x60, 0x6, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x6}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x800, 0x3e, 0x1f, 0x20, 0x9, 0x40, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0xc2, 0x0, 0x1000, 0xfe, 0x0, 0x40]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x30, 0x12, 0x1, 0x2, 0x36, 0x6, 0x9, 0x5a, 0x18, 0xb, 0xc, 0x5a, 0x3, 0x2, 0x1b, 0x48, 0x1b, 0x6f, 0x2, 0x24, 0x30, 0x36, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x36, 0x30, 0x16, 0x36, 0x7, 0x0, 0x24, 0x3, 0x6, 0x30, 0x60, 0x6c, 0xc, 0x4, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xff, 0xff, 0x9, 0xa7, 0x401, 0x6, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x4, 0x401, 0x80, 0x7, 0x6, 0x81]}}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x24, 0x6c, 0x6c, 0x30, 0x30, 0x18, 0x2, 0x57d29e7f537911c9, 0x1, 0x12, 0x15, 0x30, 0x48, 0x1, 0x16, 0x16, 0x30, 0x18, 0x4, 0x4, 0x1a, 0x48, 0x1b, 0x18, 0x48, 0x18, 0xc, 0xb, 0x9]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x16, 0x1b, 0x18, 0x48, 0x30, 0x9, 0x1b, 0x32, 0xb, 0x1b, 0x60, 0x48, 0x1, 0x12, 0x9, 0xb, 0x1b, 0x12, 0x36, 0x60, 0x2, 0x18, 0xb, 0x16, 0x1b, 0x3, 0x12, 0x5, 0x1b, 0x6, 0x12, 0x16]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x4}, {0x7, 0x6}, {0x0, 0x4}, {0x4, 0x4}, {0x5, 0x5}, {0x0, 0x5}, {0x7, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x2, 0x8}, {0x2, 0x7}, {0x5, 0xa}, {0x1, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0x5}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x2}, {0x2, 0x4}, {0x1, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x4, 0x6}, {0x0, 0x2}, {0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x7}, {0x0, 0x2}, {0x6, 0x7}, {0x5}, {0x4, 0x1}, {0x7, 0x4}, {0x7, 0x8}, {0x2, 0x2}, {0x5, 0x5}, {0x2, 0x3}, {0x7, 0x5}, {0x2, 0x2}, {0x0, 0x2}, {0x5}, {0x0, 0x9}, {0x5, 0x1}, {0x6}, {0x0, 0x2}, {0x6, 0x9}, {0x0, 0x5}, {}, {0x1, 0x1}, {0x7, 0xa}, {0x6, 0x5}, {0x3, 0x7}, {0x6, 0x2}, {0x2, 0x2}, {0x6, 0x1}, {0x5}, {0x6, 0xa}, {0x2, 0x8}, {0x7, 0x1}, {0x7, 0x1}, {0x7}, {0x7, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x3ff, 0x0, 0x1, 0x305, 0x128, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4fd7, 0x1, 0x40, 0x9f6, 0x1, 0x7f, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x4, 0xc7c0, 0x5, 0x7, 0x4000, 0x9, 0x200]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x20, 0x4, 0xab48, 0x40, 0x81, 0xe84, 0xffff]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x34, 0x101, 0x1, 0x80, 0xe31, 0xd94, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6d, 0xbae7, 0x8, 0xfe01, 0x7ff, 0x9, 0x4, 0x94]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x3b4}}, 0x4010) (async) sendfile(r0, r1, 0x0, 0x20000023896) [ 1692.489121][T30193] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1692.593172][ T1186] ieee802154 phy0 wpan0: encryption failed: -22 [ 1692.599772][ T1186] ieee802154 phy1 wpan1: encryption failed: -22 [ 1692.618955][T30197] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:26 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0xa7ae, 0x100}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/cpuid', 0x400080, 0x40) (async, rerun: 64) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x810283, 0x0) openat(r3, &(0x7f0000000440)='./file0\x00', 0x280000, 0x41) (async) io_uring_enter(r2, 0x4561, 0x345e, 0x4, &(0x7f00000001c0), 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x5a5a42, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'wg1\x00', 0x400}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) r7 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x13, 0x20003580, r8) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 22:56:26 executing program 2: io_uring_setup(0xc80, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r0, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x890c, &(0x7f0000000280)={'gretap0\x00', 0x0}) 22:56:26 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendfile(r2, r3, &(0x7f0000000000)=0x4a1, 0x1) r4 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TIOCNXCL(r4, 0x540d) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendfile(r2, r3, &(0x7f0000000000)=0x4a1, 0x1) (async) dup(r1) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$TIOCNXCL(r4, 0x540d) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r5, 0x0, 0x20000023896) (async) 22:56:27 executing program 1: remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x0) 22:56:27 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) syz_io_uring_setup(0x2de6, &(0x7f0000000100)={0x0, 0x1636, 0x80, 0x2, 0x78}, &(0x7f00006c3000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x48, 0x4000, @fd_index=0xa, 0x1, &(0x7f0000001800)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="51cd48d1e045038e2943988c1bad8d099ebc56373090cc670479792b75867835942f720b43ddf2a5f1335263f4b0ea12d5edbe8a427367731d8ca788ad438195ced172f2ae2bf04ad09f205a2138b4547660dd66d040cf736204156ba4b14f8351a7c246d3b0e30e0dce0bae79f15728b10e53697f914abdfc4e11d825e9bc20900f8045d98073cb3d1395528ece9783a3e656e0e57d4e3da70b84e430628a91b4bb5c273606cb2bf380b7a3cf286800385e2545eeb04722bfc1f6e822afa6d6e51e3c408bb1e882c6546f246287b53ddfdca02f", 0xd4}, {&(0x7f0000001540)="4f9c851faed788922d5ad22b7aee3cc68fd18dbaf8c726de9b8f88ea2fb3c4612e6b136b17be2d083dd83c3395f8bbd8e04c874bde2c7a48c2a892ba132fb9b152b1f587112bfd21e70e68636ceacd69bb76d6bce554c6502e3d067802bef0cfd9c4eb7653a8328089b4d6cc9c68192f55835e6a4d8bfe7256af6dfe60bdc42f39436f56175a2d53deb2b7885e91ad6e8541cd8eb5a8fcbd4f163056b91e20a1a7a4db297788ff534833bf0cfef5f1eeead8af", 0xb3}, {&(0x7f0000001600)="1d5c20878ee3db68e33fae3bcdb4ef646d346de4b4660ee4b85334e66879b4bf76bb8420e8af617659e644503d70ad9e7e4846e45093f616c055ed7ddb54265b8fb7c4e062f044154f0cd83cb167bbabbc92fa1eae71c03dcf1e75daa9c712610da0c1b663d9b1763e790d1dc3887deec3e720746ed53ab34eab4f0c11edb9fa489b2b019e527c", 0x87}, {&(0x7f00000016c0)="0fd9fb1fb55050808be710c01267da2ac8b832efb2bc8a9e61f4734b5f7cd8aaf099bbfddfff6caa4746552602050a64861adbdadd3054af19a098d69d8ddd10c7f608854c9929d3c424f83edfa5c152587cdcfb72c4e837f19a08eeb9ef5e1573ffbbf9043c2132517f893c9a9611c592daf73f1e2772112935f24a4e725d640b767f389bf608b32bf1f9809107582e0f4e5b27d52718c2abcdc2", 0x9b}, {&(0x7f0000001780)="b42bb638fbd31e660ef90d2ce22f82125a68f4135cece99ff5a6fa5537ba1288617d513b8fb37a0f18b047d460a8c9c4891b4aebd103f68a434035e1748e563d8c0cc6815f8ef875eb9e547d138b", 0x4e}], 0x6, 0x10, 0x1, {0x0, r5}}, 0xfffffffa) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001900)=0x14) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) ioctl$FICLONE(r6, 0x40049409, r7) [ 1693.208707][T30213] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:27 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x20, 0x100440) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3b4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x25}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x83}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x631}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x99}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x26244c524f2ab1ea}], @NL80211_ATTR_BSS_BASIC_RATES={0x1d, 0x24, [{0x20}, {0x1b}, {0x60, 0x1}, {0x29, 0x1}, {}, {0x1, 0x1}, {0x6}, {0xb, 0x1}, {0x36, 0x1}, {0x1b, 0x1}, {0xf, 0x1}, {0xb}, {0x2, 0x1}, {0x18}, {0x36, 0x1}, {0x48}, {0x36, 0x1}, {0x16, 0x1}, {0x3, 0x1}, {0xc, 0x1}, {0x5}, {0xc}, {0x6, 0x1}, {0x3}, {0x6c, 0x1}]}, @NL80211_ATTR_TX_RATES={0x314, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x200, 0xde, 0xff, 0x8001, 0x3, 0x2, 0x5a8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1000, 0x46f, 0xef9, 0x0, 0x40, 0x401, 0x1]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x2, 0x2, 0x1eb2, 0xcb4, 0x2, 0x40]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x2, 0x12, 0x30, 0x18, 0xc, 0x60, 0x12, 0x3, 0x24, 0x6c, 0x60, 0x1, 0x18, 0x16, 0x30, 0xc, 0x3, 0x1, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8228, 0x0, 0x0, 0x4, 0x401, 0x4, 0x8001, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff7f, 0x5, 0x3, 0x0, 0x5, 0x264, 0xe0, 0x1f]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x15, 0x60, 0x6, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x6}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x800, 0x3e, 0x1f, 0x20, 0x9, 0x40, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0xc2, 0x0, 0x1000, 0xfe, 0x0, 0x40]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x30, 0x12, 0x1, 0x2, 0x36, 0x6, 0x9, 0x5a, 0x18, 0xb, 0xc, 0x5a, 0x3, 0x2, 0x1b, 0x48, 0x1b, 0x6f, 0x2, 0x24, 0x30, 0x36, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x36, 0x30, 0x16, 0x36, 0x7, 0x0, 0x24, 0x3, 0x6, 0x30, 0x60, 0x6c, 0xc, 0x4, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xff, 0xff, 0x9, 0xa7, 0x401, 0x6, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x4, 0x401, 0x80, 0x7, 0x6, 0x81]}}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x24, 0x6c, 0x6c, 0x30, 0x30, 0x18, 0x2, 0x57d29e7f537911c9, 0x1, 0x12, 0x15, 0x30, 0x48, 0x1, 0x16, 0x16, 0x30, 0x18, 0x4, 0x4, 0x1a, 0x48, 0x1b, 0x18, 0x48, 0x18, 0xc, 0xb, 0x9]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x16, 0x1b, 0x18, 0x48, 0x30, 0x9, 0x1b, 0x32, 0xb, 0x1b, 0x60, 0x48, 0x1, 0x12, 0x9, 0xb, 0x1b, 0x12, 0x36, 0x60, 0x2, 0x18, 0xb, 0x16, 0x1b, 0x3, 0x12, 0x5, 0x1b, 0x6, 0x12, 0x16]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x4}, {0x7, 0x6}, {0x0, 0x4}, {0x4, 0x4}, {0x5, 0x5}, {0x0, 0x5}, {0x7, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x2, 0x8}, {0x2, 0x7}, {0x5, 0xa}, {0x1, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0x5}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x2}, {0x2, 0x4}, {0x1, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x4, 0x6}, {0x0, 0x2}, {0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x7}, {0x0, 0x2}, {0x6, 0x7}, {0x5}, {0x4, 0x1}, {0x7, 0x4}, {0x7, 0x8}, {0x2, 0x2}, {0x5, 0x5}, {0x2, 0x3}, {0x7, 0x5}, {0x2, 0x2}, {0x0, 0x2}, {0x5}, {0x0, 0x9}, {0x5, 0x1}, {0x6}, {0x0, 0x2}, {0x6, 0x9}, {0x0, 0x5}, {}, {0x1, 0x1}, {0x7, 0xa}, {0x6, 0x5}, {0x3, 0x7}, {0x6, 0x2}, {0x2, 0x2}, {0x6, 0x1}, {0x5}, {0x6, 0xa}, {0x2, 0x8}, {0x7, 0x1}, {0x7, 0x1}, {0x7}, {0x7, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x3ff, 0x0, 0x1, 0x305, 0x128, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4fd7, 0x1, 0x40, 0x9f6, 0x1, 0x7f, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x4, 0xc7c0, 0x5, 0x7, 0x4000, 0x9, 0x200]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x20, 0x4, 0xab48, 0x40, 0x81, 0xe84, 0xffff]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x34, 0x101, 0x1, 0x80, 0xe31, 0xd94, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6d, 0xbae7, 0x8, 0xfe01, 0x7ff, 0x9, 0x4, 0x94]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x3b4}}, 0x4010) (async, rerun: 64) sendfile(r0, r1, 0x0, 0x20000023896) (rerun: 64) 22:56:27 executing program 1: add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 22:56:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r2 = syz_io_uring_setup(0x7c6c, &(0x7f00000002c0)={0x0, 0x0, 0x200, 0x0, 0x24f, 0x0, r1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0x59e0, &(0x7f0000000480)={0x0, 0xa2c2, 0x4, 0x3, 0x46, 0x0, r2}) io_uring_setup(0xc80, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x800, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000008fcffff03074667970200000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x10044}, 0x4800) (async) r5 = syz_open_dev$vcsu(&(0x7f0000000500), 0xef68d79, 0x880) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000540)=r4, 0x1) (async) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000140)={'pim6reg0\x00'}) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) close_range(r2, 0xffffffffffffffff, 0x0) 22:56:27 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendfile(r0, r1, 0x0, 0x20000023896) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TCSBRKP(r3, 0x5425, 0x2) 22:56:27 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) pipe(0x0) close(0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce2000}, 0x200000}) [ 1693.778801][T30230] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:28 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x301c42, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) [ 1693.898729][T30235] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:28 executing program 1: syz_clone(0x4820a500, 0x0, 0x0, 0x0, 0x0, 0x0) 22:56:28 executing program 2: io_uring_setup(0xc80, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r0, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) r2 = syz_io_uring_setup(0x7c6c, &(0x7f00000002c0)={0x0, 0x0, 0x200, 0x0, 0x24f, 0x0, r1}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0x59e0, &(0x7f0000000480)={0x0, 0xa2c2, 0x4, 0x3, 0x46, 0x0, r2}) (async, rerun: 64) io_uring_setup(0xc80, &(0x7f0000000080)) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000008fcffff03074667970200000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x10044}, 0x4800) (async, rerun: 32) r5 = syz_open_dev$vcsu(&(0x7f0000000500), 0xef68d79, 0x880) (rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000540)=r4, 0x1) (async) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000140)={'pim6reg0\x00'}) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) (async) close_range(r2, 0xffffffffffffffff, 0x0) 22:56:28 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) syz_io_uring_setup(0x2de6, &(0x7f0000000100)={0x0, 0x1636, 0x80, 0x2, 0x78}, &(0x7f00006c3000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x48, 0x4000, @fd_index=0xa, 0x1, &(0x7f0000001800)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="51cd48d1e045038e2943988c1bad8d099ebc56373090cc670479792b75867835942f720b43ddf2a5f1335263f4b0ea12d5edbe8a427367731d8ca788ad438195ced172f2ae2bf04ad09f205a2138b4547660dd66d040cf736204156ba4b14f8351a7c246d3b0e30e0dce0bae79f15728b10e53697f914abdfc4e11d825e9bc20900f8045d98073cb3d1395528ece9783a3e656e0e57d4e3da70b84e430628a91b4bb5c273606cb2bf380b7a3cf286800385e2545eeb04722bfc1f6e822afa6d6e51e3c408bb1e882c6546f246287b53ddfdca02f", 0xd4}, {&(0x7f0000001540)="4f9c851faed788922d5ad22b7aee3cc68fd18dbaf8c726de9b8f88ea2fb3c4612e6b136b17be2d083dd83c3395f8bbd8e04c874bde2c7a48c2a892ba132fb9b152b1f587112bfd21e70e68636ceacd69bb76d6bce554c6502e3d067802bef0cfd9c4eb7653a8328089b4d6cc9c68192f55835e6a4d8bfe7256af6dfe60bdc42f39436f56175a2d53deb2b7885e91ad6e8541cd8eb5a8fcbd4f163056b91e20a1a7a4db297788ff534833bf0cfef5f1eeead8af", 0xb3}, {&(0x7f0000001600)="1d5c20878ee3db68e33fae3bcdb4ef646d346de4b4660ee4b85334e66879b4bf76bb8420e8af617659e644503d70ad9e7e4846e45093f616c055ed7ddb54265b8fb7c4e062f044154f0cd83cb167bbabbc92fa1eae71c03dcf1e75daa9c712610da0c1b663d9b1763e790d1dc3887deec3e720746ed53ab34eab4f0c11edb9fa489b2b019e527c", 0x87}, {&(0x7f00000016c0)="0fd9fb1fb55050808be710c01267da2ac8b832efb2bc8a9e61f4734b5f7cd8aaf099bbfddfff6caa4746552602050a64861adbdadd3054af19a098d69d8ddd10c7f608854c9929d3c424f83edfa5c152587cdcfb72c4e837f19a08eeb9ef5e1573ffbbf9043c2132517f893c9a9611c592daf73f1e2772112935f24a4e725d640b767f389bf608b32bf1f9809107582e0f4e5b27d52718c2abcdc2", 0x9b}, {&(0x7f0000001780)="b42bb638fbd31e660ef90d2ce22f82125a68f4135cece99ff5a6fa5537ba1288617d513b8fb37a0f18b047d460a8c9c4891b4aebd103f68a434035e1748e563d8c0cc6815f8ef875eb9e547d138b", 0x4e}], 0x6, 0x10, 0x1, {0x0, r5}}, 0xfffffffa) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001900)=0x14) (async, rerun: 64) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) ioctl$FICLONE(r6, 0x40049409, r7) [ 1694.366564][T30246] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:28 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x301c42, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:28 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendfile(r0, r1, 0x0, 0x20000023896) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TCSBRKP(r3, 0x5425, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r2) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$TCSBRKP(r3, 0x5425, 0x2) (async) 22:56:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 22:56:28 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x20000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'tunl0\x00', 0x200}) 22:56:28 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x301c42, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x301c42, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) [ 1694.857519][T30267] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:28 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) syz_io_uring_setup(0x2de6, &(0x7f0000000100)={0x0, 0x1636, 0x80, 0x2, 0x78}, &(0x7f00006c3000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x48, 0x4000, @fd_index=0xa, 0x1, &(0x7f0000001800)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="51cd48d1e045038e2943988c1bad8d099ebc56373090cc670479792b75867835942f720b43ddf2a5f1335263f4b0ea12d5edbe8a427367731d8ca788ad438195ced172f2ae2bf04ad09f205a2138b4547660dd66d040cf736204156ba4b14f8351a7c246d3b0e30e0dce0bae79f15728b10e53697f914abdfc4e11d825e9bc20900f8045d98073cb3d1395528ece9783a3e656e0e57d4e3da70b84e430628a91b4bb5c273606cb2bf380b7a3cf286800385e2545eeb04722bfc1f6e822afa6d6e51e3c408bb1e882c6546f246287b53ddfdca02f", 0xd4}, {&(0x7f0000001540)="4f9c851faed788922d5ad22b7aee3cc68fd18dbaf8c726de9b8f88ea2fb3c4612e6b136b17be2d083dd83c3395f8bbd8e04c874bde2c7a48c2a892ba132fb9b152b1f587112bfd21e70e68636ceacd69bb76d6bce554c6502e3d067802bef0cfd9c4eb7653a8328089b4d6cc9c68192f55835e6a4d8bfe7256af6dfe60bdc42f39436f56175a2d53deb2b7885e91ad6e8541cd8eb5a8fcbd4f163056b91e20a1a7a4db297788ff534833bf0cfef5f1eeead8af", 0xb3}, {&(0x7f0000001600)="1d5c20878ee3db68e33fae3bcdb4ef646d346de4b4660ee4b85334e66879b4bf76bb8420e8af617659e644503d70ad9e7e4846e45093f616c055ed7ddb54265b8fb7c4e062f044154f0cd83cb167bbabbc92fa1eae71c03dcf1e75daa9c712610da0c1b663d9b1763e790d1dc3887deec3e720746ed53ab34eab4f0c11edb9fa489b2b019e527c", 0x87}, {&(0x7f00000016c0)="0fd9fb1fb55050808be710c01267da2ac8b832efb2bc8a9e61f4734b5f7cd8aaf099bbfddfff6caa4746552602050a64861adbdadd3054af19a098d69d8ddd10c7f608854c9929d3c424f83edfa5c152587cdcfb72c4e837f19a08eeb9ef5e1573ffbbf9043c2132517f893c9a9611c592daf73f1e2772112935f24a4e725d640b767f389bf608b32bf1f9809107582e0f4e5b27d52718c2abcdc2", 0x9b}, {&(0x7f0000001780)="b42bb638fbd31e660ef90d2ce22f82125a68f4135cece99ff5a6fa5537ba1288617d513b8fb37a0f18b047d460a8c9c4891b4aebd103f68a434035e1748e563d8c0cc6815f8ef875eb9e547d138b", 0x4e}], 0x6, 0x10, 0x1, {0x0, r5}}, 0xfffffffa) (async, rerun: 32) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (async) r6 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001900)=0x14) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) ioctl$FICLONE(r6, 0x40049409, r7) 22:56:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 22:56:29 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TCSBRKP(r3, 0x5425, 0x2) 22:56:29 executing program 4: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xe6) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x49a8c0, 0x0) flock(r0, 0x9) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) socket(0x1, 0xa, 0x100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000000), 0x2, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TCSETS(r6, 0x5402, &(0x7f00000001c0)={0xe650, 0x5, 0x7fff, 0x400, 0x2, "e29ad1fb7033b604f8592b3a611ff1f6dcc055"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) ioctl$FIOCLEX(r8, 0x5451) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/usbtest', 0x400002, 0x0) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x54, 0x13, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "7db0c875"}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000000140)) sendfile(r7, r9, &(0x7f0000000100)=0x2, 0xffffffffffffc970) 22:56:29 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:29 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000240)) fsetxattr$system_posix_acl(r0, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0) 22:56:29 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x20000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'tunl0\x00', 0x200}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x20000) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'tunl0\x00', 0x200}) (async) 22:56:29 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000100), 0x8, 0x50000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r2 = signalfd(r0, &(0x7f0000000240)={[0x2]}, 0x8) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000440)={0xffffffffffffff00, 0x7, 0x9}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r5 = io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0xec71, 0x0, 0x0, 0x1e4, 0x0, r4}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) r7 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0xd1) write$binfmt_script(r7, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '\'%{^'}, {0x20, 'pptp\x00'}, {0x20, '%-$'}, {}, {0x20, '}%+{}!-..^-[P$!'}, {0x20, '\\#{#{-*-^,'}], 0xa, "bfd725892e3473ec978010ab501a921047e8b098d482accbdd7958e2e30aa6de5e398b675496883142da2e3ac94018c33631a8c6302ca64785abdb313dd77dd63febf7c23f061fdf609f63432f0c4e65a37bce18f42ed8dc01d1a8b1bb9e8e3c8238ab832c0beb942f98d8d6c1bd2555fbc8fe1092747710a9006194b4ff555adce34452cd"}, 0xbb) preadv(r6, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r8, 0xf502, 0x0) ppoll(&(0x7f00000004c0)=[{r5, 0x8000}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={[0x8]}, 0x8) syz_open_dev$admmidi(&(0x7f0000000180), 0x4, 0x10440) ioctl$FITHAW(r0, 0xc0045878) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x200000c, 0x10, r0, 0xda6a3000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000480)={0x3, 0x3, 0x2, {0x0, 0xa19, 0x7, 0x7fffffff}}) 22:56:29 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000000c0)=0x3) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000080)) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "cba4239568f0c6643a91c6e3cca40d2843db7b6e086ae29e7b13fdcafc215a59171038fc9d9bdee2ed125d2c43e85e26643c3e3ec5fd3e86b0f36baf8e82c8d6"}, 0x48, r0) keyctl$revoke(0x3, r1) 22:56:29 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010003000000402505a8a440000102030109021b0001010000000904"], &(0x7f0000000540)={0x0, 0x0, 0x19, &(0x7f00000000c0)=ANY=[]}) 22:56:30 executing program 4: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xe6) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x49a8c0, 0x0) flock(r0, 0x9) (async) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) socket(0x1, 0xa, 0x100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000000), 0x2, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$TCSETS(r6, 0x5402, &(0x7f00000001c0)={0xe650, 0x5, 0x7fff, 0x400, 0x2, "e29ad1fb7033b604f8592b3a611ff1f6dcc055"}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) ioctl$FIOCLEX(r8, 0x5451) (async) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/usbtest', 0x400002, 0x0) (async) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x54, 0x13, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "7db0c875"}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000000140)) (async) sendfile(r7, r9, &(0x7f0000000100)=0x2, 0xffffffffffffc970) 22:56:30 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x20000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'tunl0\x00', 0x200}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x20000) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'tunl0\x00', 0x200}) (async) 22:56:30 executing program 4: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2321202e2f66696c6530207d2a2d2720232325283a202c58ce5c1ee33cccbdad6af7ee64657667726f8f70000a735e6be4d3a5522dc86893ba5f83a5cd84881f4fec79a98fd7f63b6a879294f220b6a41473f680768354480f48ad9fc73701310b8c8149a18136a6344e3b5881ea2ef83c7b1a1ae3ff20e1b16e3dbdb98805885b0ae3716b52da66e7f6cbc16b4ac6593cc421580e4fba9b64fe3632d39594b4ffe2e747e8c790df46289dc7c19ee1b234cce128c2f8a7d448c6fb7c175d39fa7d5516dc4fa0b012b5bf74ca4d83bdfb1a4e2e5aa8cb9dcaae63e426d3cc33d47277b291f0392d433ccfc19a838151262ae1a91d3d53e0ff2b5ebf6370b608bd09b453eb5050bbc5c3af1a6c3cd038d8e1e060221b03ad1adc3878fd2e0869ffe77a99bc28759b0a65cea57ca9ad2e4e5f980349f496c1c43befa05bb6949405dd52f11407d021cea7645c6bd4bb4018f93882bcb2e0a31488b4bd36e2251c360603a72ffbc44aaa506ea58a053a4a250e3958db8e68f164ac333c4fad81ae8d62244ff95003079f1e527b009b841dce611f8493bb57bf611e354f75c62cd42174f8b22c2c8d5c"], 0xe6) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x49a8c0, 0x0) flock(r0, 0x9) (async, rerun: 64) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) (async, rerun: 64) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) socket(0x1, 0xa, 0x100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000000), 0x2, 0x0) (async) sendfile(r0, r2, 0x0, 0x20000023896) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$TCSETS(r6, 0x5402, &(0x7f00000001c0)={0xe650, 0x5, 0x7fff, 0x400, 0x2, "e29ad1fb7033b604f8592b3a611ff1f6dcc055"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) ioctl$FIOCLEX(r8, 0x5451) (async, rerun: 32) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/usbtest', 0x400002, 0x0) (async, rerun: 32) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x54, 0x13, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "7db0c875"}]}, 0x54}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000000140)) (async, rerun: 64) sendfile(r7, r9, &(0x7f0000000100)=0x2, 0xffffffffffffc970) (rerun: 64) [ 1696.322634][ T5081] usb 2-1: new high-speed USB device number 9 using dummy_hcd 22:56:30 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000000c0)=0x3) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000080)) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x6) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r2) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000000c0)=0x3) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000080)) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:56:30 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1696.562398][T30327] xt_ct_set_helper: 4 callbacks suppressed [ 1696.562530][T30327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1696.632937][T30331] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:30 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000100), 0x8, 0x50000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) (async) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) r2 = signalfd(r0, &(0x7f0000000240)={[0x2]}, 0x8) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000440)={0xffffffffffffff00, 0x7, 0x9}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) r5 = io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0xec71, 0x0, 0x0, 0x1e4, 0x0, r4}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) r7 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0xd1) write$binfmt_script(r7, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '\'%{^'}, {0x20, 'pptp\x00'}, {0x20, '%-$'}, {}, {0x20, '}%+{}!-..^-[P$!'}, {0x20, '\\#{#{-*-^,'}], 0xa, "bfd725892e3473ec978010ab501a921047e8b098d482accbdd7958e2e30aa6de5e398b675496883142da2e3ac94018c33631a8c6302ca64785abdb313dd77dd63febf7c23f061fdf609f63432f0c4e65a37bce18f42ed8dc01d1a8b1bb9e8e3c8238ab832c0beb942f98d8d6c1bd2555fbc8fe1092747710a9006194b4ff555adce34452cd"}, 0xbb) (async) preadv(r6, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r8, 0xf502, 0x0) (async) ppoll(&(0x7f00000004c0)=[{r5, 0x8000}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={[0x8]}, 0x8) (async) syz_open_dev$admmidi(&(0x7f0000000180), 0x4, 0x10440) (async) ioctl$FITHAW(r0, 0xc0045878) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x200000c, 0x10, r0, 0xda6a3000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000480)={0x3, 0x3, 0x2, {0x0, 0xa19, 0x7, 0x7fffffff}}) [ 1696.723384][ T5081] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1696.803173][ T5081] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 22:56:30 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x4c42, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0xacb1eea) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) sendfile(r3, r3, 0x0, 0x20000023896) 22:56:30 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000440)=""/166, 0xa6}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f00000005c0)=""/29, 0x1d}, {&(0x7f0000000600)=""/33, 0x21}], 0x7) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000100)=""/211, 0xd3}], 0x1, 0x0, 0x0) dup3(r1, r1, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) r3 = dup2(r2, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f00006c3000/0x4000)=nil, 0x4000, 0x5, 0x810, r3, 0x10000000) 22:56:31 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000000c0)=0x3) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000080)) (async) sendfile(r0, r1, 0x0, 0x20000023896) [ 1696.972994][ T5081] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1696.982911][ T5081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.991118][ T5081] usb 2-1: Product: syz [ 1696.995693][ T5081] usb 2-1: Manufacturer: syz [ 1697.000633][ T5081] usb 2-1: SerialNumber: syz [ 1697.084680][T30342] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1697.105106][T30347] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:31 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x4c42, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0xacb1eea) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TCXONC(r5, 0x540a, 0x2) (async) ioctl$TCFLSH(r1, 0x540b, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async, rerun: 64) sendfile(r3, r3, 0x0, 0x20000023896) (rerun: 64) 22:56:31 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000100), 0x8, 0x50000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) (async) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r2 = signalfd(r0, &(0x7f0000000240)={[0x2]}, 0x8) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000440)={0xffffffffffffff00, 0x7, 0x9}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) r5 = io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0xec71, 0x0, 0x0, 0x1e4, 0x0, r4}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) r7 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0xd1) write$binfmt_script(r7, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '\'%{^'}, {0x20, 'pptp\x00'}, {0x20, '%-$'}, {}, {0x20, '}%+{}!-..^-[P$!'}, {0x20, '\\#{#{-*-^,'}], 0xa, "bfd725892e3473ec978010ab501a921047e8b098d482accbdd7958e2e30aa6de5e398b675496883142da2e3ac94018c33631a8c6302ca64785abdb313dd77dd63febf7c23f061fdf609f63432f0c4e65a37bce18f42ed8dc01d1a8b1bb9e8e3c8238ab832c0beb942f98d8d6c1bd2555fbc8fe1092747710a9006194b4ff555adce34452cd"}, 0xbb) (async) preadv(r6, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r8, 0xf502, 0x0) (async) ppoll(&(0x7f00000004c0)=[{r5, 0x8000}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={[0x8]}, 0x8) (async) syz_open_dev$admmidi(&(0x7f0000000180), 0x4, 0x10440) (async) ioctl$FITHAW(r0, 0xc0045878) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x200000c, 0x10, r0, 0xda6a3000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000480)={0x3, 0x3, 0x2, {0x0, 0xa19, 0x7, 0x7fffffff}}) [ 1697.340423][T30353] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1697.390809][ T5081] usb 2-1: USB disconnect, device number 9 [ 1697.569296][T30357] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1697.679925][T30361] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:32 executing program 1: syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="630e01000002bbbbbbbbbbbb8100000086dd60902237004d1100fc090000000000000000000000000000ff02000000000000000000000000000100004e21"], 0x0) 22:56:32 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:32 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x4c42, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0xacb1eea) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) sendfile(r3, r3, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x4c42, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)) (async) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async) ioctl$TCSBRKP(r2, 0x5425, 0xacb1eea) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r4) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$TCXONC(r5, 0x540a, 0x2) (async) ioctl$TCFLSH(r1, 0x540b, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) sendfile(r3, r3, 0x0, 0x20000023896) (async) 22:56:32 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:32 executing program 5: r0 = syz_io_uring_setup(0x63d2, &(0x7f00000002c0)={0x0, 0x0, 0x200}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c5000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000100)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:32 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000440)=""/166, 0xa6}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f00000005c0)=""/29, 0x1d}, {&(0x7f0000000600)=""/33, 0x21}], 0x7) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async, rerun: 32) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000100)=""/211, 0xd3}], 0x1, 0x0, 0x0) (rerun: 32) dup3(r1, r1, 0x80000) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = dup2(r2, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f00006c3000/0x4000)=nil, 0x4000, 0x5, 0x810, r3, 0x10000000) [ 1698.139704][T30372] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:32 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:56:32 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) sendfile(r1, r0, 0x0, 0x100000001) 22:56:32 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000280)={@random="630efbfdcb73", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b8ba27", 0xffffffffffffffe4, 0x2f, 0x0, @remote, @private1}}}}, 0x0) 22:56:32 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) 22:56:32 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000440)=""/166, 0xa6}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f00000005c0)=""/29, 0x1d}, {&(0x7f0000000600)=""/33, 0x21}], 0x7) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000100)=""/211, 0xd3}], 0x1, 0x0, 0x0) dup3(r1, r1, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) r3 = dup2(r2, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f00006c3000/0x4000)=nil, 0x4000, 0x5, 0x810, r3, 0x10000000) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000440)=""/166, 0xa6}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f00000005c0)=""/29, 0x1d}, {&(0x7f0000000600)=""/33, 0x21}], 0x7) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000100)=""/211, 0xd3}], 0x1, 0x0, 0x0) (async) dup3(r1, r1, 0x80000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) dup2(r2, 0xffffffffffffffff) (async) mmap$IORING_OFF_SQES(&(0x7f00006c3000/0x4000)=nil, 0x4000, 0x5, 0x810, r3, 0x10000000) (async) 22:56:32 executing program 1: r0 = eventfd(0x0) write(r0, 0x0, 0x0) 22:56:32 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) sendfile(r1, r0, 0x0, 0x100000001) 22:56:33 executing program 2: r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:33 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000000)) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:33 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0xe0, 0x200) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x15, 0xc, 0xf, 0x16, 0x5, 0x1, 0x1, 0x43, 0x1}}) socket$inet(0x2, 0x3, 0x5) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0400, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) 22:56:33 executing program 5: r0 = syz_io_uring_setup(0x63d2, &(0x7f00000002c0)={0x0, 0x0, 0x200}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c5000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000100)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x63d2, &(0x7f00000002c0)={0x0, 0x0, 0x200}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c5000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000100)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:33 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) sendfile(r1, r0, 0x0, 0x100000001) 22:56:33 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x19, 0x0}) 22:56:33 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000640)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd_index=0x3, 0x3, 0x0, 0xffff}, 0x0) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ftruncate(r3, 0x4) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/201, 0xc9}, {&(0x7f0000000440)=""/250, 0xfa}], 0x2, &(0x7f0000000540)=""/142, 0x8e}, 0x69b4d5c80d78302b) 22:56:33 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)=0x1) 22:56:33 executing program 5: r0 = syz_io_uring_setup(0x63d2, &(0x7f00000002c0)={0x0, 0x0, 0x200}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c5000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000100)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:33 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000000)) (async) sendfile(r0, r1, 0x0, 0x20000023896) [ 1699.962898][T19792] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1700.047381][T30449] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:34 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000000)) (async, rerun: 64) sendfile(r0, r1, 0x0, 0x20000023896) (rerun: 64) 22:56:34 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000640)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd_index=0x3, 0x3, 0x0, 0xffff}, 0x0) (async) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ftruncate(r3, 0x4) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/201, 0xc9}, {&(0x7f0000000440)=""/250, 0xfa}], 0x2, &(0x7f0000000540)=""/142, 0x8e}, 0x69b4d5c80d78302b) [ 1700.393365][T19792] usb 2-1: unable to get BOS descriptor or descriptor too short 22:56:34 executing program 2: r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:34 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) r6 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r3, r2, r2, r4, r0, r5, r1, r6], 0x8) close_range(r0, 0xffffffffffffffff, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000240)={'bridge_slave_0\x00', 0x600}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) 22:56:34 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)=0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r2) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)=0x1) (async) [ 1700.492648][T19792] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 22:56:34 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x0, 0x200000) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x81) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x2a0200, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0]) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbb1e41b12f7e4e6a73e773189cc90261db7ce40137506e07b7d2fd86cd44c2d95294b8234f9d2a45a38fde90c89887536dbced70ccdf50627062ae68e5af16b4a25ba7c85721"]) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x9, 0x6, 0x71}, {0x2e, 0x8, 0x4, 0xd5cb}, {0x1f, 0x3, 0x5, 0x3ff}, {0x1, 0x2, 0x5, 0x3}]}) dup(r2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x20000023896) 22:56:34 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000640)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd_index=0x3, 0x3, 0x0, 0xffff}, 0x0) (async) r3 = io_uring_setup(0xc80, &(0x7f0000000080)) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ftruncate(r3, 0x4) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/201, 0xc9}, {&(0x7f0000000440)=""/250, 0xfa}], 0x2, &(0x7f0000000540)=""/142, 0x8e}, 0x69b4d5c80d78302b) [ 1700.682278][T19792] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1700.691749][T19792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.699951][T19792] usb 2-1: Product: syz [ 1700.705105][T19792] usb 2-1: Manufacturer: syz [ 1700.709885][T19792] usb 2-1: SerialNumber: syz [ 1700.790625][T30466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1701.116168][T19792] usb 2-1: USB disconnect, device number 10 22:56:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x111, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 22:56:35 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) r6 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r3, r2, r2, r4, r0, r5, r1, r6], 0x8) close_range(r0, 0xffffffffffffffff, 0x0) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000240)={'bridge_slave_0\x00', 0x600}) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) 22:56:35 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)=0x1) 22:56:35 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002edf66696c653000"]) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000002640)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x10, 0x3f8, 0x400, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x80c8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002680)=ANY=[@ANYBLOB="38000000100039040000000000000000000003e4", @ANYRES32=r8, @ANYBLOB="00000000000000001800128008000100736974000c00028008000f00", @ANYRES32=r7, @ANYRES64=r4], 0x38}}, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x80, @vifc_lcl_ifindex=r8, @multicast2}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000004200)={0x78, 0xfffffffffffffffe, r9, {0x0, 0x0, 0x0, {0x2, 0x0, 0x3, 0x5, 0x7, 0x2, 0x7fff, 0x0, 0x4, 0x8000, 0x7, r10, 0x0, 0x8628}}}, 0x78) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@migrate={0x1c8, 0x21, 0x302, 0x70bd2c, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e20, 0xccd, 0x4e23, 0x0, 0x2, 0x80, 0x0, 0x33, r8, r10}, 0x6e6bb7, 0x1}, [@migrate={0xe8, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, @in6=@empty, @in6=@remote, @in=@broadcast, 0xff, 0x3, 0x0, 0x3500, 0xa, 0x2}, {@in=@multicast2, @in=@remote, @in6=@private0, @in6=@empty, 0x33, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast2, @in6=@mcast2, @in=@local, @in6=@private0, 0x2b, 0x2, 0x0, 0x3506, 0xa, 0x2}]}, @etimer_thresh={0x8, 0xc, 0x3}, @policy_type={0xa}, @algo_auth={0x65, 0x1, {{'sha256-ni\x00'}, 0xe8, "05f774e67018fc3b701cc228660ef0dfe779b6fc15b5dcc1ec12320c19"}}, @proto={0x5, 0x19, 0x3c}, @lastused={0xc, 0xf, 0x10000}]}, 0x1c8}}, 0x4048004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002100), 0xc, &(0x7f0000002400)={&(0x7f00000026c0)=@expire={0x208, 0x18, 0x8, 0x70bd27, 0x25dfdbff, {{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4e20, 0x3, 0x4e22, 0x1, 0x2, 0x120, 0x20, 0x2e, r6, r10}, {@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4d6, 0x2b}, @in6=@private1, {0xffffffffffffff76, 0x1, 0x1fa, 0x4, 0x7, 0x1000, 0x5, 0x9}, {0x3, 0x80000000, 0x0, 0x3}, {0x5, 0x3, 0x1}, 0x70bd25, 0x3503, 0x6, 0x4, 0xff, 0x38}, 0x6}, [@address_filter={0x28, 0x1a, {@in=@broadcast, @in=@local, 0xa, 0x3, 0x1f}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010100, @in6=@remote, 0x0, 0x2}}, @tfcpad={0x8}, @offload={0xc, 0x1c, {0x0, 0x2}}, @algo_auth_trunc={0x7f, 0x14, {{'sha224-arm64\x00'}, 0x198, 0x180, "796345045a5d65f84c869ff35451eb9a5fd0595824c04829dd0f8ba460400b9a596e15ee4a7a6721e28a6fd4cf8881a9492133"}}, @mark={0xc, 0x15, {0x35075a, 0x9}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e22, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}]}, 0x208}, 0x1, 0x0, 0x0, 0x810}, 0x8000) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200001, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x10001}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'rose0\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@flag='nomand'}]}}) io_uring_setup(0x10c80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, r1}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r11, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:35 executing program 2: r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:35 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x0, 0x200000) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x81) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x2a0200, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0]) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbb1e41b12f7e4e6a73e773189cc90261db7ce40137506e07b7d2fd86cd44c2d95294b8234f9d2a45a38fde90c89887536dbced70ccdf50627062ae68e5af16b4a25ba7c85721"]) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x9, 0x6, 0x71}, {0x2e, 0x8, 0x4, 0xd5cb}, {0x1f, 0x3, 0x5, 0x3ff}, {0x1, 0x2, 0x5, 0x3}]}) (async, rerun: 32) dup(r2) (async, rerun: 32) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x20000023896) [ 1701.833935][T30493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1701.943710][T30492] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 22:56:36 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) r6 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r3, r2, r2, r4, r0, r5, r1, r6], 0x8) close_range(r0, 0xffffffffffffffff, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000240)={'bridge_slave_0\x00', 0x600}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r3, r2, r2, r4, r0, r5, r1, r6], 0x8) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) (async) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000240)={'bridge_slave_0\x00', 0x600}) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) (async) 22:56:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000b800)={0x0, 0x0, &(0x7f000000b7c0)={&(0x7f0000000280)=@newtaction={0x70, 0x1c, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 22:56:36 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x0, 0x200000) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x81) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x2a0200, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0]) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbb1e41b12f7e4e6a73e773189cc90261db7ce40137506e07b7d2fd86cd44c2d95294b8234f9d2a45a38fde90c89887536dbced70ccdf50627062ae68e5af16b4a25ba7c85721"]) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x9, 0x6, 0x71}, {0x2e, 0x8, 0x4, 0xd5cb}, {0x1f, 0x3, 0x5, 0x3ff}, {0x1, 0x2, 0x5, 0x3}]}) (async) dup(r2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x20000023896) 22:56:36 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 22:56:36 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000940)={'syztnl1\x00', 0x0}) 22:56:36 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x202) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044584, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0\x00'}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000140)=[@ioring_restriction_sqe_flags_required={0x3, 0x797e4a0aa052026e}, @ioring_restriction_sqe_op={0x1, 0x18}], 0x2) 22:56:36 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000280)={@random="630efbfdcb73", @multicast, @val={@void, {0x806}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b8ba27", 0x44, 0x2f, 0x0, @remote, @private1}}}}, 0x0) 22:56:36 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002edf66696c653000"]) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) (async) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000002640)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x10, 0x3f8, 0x400, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x80c8) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002680)=ANY=[@ANYBLOB="38000000100039040000000000000000000003e4", @ANYRES32=r8, @ANYBLOB="00000000000000001800128008000100736974000c00028008000f00", @ANYRES32=r7, @ANYRES64=r4], 0x38}}, 0x0) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x80, @vifc_lcl_ifindex=r8, @multicast2}, 0x10) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000004200)={0x78, 0xfffffffffffffffe, r9, {0x0, 0x0, 0x0, {0x2, 0x0, 0x3, 0x5, 0x7, 0x2, 0x7fff, 0x0, 0x4, 0x8000, 0x7, r10, 0x0, 0x8628}}}, 0x78) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@migrate={0x1c8, 0x21, 0x302, 0x70bd2c, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e20, 0xccd, 0x4e23, 0x0, 0x2, 0x80, 0x0, 0x33, r8, r10}, 0x6e6bb7, 0x1}, [@migrate={0xe8, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, @in6=@empty, @in6=@remote, @in=@broadcast, 0xff, 0x3, 0x0, 0x3500, 0xa, 0x2}, {@in=@multicast2, @in=@remote, @in6=@private0, @in6=@empty, 0x33, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast2, @in6=@mcast2, @in=@local, @in6=@private0, 0x2b, 0x2, 0x0, 0x3506, 0xa, 0x2}]}, @etimer_thresh={0x8, 0xc, 0x3}, @policy_type={0xa}, @algo_auth={0x65, 0x1, {{'sha256-ni\x00'}, 0xe8, "05f774e67018fc3b701cc228660ef0dfe779b6fc15b5dcc1ec12320c19"}}, @proto={0x5, 0x19, 0x3c}, @lastused={0xc, 0xf, 0x10000}]}, 0x1c8}}, 0x4048004) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002100), 0xc, &(0x7f0000002400)={&(0x7f00000026c0)=@expire={0x208, 0x18, 0x8, 0x70bd27, 0x25dfdbff, {{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4e20, 0x3, 0x4e22, 0x1, 0x2, 0x120, 0x20, 0x2e, r6, r10}, {@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4d6, 0x2b}, @in6=@private1, {0xffffffffffffff76, 0x1, 0x1fa, 0x4, 0x7, 0x1000, 0x5, 0x9}, {0x3, 0x80000000, 0x0, 0x3}, {0x5, 0x3, 0x1}, 0x70bd25, 0x3503, 0x6, 0x4, 0xff, 0x38}, 0x6}, [@address_filter={0x28, 0x1a, {@in=@broadcast, @in=@local, 0xa, 0x3, 0x1f}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010100, @in6=@remote, 0x0, 0x2}}, @tfcpad={0x8}, @offload={0xc, 0x1c, {0x0, 0x2}}, @algo_auth_trunc={0x7f, 0x14, {{'sha224-arm64\x00'}, 0x198, 0x180, "796345045a5d65f84c869ff35451eb9a5fd0595824c04829dd0f8ba460400b9a596e15ee4a7a6721e28a6fd4cf8881a9492133"}}, @mark={0xc, 0x15, {0x35075a, 0x9}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e22, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}]}, 0x208}, 0x1, 0x0, 0x0, 0x810}, 0x8000) (async) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200001, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x10001}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'rose0\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@flag='nomand'}]}}) (async) io_uring_setup(0x10c80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, r1}) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r11, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:36 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, 0x0, &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:36 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x3, 0x10001, 0x3, 0x9, 0x3, "5e58e711d91329fb0f47cf5ceaac54685a818b", 0x7}) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:37 executing program 4: syz_emit_ethernet(0x4b, &(0x7f00000000c0)={@random="630e01000002", @multicast, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "902237", 0x11, 0x2c, 0x0, @private1, @mcast2, {[], {0x0, 0x4e21, 0x11, 0x0, @gue={{0x2}, '<'}}}}}}}, 0x0) 22:56:37 executing program 1: syz_clone(0x20000, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)="f4a3d04017f614accc3fd1a1d7107e369dc888904641a5080e246e82391752f4c983aace73ec87f7bbc471e2845a8a5b6ea4bf7b4a039ea4a5a90ce0bf9a9b960c0c9b57aa35e9c926a7b3e5c724e0c503568f07d0661116a50384") 22:56:37 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002edf66696c653000"]) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) (async, rerun: 32) r3 = socket$igmp(0x2, 0x3, 0x2) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000002640)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x10, 0x3f8, 0x400, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x80c8) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002680)=ANY=[@ANYBLOB="38000000100039040000000000000000000003e4", @ANYRES32=r8, @ANYBLOB="00000000000000001800128008000100736974000c00028008000f00", @ANYRES32=r7, @ANYRES64=r4], 0x38}}, 0x0) (rerun: 64) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x80, @vifc_lcl_ifindex=r8, @multicast2}, 0x10) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000004200)={0x78, 0xfffffffffffffffe, r9, {0x0, 0x0, 0x0, {0x2, 0x0, 0x3, 0x5, 0x7, 0x2, 0x7fff, 0x0, 0x4, 0x8000, 0x7, r10, 0x0, 0x8628}}}, 0x78) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@migrate={0x1c8, 0x21, 0x302, 0x70bd2c, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e20, 0xccd, 0x4e23, 0x0, 0x2, 0x80, 0x0, 0x33, r8, r10}, 0x6e6bb7, 0x1}, [@migrate={0xe8, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, @in6=@empty, @in6=@remote, @in=@broadcast, 0xff, 0x3, 0x0, 0x3500, 0xa, 0x2}, {@in=@multicast2, @in=@remote, @in6=@private0, @in6=@empty, 0x33, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast2, @in6=@mcast2, @in=@local, @in6=@private0, 0x2b, 0x2, 0x0, 0x3506, 0xa, 0x2}]}, @etimer_thresh={0x8, 0xc, 0x3}, @policy_type={0xa}, @algo_auth={0x65, 0x1, {{'sha256-ni\x00'}, 0xe8, "05f774e67018fc3b701cc228660ef0dfe779b6fc15b5dcc1ec12320c19"}}, @proto={0x5, 0x19, 0x3c}, @lastused={0xc, 0xf, 0x10000}]}, 0x1c8}}, 0x4048004) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002100), 0xc, &(0x7f0000002400)={&(0x7f00000026c0)=@expire={0x208, 0x18, 0x8, 0x70bd27, 0x25dfdbff, {{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4e20, 0x3, 0x4e22, 0x1, 0x2, 0x120, 0x20, 0x2e, r6, r10}, {@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4d6, 0x2b}, @in6=@private1, {0xffffffffffffff76, 0x1, 0x1fa, 0x4, 0x7, 0x1000, 0x5, 0x9}, {0x3, 0x80000000, 0x0, 0x3}, {0x5, 0x3, 0x1}, 0x70bd25, 0x3503, 0x6, 0x4, 0xff, 0x38}, 0x6}, [@address_filter={0x28, 0x1a, {@in=@broadcast, @in=@local, 0xa, 0x3, 0x1f}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010100, @in6=@remote, 0x0, 0x2}}, @tfcpad={0x8}, @offload={0xc, 0x1c, {0x0, 0x2}}, @algo_auth_trunc={0x7f, 0x14, {{'sha224-arm64\x00'}, 0x198, 0x180, "796345045a5d65f84c869ff35451eb9a5fd0595824c04829dd0f8ba460400b9a596e15ee4a7a6721e28a6fd4cf8881a9492133"}}, @mark={0xc, 0x15, {0x35075a, 0x9}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e22, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}]}, 0x208}, 0x1, 0x0, 0x0, 0x810}, 0x8000) (async, rerun: 64) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200001, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x10001}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'rose0\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@flag='nomand'}]}}) io_uring_setup(0x10c80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, r1}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r11, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:37 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x10d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x11, &(0x7f0000000080)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}}) 22:56:37 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x202) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044584, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0\x00'}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000140)=[@ioring_restriction_sqe_flags_required={0x3, 0x797e4a0aa052026e}, @ioring_restriction_sqe_op={0x1, 0x18}], 0x2) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x202) (async) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) (async) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) (async) ioctl$EVIOCGVERSION(r0, 0x80044584, 0x0) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000140)=[@ioring_restriction_sqe_flags_required={0x3, 0x797e4a0aa052026e}, @ioring_restriction_sqe_op={0x1, 0x18}], 0x2) (async) 22:56:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}}) 22:56:37 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) io_uring_enter(r3, 0x22f7, 0x6d11, 0x15, &(0x7f0000000100)={[0x6]}, 0x8) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:37 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x3, 0x10001, 0x3, 0x9, 0x3, "5e58e711d91329fb0f47cf5ceaac54685a818b", 0x7}) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x3, 0x10001, 0x3, 0x9, 0x3, "5e58e711d91329fb0f47cf5ceaac54685a818b", 0x7}) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) [ 1703.912077][ T1528] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1703.945419][T30563] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40005504, 0xf0ffffff7f0000) 22:56:38 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x202) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) (async) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) (async, rerun: 64) ioctl$EVIOCGVERSION(r0, 0x80044584, 0x0) (async, rerun: 64) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async, rerun: 32) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async, rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0\x00'}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000140)=[@ioring_restriction_sqe_flags_required={0x3, 0x797e4a0aa052026e}, @ioring_restriction_sqe_op={0x1, 0x18}], 0x2) 22:56:38 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, 0x0, &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:38 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x3, 0x10001, 0x3, 0x9, 0x3, "5e58e711d91329fb0f47cf5ceaac54685a818b", 0x7}) (async) sendfile(r0, r1, 0x0, 0x20000023896) [ 1704.163002][ T1528] usb 5-1: Using ep0 maxpacket: 8 22:56:38 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) io_uring_enter(r3, 0x22f7, 0x6d11, 0x15, &(0x7f0000000100)={[0x6]}, 0x8) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x18, r1, 0x1, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) [ 1704.362651][ T1528] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 22:56:38 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, r1, 0x0, 0x20000023896) [ 1704.533455][ T1528] usb 5-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.40 [ 1704.542982][ T1528] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.551188][ T1528] usb 5-1: Product: syz [ 1704.555825][ T1528] usb 5-1: Manufacturer: syz [ 1704.560606][ T1528] usb 5-1: SerialNumber: syz [ 1704.671391][T30585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1704.730302][ T1528] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1704.934377][T19792] usb 5-1: USB disconnect, device number 86 22:56:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fgetxattr(r0, &(0x7f0000000280)=@random={'security.', '/dev/loop-control\x00'}, &(0x7f00000002c0)=""/67, 0x43) 22:56:39 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc81, &(0x7f0000000080)={0x0, 0xbee5, 0x2, 0x0, 0x0, 0x0, r0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:39 executing program 1: link(&(0x7f0000000c00)='./file0\x00', 0x0) 22:56:39 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, r1, 0x0, 0x20000023896) 22:56:39 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) io_uring_enter(r3, 0x22f7, 0x6d11, 0x15, &(0x7f0000000100)={[0x6]}, 0x8) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) 22:56:39 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, 0x0, &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89a2, &(0x7f0000000280)={'gretap0\x00', 0x0}) 22:56:39 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, r1, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) [ 1705.625392][T30597] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:39 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000200)=""/207) 22:56:39 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc81, &(0x7f0000000080)={0x0, 0xbee5, 0x2, 0x0, 0x0, 0x0, r0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc81, &(0x7f0000000080)={0x0, 0xbee5, 0x2, 0x0, 0x0, 0x0, r0}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:39 executing program 1: syz_open_dev$mouse(&(0x7f0000000080), 0xffffffffffffffff, 0x101440) 22:56:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000300)) 22:56:40 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) 22:56:40 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d6000/0x3000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) syz_io_uring_setup(0x408, &(0x7f0000000100)={0x0, 0x402f, 0x20, 0x3, 0x2c3, 0x0, r0}, &(0x7f00006c5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:40 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@empty, @remote, @val={@void}, {@arp={0x8100, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @link_local, @rand_addr, @random="d3d581da6dc9"}}}}, 0x0) 22:56:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x38, 0xfffffffffffffffd, &(0x7f0000000640)) 22:56:40 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc81, &(0x7f0000000080)={0x0, 0xbee5, 0x2, 0x0, 0x0, 0x0, r0}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async, rerun: 64) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:40 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@empty, @remote, @val={@void}, {@arp={0x8100, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @link_local, @rand_addr, @random="d3d581da6dc9"}}}}, 0x0) 22:56:40 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), 0x0) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:40 executing program 4: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x28, r0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}}, 0x0) 22:56:40 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@empty, @remote, @val={@void}, {@arp={0x8100, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @link_local, @rand_addr, @random="d3d581da6dc9"}}}}, 0x0) 22:56:40 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) (rerun: 64) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) 22:56:41 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@empty, @remote, @val={@void}, {@arp={0x8100, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @link_local, @rand_addr, @random="d3d581da6dc9"}}}}, 0x0) 22:56:41 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d6000/0x3000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) syz_io_uring_setup(0x408, &(0x7f0000000100)={0x0, 0x402f, 0x20, 0x3, 0x2c3, 0x0, r0}, &(0x7f00006c5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:41 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) 22:56:41 executing program 4: r0 = eventfd(0x0) fgetxattr(r0, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) 22:56:41 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006c4000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r1, 0x8000000) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:41 executing program 1: socketpair(0x18, 0x0, 0x1000, &(0x7f0000000000)) 22:56:41 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@random="630e01000002", @multicast, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40d070", 0x14, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 22:56:41 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r0, @ANYBLOB="01004000000000000000030000006c000180040002800d0001007564703a73797a32000000001c000280080001001700000008000400180000000800040006000000380004001400010002004e23e0000001000000000000000020"], 0x80}}, 0x0) 22:56:41 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), 0x0) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x2, 0x0, &(0x7f0000000040)) 22:56:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}]}}}}}) 22:56:41 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f00006c4000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r1, 0x8000000) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) [ 1707.926096][T30678] tipc: Invalid UDP bearer configuration [ 1707.926249][T30678] tipc: Enabling of bearer rejected, failed to enable media 22:56:42 executing program 1: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x2710}) 22:56:42 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d6000/0x3000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) syz_io_uring_setup(0x408, &(0x7f0000000100)={0x0, 0x402f, 0x20, 0x3, 0x2c3, 0x0, r0}, &(0x7f00006c5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d6000/0x3000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) syz_io_uring_setup(0x408, &(0x7f0000000100)={0x0, 0x402f, 0x20, 0x3, 0x2c3, 0x0, r0}, &(0x7f00006c5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:42 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000005c0)=']^\x00') 22:56:42 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/49, 0x1002000, 0x1000}, 0x20) 22:56:42 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f00006c4000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r1, 0x8000000) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:42 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4}, {0x6}]}) [ 1708.496031][ T24] kauditd_printk_skb: 46 callbacks suppressed [ 1708.496093][ T24] audit: type=1326 audit(1675465002.545:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30694 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fe1e8c0c9 code=0x0 22:56:42 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 22:56:42 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000300)={@random="630efbfdcb73", @multicast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "c36a8d", 0x8, 0x0, 0x0, @private1, @local, {[@routing={0x2c}]}}}}}, 0x0) 22:56:43 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), 0x0) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x4, 0xfffffffffffffffd, &(0x7f0000000640)) 22:56:43 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000240)=0x0) r2 = io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x4}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000004c0)={'bond_slave_1\x00', 0x1000}) r7 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r7, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) syz_io_uring_submit(r4, r1, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x39}, 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) io_uring_setup(0xfff, &(0x7f0000000140)={0x0, 0x8b0d, 0x80, 0x2, 0xe, 0x0, r2}) io_uring_enter(0xffffffffffffffff, 0x3806, 0xad2c, 0x8, &(0x7f0000000600)={[0xdbf]}, 0x8) r8 = memfd_secret(0x0) memfd_secret(0x0) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000100)) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETHDRSZ(r8, 0x800454d7, &(0x7f00000001c0)) 22:56:43 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$cgroup_freezer_state(r0, 0x0, 0xf0ff7f00000000) 22:56:43 executing program 4: syz_emit_ethernet(0x87, &(0x7f00000000c0)={@random="630e01000002", @multicast, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "902237", 0x4d, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0x4e21, 0x4d, 0x0, @gue={{0x3}, "3ce423ac197aac2f6d7ce6a2dae6ea15f06d0697e4d3304a658b6e754f92c64bfd4b0fcf2c23abca3bc243f95529f20f3730b3f66882ef9c3386072ad3"}}}}}}}, 0x0) 22:56:43 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/199, 0xc7}, {&(0x7f0000000440)=""/212, 0xd4}, {&(0x7f0000000540)=""/118, 0x76}], 0x3) 22:56:43 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x121101, 0x0) 22:56:43 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x642, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x11, r0, 0x0) 22:56:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x4008556c, 0x0) 22:56:43 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000240)=0x0) (async) r2 = io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x4}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000004c0)={'bond_slave_1\x00', 0x1000}) r7 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r7, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) syz_io_uring_submit(r4, r1, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x39}, 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) io_uring_setup(0xfff, &(0x7f0000000140)={0x0, 0x8b0d, 0x80, 0x2, 0xe, 0x0, r2}) io_uring_enter(0xffffffffffffffff, 0x3806, 0xad2c, 0x8, &(0x7f0000000600)={[0xdbf]}, 0x8) r8 = memfd_secret(0x0) (async) memfd_secret(0x0) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000100)) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r8, 0x800454d7, &(0x7f00000001c0)) [ 1709.277411][T30726] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:43 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev, @remote, @multicast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) 22:56:43 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/199, 0xc7}, {&(0x7f0000000440)=""/212, 0xd4}, {&(0x7f0000000540)=""/118, 0x76}], 0x3) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r2) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/199, 0xc7}, {&(0x7f0000000440)=""/212, 0xd4}, {&(0x7f0000000540)=""/118, 0x76}], 0x3) (async) [ 1709.880865][T30743] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:44 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0x0, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x78, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x1c, 0x8, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}]}]}]}, 0x78}}, 0x0) 22:56:44 executing program 1: syz_emit_ethernet(0x1a, &(0x7f0000000040)={@broadcast, @multicast, @val={@void}, {@mpls_uc={0x8847, {[], @llc={@snap={0x0, 0x0, "fb", '(SK'}}}}}}, 0x0) 22:56:44 executing program 0: r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x21, 0x0, &(0x7f0000000040)) 22:56:44 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000240)=0x0) (async) r2 = io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x0, 0x4}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000500)=ANY=[@ANYBLOB="0000020700cb108cca384bf96085b0b7f2a88ed3b8ee60bd3efcd0161251254890b5a639cc626ca634f1f57b75c9ed7dcb1bb600d11ad0ccd88a6d3f1e40c247e31b2d24d23d35205f4e1c5e9c3837de3f6cf85859774edb7f91bb157dbf8816d075e1407230e3ae697e2209ffd51e06759ae3d3dec99bfca2e58090029f9cfc0332ded5e803c329fc112b7d91ada5a12ba3a94eb413fd5e9c5bc28820947067b05591d082a043b2b28677c943bd37569e43a836db97674a28c479bf45ba4b4c0c36ac49fadc3046725a7d98bbca387ed6399f5be7be818fd7095f6fb513c6973d152630ccd2790c55e18ff5667ea50bd68f80685b5379ca59cd6ef347d321f5"]) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000004c0)={'bond_slave_1\x00', 0x1000}) r7 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r7, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) (async) syz_io_uring_submit(r4, r1, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x39}, 0x4) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) io_uring_setup(0xfff, &(0x7f0000000140)={0x0, 0x8b0d, 0x80, 0x2, 0xe, 0x0, r2}) (async) io_uring_enter(0xffffffffffffffff, 0x3806, 0xad2c, 0x8, &(0x7f0000000600)={[0xdbf]}, 0x8) (async) r8 = memfd_secret(0x0) memfd_secret(0x0) (async) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000100)) (async) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r8, 0x800454d7, &(0x7f00000001c0)) 22:56:44 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async, rerun: 32) io_uring_setup(0xc80, &(0x7f0000000080)) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/199, 0xc7}, {&(0x7f0000000440)=""/212, 0xd4}, {&(0x7f0000000540)=""/118, 0x76}], 0x3) (rerun: 64) 22:56:44 executing program 0: syz_emit_ethernet(0x87, &(0x7f00000000c0)={@random="630e01000002", @multicast, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "902237", 0x4d, 0x88, 0x0, @private1, @mcast2, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}, "3ce423ac197aac2f6d7ce6a2dae6ea15f06d0697e4d3304a658b6e754f92c64bfd4b0fcf2c23abca3bc243f95529f20f3730b3f66882ef9c3386072ad3"}}}}}}}, 0x0) 22:56:44 executing program 1: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 22:56:44 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x54e1, 0x0, 0x1, 0x3ba, 0x0, r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$SNDCTL_SEQ_TESTMIDI(r5, 0x40045108, &(0x7f0000000100)=0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:44 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:56:44 executing program 1: syz_emit_ethernet(0x86, &(0x7f0000000280)={@random="630efbfdcb73", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b8ba27", 0x4c, 0x2f, 0x0, @remote, @private1, {[@dstopts={0x5c}]}}}}}, 0x0) [ 1710.743862][T30782] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:44 executing program 4: lgetxattr(&(0x7f0000002d40)='./file0\x00', 0x0, 0x0, 0x0) 22:56:44 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0x0, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:44 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000100), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1710.864141][T30783] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:45 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x54e1, 0x0, 0x1, 0x3ba, 0x0, r2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async, rerun: 32) ioctl$SNDCTL_SEQ_TESTMIDI(r5, 0x40045108, &(0x7f0000000100)=0x1000) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:45 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='fd/3\x00') 22:56:45 executing program 4: r0 = socket(0x1e, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8971, &(0x7f0000000480)={'ip6tnl0\x00', 0x0}) [ 1711.209435][T30798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1711.284623][T30801] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:45 executing program 1: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, @dev, @private0}}) 22:56:45 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x54e1, 0x0, 0x1, 0x3ba, 0x0, r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$SNDCTL_SEQ_TESTMIDI(r5, 0x40045108, &(0x7f0000000100)=0x1000) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r1) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0x54e1, 0x0, 0x1, 0x3ba, 0x0, r2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r3, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r4) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) ioctl$SNDCTL_SEQ_TESTMIDI(r5, 0x40045108, &(0x7f0000000100)=0x1000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:45 executing program 4: r0 = socket(0x1e, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8971, &(0x7f0000000480)={'ip6tnl0\x00', 0x0}) 22:56:45 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000100), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r2) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000100), 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) [ 1711.954391][T30872] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:46 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002bc0), 0x2c0342, 0x0) write(r0, 0x0, 0x0) 22:56:46 executing program 4: r0 = socket(0x1e, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8971, &(0x7f0000000480)={'ip6tnl0\x00', 0x0}) [ 1712.274856][T30876] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x64, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ipt={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x160, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x130, 0x2, [@TCA_CGROUP_ACT={0x12c}]}}]}, 0x160}}, 0x0) [ 1713.902999][T30923] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:56:49 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0x0, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:49 executing program 5: r0 = syz_io_uring_setup(0x1c1e, &(0x7f00000002c0)={0x0, 0xbcd1, 0x0, 0x100000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, r0, 0x8000000) syz_io_uring_setup(0x2ebc, &(0x7f0000000100)={0x0, 0xa78, 0x200, 0x5, 0x286}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_TEE={0x21, 0x5e, 0x0, @fd_index=0x3, 0x0, 0x0, 0x6, 0x2, 0x0, {0x0, 0x0, r3}}, 0x800) io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:49 executing program 4: r0 = socket(0x1e, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8971, &(0x7f0000000480)={'ip6tnl0\x00', 0x0}) 22:56:49 executing program 0: mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000200)=""/207) 22:56:49 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000100), 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:49 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 22:56:49 executing program 0: pselect6(0x40, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)={0x77359400}, &(0x7f0000001580)={&(0x7f0000001540)={[0x5]}, 0x8}) [ 1715.752280][T30968] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:49 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{}, {0x20}]}) 22:56:50 executing program 5: r0 = syz_io_uring_setup(0x1c1e, &(0x7f00000002c0)={0x0, 0xbcd1, 0x0, 0x100000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, r0, 0x8000000) syz_io_uring_setup(0x2ebc, &(0x7f0000000100)={0x0, 0xa78, 0x200, 0x5, 0x286}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_TEE={0x21, 0x5e, 0x0, @fd_index=0x3, 0x0, 0x0, 0x6, 0x2, 0x0, {0x0, 0x0, r3}}, 0x800) io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1c1e, &(0x7f00000002c0)={0x0, 0xbcd1, 0x0, 0x100000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, r0, 0x8000000) (async) syz_io_uring_setup(0x2ebc, &(0x7f0000000100)={0x0, 0xa78, 0x200, 0x5, 0x286}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_TEE={0x21, 0x5e, 0x0, @fd_index=0x3, 0x0, 0x0, 0x6, 0x2, 0x0, {0x0, 0x0, r3}}, 0x800) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:50 executing program 4: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@random="630e01000002", @multicast, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "902237", 0x10, 0x2c, 0x0, @private1, @mcast2, {[], {0x0, 0x4e21, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 22:56:50 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$cgroup_freezer_state(r0, 0x0, 0x0) 22:56:50 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:50 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0x400) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000440)=[@ioring_restriction_sqe_op={0x1, 0x1}, @ioring_restriction_sqe_flags_allowed={0x2, 0x10}, @ioring_restriction_sqe_op={0x1, 0x17}, @ioring_restriction_sqe_flags_allowed={0x2, 0x14}, @ioring_restriction_register_op={0x0, 0x2}], 0x5) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0xc80, 0x14a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) write$eventfd(r5, &(0x7f00000001c0), 0x8) mmap(&(0x7f00006c2000/0x4000)=nil, 0x4000, 0xa, 0x810, r3, 0x320e6000) 22:56:50 executing program 4: getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000140)) uname(&(0x7f00000001c0)=""/188) 22:56:50 executing program 5: r0 = syz_io_uring_setup(0x1c1e, &(0x7f00000002c0)={0x0, 0xbcd1, 0x0, 0x100000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, r0, 0x8000000) syz_io_uring_setup(0x2ebc, &(0x7f0000000100)={0x0, 0xa78, 0x200, 0x5, 0x286}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_TEE={0x21, 0x5e, 0x0, @fd_index=0x3, 0x0, 0x0, 0x6, 0x2, 0x0, {0x0, 0x0, r3}}, 0x800) io_uring_setup(0xc80, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1c1e, &(0x7f00000002c0)={0x0, 0xbcd1, 0x0, 0x100000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, r0, 0x8000000) (async) syz_io_uring_setup(0x2ebc, &(0x7f0000000100)={0x0, 0xa78, 0x200, 0x5, 0x286}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_TEE={0x21, 0x5e, 0x0, @fd_index=0x3, 0x0, 0x0, 0x6, 0x2, 0x0, {0x0, 0x0, r3}}, 0x800) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:50 executing program 1: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0x4}]}}}}}) [ 1716.583498][T30999] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:50 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:56:50 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0x400) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000440)=[@ioring_restriction_sqe_op={0x1, 0x1}, @ioring_restriction_sqe_flags_allowed={0x2, 0x10}, @ioring_restriction_sqe_op={0x1, 0x17}, @ioring_restriction_sqe_flags_allowed={0x2, 0x14}, @ioring_restriction_register_op={0x0, 0x2}], 0x5) (async) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0xc80, 0x14a) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) write$eventfd(r5, &(0x7f00000001c0), 0x8) mmap(&(0x7f00006c2000/0x4000)=nil, 0x4000, 0xa, 0x810, r3, 0x320e6000) 22:56:50 executing program 0: r0 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)={0x1, 0x0, @b}, 0x48, 0xffffffffffffffff) keyctl$link(0x8, r0, 0xfffffffffffffffe) 22:56:50 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder1\x00', 0x2, 0x0) 22:56:50 executing program 5: r0 = syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc7e, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x0, 0x133}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0x2}, 0x16, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'sit0\x00', 0x200}) 22:56:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000b800)={0x0, 0x0, &(0x7f000000b7c0)={&(0x7f0000000280)=@newtaction={0x118, 0x1c, 0x1, 0x0, 0x0, {}, [{0x104, 0x1, [@m_ctinfo={0x100, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0xb1, 0x6, "b73b5a867dbf2e1dd786363ca0693a8caaedf490f4e807d3a43b770de9a0eefe23fcbe44b7e92bc627b2d5b24596fddf764a483e7a47f9a77702dd3a2e06a56496bec2a3e399d4f7c6efe3a372917d540d6b4ecda24d27528e05ee184f290adcb2843028f0b8b6f0d2289a3171052448e23949b7383f735102bd3f9a251d8f72ba44c40c09bd8098e18cc45e45ca890930d6a1e72cd2418cf20f345f01ae5382bba9ca72cca4b473a9020472f7"}, {0xc}, {0xc}}}]}]}, 0x118}}, 0x0) 22:56:51 executing program 1: r0 = socket(0x1e, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @remote}}) [ 1717.222807][T31023] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 1717.231236][T31023] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1717.239594][T31023] netlink: 'syz-executor.4': attribute type 8 has an invalid length. 22:56:51 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:51 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}]}]}, 0x2c}}, 0x0) 22:56:51 executing program 5: r0 = syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc7e, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x0, 0x133}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0x2}, 0x16, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'sit0\x00', 0x200}) syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc7e, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x0, 0x133}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0x2}, 0x16, 0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'sit0\x00', 0x200}) (async) 22:56:51 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async, rerun: 32) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0x400) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000440)=[@ioring_restriction_sqe_op={0x1, 0x1}, @ioring_restriction_sqe_flags_allowed={0x2, 0x10}, @ioring_restriction_sqe_op={0x1, 0x17}, @ioring_restriction_sqe_flags_allowed={0x2, 0x14}, @ioring_restriction_register_op={0x0, 0x2}], 0x5) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0xc80, 0x14a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) write$eventfd(r5, &(0x7f00000001c0), 0x8) mmap(&(0x7f00006c2000/0x4000)=nil, 0x4000, 0xa, 0x810, r3, 0x320e6000) 22:56:51 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)={0x34, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0xa, 'tunl0\x00'}}]}]}, 0x34}}, 0x0) 22:56:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f00000004c0)) [ 1717.613893][T31036] tipc: Enabling of bearer rejected, failed to enable media 22:56:51 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') openat(r0, &(0x7f0000001f00)='./file0\x00', 0x200100, 0x0) 22:56:51 executing program 1: r0 = socket(0x1e, 0x5, 0x0) accept$inet6(r0, 0x0, 0x0) 22:56:51 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 22:56:51 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f0000000140)={0x0, 0x0, 0x20}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:51 executing program 5: r0 = syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async, rerun: 32) r1 = io_uring_setup(0xc7e, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x0, 0x133}) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 64) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0x2}, 0x16, 0x1) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'sit0\x00', 0x200}) 22:56:52 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) write$uinput_user_dev(r0, &(0x7f00000001c0)={'syz0\x00'}, 0x45c) 22:56:52 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:52 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mlock(&(0x7f0000ff9000/0x2000)=nil, 0x2000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 22:56:52 executing program 4: syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 22:56:52 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000280)={@random="630efbfdcb73", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b8ba27", 0x44, 0x2f, 0x0, @remote, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8847}}}}}}}, 0x0) [ 1718.372020][ T5081] usb 1-1: new high-speed USB device number 65 using dummy_hcd 22:56:52 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000004c0)={0x0, 0x0, 0x200}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r5, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) r6 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='net_prio.prioidx\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x20003580, r7) syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x7) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:52 executing program 1: add_key(&(0x7f0000000000)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001240)='logon\x00', &(0x7f0000001280)={'syz', 0x1}, &(0x7f00000012c0)='!\x00', 0x0) 22:56:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x30, 0xfffffffffffffffd, &(0x7f0000000640)) 22:56:52 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000004c0)={0x0, 0x0, 0x200}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r5, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) r6 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='net_prio.prioidx\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x20003580, r7) syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x7) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000004c0)={0x0, 0x0, 0x200}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) socket$rds(0x15, 0x5, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r5, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) (async) syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='net_prio.prioidx\x00', 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x20003580, r7) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x7) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) [ 1718.651898][ T5087] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1718.743101][ T5081] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1718.993459][ T5081] usb 1-1: string descriptor 0 read error: -22 [ 1719.000192][ T5081] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1719.009652][ T5081] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.072856][ T5087] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1719.242164][ T5087] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1719.251525][ T5087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.259914][ T5087] usb 5-1: Product: syz [ 1719.264389][ T5087] usb 5-1: Manufacturer: syz [ 1719.269165][ T5087] usb 5-1: SerialNumber: syz [ 1719.274448][ T5081] usb 1-1: USB disconnect, device number 65 [ 1719.574278][ T5087] usb 5-1: USB disconnect, device number 87 22:56:53 executing program 0: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000005c0)=']^\x00') mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 22:56:53 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[@register_looper], 0x1, 0x0, &(0x7f00000002c0)="12"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="ef"}) 22:56:53 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000004c0)={0x0, 0x0, 0x200}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async, rerun: 32) io_uring_setup(0xc80, &(0x7f0000000080)) (rerun: 32) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r5 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r5, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x3) r6 = syz_io_uring_setup(0x7f93, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async, rerun: 32) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='net_prio.prioidx\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x13, 0x20003580, r7) (async, rerun: 64) syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x7) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:53 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f0000000140)={0x0, 0x0, 0x20}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000140)={0x0, 0x0, 0x20}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:53 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1719.906460][T31091] binder: 31090:31091 ioctl c0306201 0 returned -14 22:56:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 22:56:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8915, 0x0) 22:56:54 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:54 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_enter(r0, 0x277f, 0x6fa1, 0x1, &(0x7f0000000100)={[0x2]}, 0x8) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x33a) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:54 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f0000000140)={0x0, 0x0, 0x20}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000140)={0x0, 0x0, 0x20}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:54 executing program 0: syz_emit_ethernet(0x87, &(0x7f00000000c0)={@random="630e01000002", @multicast, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "902237", 0x4d, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0x4e21, 0x4d, 0x0, @gue={{0x2}, "3ce423ac197aac2f6d7ce6a2dae6ea15f06d0697e4d3304a658b6e754f92c64bfd4b0fcf2c23abca3bc243f95529f20f3730b3f66882ef9c3386072ad3"}}}}}}}, 0x0) 22:56:54 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0xc06855c8, 0x0) 22:56:54 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:54 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x61, 0x0, 0x0, 0x0, 0x700}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:56:54 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_enter(r0, 0x277f, 0x6fa1, 0x1, &(0x7f0000000100)={[0x2]}, 0x8) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x33a) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_enter(r0, 0x277f, 0x6fa1, 0x1, &(0x7f0000000100)={[0x2]}, 0x8) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x33a) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 22:56:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6}, {0x6}]}) 22:56:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0xda0beed77fa0fb1b, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x3, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 22:56:54 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c0000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) r2 = signalfd(r0, &(0x7f0000000100)={[0x1ff]}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) epoll_pwait2(r2, &(0x7f0000000500)=[{}, {}, {}, {}], 0x4, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x7ff]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/133, 0x85}], &(0x7f00000001c0)=[0x0], 0x1}, 0x20) 22:56:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000b800)={0x0, 0x0, &(0x7f000000b7c0)={&(0x7f0000000280)=@newtaction={0x48, 0x21, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1720.988742][ T24] audit: type=1326 audit(1675465015.035:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31127 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4ce48c0c9 code=0x0 22:56:55 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getresgid(0x0, &(0x7f0000004080), 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000004100)) socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x80000200, 0x0, 0x0, 0x0, &(0x7f0000005180), 0x0) getresuid(0x0, &(0x7f00000052c0), 0x0) getgid() socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000005840), 0x0) syz_clone(0x45000400, &(0x7f00000059c0), 0x0, 0x0, &(0x7f0000005ac0), 0x0) getresgid(&(0x7f0000005b80), 0x0, &(0x7f0000005c00)) bind$xdp(0xffffffffffffffff, &(0x7f0000000b00), 0x10) socket$xdp(0x2c, 0x3, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, &(0x7f0000005c40)="34b26e1d4e58ea8a55b01e2c8fd4ce0cd77fe8252c5c2090d36d7607b942f92fe53c22012ad0", 0x26, 0x0, &(0x7f0000005d40), &(0x7f0000005d80)="0014fb5463618a2c0cc7d43bf40ca8c7ff3b422e85cd505e93f382c72e90cb02b8d6b79ebadf122983ccb4ca8348af25e77b9d0a87bcd89f7924a5f2bf4f26059e5389d684dbd323d1b3e22ba5dc6765214308de90979c5fb7cfa2cab1b59ef52ae1c7313db59edc748aff592a844a999b0869355478d7677f698f865846f33c06d98ad6a101e9c238c8e93f8e101a355f530a0782e5d376dacf2cc845b527bbd0f8810e04195656a7fc75309e98183485ebc0f36cc0fce7f7c50617dc34b32044d6fe90e28a9ed7331cde76a3788b4581bee8aeeea4fc52beffeef6b7b9177ca004d2f031e3024b692a0a7f5e05c1") 22:56:55 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1721.205765][T31140] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 22:56:55 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_enter(r0, 0x277f, 0x6fa1, 0x1, &(0x7f0000000100)={[0x2]}, 0x8) (async) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x33a) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:55 executing program 4: r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x13, 0x0, &(0x7f0000000040)) 22:56:55 executing program 1: r0 = shmget(0x2, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f00000007c0)=""/165) 22:56:55 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:55 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/netlink\x00') 22:56:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x19, 0xfffffffffffffffd, &(0x7f0000000640)) 22:56:55 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x100002, 0x0, 0x0, r1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'macvlan0\x00', 0x2000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'bridge0\x00', 0x2}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) dup3(r3, r4, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/233, 0xe9}, {&(0x7f0000000140)=""/105, 0x69}], 0x2, 0x6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000240), &(0x7f0000000440)=@md5={0x1, "69f112f11ab9031864d108f5df526139"}, 0x11, 0x3) 22:56:56 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:56 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c0000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) r2 = signalfd(r0, &(0x7f0000000100)={[0x1ff]}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) epoll_pwait2(r2, &(0x7f0000000500)=[{}, {}, {}, {}], 0x4, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x7ff]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/133, 0x85}], &(0x7f00000001c0)=[0x0], 0x1}, 0x20) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c0000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) signalfd(r0, &(0x7f0000000100)={[0x1ff]}, 0x8) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) epoll_pwait2(r2, &(0x7f0000000500)=[{}, {}, {}, {}], 0x4, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x7ff]}, 0x8) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/133, 0x85}], &(0x7f00000001c0)=[0x0], 0x1}, 0x20) (async) 22:56:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x30}}, 0x0) 22:56:56 executing program 0: r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r0, 0x0, 0x14, 0x0, &(0x7f0000000040)) 22:56:56 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:56:56 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x100002, 0x0, 0x0, r1}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'macvlan0\x00', 0x2000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'bridge0\x00', 0x2}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) dup3(r3, r4, 0x0) (async) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/233, 0xe9}, {&(0x7f0000000140)=""/105, 0x69}], 0x2, 0x6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000240), &(0x7f0000000440)=@md5={0x1, "69f112f11ab9031864d108f5df526139"}, 0x11, 0x3) 22:56:56 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1722.647858][ T24] audit: type=1326 audit(1675465016.695:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31193 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf5e48c0c9 code=0x0 22:56:56 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c0000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) r2 = signalfd(r0, &(0x7f0000000100)={[0x1ff]}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) epoll_pwait2(r2, &(0x7f0000000500)=[{}, {}, {}, {}], 0x4, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x7ff]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/133, 0x85}], &(0x7f00000001c0)=[0x0], 0x1}, 0x20) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c0000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) signalfd(r0, &(0x7f0000000100)={[0x1ff]}, 0x8) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) epoll_pwait2(r2, &(0x7f0000000500)=[{}, {}, {}, {}], 0x4, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x7ff]}, 0x8) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/133, 0x85}], &(0x7f00000001c0)=[0x0], 0x1}, 0x20) (async) 22:56:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000000d67) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x3000, 0x8000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 22:56:56 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = epoll_create1(0x0) epoll_create1(0x0) r2 = socket$packet(0x11, 0x4000000000002, 0x300) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0xd}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000008000002abd7000fddbdf2544ade4700d874a00d5e7b01741b5540af5d2493d4213877a02aa2eb73672dc950e7f46db84", @ANYBLOB="0300ffff09000c000f000c0008000b000200000008000b0058000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x83edd6ea6e3b6887}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000800)='net/ip6_tables_matches\x00') sendto$inet6(r5, &(0x7f0000000880)="34db6d855d68a9cb7e413040d3033123f6585c6c10a22286039f5f17cad0d7519f8310b9fe953111d7f6ca4bb5652c53d8a88af5aecc6d6190356edff6043449f30a89ff8de53642383880149c1b320f53ca0c63f1393231643030e48647ae3fbfeccd52e6abe09274ccf18877b5a3d063f255a3f89b6c6180292977e7bdbcec85164d34f6743c0b7d8abce94e2dab3f8ad3f42fb7c0d18cb0050be0404f42d8ae96b0b4b10716fb44b4d10539cf16683a", 0xb1, 0x20045010, &(0x7f0000000940)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x6}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f000001bd00)=""/102400, 0x19000}], 0x1}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000240), 0x4) sendto$inet(r4, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) 22:56:56 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) io_uring_setup(0xc80, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x100002, 0x0, 0x0, r1}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'macvlan0\x00', 0x2000}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async, rerun: 32) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'bridge0\x00', 0x2}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) dup3(r3, r4, 0x0) (async) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/233, 0xe9}, {&(0x7f0000000140)=""/105, 0x69}], 0x2, 0x6, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) fsetxattr$security_ima(r0, &(0x7f0000000240), &(0x7f0000000440)=@md5={0x1, "69f112f11ab9031864d108f5df526139"}, 0x11, 0x3) 22:56:57 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:57 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x400}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) mkdirat(r3, &(0x7f0000000100)='./file0\x00', 0x2c) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x10) 22:56:57 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) io_uring_setup(0xc80, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000400)=0x1, 0x0, 0x4) syz_io_uring_setup(0x5927, &(0x7f0000000100)={0x0, 0xa9ef, 0x300, 0x0, 0x352, 0x0, r0}, &(0x7f00006d5000/0x1000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x400, 0x2, &(0x7f0000000440)="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"}, 0x10001) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/237, 0xed}], 0x1, 0x5, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000013000100"/56, @ANYRES32=0x0, @ANYBLOB="0079b9cb5a17d6fc0a3bff977d70d091eb9416"], 0x54}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) connect(r5, &(0x7f0000000580)=@nfc_llcp={0x27, r6, 0xffffffffffffffff, 0x1, 0x6, 0x3f, "a95e02b154aec4d9dd684d730e52384d0c56ed83ee0b1a2ead9f1284fe566de7ad0dbb9d57a36f4e04327f657c982604546b1295af58bd33ecd601739c1cf9", 0x8}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "aaf01e000000000000000000000000005bf300"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCGETS(r1, 0x5418, 0x0) 22:56:57 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x111000, 0x0) 22:56:57 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1723.672609][T31224] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:57 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async, rerun: 32) io_uring_setup(0xc80, &(0x7f0000000080)) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x400}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) mkdirat(r3, &(0x7f0000000100)='./file0\x00', 0x2c) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x10) 22:56:58 executing program 4: sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000007ac0), 0x0, &(0x7f0000007b40)="051e8416ef") r2 = open(&(0x7f0000000080)='./bus\x00', 0x6fe44da62996b272, 0x0) sendfile(r2, r1, 0x0, 0x80000041) 22:56:58 executing program 1: syz_clone3(&(0x7f00000001c0)={0x1200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:56:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "aaf01e000000000000000000000000005bf300"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCGETS(r1, 0x5409, 0x0) 22:56:58 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) io_uring_setup(0xc80, &(0x7f0000000080)) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000400)=0x1, 0x0, 0x4) (async) syz_io_uring_setup(0x5927, &(0x7f0000000100)={0x0, 0xa9ef, 0x300, 0x0, 0x352, 0x0, r0}, &(0x7f00006d5000/0x1000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x400, 0x2, &(0x7f0000000440)="61f78cf5518107b074f652b6e7e3dd5594bb3198db2b99e75f5a687877ac3df20c6478c1a48f383b70fbf412224929a3d12fc759bc7efcfb469b9211f5d63e6a0727404b4214dd6e4234c1f088fd81188aaa677b207bb24277870f06944a7735b3b93a8f974e321b20e43bdb8af7364e752e7d13a83c8a4c8d073ae60418f994e0642d0f2707241589e9acb58a5b7987daba301ac2067f42673b29919f673edbf257fcb3541fe9fc2032b078f024ac9d534bf874fdf4093609fbafe39e6d25868517f98e67c6d45a1a2cf19453a4ed6183f553d1e5a458e145c9ab430aa139e3ae7c7358a4fa7ddbcde7630ae81ea90e3babf99bed527aafbdeb23d6dd"}, 0x10001) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/237, 0xed}], 0x1, 0x5, 0x0) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000013000100"/56, @ANYRES32=0x0, @ANYBLOB="0079b9cb5a17d6fc0a3bff977d70d091eb9416"], 0x54}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) connect(r5, &(0x7f0000000580)=@nfc_llcp={0x27, r6, 0xffffffffffffffff, 0x1, 0x6, 0x3f, "a95e02b154aec4d9dd684d730e52384d0c56ed83ee0b1a2ead9f1284fe566de7ad0dbb9d57a36f4e04327f657c982604546b1295af58bd33ecd601739c1cf9", 0x8}, 0x80) (async) close_range(r0, 0xffffffffffffffff, 0x0) 22:56:58 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:58 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) io_uring_setup(0xc80, &(0x7f0000000080)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x400}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x210, 0x230, 0x230, 0x210, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x4}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) (async) mkdirat(r3, &(0x7f0000000100)='./file0\x00', 0x2c) (async) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x10) 22:56:58 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x1d, &(0x7f00000000c0), 0x4) 22:56:58 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000d67) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x61) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) 22:56:58 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) r1 = socket$packet(0x11, 0x0, 0x300) pipe(0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xd}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x83edd6ea6e3b6887}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000800)='net/ip6_tables_matches\x00') sendto$inet6(r3, &(0x7f0000000880)="34db6d855d68a9cb7e413040d3033123f6585c6c10a22286039f5f17cad0d7519f83", 0x22, 0x20045010, &(0x7f0000000940)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f000001bd00)=""/102400, 0x19000}], 0x1}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000240), 0x4) sendto$inet(r2, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r2, &(0x7f00000007c0)={&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)=""/255, 0xff}, {&(0x7f0000000400)=""/68, 0x44}, {&(0x7f0000000480)=""/5, 0x5}, {&(0x7f00000004c0)=""/170, 0xaa}, {&(0x7f0000000580)=""/105, 0x69}, {&(0x7f0000000600)=""/9, 0x9}], 0x6, &(0x7f00000006c0)=""/253, 0xfd}, 0x20) 22:56:58 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:58 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) (async) io_uring_setup(0xc80, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000400)=0x1, 0x0, 0x4) (async) syz_io_uring_setup(0x5927, &(0x7f0000000100)={0x0, 0xa9ef, 0x300, 0x0, 0x352, 0x0, r0}, &(0x7f00006d5000/0x1000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x400, 0x2, &(0x7f0000000440)="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"}, 0x10001) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/237, 0xed}], 0x1, 0x5, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000013000100"/56, @ANYRES32=0x0, @ANYBLOB="0079b9cb5a17d6fc0a3bff977d70d091eb9416"], 0x54}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) connect(r5, &(0x7f0000000580)=@nfc_llcp={0x27, r6, 0xffffffffffffffff, 0x1, 0x6, 0x3f, "a95e02b154aec4d9dd684d730e52384d0c56ed83ee0b1a2ead9f1284fe566de7ad0dbb9d57a36f4e04327f657c982604546b1295af58bd33ecd601739c1cf9", 0x8}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) [ 1724.783261][T31258] xt_CT: You must specify a L4 protocol and not use inversions on it 22:56:58 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ac61b408b4070a0102010000000109022400010000005b090400000219a4b40009050e02001bc400000905827e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:56:59 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000100)) 22:56:59 executing program 0: syz_clone3(&(0x7f0000000400)={0x40042000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:56:59 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x7dcd864e972a953b, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x100}) 22:56:59 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) [ 1725.359615][ T5081] usb 2-1: new high-speed USB device number 11 using dummy_hcd 22:56:59 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) (async) preadv(r1, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@random="ea78ec8b965a", @multicast]}) (async) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000100)) [ 1725.736993][ T5081] usb 2-1: Using ep0 maxpacket: 8 22:56:59 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_setup(0xc80, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(0xffffffffffffffff, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d7d, 0xf9d4, 0x0, &(0x7f00000001c0)={[0x100]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x26f2, &(0x7f0000000680)={0x0, 0x8c1e, 0x40, 0x1, 0xe7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) 22:56:59 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x7dcd864e972a953b, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x100}) [ 1725.862945][ T5081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 6912, setting to 1024 [ 1725.874328][ T5081] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 1725.884916][ T5081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1725.894962][ T5081] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 22:57:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x0, 0x0, 0x0, 0xfffffffe, 0x220, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r0 = syz_clone(0x42000180, &(0x7f0000000000)="d5d2be5322903fb0ef871373b392219d84098482cc3100ddc75c54eb27e9780bf972412a4b5f171e8ef03b29e1fe4267067e4d05ae63fe5a6ac4221ac43c14d36ee75b310ddfdcbc9802c87ced43aab2fcb919b91a9bea6b5620a807c14dafd342a286daf410d5bcacce4843a77066997e431239abcb339e0919a6bf687b4b5b04f43e664ceb0698c0380e4988b6b91334368b193babbb36ac9330fdc10bed51112d93eee6c68b9adf69e22438622e23ec0c65640711a64dd0f16787b1a9134c12955d289de2be0070e1a8d18c653a6eb4f6d481", 0xd4, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b4139dcb84f786e01907e6fc8408873c236138de41e3e485376e166bbb3dfdf32f5021868b76101b699e973facf918c031c56a6c2cd160867434095281c30a7b5baa2365fe04084a9d636d417b0ade5ab92afb5cc8cb0dd3ef294c98cd781dbafd93f60d16e589ea9933fbcbb26b719df8237bc33e257c280fe19fd9237f0fd4fad21ead25") r1 = socket$inet6(0xa, 0x1, 0x2) r2 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_freezer_state(r2, 0x0, 0x0) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000001100)={0x9f1, "c11c2166ac4f4b6ea1ee58abb194eeb5d63bd7642876a84adab709ae1fb6432ba76ab15a7cfbe0063a14b8334c9c551650f5a0122bc97d2a7c95b496e9c9c6275c32b36f9122b0a3c545744822c95f203b4bbb9aa9f9dae5983c5002eb76f1bb31ed882d61354d6836dee66702030b0f2881952790561522899a2a21f783ecd3c2a113526bb24e6d8a816ea6bef4fb8ba033ef17ec116e8efc6e36b832287d7d982e76cd0bc543f5a289302100d342a7317f13afadf2e43414a963c6013a18bfe57894cdc175c6e3f3a720c0796fb548b6ca042c253796161ba459a87ca7ddf0041c93a5a6b27ed90d7d5cfe0670791b09e346357c5d3dd218041be4875461d225507d4a5ba9b324ca81f98b82c96b0b458994165a8491be717222dd1cdfdef6912df7d8e38f95cf26d942931884efba86bec55e73e616ea0efdc4f005d037615050feba64582c0f7530fdd72e76cfac9b30ae05faf5d64deb43631a501114001736900d0a92a66e033af6a23e05770d9d9a02fc5cbe5c150fd4cc5a1f3795ff3f58048d1955973c2229af7237ac3cc6925f86af4ffcdac85dda1d57ecd74849c13255acce7171cb9d1a7627727f43ff4b8893b9eb24d99b50937b18c4716385905ef7a9930a111133653f603fa0f3675174d9cac084dce253965eca1ea2a2a7bcc3d8bae08938a88408c9ad37d0f3749a590a9eeb085efaf349f445a77aa62e7c4c1f9c218df623f6b9892dec659a004372021d176c7dae1eafa06750343983aea871b51310ab8205b5e6dc3b821dfeba1a52fc1d0a671b91811ae0572cb45bcfeaeec5caf4cb7d4f1bb5b28e2341d8074b89161e403b48b4f51bf11402af91c9bc965a544564783b44ef14af3fc6ea3bef9bb984b2dd81260ce9155982311f784ef47ff83cc59729c80718f6754de6f5df6a3056978014d1d6bf983bfed398f846cf18d1ffa0a00dd1233f204cf784957ccdfea6a9560a07ed1d629d643b75ecd3b5f5ee388c0f7937fa7e1bcf818b0726858800a92d9aac5d8736e42c73b60964c7457d0ff26663c13c1dbe192d42daacdbc5cb4e173417bac1fbd5b44e8ba2112616632efe0083246bf418ea22d7ae90fbcd8e05c20bcc5a7f8a6805247f78d740c392de5070563e6f1ad6067cf04eb2d496eda927c6265e5e63831972221b4ebff8ae9be37598ed7f2150d148bd3e161f6a2308c6e3816bff3d07f0f666288496e4bfd26406caae809dba7f0df51a5ed3f1dfe604d5eb5e210bf38e36581733c87f481a82045a68a0019a483cb7dd3dac68660e26d495eeb90de92dd69e37f49acf8982a6f644cfaeee0e0bab6ec8a74bc90da84d8be371eb7351354d0fba258ad7904d185944fd905c681472d80fefd012b44b4e9ce346911ab6b1cec0e40bb39fde98e550c45bd0bee220f206159014164158d74f41801829f50763ee752f59aa363d19b54f8de1347b19b39a1336ca113a3dca4f93ff3c2f667b6fb236a63a8fd7a017f5700bbbbf2b5b6d75f451a200486fc0a306b5098dbc79ad39b3266cb41f2551abcfef0b9534768d0d7c25ecaa010c95d7be8c32279cf600c40a5db240f81a2bbc9c0b98eca2a2f03ad92ba2ad513d8083b66a15d1d1f403bc9d8c14e7018b68098ad13a5d8e118cf0726a2fe589b03513857449f82e4ea40ba1cb03775c328b76f04ba148302b05deeac00ab90fc4cb5beb5fc1c3f0be9c752b5f02a00f722089cfd2869ab3181f88fe56de0e896dce3e662e13e9de9934ea27046fc84f7ae27865eb5f888f0397c4a04f3c09365eacb72784f30cbcb6b9eb4ce5a9e616e1f8e52064c03976ed8bf86b422d00538d4721a26df07e98b78ea06dc92bb94ac74c43868e7e58fee80776d9bc2e3a38053bc353f742a0eb9f1176d9bb971f0f3ad6246543d2c7a7e9bb87e68fec38033759686590ebe1498301301ea23c50d9ff0c18fb2a814a12beceaf55062b4045ba25f8171c9600f1c62168111aef348ba1add7c22685ecd84ee4516e7223019128518e68e835be760134a73e3162dd816d25cd00059599ca770ce221c036267f22150de1ef88a83827922e6280a4ca8b74cb95096cfd7c42feb3b6d3ff50e18613470be7f1de7a28e97036bcc6d527280b7128a60730ad311a501127d46cd5d7764e77661ef849b566a2ceb83b1ec58bdd55f087d57202176725829397aeb78e636ddc560cd8126ec3fc461ef519bd4d6be78c1f32c958930a8f9d903edcdf049863308917a93409cda8ec828c5b0cd21e55ff1f23b625c1dea52707eed1d978e68a17a57d6dc8ce0bd831b6403922751deca8f646c466fafd1d1566e9b4768da44ea018375ae7c6817004558f9502e15cb09604d2dbc15c5f3b15bab41a37a44c44b48ccbb4416585889878db264326e3d4217e747e6a34040eb0cd2bdc64ea1644e45a332c3190ca3c1740d3012e40abdfb2187adb2a4a28616c59042df6070bf781001f3ecf7146ba5143e7e7526def1dd2dd224e6d8bb5dae2a0ebac5fd85e1ff79cf0ff5efcd526f1dc2a4bc80763ec3fc207662974bb448c8ec3f42e8a56384150499863c1b3dc51e29538bd29afec3dafdda68b2a8e4cfb9cfd04a32b1ba94eba321ba7f1c7f4b7a2ff062b59e611c81be99f3838a091493bbf95916b7ed67d84122f72db7acaf20cb0d4e7ba70ccab7c66b7e4b55a034473e4418db0bc3e8f16e7c55d1d889e8bde92a2ff3ddae7d52e968f58cfcef849c084cace081c20038e4672c7606ed615d152d42a727a71aaf75f935b2a210d6f2864132a7a7f4c39b26955c7ee36352d52097bb664f72f3f0edb7d3ef05f79911e6b1446e965a3f6cfae7bcdf16c9172864839b997b5e3baa8850b161e569829c366e8787bbf7d85bb13e0c56ec05d181403c92dccfd2b1ffc3289c9d609b847b21251cbea1d71ce2e4ab09e5006eaa70d338d7fa355ec42ad4ec6db62756ab0503277bfd170bbd42e8d57cf759ac408c272242daf9c445055eae04dc242d81c8b0ed5dea1a85e77e71432559fda6f4a845984216ec06e5e52f61547da00fd5d8abb67634b284c23b7557826a7b1a1223a8da28ef897485dc2df3f5967ad262fc9bb71a698a10a71edd8ca982678ba7bd61b919ced5e1c3f26456b33a50695dd04a22b4c11fc921728652761670352c4af618788476728438076cf50c50c4b9c160780095ab397477768c344c06163cf21b46ef5a399fca7c8ab70d72c2d824b27a080dd06dc696f855cc6709ca6ee1004eaa90f5c4fe0fbf9397e15c97c702b44f168b34410e2865229641a941221f91bb3419176c9d089480a75fbc7b27243ab3a2a958b9bd7ed61ec1d37221cc6ad983885e4aeee4299f67dfbe3854f7d65f36ed1fc8bce94e0405549dd23e833b547d6d6dc418ee7207f4d3ea611e467fe0d78880f78a702bfa8eb5ad7fab651dff3c27890133865fc005de1a2b4f3ad3d1f3f30cdaaa2e60390dd8631205b65c82ed0e6ca8da96a265a8c110239b8c2f63a6cadfd1bc4dba15256b747ae70f8a28dd98ae6bddda70e7ddf49dcbc6b47c6a8f0ef374585f73e2a46d3edd864972a2eb906bde34288c6de07c19313b9ab2453"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x44011) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r1, 0x0) [ 1725.905076][ T5081] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1725.914577][ T5081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.167274][ T5081] usb 2-1: config 0 descriptor?? 22:57:00 executing program 0: socketpair(0x28, 0x0, 0x81, &(0x7f0000000080)) [ 1726.193127][T31276] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 22:57:00 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006c2000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) (async) r1 = io_uring_setup(0xc80, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x6}) preadv(r2, &(0x7f0000002780)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async, rerun: 32) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x7dcd864e972a953b, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x100}) [ 1726.259668][ T5081] ums-alauda 2-1:0.0: USB Mass Storage device detected [ 1726.315885][ T5081] scsi host1: usb-storage 2-1:0.0 22:57:00 executing program 0: syz_clone3(&(0x7f00000001c0)={0xd4002000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0], 0x1}, 0x58) [ 1727.385901][T30939] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 1727.413361][T30939] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 1727.479862][T30939] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 1727.502733][T30902] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 1727.523498][ T1528] usb 2-1: USB disconnect, device number 11 [ 1727.528417][T31307] ===================================================== [ 1727.536825][T31307] BUG: KMSAN: uninit-value in alauda_check_media+0x294/0x2770 [ 1727.544551][T31307] alauda_check_media+0x294/0x2770 [ 1727.549835][T31307] alauda_transport+0x10b/0x4f90 [ 1727.555149][T31307] usb_stor_invoke_transport+0x8d/0x3230 [ 1727.560934][T31307] usb_stor_transparent_scsi_command+0x22/0x30 [ 1727.567343][T31307] usb_stor_control_thread+0x685/0xbc0 [ 1727.573045][T31307] kthread+0x31b/0x430 [ 1727.577314][T31307] ret_from_fork+0x1f/0x30 [ 1727.582092][T31307] [ 1727.584485][T31307] Local variable status created at: [ 1727.589766][T31307] alauda_check_media+0x6f/0x2770 [ 1727.595017][T31307] alauda_transport+0x10b/0x4f90 [ 1727.600097][T31307] [ 1727.602577][T31307] CPU: 0 PID: 31307 Comm: usb-storage Not tainted 6.2.0-rc6-syzkaller-80422-geda666ff2276 #0 [ 1727.613440][T31307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1727.624089][T31307] ===================================================== [ 1727.631111][T31307] Disabling lock debugging due to kernel taint [ 1727.634560][T30939] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 1727.637367][T31307] Kernel panic - not syncing: kmsan.panic set ... [ 1727.637405][T31307] CPU: 0 PID: 31307 Comm: usb-storage Tainted: G B 6.2.0-rc6-syzkaller-80422-geda666ff2276 #0 [ 1727.637497][T31307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 1727.637546][T31307] Call Trace: [ 1727.637573][T31307] [ 1727.637602][T31307] dump_stack_lvl+0x1c8/0x260 [ 1727.637715][T31307] dump_stack+0x1a/0x20 [ 1727.637808][T31307] panic+0x4d3/0xc70 [ 1727.637967][T31307] ? add_taint+0x104/0x1a0 [ 1727.638130][T31307] kmsan_report+0x2cc/0x2d0 [ 1727.638232][T31307] ? trace_event_raw_event_kcompactd_wake_template+0x129/0x290 [ 1727.638384][T31307] ? __msan_warning+0x92/0x110 [ 1727.638466][T31307] ? alauda_check_media+0x294/0x2770 [ 1727.638588][T31307] ? alauda_transport+0x10b/0x4f90 [ 1727.638694][T31307] ? usb_stor_invoke_transport+0x8d/0x3230 [ 1727.638809][T31307] ? usb_stor_transparent_scsi_command+0x22/0x30 [ 1727.638923][T31307] ? usb_stor_control_thread+0x685/0xbc0 [ 1727.639032][T31307] ? kthread+0x31b/0x430 [ 1727.639116][T31307] ? ret_from_fork+0x1f/0x30 [ 1727.639227][T31307] ? __stack_depot_save+0x21/0x4b0 [ 1727.639345][T31307] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1727.639454][T31307] ? interpret_urb_result+0x11c/0x620 [ 1727.639564][T31307] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1727.639680][T31307] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1727.639790][T31307] __msan_warning+0x92/0x110 [ 1727.639874][T31307] alauda_check_media+0x294/0x2770 [ 1727.639988][T31307] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1727.640113][T31307] alauda_transport+0x10b/0x4f90 [ 1727.640230][T31307] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1727.640341][T31307] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1727.640450][T31307] ? finish_task_switch+0x226/0xa20 [ 1727.640600][T31307] ? __switch_to+0x28f/0x570 [ 1727.640703][T31307] ? __schedule+0x16d4/0x22a0 [ 1727.640837][T31307] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1727.640944][T31307] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1727.641042][T31307] ? alauda_probe+0x230/0x230 [ 1727.641147][T31307] ? alauda_probe+0x230/0x230 [ 1727.641250][T31307] usb_stor_invoke_transport+0x8d/0x3230 [ 1727.641363][T31307] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1727.641471][T31307] ? preempt_count_sub+0x7d/0x280 [ 1727.641607][T31307] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1727.641725][T31307] usb_stor_transparent_scsi_command+0x22/0x30 [ 1727.641843][T31307] ? usb_stor_ufi_command+0x1c0/0x1c0 [ 1727.641949][T31307] usb_stor_control_thread+0x685/0xbc0 [ 1727.642081][T31307] ? __kthread_parkme+0x18c/0x1b0 [ 1727.642188][T31307] kthread+0x31b/0x430 [ 1727.642274][T31307] ? usb_stor_disconnect+0x3b0/0x3b0 [ 1727.642391][T31307] ? kthread_blkcg+0x120/0x120 [ 1727.642489][T31307] ret_from_fork+0x1f/0x30 [ 1727.642613][T31307] [ 1727.643707][T31307] Kernel Offset: disabled [ 1727.915040][T31307] Rebooting in 86400 seconds..