NBD_SET_BLKSIZE(r0, 0xc0101282, 0x7) 10:18:56 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r0, 0x0, 0x3, &(0x7f0000000680)={@local, @remote}, 0x8) 10:18:57 executing program 5: socket(0x2, 0x0, 0xffff6caf) [ 198.676476][T10371] loop2: detected capacity change from 264192 to 0 10:18:57 executing program 5: r0 = socket(0x2, 0xa, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 10:18:57 executing program 2: socket(0x29, 0x5, 0x5) 10:18:57 executing program 3: r0 = socket(0x25, 0x5, 0x0) recvmsg$can_raw(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 10:18:57 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x18}}], 0x1, 0x0) 10:18:57 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)) 10:18:57 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x2, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x28}}, 0x0) 10:18:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 10:18:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0x1262, 0x0) 10:18:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreq(r0, 0x84, 0x4, 0x0, 0x0) 10:18:57 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote}, @vsock, @tipc=@id}) 10:18:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r0, 0x84, 0x64, 0x0, 0x0) 10:18:57 executing program 1: r0 = socket(0x25, 0x1, 0x0) recvmsg$can_raw(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 10:18:57 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000003680)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x24) 10:18:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001880)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x16022) 10:18:57 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x3, 0x0, 0x9}}) 10:18:57 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 10:18:57 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8901, &(0x7f0000000040)={'ipvlan0\x00'}) 10:18:57 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @local}, 0x1}}) 10:18:57 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000008240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 10:18:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r0, 0x84, 0x18, 0x0, 0x0) 10:18:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f00000000c0)=0xfffffec7) 10:18:57 executing program 3: pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x100}, 0x0, 0x0) 10:18:57 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xc0000000000000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)) 10:18:57 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8943, &(0x7f0000000040)={'ipvlan0\x00'}) 10:18:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'rr\x00'}, 0x2c) 10:18:57 executing program 4: r0 = socket(0xa, 0x1, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x40000003, 0x0, 0x0) 10:18:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r0, 0x0, 0x13, 0x0, 0x0) 10:18:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 10:18:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b11a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x800000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:18:57 executing program 0: open(&(0x7f0000000200)='./bus\x00', 0x64400, 0x1) getpgid(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007fff) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 10:18:57 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x1}]}, &(0x7f0000000100)=0x10) 10:18:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x7) 10:18:57 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0x1261, 0x0) 10:18:57 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x802, 0x0) write$ppp(r0, 0x0, 0x0) 10:18:57 executing program 3: mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 199.677690][ T36] audit: type=1804 audit(1614075537.964:2): pid=10466 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir307787116/syzkaller.pIS7Co/35/bus" dev="sda1" ino=14216 res=1 errno=0 10:18:58 executing program 2: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) 10:18:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000680)={@local, @remote}, 0x5) 10:18:58 executing program 0: socketpair(0x23, 0x0, 0x1, 0x0) [ 199.788496][ T36] audit: type=1804 audit(1614075538.034:3): pid=10471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir307787116/syzkaller.pIS7Co/35/bus" dev="sda1" ino=14216 res=1 errno=0 10:18:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x188, 0x188, 0x188, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wlan0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 10:18:58 executing program 3: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x1c0802) 10:18:58 executing program 2: accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) 10:18:58 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000001440)='ns/pid_for_children\x00') [ 199.878207][ T36] audit: type=1800 audit(1614075538.054:4): pid=10466 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=14216 res=0 errno=0 [ 199.995686][ T36] audit: type=1804 audit(1614075538.054:5): pid=10466 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir307787116/syzkaller.pIS7Co/35/bus" dev="sda1" ino=14216 res=1 errno=0 [ 200.033523][ T36] audit: type=1804 audit(1614075538.054:6): pid=10471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir307787116/syzkaller.pIS7Co/35/bus" dev="sda1" ino=14216 res=1 errno=0 [ 200.102057][ T36] audit: type=1804 audit(1614075538.054:7): pid=10471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir307787116/syzkaller.pIS7Co/35/bus" dev="sda1" ino=14216 res=1 errno=0 10:18:58 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x464, 0x4}, 0x10}}, 0x0) 10:18:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000180)=""/147, 0x32, 0x93, 0x1}, 0x20) 10:18:58 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) io_setup(0x6edd, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0}]) 10:18:58 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000180)='!', 0x1}, {&(0x7f0000000240)='a', 0x1}], 0x2}, 0x0) 10:18:58 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000180)='!', 0x1}, {&(0x7f0000000240)='a', 0x1}, {&(0x7f0000000300)="d4", 0x1}], 0x3}, 0x0) 10:18:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0xfffffc01, {{0x2, 0x0, @multicast2}}}, 0x88) 10:18:58 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x4, @link_local, 'ip6erspan0\x00'}}, 0x1e) 10:18:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x478, 0x1f0, 0x98, 0x1f0, 0x0, 0x308, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @private, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00'}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@private}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) 10:18:58 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001640)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000040)="52b12e6bde440d", 0x7}]) 10:18:58 executing program 0: socket$inet(0x2, 0x188bd7f1f01d3e66, 0x0) 10:18:59 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000240)='a', 0x1}], 0x1}, 0x0) 10:18:59 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x5e0, 0x0, 0xf8, 0xffffffff, 0x330, 0xf8, 0x548, 0x548, 0xffffffff, 0x548, 0x548, 0x5, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'rose0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @remote, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x200, 0x238, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'syz_tun\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote, @port, @gre_key}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@tcpmss={{0x28, 'tcpmss\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local, @port, @gre_key}}}}, {{@ip={@multicast1, @dev, 0x0, 0x0, 'veth1_macvtap\x00', 'gre0\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bcd4"}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x640) 10:18:59 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) [ 200.792651][T10523] x_tables: duplicate underflow at hook 1 10:18:59 executing program 5: socketpair(0x3, 0x0, 0x0, 0x0) 10:18:59 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x11, 0x0, &(0x7f0000000040)) 10:18:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x5, 0x0, 0x0) 10:18:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x1b, 0x5, 0x378, 0x190, 0x190, 0xffffffff, 0x238, 0xb8, 0x2e0, 0x2e0, 0xffffffff, 0x2e0, 0x2e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv6=@loopback, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @empty, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @empty, @private, @port, @gre_key}}}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'ip6erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @private, @port, @icmp_id}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) [ 200.881750][T10531] x_tables: duplicate underflow at hook 1 10:18:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfd09fd07236a29}, {{@in=@empty}, 0x0, @in=@remote}}, 0xe8) 10:18:59 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001600)='./cgroup/syz1\x00', 0x200002, 0x0) 10:18:59 executing program 5: r0 = socket$inet(0x2, 0x80006, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 10:18:59 executing program 4: clock_getres(0x0, &(0x7f0000001380)) 10:18:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x1b8, 0xe0, 0x1b8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@private, @local, 0x0, 0x0, 'bond_slave_0\x00', 'ip_vti0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) [ 201.012010][T10540] x_tables: duplicate underflow at hook 1 10:18:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) 10:18:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}], 0x10}, 0x0) 10:18:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x20}, 0x0) 10:18:59 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000700)="6d8f", 0x2, 0x40882, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) 10:18:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0x168, 0x168, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x7ff}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wlan0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@loopback, @loopback, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 10:18:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_ivalue}) [ 201.176297][T10555] x_tables: duplicate underflow at hook 2 10:18:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00', r0) 10:18:59 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='V', 0x1, 0xfffffffffffffffb) add_key$user(&(0x7f0000000580)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000680)={0x0, r0}, 0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)={'tgr192-generic\x00'}}) 10:18:59 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000700)="6d8f", 0x2, 0x40882, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) [ 201.288186][T10559] x_tables: duplicate underflow at hook 2 10:18:59 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 10:18:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@setneightbl={0x2c, 0x43, 0x85bd57dc7502185f, 0x0, 0x0, {0x7}, [@NDTA_NAME={0xc, 0x1, 'ns/time\x00'}, @NDTA_PARMS={0x4}, @NDTA_THRESH1={0x8}]}, 0x2c}}, 0x0) 10:18:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f00000008c0)="70026d7e", 0x4, 0x0, &(0x7f0000000940)={0x2, 0x0, @empty}, 0x10) 10:18:59 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x1b, 0x5, 0x3e8, 0x258, 0x0, 0xffffffff, 0x258, 0x1b0, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'rose0\x00', 'veth1_macvtap\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @remote, @port, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'wg1\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local, @gre_key, @gre_key}}}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'veth1_macvtap\x00', 'wlan0\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bcd4"}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @empty, @multicast2, @icmp_id, @icmp_id}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 10:18:59 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000700)="6d8f", 0x2, 0x40882, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) 10:18:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) 10:18:59 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x9}, 0x0, &(0x7f0000000080)={0x2}, &(0x7f00000000c0)) [ 201.519861][T10580] x_tables: duplicate underflow at hook 1 10:18:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @broadcast}, 0x10) [ 201.565589][T10567] could not allocate digest TFM handle tgr192-generic 10:18:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200), 0x14) 10:18:59 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000700)="6d8f", 0x2, 0x40882, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) [ 201.636404][T10588] could not allocate digest TFM handle tgr192-generic 10:19:00 executing program 0: perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:19:00 executing program 2: syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0x0, 0x80) 10:19:00 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x540, 0xffffffff, 0x0, 0x2a8, 0x2a8, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev, @local, 0x0, 0x0, 'bond_slave_0\x00', 'veth1_to_hsr\x00'}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'macvlan1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@ip={@dev, @local, 0x0, 0x0, 'bond_slave_0\x00', 'macvtap0\x00'}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'geneve1\x00', 'tunl0\x00'}, 0x0, 0x1d8, 0x200, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@inet=@sctp={{0x148, 'sctp\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) 10:19:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0xf0, 0x0, 0x1e8, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x40}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bond_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'batadv_slave_0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@udplite={{0x30, 'udplite\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 10:19:00 executing program 5: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000280)='V', 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000002c0)={0x0, r0, r0}, 0x0, 0x0, 0x0) 10:19:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e0, 0x488, 0x488, 0x188, 0x3a0, 0x3a0, 0x548, 0x548, 0x548, 0x548, 0x548, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'vxcan1\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@empty, @dev, 0x0, 0x0, 'bond_slave_0\x00', 'vlan0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@multicast1, @multicast1, 0x0, 0x0, 'veth0_to_bridge\x00', 'vlan1\x00'}, 0x0, 0x1e8, 0x218, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'veth1_vlan\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'syz_tun\x00', 'syzkaller0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @TTL={0x28, 'TTL\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x640) 10:19:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @remote}}}, 0x108) 10:19:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000740)={0x0, @in={0x2, 0x0, @empty}, @sco={0x1f, @fixed}, @vsock={0x28, 0x0, 0x2710}}) [ 201.856033][T10607] x_tables: duplicate underflow at hook 2 [ 201.896194][T10610] x_tables: duplicate underflow at hook 2 10:19:00 executing program 4: socketpair(0xb, 0x0, 0x0, 0x0) [ 201.943184][T10614] x_tables: duplicate underflow at hook 1 10:19:00 executing program 2: add_key$user(&(0x7f0000000480)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 10:19:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$unix(r0, &(0x7f0000000b80)={&(0x7f0000000480)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000a40)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x0) 10:19:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 10:19:00 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) 10:19:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000001100)) 10:19:00 executing program 4: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xea60}) [ 202.101062][T10625] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 10:19:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x478, 0x1f0, 0x98, 0x1f0, 0x0, 0x308, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@local, @private, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00'}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@private}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) 10:19:00 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:19:00 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2400) 10:19:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000000)={'sit0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}}) 10:19:00 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001100)={@map, 0xffffffffffffffff, 0x5}, 0x10) 10:19:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}}, {{@in=@dev}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) [ 202.273634][T10636] x_tables: duplicate underflow at hook 1 10:19:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, @isdn, 0xfffb}) 10:19:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x12002, 0x0, 0x0) 10:19:00 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 10:19:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0xf0, 0x0, 0x1e8, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bond_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'batadv_slave_0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@udplite={{0x30, 'udplite\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 10:19:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x6e, {0x2, 0x0, @dev}, 'veth1_to_bridge\x00'}) 10:19:00 executing program 0: r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{}, {r1, r2+10000000}}, &(0x7f00000001c0)) 10:19:00 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 10:19:00 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000180)={0x8}, 0x0, 0x0, 0x0) [ 202.487756][T10652] x_tables: duplicate underflow at hook 2 10:19:00 executing program 1: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x8e04c6dc81951a0a) 10:19:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@security={'security\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, 'veth1_virt_wifi\x00', 'bridge0\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}, {{@ip={@loopback, @private, 0x0, 0x0, 'geneve0\x00', 'lo\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 10:19:00 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x1c0802) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 10:19:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x5, &(0x7f0000000000)={0x7ff, {{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @remote}}}, 0x108) 10:19:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, 0xe8) 10:19:01 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$inet(r0, 0x0, 0x0, 0x10040, 0x0, 0x0) [ 202.693182][T10668] x_tables: duplicate underflow at hook 2 10:19:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_0\x00', 'macvtap0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@physdev={{0x68, 'physdev\x00'}, {'rose0\x00', {}, 'macsec0\x00', {}, 0x0, 0x8}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 10:19:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bond_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) 10:19:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000000)='\n,', 0x2, 0x0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 10:19:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x891e, &(0x7f0000000080)={'ip6gre0\x00', @ifru_addrs=@nfc}) 10:19:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}}, {{@in=@private}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) [ 202.857528][T10680] x_tables: duplicate underflow at hook 2 [ 202.907442][T10686] x_tables: duplicate underflow at hook 2 10:19:01 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) accept$inet(r0, 0x0, 0x0) io_setup(0x6edd, &(0x7f0000000540)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000380), 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) 10:19:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @remote}, {0x1}, 0x2, {0x2, 0x0, @multicast2}, 'veth0_vlan\x00'}) 10:19:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x5, 0x5c0, 0x0, 0xd0, 0xffffffff, 0xd0, 0x428, 0x528, 0x528, 0xffffffff, 0x528, 0x528, 0x5, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'rose0\x00', 'veth1_to_hsr\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@set1={{0x28, 'set\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @remote, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x200, 0x238, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'syz_tun\x00'}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @broadcast}}}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth0_macvtap\x00', 'bond_slave_1\x00'}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@tcpmss={{0x28, 'tcpmss\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local, @port, @gre_key}}}}, {{@ip={@multicast1, @dev, 0x0, 0x0, 'veth1_macvtap\x00', 'gre0\x00'}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}}, @common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bcd4"}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x620) 10:19:01 executing program 2: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x7}, &(0x7f0000000080), &(0x7f00000000c0)) 10:19:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000740)={0x0, @in={0x2, 0x0, @empty}, @l2tp={0x2, 0x0, @broadcast}, @in={0x2, 0x0, @local}}) 10:19:01 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 10:19:01 executing program 0: add_key$user(&(0x7f0000000240)='user\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\"', 0x1, 0xfffffffffffffffd) 10:19:01 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 10:19:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0xffffffff, 0x2b8, 0x0, 0x1f0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'vlan0\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, 'wg0\x00', 'geneve0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'wlan1\x00', 'bond_slave_0\x00'}, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) [ 203.532011][T10706] x_tables: duplicate underflow at hook 1 10:19:01 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0) 10:19:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000700)="6d0f", 0x2, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) 10:19:01 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 10:19:02 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) [ 203.687844][T10717] x_tables: duplicate underflow at hook 2 10:19:02 executing program 2: io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000002e80)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 10:19:02 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x6441) 10:19:02 executing program 3: socketpair(0x1d, 0x0, 0xac6, 0x0) 10:19:02 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x4000, 0x0) 10:19:02 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0) 10:19:02 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) 10:19:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, @nl, @rc}) 10:19:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8935, &(0x7f0000000000)={'wg0\x00', @ifru_flags}) 10:19:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 10:19:02 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000140)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d3"}}, 0x119) 10:19:02 executing program 3: socketpair(0x25, 0x0, 0x0, 0x0) 10:19:02 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x4000, 0x0) 10:19:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8910, 0x0) 10:19:02 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 10:19:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, "f1a43d121255c696f64c7b5b614539ab5bfb32adeb8a0925a8df8df8d26e7fe8092874ef2b0ba5e0dc3d97787c4c6a6721513eba50ad14c2fd7d715824e8a6053aa13b1936829f46deb4f4f31ac7c412"}, 0xd8) 10:19:02 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x4000, 0x0) 10:19:03 executing program 5: socketpair(0x29, 0x0, 0x0, 0x0) [ 204.634837][ T4809] hid-generic 0000:0000:0000.0001: item fetching failed at offset 0/1 [ 204.667398][ T4809] hid-generic: probe of 0000:0000:0000.0001 failed with error -22 10:19:03 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20252, 0x0) rename(&(0x7f00000001c0)='./file0\x00', 0x0) 10:19:03 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x4000, 0x0) 10:19:03 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x540, 0xffffffff, 0x0, 0x2a8, 0x2a8, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev, @local, 0x0, 0x0, 'bond_slave_0\x00', 'veth1_to_hsr\x00'}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'macvlan1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@ip={@dev, @local, 0x0, 0x0, 'bond_slave_0\x00', 'macvtap0\x00'}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'geneve1\x00', 'tunl0\x00'}, 0x0, 0x1d8, 0x200, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@inet=@sctp={{0x148, 'sctp\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) 10:19:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x0, 0xe0, 0x1b8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe8, 'syz0\x00'}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 10:19:03 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a0, 0x1c0, 0x370, 0x1c0, 0x2b0, 0x100, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'hsr0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0xffffffffffffffff}}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@broadcast, @dev, 0x0, 0x0, 'gretap0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast1}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vxcan1\x00', 'vxcan1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 10:19:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000580)={'tunl0\x00', @ifru_data=0x0}) 10:19:03 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x398, 0x0, 0x180, 0xffffffff, 0x180, 0x180, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @local, @dev, @icmp_id, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'macvlan0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast1, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'geneve0\x00', 'caif0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @multicast1, @gre_key}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @empty, @port, @icmp_id}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 10:19:03 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x12, &(0x7f0000000080)="1dd64706", 0x4) 10:19:03 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@nat={'nat\x00', 0x1b, 0x5, 0x5e0, 0x0, 0x450, 0xffffffff, 0x330, 0x0, 0x550, 0x550, 0xffffffff, 0x550, 0x550, 0x5, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'rose0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @remote, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x200, 0x238, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'syz_tun\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote, @port, @gre_key}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@tcpmss={{0x28, 'tcpmss\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local, @port, @gre_key}}}}, {{@ip={@multicast1, @dev, 0x0, 0x0, 'veth1_macvtap\x00', 'gre0\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@ah={{0x0, 'ah\x00'}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x42d) 10:19:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x1b0, 0x1b0, 0xf8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@dev, @local, 0x0, 0x0, 'bond_slave_0\x00', 'macvtap0\x00'}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 10:19:03 executing program 0: clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) select(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000300)={0x200}, &(0x7f0000000380)={0x0, r0/1000+60000}) 10:19:03 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) 10:19:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001400)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x0, 0x0, 0xee00}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0xe8) 10:19:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x0, 0xe0, 0x1b8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe8, 'syz0\x00'}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00', {}, {0xff}, 0x0, 0x0, 0x10}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x2]}, {0x0, [0x0, 0x0, 0x1]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 10:19:03 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000700)=@ccm_128={{}, "0ef70776a2ffb9db", "aebbf43046890b8e89e01261dc13098c", "3a448030", "7d3ba4f8222d1463"}, 0x28) 10:19:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 10:19:03 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000000040)) 10:19:03 executing program 4: socketpair(0x15, 0x0, 0x0, 0x0) 10:19:03 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000840)=@gcm_256={{}, "229993e9bdb570d1", "57709ce579c6ffa140a13029b45d1f3cb77e5c891951f6c470061dfcd541b58b", "2100ec17", "9c38cda0cb193779"}, 0x38) 10:19:03 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/mnt\x00') 10:19:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f00000001c0)={'ip_vti0\x00', @ifru_data=0x0}) 10:19:03 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x200) 10:19:03 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000100), 0x4) 10:19:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 10:19:03 executing program 3: socketpair(0x23, 0x0, 0x0, 0x0) 10:19:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x278, 0xffffffff, 0x148, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x1e0, 0x1e0, 0x1e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "e98abbe9fe3e6178652d91b8be1a941ca0f48cc36dc0480e2e5e10779c8c"}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wlan0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 10:19:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x188, 0x188, 0x188, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wlan0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 10:19:03 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) 10:19:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x0, 0x2, 'lblc\x00'}}, 0x44) 10:19:03 executing program 2: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x4900) 10:19:03 executing program 3: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x4000, 0x0) 10:19:03 executing program 5: io_setup(0x6edd, &(0x7f0000000540)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000380), 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 10:19:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000700)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x0, {0x2, 0x0, @dev}, 'veth1_macvtap\x00'}) 10:19:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f00000003c0)="82", 0x1, 0x4004800, 0x0, 0x0) 10:19:03 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000240), 0x4) 10:19:03 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2d725e9f5dc41647"], 0x8) 10:19:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @dev}, 0x0, {0x2, 0x0, @remote}, 'batadv_slave_0\x00'}) [ 205.691637][ T2927] Bluetooth: hci5: command 0x0405 tx timeout 10:19:04 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'stack ', ': \x00'}, 0x9) 10:19:04 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uhid\x00', 0x0, 0x0) select(0x40, &(0x7f0000000480), &(0x7f00000004c0)={0x9}, 0x0, 0x0) 10:19:04 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000700)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @multicast}, 0x0, {0x2, 0x0, @dev}, 'veth1_macvtap\x00'}) 10:19:04 executing program 4: socketpair(0x27, 0x0, 0x0, 0x0) 10:19:04 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 10:19:04 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 10:19:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_0\x00', 'macvtap0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@physdev={{0x68, 'physdev\x00'}, {'rose0\x00', {}, 'macsec0\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 10:19:04 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001640)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0}]) 10:19:04 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@multicast1}}]}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) 10:19:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000100)=""/4096, &(0x7f0000001100)=0x1000) 10:19:04 executing program 0: socketpair(0x1d, 0x0, 0x0, 0x0) 10:19:04 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x7}, 0x0, 0x0) 10:19:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) 10:19:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4004800, 0x0, 0x0) 10:19:04 executing program 2: timerfd_create(0x0, 0xc00) 10:19:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28, 'cgroup\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 10:19:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x2c8, 0xffffffff, 0x100, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'wlan0\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x198}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 10:19:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@setneightbl={0x14, 0x43, 0x85bd57dc7502185f}, 0x14}}, 0x0) 10:19:04 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) timerfd_gettime(r0, 0x0) 10:19:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000740)={0x0, @in={0x2, 0x0, @empty}, @sco={0x1f, @fixed}, @vsock}) 10:19:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @dev}, 0x30, {0x2, 0x0, @remote}, 'batadv_slave_0\x00'}) 10:19:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 10:19:04 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) 10:19:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @local}, {0x0, @dev}, 0x8, {}, 'veth1_to_batadv\x00'}) 10:19:04 executing program 3: socketpair(0x23, 0x5, 0x0, 0x0) 10:19:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) 10:19:04 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000140)='/dev/midi#\x00', 0xb) 10:19:04 executing program 2: add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 10:19:04 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) 10:19:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000140), 0x4) 10:19:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000700)="6d8f", 0x2, 0x20000044, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 10:19:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000000)={'wlan0\x00', @ifru_map}) 10:19:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, @isdn}) 10:19:04 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0xd8, 0x2c8, 0xd8, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast1, @dev, 0x0, 0x0, 'veth1_vlan\x00', 'ip_vti0\x00', {}, {}, 0x0, 0x0, 0x90}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'veth1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 10:19:04 executing program 1: socketpair(0x8, 0x0, 0x0, 0x0) 10:19:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x40008c4, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) 10:19:05 executing program 4: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{}, {0x0, r1+10000000}}, 0x0) 10:19:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="140000000000000001005a"], 0x48}, 0x0) 10:19:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x0, 0xe0, 0x1b8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe8, 'syz0\x00'}}}, {{@ip={@local, @remote, 0xff000000, 0xff, 'veth1_to_batadv\x00', 'wg1\x00', {}, {0xff}, 0x6c}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x0, 0x0, 0x0, 0x8]}, {0x0, [0x0, 0x0, 0x1, 0x5, 0x5], 0x0, 0x2}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 10:19:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r0, 0x0, 0xfffffffffffffdf0, 0x40012122, 0x0, 0x0) 10:19:05 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/time_for_children\x00') 10:19:05 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 10:19:05 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0xa2b, 0x4) [ 206.881623][T10951] xt_check_table_hooks: 10 callbacks suppressed [ 206.881640][T10951] x_tables: duplicate underflow at hook 2 10:19:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="140000000000000001"], 0x48}, 0x0) 10:19:05 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x0) 10:19:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f00000008c0)="7002", 0x2, 0x0, &(0x7f0000000940)={0x2, 0x0, @empty}, 0x10) 10:19:05 executing program 3: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) io_setup(0x6edd, &(0x7f0000000540)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:19:05 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000700)='/dev/uhid\x00', 0x2, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000740), 0x4) 10:19:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_0\x00', 'macvtap0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@physdev={{0x68, 'physdev\x00'}, {'rose0\x00', {}, 'macsec0\x00', {}, 0x0, 0x8}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8000]}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 10:19:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x1b8, 0xe0, 0x1b8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xffffffff, 'syz1\x00'}}}, {{@ip={@private, @local, 0x0, 0x0, 'bond_slave_0\x00', 'ip_vti0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 10:19:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x7, 0x4) 10:19:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private0}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) 10:19:05 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) 10:19:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f00000008c0)="70026d", 0x3, 0x0, &(0x7f0000000940)={0x2, 0x0, @empty}, 0x10) 10:19:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x2c0, 0xffffffff, 0xf8, 0x190, 0x190, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@tos={{0x28, 'tos\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) 10:19:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @broadcast}, 0x2a, {0x2, 0x0, @multicast1}, 'netdevsim0\x00'}) [ 207.679449][T10983] x_tables: duplicate underflow at hook 2 [ 207.700118][T10987] x_tables: duplicate underflow at hook 2 10:19:06 executing program 0: select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x100}, 0x0) 10:19:06 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x558, 0x418, 0xb8, 0xffffffff, 0x2f0, 0xb8, 0x4c0, 0x4c0, 0xffffffff, 0x4c0, 0x4c0, 0x5, 0x0, {[{{@ip={@multicast2, @loopback, 0x0, 0x0, 'rose0\x00', 'veth1_to_hsr\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth1_to_bond\x00'}}}, {{@ip={@dev, @remote, 0x0, 0x0, 'xfrm0\x00', 'syzkaller1\x00'}, 0x0, 0x200, 0x238, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'syz_tun\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote, @port, @gre_key}}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) 10:19:06 executing program 2: setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private2}}, {{@in6=@dev}, 0x0, @in6=@empty}}, 0xe8) r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) [ 207.771684][ T19] Bluetooth: hci5: command 0x0405 tx timeout 10:19:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x2060, 0x0, 0x0) 10:19:06 executing program 3: socketpair(0x22, 0x0, 0x0, 0x0) [ 207.865577][T11000] x_tables: duplicate underflow at hook 1 10:19:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x188, 0x188, 0x188, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [], 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x6be, 0x0, 0x18000000}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wlan0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 10:19:06 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0xffffffff, 0x178, 0x178, 0x178, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfffe, 0x6}}}, {{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) 10:19:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast1}}}, 0x108) 10:19:06 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x160, 0x0, 0x0) 10:19:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001140)='cubic\x00', 0x6) 10:19:06 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000000c0)=0x3, 0x4) 10:19:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000000)="4d81", 0x2, 0x8840, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) [ 208.016466][T11014] x_tables: duplicate underflow at hook 2 10:19:06 executing program 2: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{}, {r1, r2+10000000}}, &(0x7f00000001c0)) 10:19:06 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, 0x0) 10:19:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)="14", 0x1, 0x40008c4, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) 10:19:06 executing program 3: add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)="9f", 0x1, 0xffffffffffffffff) 10:19:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@setneightbl={0x20, 0x43, 0x85bd57dc7502185f, 0x0, 0x0, {}, [@NDTA_NAME={0xc, 0x1, 'ns/time\x00'}]}, 0x20}}, 0x0) 10:19:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4000091, 0x0, 0x0) 10:19:06 executing program 5: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2}, 0x0) 10:19:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x10}}], 0x30}, 0x0) 10:19:06 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001100), 0x5e) 10:19:06 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$inet(r0, 0x0, 0x0, 0x40000161, 0x0, 0x35) 10:19:06 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x558, 0x418, 0xb8, 0xffffffff, 0x2f0, 0xb8, 0x4c0, 0x4c0, 0xffffffff, 0x4c0, 0x4c0, 0x5, 0x0, {[{{@ip={@multicast2, @loopback, 0x0, 0x0, 'rose0\x00', 'veth1_to_hsr\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth1_to_bond\x00'}}}, {{@ip={@dev, @remote, 0x0, 0x0, 'xfrm0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x1}, 0x0, 0x200, 0x238, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'syz_tun\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote, @port, @gre_key}}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) 10:19:06 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180), 0x0) 10:19:06 executing program 3: clock_gettime(0x0, &(0x7f0000000400)={0x0}) select(0x40, &(0x7f0000000340)={0x1}, 0x0, 0x0, &(0x7f0000000440)={r0}) 10:19:06 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x9d7, 0x4) [ 208.420835][T11051] x_tables: duplicate underflow at hook 1 10:19:07 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000000240), 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={'sha3-512-ce\x00'}}) 10:19:07 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) 10:19:07 executing program 3: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) select(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x8}, &(0x7f0000000180)={0x0, r0/1000+60000}) 10:19:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x0, @local, 0x0, 0x0, 'wlc\x00'}, 0x2c) [ 209.142168][T11078] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 10:19:07 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0xffffffff, 0x0, 0x200, 0x200, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}}}, {{@ip={@empty, @local, 0x0, 0x0, 'lo\x00', 'macvtap0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}}, @common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) 10:19:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_0\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 10:19:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x0, 0xe0, 0x1b8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe8, 'syz0\x00'}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 10:19:07 executing program 2: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2}, &(0x7f00000000c0)) 10:19:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast1}}}, 0x108) [ 209.211254][T11074] could not allocate digest TFM handle sha3-512-ce [ 209.268784][T11090] x_tables: duplicate underflow at hook 2 [ 209.270272][T11074] could not allocate digest TFM handle sha3-512-ce [ 209.277754][T11091] x_tables: duplicate underflow at hook 2 10:19:07 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'vlan0\x00'}}, 0x1e) 10:19:07 executing program 3: add_key$user(&(0x7f0000001540)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 10:19:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x1a0, 0xc0, 0x1a0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_0\x00', 'macvtap0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@pkttype={{0x28, 'pkttype\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 10:19:07 executing program 0: clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) select(0x40, &(0x7f0000000340)={0x1}, 0x0, 0x0, &(0x7f0000000440)={0x0, r0/1000+10000}) 10:19:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{}, {0x0, @remote}, 0x1c, {0x2, 0x0, @local}}) [ 209.358695][T11096] x_tables: duplicate underflow at hook 2 10:19:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, 0xfffffffffffffffd, 0x0) 10:19:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x1b0, 0xd8, 0xd8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x7}}}, {{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_0\x00', 'macvtap0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 10:19:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0xffffffff, 0x0, 0x200, 0x200, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}}}, {{@ip={@empty, @local, 0x0, 0x0, 'lo\x00', 'macvtap0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x1}}, @common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) [ 209.480161][T11107] x_tables: duplicate underflow at hook 2 10:19:07 executing program 0: r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{}, {0x0, r1+10000000}}, 0x0) 10:19:07 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@mss, @timestamp, @mss, @window], 0x4) 10:19:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x1a8, 0xd0, 0x1a8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_0\x00', 'macvtap0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 10:19:07 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0x168, 0x168, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wlan0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@loopback, @loopback, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 10:19:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000700)="6d8f", 0x2, 0x20040892, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) 10:19:07 executing program 3: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) 10:19:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ipx={0x4, 0x0, 0x0, "fcd86cee4c56"}, @llc, @phonet}) 10:19:08 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{0x0}, {0x0}, {&(0x7f0000000300)="d4", 0x1}], 0x3}, 0x0) 10:19:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000700)="6d0f", 0x2, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 10:19:08 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x300, 0xffffffff, 0x198, 0x198, 0x198, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@ip={@loopback, @local, 0x0, 0x0, 'tunl0\x00', 'macvtap0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 10:19:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x16, 0x0, 0x0) 10:19:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @local}, {0x1, @dev}, 0x8, {}, 'veth1_to_batadv\x00'}) 10:19:08 executing program 0: getrusage(0x743657e1070a13da, 0x0) 10:19:08 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 10:19:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0xf0, 0x0, 0x1e8, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x80}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bond_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'batadv_slave_0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@udplite={{0x30, 'udplite\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 10:19:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @local}, {0x1, @dev}, 0x8, {}, 'veth1_to_batadv\x00'}) 10:19:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x1b0, 0xd8, 0xd8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_0\x00', 'macvtap0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 10:19:08 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x801, 0x0, 0x0) 10:19:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x300, 0xffffffff, 0x0, 0x0, 0x130, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'macvlan1\x00', 'vlan0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}, @common=@icmp={{0x28, 'icmp\x00'}, {0x0, "f443"}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 10:19:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @local}, {0x1, @dev}, 0x8, {}, 'veth1_to_batadv\x00'}) 10:19:08 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 10:19:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}, 0x0) 10:19:08 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) 10:19:08 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) 10:19:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x419, 0x0, "f1a43d121255c696f64c7b5b614539ab5bfb32adeb8a0925a8df8df8d26e7fe8092874ef2b0ba5e0dc3d97787c4c6a6721513eba50ad14c2fd7d715824e8a6053aa13b1936829f46deb4f4f31ac7c412"}, 0xd8) 10:19:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f00000001c0)={'ip_vti0\x00', @ifru_data=&(0x7f0000000180)="bf0a4992eaa51f3b857bed0f259dedf0b5b3c970de19355aec1f229fee8a3c10"}) 10:19:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @local}, {0x1, @dev}, 0x8, {}, 'veth1_to_batadv\x00'}) 10:19:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8918, 0x0) 10:19:08 executing program 5: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=0x1}, 0x10) io_setup(0x0, &(0x7f0000000000)) 10:19:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 10:19:08 executing program 1: socketpair(0x23, 0x2, 0x1, 0x0) 10:19:08 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/net/tun\x00', 0x5000, 0x0) 10:19:08 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000380)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000002c0)=""/149, 0x95}}, 0x120) 10:19:08 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x9}, &(0x7f0000000040)={0x7}, 0x0, &(0x7f00000000c0)) 10:19:08 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000640)={'veth1_to_bridge\x00', @ifru_names}) 10:19:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000680)='/dev/nbd#\x00', 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2, &(0x7f0000000780)=[@rights={{0x18, 0x1, 0x1, [r1, r2]}}], 0x18}, 0x0) 10:19:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000001c0)={0x9, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) 10:19:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x0, @dev}, 0x8, {0x2, 0x0, @remote}, 'macvtap0\x00'}) [ 210.434976][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 210.462636][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 10:19:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000040)={'erspan0\x00', @ifru_hwaddr=@remote}) [ 210.532598][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 210.557344][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 10:19:08 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) [ 210.579757][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 10:19:08 executing program 2: socketpair(0x23, 0x0, 0x496, 0x0) 10:19:08 executing program 1: socketpair(0x1e, 0x0, 0xfffffffe, 0x0) [ 210.607328][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 210.634935][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 10:19:08 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r0, 0x0, 0x0) 10:19:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x19, 0x0, "f1a43d121255c696f64c7b5b614539ab5bfb32adeb8a0925a8df8df8d26e7fe8092874ef2b0ba5e0dc3d97787c4c6a6721513eba50ad14c2fd7d715824e8a6053aa13b1936829f46deb4f4f31ac7c412"}, 0xd8) [ 210.679430][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 210.741743][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 210.778504][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 210.833099][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 210.854511][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 210.877103][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 210.905262][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 210.925920][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 210.946815][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 210.972601][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 210.994488][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.011815][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.019460][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.034260][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.050654][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.066491][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.082972][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.098247][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.113919][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.121390][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.136061][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.152482][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.167650][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.184213][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.201155][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.215872][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.230496][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.255401][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.275230][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.295268][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.310506][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.331307][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.352238][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.359790][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.375634][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.383742][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.391265][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.399300][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.426070][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.447347][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.466275][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.476413][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.489164][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.499302][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.513388][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.520833][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.555339][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.563769][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.571352][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.584154][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.594220][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.601927][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.610062][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.618295][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.625957][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.633880][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.641292][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.649158][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.657078][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.664932][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.672824][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.680239][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.688291][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.696200][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.704159][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.714758][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.725724][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.736655][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.748647][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.758738][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.766996][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.774908][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.782690][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.790483][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.798010][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.806267][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.815009][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.823050][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.830570][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.838588][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.846661][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.854689][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.862794][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.870828][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.878816][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.886983][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.894887][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.903028][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.910551][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.919220][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.930279][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.938347][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.948087][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.956114][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.963709][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.971113][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.978613][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.986187][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.994507][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.002314][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.009917][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.019890][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.027763][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.035633][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.044048][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.051870][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.059346][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.068047][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.075947][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.083882][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.091351][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.099501][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.107377][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.115213][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.124590][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.132921][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.140373][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.148636][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.156470][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.164172][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.171991][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.179796][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.187313][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.195643][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.203311][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.211002][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.218750][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.227084][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.237941][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.245888][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.258798][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.270152][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.281459][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.294038][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.306983][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.318832][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.330592][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.342990][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.350580][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.367330][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.379259][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.391120][ T2927] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.406798][ T2927] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 10:19:10 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x1) 10:19:10 executing program 5: socketpair(0x22, 0x0, 0x9, 0x0) 10:19:10 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:19:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x1b0, 0x1b0, 0xf8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@dev, @local, 0x0, 0x0, 'bond_slave_0\x00', 'macvtap0\x00'}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 10:19:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000000)={'veth0_to_batadv\x00', @ifru_mtu}) 10:19:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:19:10 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @broadcast}, {0x306, @dev}, 0x6e, {0x2, 0x0, @dev}, 'veth1_to_bridge\x00'}) [ 212.518163][T11238] xt_check_table_hooks: 9 callbacks suppressed [ 212.518180][T11238] x_tables: duplicate underflow at hook 2 10:19:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4c8, 0xc0, 0x370, 0xc0, 0x0, 0x370, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ip={@multicast1, @dev, 0x0, 0x0, 'ip6tnl0\x00', 'batadv_slave_0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@private, @empty, 0x0, 0x0, 'veth1\x00', 'wg1\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6erspan0\x00', 'vxcan1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) 10:19:10 executing program 2: socketpair(0x28, 0x0, 0x9bf, 0x0) 10:19:10 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x1, @local, 'vlan0\x00'}}, 0x1e) 10:19:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000006c0)={0x0, {{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @empty}}}, 0x108) 10:19:10 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="ef", 0x1) [ 212.655874][T11246] x_tables: duplicate underflow at hook 1 10:19:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@setneightbl={0x2c, 0x43, 0x85bd57dc7502185f, 0x0, 0x0, {}, [@NDTA_NAME={0xc, 0x1, 'ns/time\x00'}, @NDTA_PARMS={0x4}, @NDTA_THRESH1={0x8}]}, 0x2c}}, 0x0) 10:19:11 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) 10:19:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000580)={'tunl0\x00', @ifru_data=&(0x7f0000000540)="4b51eb2da59015ff02cebb33637708f997e0e281cd7af16cd8ac802394e03c25"}) 10:19:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000680)='/dev/nbd#\x00', 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2, &(0x7f0000000780)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, 0xffffffffffffffff]}}], 0x20}, 0x0) 10:19:11 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000700)='m', 0x1, 0x0, 0x0, 0x0) 10:19:11 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000380)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x120) 10:19:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0xd8, 0xd8, 0x1b0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8d12eb20f2d85980240951dd4f3ea7c989e7ab3b2bd7fa5f858dbfd7b198"}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 10:19:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000700)={0x0, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @multicast1}}}, 0x108) 10:19:11 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000100)=0xffff, 0x4) 10:19:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@setneightbl={0x2c, 0x43, 0x85bd57dc7502185f, 0x0, 0x0, {0x7}, [@NDTA_NAME={0xc, 0x1, 'ns/time\x00'}, @NDTA_PARMS={0x4}, @NDTA_THRESH1={0x8}]}, 0x2c}}, 0x0) 10:19:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) 10:19:11 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) 10:19:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 10:19:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$unix(r0, &(0x7f0000000b80)={&(0x7f0000000480)=@abs={0x1}, 0x6e, 0x0}, 0x0) 10:19:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:19:11 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r0, &(0x7f00000012c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0390e30f53bd1b6a745349b667c7d7b80fd5d51b6063dc19e39e4dea14e756587b232d334f95c0dec8cc03e5ed67e5328761c109888d9116036d0cf0fbcdfe"}, 0x60) 10:19:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x40002023, 0x0, 0x0) 10:19:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) 10:19:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x1a0, 0xc0, 0x1a0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_0\x00', 'macvtap0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@pkttype={{0x28, 'pkttype\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 10:19:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000200)={'batadv_slave_1\x00', @ifru_data=0x0}) 10:19:12 executing program 1: io_setup(0x6edd, &(0x7f0000000540)) 10:19:12 executing program 0: select(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) 10:19:12 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 10:19:12 executing program 2: socketpair(0x2b, 0x0, 0x0, 0x0) [ 213.757204][T11309] x_tables: duplicate underflow at hook 2 10:19:12 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, 0x0) 10:19:12 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000180)={0x8}, 0x0, 0x0, &(0x7f0000000400)) 10:19:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}}) 10:19:12 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000140)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00'}}, 0x118) 10:19:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x300, 0xffffffff, 0x198, 0x198, 0x198, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'tunl0\x00', 'macvtap0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) [ 214.039977][T11332] x_tables: duplicate underflow at hook 2 10:19:12 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001640)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000040)="52b12e6bde440de0ed90e195c059ac41", 0x10}]) 10:19:12 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x3e9, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", "", "", ""]}, 0x38}}, 0x0) 10:19:12 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x0, 0xe0, 0x1b8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe8, 'syz0\x00', {0xdf1}}}}, {{@ip={@local, @remote, 0xff000000, 0xff, 'veth1_to_batadv\x00', 'wg1\x00', {0xff}, {}, 0x6c, 0x3, 0x10}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x5]}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 10:19:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="140000000000000001005a000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x000'], 0x48}, 0x0) [ 214.640168][T11350] x_tables: duplicate underflow at hook 2 10:19:13 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001640)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000040)="52b12e6bde440de0ed", 0x9}]) 10:19:13 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001100), 0xfffffffffffffcc0) 10:19:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x0, 0xe0, 0x1b8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe8, 'syz0\x00', {0xdf1}}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00', {}, {}, 0x6c, 0x3, 0x10}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x1, 0x8]}, {0x3, [0x0, 0x0, 0x1, 0x5, 0x5, 0x5], 0x0, 0x2}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 10:19:13 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x9}, &(0x7f0000000040)={0x7}, &(0x7f0000000080), &(0x7f00000000c0)) 10:19:13 executing program 5: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=0x1, 0xffffffffffffffff, 0x5}, 0x10) 10:19:13 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) 10:19:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x10}}], 0x30}, 0x0) 10:19:13 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) [ 214.785853][T11363] x_tables: duplicate underflow at hook 2 10:19:13 executing program 5: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x0, @multicast2}}}, 0x88) 10:19:13 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f00000008c0)) 10:19:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x0, @multicast2}}}, 0x88) 10:19:13 executing program 3: socket$inet(0x2, 0x8000e, 0x0) 10:19:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000140)="14", 0x1, 0x40008c4, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) 10:19:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ipx={0x4, 0x0, 0x0, "fcd86cee4c56"}, @llc, @phonet, 0x7e9}) 10:19:13 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10:19:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000680)='/dev/nbd#\x00', 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, 0xffffffffffffffff]}}], 0x20}, 0x0) 10:19:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 10:19:13 executing program 4: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 10:19:13 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "65ada9c78247f6ea7668aee4d0065bd428c84d39c453eadb3de80bae4090550b7cc2c95dcae53113a74ece2c532da0e2c093028e4a7a1a87e6c7565b7f49e224415fb5703b613fc69146e0367c1e59f2"}, 0xd8) 10:19:13 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x448, 0x310, 0x220, 0xc0, 0x310, 0x310, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'wg2\x00', 'netpci0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 10:19:13 executing program 5: keyctl$dh_compute(0x17, &(0x7f0000000680), 0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)={'tgr192-generic\x00'}}) 10:19:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x0, 0x0, 'lblc\x00'}}, 0x44) 10:19:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x278, 0xffffffff, 0x148, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x1e0, 0x1e0, 0x1e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xcd, 0x0, "e98abbe9fe3e6178652d91b8be1a941ca0f48cc36dc0480e2e5e10779c8c"}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wlan0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 10:19:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) [ 215.210089][T11400] x_tables: duplicate underflow at hook 1 10:19:13 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x8) 10:19:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x1b0, 0xd8, 0xd8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x15}}}, {{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_0\x00', 'macvtap0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 10:19:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xc0, 0x198, 0xc0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_0\x00', 'macvtap0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 215.357228][T11413] x_tables: duplicate underflow at hook 2 [ 215.379738][T11415] x_tables: duplicate underflow at hook 2 10:19:13 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000240)='a', 0x1}], 0x2}, 0x0) 10:19:13 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f00000000c0)) 10:19:13 executing program 4: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0xb3fd, {{0x2, 0x0, @multicast2}}}, 0x88) 10:19:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f00000008c0)="70026d7e20d0826d", 0x8, 0x0, &(0x7f0000000940)={0x2, 0x0, @empty}, 0x10) [ 215.450537][T11420] x_tables: duplicate underflow at hook 2 [ 215.467783][T11406] could not allocate digest TFM handle tgr192-generic 10:19:13 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x285}, 0x0, 0x0, r0, 0x0) [ 215.543108][T11406] could not allocate digest TFM handle tgr192-generic 10:19:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14}, 0x14}}, 0x240000d0) 10:19:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x1e0, 0x0, 0x148, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 10:19:13 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) 10:19:13 executing program 4: semget$private(0x0, 0x2, 0x0) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) 10:19:13 executing program 2: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, r0+60000000}, 0x0) 10:19:14 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x84001, 0x0) 10:19:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x4c0, 0xffffffff, 0x300, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x428, 0x428, 0x428, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'tunl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0x160, 0x1c0, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@empty, [], @ipv4=@multicast1, [], @ipv4, [], @ipv6=@mcast1}}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@loopback, @private, 0x0, 0x0, 'team_slave_0\x00', 'vlan0\x00'}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}, @common=@set={{0x40, 'set\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@uncond, 0x0, 0xb8, 0x128, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a32dde6a3fdf70ca10293a33035b54f38831b1de708a10f3cf3d017ce8b42fc7598ca24fa0ea2c97ca4f89c2c0b8df0871cc16e2dd5714ff64748f337a1b83ae"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) 10:19:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', r0) 10:19:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}], 0x10}, 0x91) 10:19:14 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 10:19:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000280)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid}) 10:19:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00', r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', r0) 10:19:14 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x595c01, 0x0) 10:19:14 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x10000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 10:19:14 executing program 2: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_extract_tcp_res(0x0, 0x0, 0x0) 10:19:14 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 10:19:14 executing program 0: pselect6(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) 10:19:14 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x141081, 0x0) 10:19:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x240000d0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) 10:19:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x3}}, 0x24}}, 0x0) 10:19:14 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 10:19:14 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 10:19:14 executing program 1: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x0, 0x0) 10:19:14 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x54100, 0x0) 10:19:14 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) 10:19:14 executing program 2: statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 10:19:14 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') write$P9_RSTATu(r0, &(0x7f00000003c0)=ANY=[], 0x5d) 10:19:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2c58e31c578ce12, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 10:19:15 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r0, 0x0, &(0x7f00000000c0)) 10:19:15 executing program 3: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 10:19:15 executing program 1: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x13, 0x1}, 0x14) fork() mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x110, 0xffffffffffffffff, 0x10000000) 10:19:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 10:19:15 executing program 2: getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) 10:19:15 executing program 4: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) 10:19:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00', r0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 10:19:15 executing program 4: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, r0+60000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x3]}, 0x8}) 10:19:15 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 10:19:15 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d66c6340cd061901910a0000000109021b00010000000009040000010900240009050747"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x5, 0x95, 0xd5, 0x0, 0x19d2, 0x1247, 0xf160, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 10:19:15 executing program 0: lstat(&(0x7f0000000000)='./file0\x00', 0x0) 10:19:15 executing program 2: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) 10:19:15 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, 0x0) 10:19:15 executing program 0: fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 10:19:15 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', r0) 10:19:15 executing program 2: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 10:19:15 executing program 0: socketpair(0x10, 0x0, 0x0, &(0x7f0000000040)) 10:19:15 executing program 1: pselect6(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0), 0x0) 10:19:15 executing program 5: pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RMKNOD(r0, &(0x7f0000000200)={0x14}, 0xfffffef2) [ 217.571380][ T9571] usb 4-1: new high-speed USB device number 2 using dummy_hcd 10:19:16 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x6, 0x50042) 10:19:16 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000900)='x', 0x1}], 0x3}, 0x0) [ 217.972340][ T9571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 217.999469][ T9571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 218.026448][ T9571] usb 4-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice= a.91 [ 218.036768][ T9571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.049983][ T9571] usb 4-1: config 0 descriptor?? [ 218.103796][ T9571] hub 4-1:0.0: bad descriptor, ignoring hub [ 218.110341][ T9571] hub: probe of 4-1:0.0 failed with error -5 [ 218.142470][ T9571] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 218.150367][ T9571] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 218.188432][ T9571] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 218.201376][ T9571] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 218.210396][ T9571] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 218.218631][ T9571] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 218.226798][ T9571] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 218.241461][ T9571] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 218.311045][ T9571] usb 4-1: USB disconnect, device number 2 [ 218.336771][ T9571] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 218.354829][ T9571] keyspan 4-1:0.0: device disconnected [ 218.901596][ T9571] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 219.262239][ T9571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 219.274040][ T9571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 219.286496][ T9571] usb 4-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice= a.91 [ 219.296719][ T9571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.307579][ T9571] usb 4-1: config 0 descriptor?? [ 219.352746][ T9571] hub 4-1:0.0: bad descriptor, ignoring hub [ 219.358796][ T9571] hub: probe of 4-1:0.0 failed with error -5 [ 219.372450][ T9571] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 219.380110][ T9571] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 219.400019][ T9571] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 219.415116][ T9571] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 219.428723][ T9571] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 219.437423][ T9571] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 219.445767][ T9571] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 219.455414][ T9571] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 219.671901][ T4809] usb 4-1: USB disconnect, device number 3 [ 219.680036][ T4809] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 219.698517][ T4809] keyspan 4-1:0.0: device disconnected [ 220.344822][ T2927] usb 4-1: new high-speed USB device number 4 using dummy_hcd 10:19:19 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getsockname$qrtr(r0, 0x0, 0x0) 10:19:19 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x40000, 0x0) 10:19:19 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000780)="9f", 0x1}, {0x0}, {&(0x7f0000000900)='x', 0x1}], 0x4}, 0x0) 10:19:19 executing program 5: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 10:19:19 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) 10:19:19 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @dev}}}}}, 0x0) [ 220.751741][ T2927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 220.762846][ T2927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 220.773809][ T2927] usb 4-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice= a.91 [ 220.783478][ T2927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.821018][ T2927] usb 4-1: config 0 descriptor?? 10:19:19 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) 10:19:19 executing program 5: pipe2$9p(&(0x7f0000000340), 0x0) 10:19:19 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4000, 0x0) [ 220.861745][ T2927] usb 4-1: can't set config #0, error -71 [ 220.889227][ T2927] usb 4-1: USB disconnect, device number 4 10:19:19 executing program 4: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x9}, 0x0, 0x0, 0x0) 10:19:19 executing program 3: pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) 10:19:19 executing program 2: getsockname$tipc(0xffffffffffffffff, 0x0, 0x0) 10:19:19 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002c80)={&(0x7f0000000080)=@isdn, 0x80, 0x0}, 0x0) 10:19:19 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000015, 0x4020112, r0, 0x10000000) 10:19:19 executing program 4: socket$tipc(0x1e, 0x0, 0x0) 10:19:19 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 10:19:19 executing program 1: r0 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x3f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x2, 0x2f, 0x0, @empty, @empty}}}}) 10:19:19 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000100)) 10:19:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) 10:19:19 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x6f4f, 0x2d2000) 10:19:19 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 10:19:19 executing program 2: pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RMKNOD(r0, &(0x7f0000000200)={0x14}, 0xfffffef2) write$P9_RAUTH(r0, &(0x7f0000000240)={0x14}, 0x14) 10:19:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') write$P9_RUNLINKAT(r0, 0x0, 0x0) 10:19:20 executing program 4: socket(0x29, 0x2, 0x400) 10:19:20 executing program 0: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) 10:19:20 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r0) 10:19:20 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev, 'wg1\x00'}}, 0x1e) 10:19:20 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 10:19:20 executing program 4: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x9}, &(0x7f00000000c0), &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) 10:19:20 executing program 5: io_uring_setup(0x0, &(0x7f0000000000)) 10:19:20 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 10:19:20 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x6, 0x0) 10:19:20 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 10:19:20 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x1, 0x0) 10:19:20 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) 10:19:20 executing program 4: pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 10:19:20 executing program 1: pselect6(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000180)={0x0}) 10:19:20 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:19:20 executing program 0: socketpair(0x10, 0x80002, 0x0, &(0x7f0000000040)) 10:19:20 executing program 3: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x3}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) 10:19:20 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') recvmsg$can_j1939(r0, 0x0, 0x0) 10:19:20 executing program 0: connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) 10:19:20 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x40000) 10:19:20 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)='g', 0x1}, {&(0x7f0000000780)="9f", 0x1}, {0x0}, {&(0x7f0000000900)='x', 0x1}], 0x4}, 0x0) 10:19:20 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 10:19:20 executing program 5: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0}, 0x38) 10:19:20 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000040)) [ 222.631756][ T9619] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 223.042353][ T9619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:19:21 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) 10:19:21 executing program 1: socketpair(0x4c0d7dfa46302fd6, 0x0, 0x0, &(0x7f0000000040)) [ 223.232834][ T9619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.251406][ T9619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.288301][ T9619] usb 3-1: Product: syz [ 223.299983][ T9619] usb 3-1: Manufacturer: syz [ 223.305824][ T9619] usb 3-1: SerialNumber: syz [ 224.461806][ T9619] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 224.914098][ T9619] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 224.936758][ T9619] usb 3-1: USB disconnect, device number 2 [ 224.958751][ T9619] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 225.651649][ T9670] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 226.011901][ T9670] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.182101][ T9670] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.192154][ T9670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.200306][ T9670] usb 3-1: Product: syz [ 226.205828][ T9670] usb 3-1: Manufacturer: syz [ 226.210713][ T9670] usb 3-1: SerialNumber: syz 10:19:24 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x50042) 10:19:24 executing program 5: syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00', 0xffffffffffffffff) 10:19:24 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000001a40)='net/ip6_tables_targets\x00') 10:19:24 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') write$P9_RLOCK(r0, 0x0, 0x0) 10:19:24 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000900)='x', 0x1}], 0x2}, 0x0) 10:19:24 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 226.334469][ T9670] cdc_ncm 3-1:1.0: bind() failure [ 226.358097][ T9670] cdc_ncm 3-1:1.1: bind() failure 10:19:24 executing program 1: pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000200)={0x14}, 0x14) 10:19:24 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 10:19:24 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) 10:19:24 executing program 4: getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) 10:19:24 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) [ 226.417551][ T9670] usb 3-1: USB disconnect, device number 3 10:19:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00', r0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00', 0xffffffffffffffff) 10:19:24 executing program 1: pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RMKNOD(r0, &(0x7f0000000200)={0x14}, 0x14) write$P9_RAUTH(r0, &(0x7f0000000240)={0x14}, 0x14) 10:19:24 executing program 4: pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 10:19:24 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev, 'wg1\x00'}}, 0x1e) 10:19:24 executing program 0: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', 0xffffffffffffffff) 10:19:24 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x30, 0xffffffffffffffff, 0x8000000) [ 226.831624][ T9670] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 227.192353][ T9670] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.362632][ T9670] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.383900][ T9670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.401437][ T9670] usb 3-1: Product: syz [ 227.407644][ T9670] usb 3-1: Manufacturer: syz [ 227.415879][ T9670] usb 3-1: SerialNumber: syz [ 228.561826][ T9670] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 229.007434][ T9670] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 229.022108][ T9670] usb 3-1: USB disconnect, device number 4 [ 229.028760][ T9670] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:19:27 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:19:27 executing program 0: socket$inet6(0xa, 0x0, 0xb0) 10:19:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00', r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\b'], 0x28}}, 0x0) 10:19:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) 10:19:27 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000003100)) 10:19:27 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 10:19:27 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f00000012c0)) 10:19:27 executing program 4: pipe2$9p(&(0x7f0000000340), 0x0) pipe2$9p(&(0x7f0000000380), 0x0) 10:19:27 executing program 3: pipe2$9p(0x0, 0x84800) pipe2$9p(&(0x7f0000000380), 0x0) 10:19:27 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x3]}, 0x8}) 10:19:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x33fe0}}, 0x0) 10:19:28 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x4}, {}], 0x3, &(0x7f0000000080)) [ 229.921610][ T9619] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 230.301765][ T9619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.491846][ T9619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.501372][ T9619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.510382][ T9619] usb 3-1: Product: syz [ 230.514923][ T9619] usb 3-1: Manufacturer: syz [ 230.519638][ T9619] usb 3-1: SerialNumber: syz [ 231.661694][ T9619] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 232.105699][ T9619] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 232.134835][ T9619] usb 3-1: USB disconnect, device number 5 [ 232.141258][ T9619] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:19:30 executing program 0: socketpair(0x10, 0x0, 0x0, &(0x7f00000012c0)) 10:19:30 executing program 4: pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) 10:19:30 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') write$P9_RSTATu(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="5d0000007d010000003c000001060000ec0f04000000686700000000007deda284b3b92fefb92d873966a60000008140c7fd00ea000000000600000000000000060028232f2a2f8262f77ff055568400260c00c75c5b255b7d28272321"], 0x5d) 10:19:30 executing program 3: pipe2$9p(&(0x7f00000001c0), 0x0) socketpair(0x26, 0x0, 0x0, &(0x7f00000000c0)) 10:19:30 executing program 5: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\r', 0x1, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) 10:19:30 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:19:31 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x5, 0x83, &(0x7f00000002c0)=""/131, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:19:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x8040, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 10:19:31 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000) 10:19:31 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xb5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') preadv(r0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/29, 0x1d}], 0x1, 0x0, 0x0) 10:19:31 executing program 1: migrate_pages(0x0, 0x401, 0x0, &(0x7f0000000040)) 10:19:31 executing program 4: prctl$PR_SET_THP_DISABLE(0x29, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000007680)) 10:19:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5001}, 0x4) [ 232.840115][T11999] loop0: detected capacity change from 4096 to 0 [ 232.874106][T11999] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 10:19:31 executing program 3: clock_gettime(0x0, &(0x7f0000000080)={0x0}) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f00000000c0)={r0}) [ 232.948517][ T36] audit: type=1804 audit(1614075571.234:8): pid=11999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir307787116/syzkaller.pIS7Co/120/file0/file0" dev="loop0" ino=17 res=1 errno=0 [ 233.011582][ T9619] usb 3-1: new high-speed USB device number 6 using dummy_hcd 10:19:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) 10:19:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x5}}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0x83, &(0x7f00000002c0)=""/131, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:19:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000013c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) [ 233.382024][ T9619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.561929][ T9619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.579677][ T9619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.598938][ T9619] usb 3-1: Product: syz [ 233.611943][ T9619] usb 3-1: Manufacturer: syz [ 233.617501][ T9619] usb 3-1: SerialNumber: syz [ 233.647422][ T36] audit: type=1804 audit(1614075571.934:9): pid=11999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir307787116/syzkaller.pIS7Co/120/file0/file0" dev="loop0" ino=17 res=1 errno=0 [ 234.811809][ T9619] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 235.261425][ T9619] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 235.285609][ T9619] usb 3-1: USB disconnect, device number 6 [ 235.302274][ T9619] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:19:34 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 10:19:34 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffffffffffff, 0x40) 10:19:34 executing program 5: socket(0xa, 0x803, 0x0) 10:19:34 executing program 1: syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x0, 0x0) pselect6(0x48, &(0x7f0000000080)={0x7}, 0x0, &(0x7f0000000100), 0x0, 0x0) 10:19:34 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffffffffffff, 0x200000) 10:19:34 executing program 0: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, r0) 10:19:34 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@jmp]}, &(0x7f0000000280)='syzkaller\x00', 0x2, 0x83, &(0x7f00000002c0)=""/131, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:19:34 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x5, 0x83, &(0x7f00000002c0)=""/131, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:19:34 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x80ffff]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001540), &(0x7f0000001580)) 10:19:34 executing program 3: pselect6(0x2a00, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) 10:19:34 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000000)=@raw=[@map_val, @exit], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x83, &(0x7f00000002c0)=""/131, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:19:34 executing program 4: personality(0x4000000) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) [ 236.145858][ T9670] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 236.511795][ T9670] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.692143][ T9670] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.702094][ T9670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.710104][ T9670] usb 3-1: Product: syz [ 236.715639][ T9670] usb 3-1: Manufacturer: syz [ 236.720264][ T9670] usb 3-1: SerialNumber: syz [ 237.861618][ T9670] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 238.085134][ T9670] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 238.113513][ T9670] usb 3-1: USB disconnect, device number 7 [ 238.121077][ T9670] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:19:36 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 10:19:36 executing program 1: clock_adjtime(0x0, &(0x7f0000000000)={0xff, 0x0, 0x0, 0x1, 0x7fff, 0xffffffff, 0x8}) 10:19:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x40) 10:19:36 executing program 3: clock_adjtime(0x0, &(0x7f0000000000)={0xff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8}) 10:19:36 executing program 4: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x9, 0xa1, 0x1, 0x802, 0x0, 0x1, 0x0, [], 0x0, r0}, 0x40) 10:19:36 executing program 5: pselect6(0x33, &(0x7f0000000080)={0x7}, 0x0, &(0x7f0000000100), 0x0, 0x0) 10:19:36 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) 10:19:36 executing program 5: request_key(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0) 10:19:37 executing program 3: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='H', 0x1, r0) keyctl$invalidate(0x15, r1) 10:19:37 executing program 1: clock_adjtime(0x0, &(0x7f0000000000)={0xffffffffffffffff}) 10:19:37 executing program 4: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5400c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:19:37 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, r1) [ 238.941680][ T9670] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 239.331740][ T9670] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.521790][ T9670] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.531347][ T9670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.540328][ T9670] usb 3-1: Product: syz [ 239.544803][ T9670] usb 3-1: Manufacturer: syz [ 239.549536][ T9670] usb 3-1: SerialNumber: syz [ 240.691728][ T9670] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 240.904964][ T9670] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 240.931705][ T9670] usb 3-1: USB disconnect, device number 8 [ 240.938115][ T9670] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:19:39 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x2}}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0x83, &(0x7f00000002c0)=""/131, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:19:39 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x1e000000]}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001540), &(0x7f0000001580)) 10:19:39 executing program 3: migrate_pages(0x0, 0x1, 0x0, 0x0) 10:19:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x9, 0xfffffffc, 0x3, 0x7ff, 0x0, 0x1}, 0x40) 10:19:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f00000001c0)=@framed={{}, [@func, @jmp, @btf_id]}, &(0x7f0000000280)='syzkaller\x00', 0x2, 0x83, &(0x7f00000002c0)=""/131, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:19:39 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 10:19:39 executing program 4: mkdir(0x0, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r0 = gettid() tkill(r0, 0x34) 10:19:39 executing program 5: r0 = syz_io_uring_setup(0x4158, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x10000000) 10:19:39 executing program 3: syz_mount_image$romfs(&(0x7f0000000000)='romfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="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", 0x400}], 0x0, &(0x7f0000010700)) 10:19:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 10:19:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x9, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x40) [ 241.589668][T12232] loop3: detected capacity change from 2 to 0 [ 241.605201][T12232] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 241.630365][ C0] hrtimer: interrupt took 46930 ns [ 241.661309][T12232] romfs: bad initial checksum on dev loop3. 10:19:40 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) syz_io_uring_setup(0x4924, &(0x7f00000001c0)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 10:19:40 executing program 3: socketpair(0x2, 0x1, 0x3, &(0x7f0000000240)) 10:19:40 executing program 1: r0 = eventfd(0x0) io_setup(0x4800, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 241.782575][ T9720] usb 3-1: new high-speed USB device number 9 using dummy_hcd 10:19:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 241.948143][T12260] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) 10:19:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 10:19:40 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0x83, &(0x7f00000002c0)=""/131, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 242.172313][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.362096][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.371294][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.379987][ T9720] usb 3-1: Product: syz [ 242.390286][ T9720] usb 3-1: Manufacturer: syz [ 242.395655][ T9720] usb 3-1: SerialNumber: syz [ 243.521740][ T9720] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 243.745401][ T9720] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 243.766984][ T9720] usb 3-1: USB disconnect, device number 9 [ 243.788884][ T9720] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:19:42 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:19:42 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000140), 0x8) 10:19:42 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, 0x0, 0x10) 10:19:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 10:19:42 executing program 4: mkdir(0x0, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r0 = gettid() tkill(r0, 0x34) 10:19:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, [], r1}, 0x40) 10:19:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x9, 0xa1, 0x1, 0x802, 0x0, 0x1}, 0x40) 10:19:42 executing program 1: clock_adjtime(0xc, &(0x7f0000000000)) 10:19:42 executing program 0: clock_gettime(0x0, &(0x7f0000000080)={0x0}) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x8}], 0x1, &(0x7f00000000c0)={r0}) 10:19:42 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x1}, {0x0, 0x8}], 0x2, 0x0) 10:19:42 executing program 3: r0 = msgget(0x2, 0x200) msgctl$IPC_RMID(r0, 0x0) 10:19:42 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x101, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x80045017, 0x0) [ 244.624469][ T4809] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 245.041664][ T4809] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.233231][ T4809] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.243348][ T4809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.251431][ T4809] usb 3-1: Product: syz [ 245.256595][ T4809] usb 3-1: Manufacturer: syz [ 245.261212][ T4809] usb 3-1: SerialNumber: syz [ 246.422133][ T4809] cdc_ncm 3-1:1.0: bind() failure [ 246.451702][ T4809] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 246.471694][ T4809] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 246.491781][ T4809] usbtest: probe of 3-1:1.1 failed with error -71 [ 246.500051][ T4809] usb 3-1: USB disconnect, device number 10 10:19:45 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:19:45 executing program 4: mkdir(0x0, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r0 = gettid() tkill(r0, 0x34) 10:19:45 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24) 10:19:45 executing program 5: set_mempolicy(0x3, &(0x7f00000002c0)=0x18bb, 0x5) syz_genetlink_get_family_id$batadv(&(0x7f0000000b00)='batadv\x00', 0xffffffffffffffff) 10:19:45 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xc0505611, 0x0) 10:19:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5460, 0x0) 10:19:45 executing program 1: fsopen(&(0x7f0000000080)='virtiofs\x00', 0x0) 10:19:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @private1={0xfc, 0x1, [], 0x1}}}) 10:19:45 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f00000000c0)) 10:19:45 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x40045010, &(0x7f0000000080)) 10:19:45 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x2, &(0x7f0000000080)) 10:19:45 executing program 5: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x8a8243, 0x0) [ 247.221597][ T9660] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 247.582233][ T9660] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.771898][ T9660] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.782398][ T9660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.790564][ T9660] usb 3-1: Product: syz [ 247.795796][ T9660] usb 3-1: Manufacturer: syz [ 247.800507][ T9660] usb 3-1: SerialNumber: syz [ 248.982211][ T9660] cdc_ncm 3-1:1.0: bind() failure [ 249.001791][ T9660] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 249.021889][ T9660] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 249.042573][ T9660] usbtest: probe of 3-1:1.1 failed with error -71 [ 249.051290][ T9660] usb 3-1: USB disconnect, device number 11 10:19:47 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:19:47 executing program 4: mkdir(0x0, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b70200000b400000bfa300000000000024020000fffeff7f7a03f0fff8ffffff79a4f0ff00000000b7060000ffffffffad640500000000007502faff07cd02020404000001007d60b7030000001000006a0a00fe000000008500000026000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c72821c9b767ac8308fbcd5c5e4a5ad1059b5725ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1aa37503b8de7ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffeb487c37a7f4182f32333b08c6e497640000000aea5cac0ceafdb9a2eeb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b783ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a62d79b4c03e53466fa4f22d8c19f958e8b34de35949a7a48ce18799ee53de177a81ea67a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d34a4413c098f4fcc96623b7c373b0ef04d55b846b094b0d6c7a75a76d445e0dcdf72c7ef97e2ef5987b6e09a6a7caffff0000141f65e7d9ebe3be70c4364333af9a9d91c3e41ac37a63f85ad8f32b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e756598442406333c890923a797e00b75481739952fe87fde27ce01893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45577c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8e1b49b0400e4f6f767ee30ea3aad2c6d6b8c97c00eaa00ff9bc46e1cfecbdc0e451ac53e8f76c8b556306b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404a0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37d2fe7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b308ff070000aab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e757bae30b356521df06f995cb57f97052fc4158250ccecfb47ea8faf509593fadc7eafb613313b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6c9eb0dcca5303eed6689ea91e1c1785f61368dde47e6672e93a314a5f60e7b68c2242bf0caeff11f6090f4fb311afd7f8b48f3f0d8c66449d8687dcf2d0f76668b2b9bf8b32b518e01ffb985f8054d37959c529e99b7daf32acfe9749d516d014cef5f98126324ea02baea5808c4d69e5749901b09e4902a6f5addc0103756b894418e4591c624a9b2ccabbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b15f41b9a1d3af087047c568aef1d8559c6146bb93026ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b775152786118384eebd5fc19928ccb713ff09e179c308fbe9bc543dcf43f731074d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471647f8bc03d11811ac6eec9a3ecd9e3c325fcabbab3d12f6a759f7ce11dafa387a8077db8a2230d2014a57bc8dd477412759147f1d854bae92b2eebd5e1626cab98499328fb024a240199993433ceb5be20427a32df7047d63010dfc6a461517ad48ff64042e84c85c899fd1d8fc0e78c1aaa152d567f9c3e2b6772d167fed1b605965a5c2332d094a461a990000000000000000000000000000000000000000000200000000000000000000000000000000000000b385c644a4a170e6dc9e9e546bfa049d025b319abd87fd84482b43db5d6c2cb6a204d45f88dd4140c8edb598a36e21ad132bf6b88c99c56633b01813fc5cd7d048469a966bbfb300fd772cbadf0cf26899bfd15e7d9408026a92f13f11d1c9832259b2f97227f8420806c1f387b1b5a2d5e34a3bb96253717a177ac091d0d201d7e2296a66fa7ff31729857f9e6fe9f19e481a3f77ceadd02f4968aac9ea5e29663f42456e080952636515c758f5047b2148944133a492ef20a1778088c42094903d6ece2497b99fc745c4205b60a2a7cf77074a62a2d957ae2e47ff1ea8a059f2d03bf9c3e8d2b16ab409de762522f6008de48bb70b698c5c9867437ac3127fad4bd699acaad78a5f66c7fc7d46e048082a0af6473ed26b032a1c0ea10e985703b292c7336112b1f35c3b069363869dce725d8da75dcec76dc591c052feecee18c64c4600a0bc3d4945d4b918865bbf52f732a500689cbd9a84d07846417796f2a85e7a41d27d64b10f8e970469cf495b4ae9f3048351b550c59a634b47981420181ea4da18b9d318a5bd1ce660b28ba8f3c1a8893d130b26d25e491f478ae4f95f71ea8897b34c55f1678b8453f08a5ae1b3b4d8c83053c57637a98ef57e5fa51971eba5e287e9910cba734336703defbd3fe1659b157e679de7bfb929e71590de2e958522b8c2d5b5ac09d1fdc4fd7c6393a6845a30ad0cfdad7234ecb65dabf5556f3a3c19a9560a989a869be807e8720edb1f6735c90a7634d0b6750f25ba7251944ada7766557346d056351d009a568c782f4438ecba9bee47f25286300e83bd1853076ad52eac84029335b86eccf7cd8e2fa06536a599f5681b19599a7f21e39a1af3d070abef94bc0827db0046dcb7d63bf64bf801c836a40b0100d0961533737c57e9b7337b981a99f63f600f90647703f0b64e244c4b640f6594dd9f26436024a1f90f174769bad5a283271e6d7f49dec90a05bd771dd0502dc2170ccf98ade27e858eb587fbc900000000ae1bc4246ae316c6af10bf02088b4bb2ac89c96e58578dc5c6b0bf01ece3cb8a363ecbeb8198997115d71d1f691a2a755d8233e006dd38ed5ba350bd6aad3bf6f5108083f0100f8a20666e92ec7254ce7284159057be455d16134d65ce69c4b906b76427224b69750b779d81eb6e37e1db62c3788ff918433787f8026ef5c518113d24b76b7635c229384841b5ca4dbe8d4afff527513a2efc8403acbab53b7bc2be48e494b3bfeede33b1deefd9d902e8dc868f30161c2cd13621b0a20362181186ff8cf4c8d58d74822f926e4287ee157e9f1597c3e2e238f382a91bf48b4de88363c841bd7a8cddae334429ccf45bd3d434d9ecf74634ffc9539010f0d36e672b9d668cc6762c0b25e4a927fb4d184ba84498b1368926e4f7c97b944357a7f3dbe822a4ef7e4b31faf75f1b3dcecfd80c57015d8cd16171507add30833865fc1a42780e9d57bb14a6ebea4018d26e1874758ade7b3a2c46fc7a4a619753fd9bea132058eb90f9b80549473eea2fb9bc43d38d8719a1cca094d5933ceef87a3ec0c2ac70d5f8434251"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r0 = gettid() tkill(r0, 0x34) 10:19:47 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000040)) 10:19:47 executing program 0: socketpair(0x1, 0x0, 0x6, &(0x7f0000000180)) 10:19:47 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 10:19:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/141) 10:19:47 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xc0045878, 0x0) 10:19:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, @mcast1, @mcast1}}) 10:19:47 executing program 0: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x1}], 0x1, &(0x7f0000000180)) 10:19:47 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0xc004500a, 0x0) 10:19:48 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 10:19:48 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x101, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x1, 0x1, 0x0, @private0={0xfc, 0x0, [], 0x1}, @private1, 0x7800, 0x8000, 0x5, 0x7}}) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000140)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r1, 0x4, 0x6, 0x8, 0x6db9, 0x2b, @mcast2, @private1={0xfc, 0x1, [], 0x1}, 0x8, 0x7800, 0x81}}) [ 249.821691][ T9720] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 250.192285][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.372198][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.386010][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.395365][ T9720] usb 3-1: Product: syz [ 250.399577][ T9720] usb 3-1: Manufacturer: syz [ 250.405355][ T9720] usb 3-1: SerialNumber: syz [ 251.591846][ T9720] cdc_ncm 3-1:1.0: bind() failure [ 251.633791][ T9720] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 251.661976][ T9720] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 251.691798][ T9720] usbtest: probe of 3-1:1.1 failed with error -71 [ 251.700430][ T9720] usb 3-1: USB disconnect, device number 12 10:19:50 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x2, 0x0, 0x0, 0x0) 10:19:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x32, &(0x7f0000000200)={0x0, 0x32}}, 0x0) 10:19:50 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xc0189436, 0x0) 10:19:50 executing program 0: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') 10:19:50 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x500e, 0x0) 10:19:50 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:19:50 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x80045017, &(0x7f0000000080)) 10:19:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)) 10:19:50 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x2, &(0x7f00000007c0)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000800)='GPL\x00', 0x489, 0x1000, &(0x7f0000001780)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 10:19:50 executing program 5: perf_event_open(&(0x7f0000001500)={0x7, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:19:50 executing program 1: r0 = openat$full(0xffffff9c, &(0x7f0000006c80)='/dev/full\x00', 0x0, 0x0) io_uring_setup(0x42a, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 10:19:50 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0xc, 0x5, &(0x7f00000014c0)=@framed={{}, [@ldst={0x1}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x18}]}, &(0x7f0000001500)='GPL\x00', 0x4, 0xf1, &(0x7f0000001540)=""/241, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 10:19:50 executing program 0: perf_event_open$cgroup(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x383a84fba12e9f8a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:19:50 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) 10:19:50 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0xf, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 10:19:50 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x8510}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 252.411836][ T9720] usb 3-1: new high-speed USB device number 13 using dummy_hcd 10:19:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) vmsplice(r0, &(0x7f0000001700)=[{&(0x7f0000000300)="e9", 0x1}], 0x1, 0x0) [ 252.781771][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.972646][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.983472][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.992393][ T9720] usb 3-1: Product: syz [ 252.996584][ T9720] usb 3-1: Manufacturer: syz [ 253.001258][ T9720] usb 3-1: SerialNumber: syz [ 254.211828][ T9720] cdc_ncm 3-1:1.0: bind() failure [ 254.241874][ T9720] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 254.263736][ T9720] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 254.291801][ T9720] usbtest: probe of 3-1:1.1 failed with error -71 [ 254.300833][ T9720] usb 3-1: USB disconnect, device number 13 10:19:52 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:19:52 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x12, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 10:19:52 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 10:19:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) vmsplice(r0, 0x0, 0x0, 0x0) 10:19:52 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 10:19:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40087446, 0x0) 10:19:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x5}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 10:19:53 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x55}, 0x10) 10:19:53 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xe}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 10:19:53 executing program 0: openat$tcp_mem(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 10:19:53 executing program 4: perf_event_open(&(0x7f0000002ac0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:19:53 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xf, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 254.902244][ T3221] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.908867][ T3221] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.111575][ T9660] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 255.491833][ T9660] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.662449][ T9660] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.671968][ T9660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.680315][ T9660] usb 3-1: Product: syz [ 255.685685][ T9660] usb 3-1: Manufacturer: syz [ 255.690272][ T9660] usb 3-1: SerialNumber: syz [ 256.881930][ T9660] cdc_ncm 3-1:1.0: bind() failure [ 256.911810][ T9660] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 256.931777][ T9660] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 256.953146][ T9660] usbtest: probe of 3-1:1.1 failed with error -71 [ 256.963980][ T9660] usb 3-1: USB disconnect, device number 14 10:19:55 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:19:55 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xa}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 10:19:55 executing program 3: perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:19:55 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 10:19:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x882, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x900}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:19:55 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x85, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x40) 10:19:55 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x19, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 10:19:55 executing program 3: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x0) 10:19:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 10:19:55 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x22, 0x0, 0x0) 10:19:55 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x15, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 10:19:55 executing program 1: bpf$BPF_BTF_LOAD(0x8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) [ 257.701689][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 258.072194][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.271877][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.281595][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.289864][ T7] usb 3-1: Product: syz [ 258.296156][ T7] usb 3-1: Manufacturer: syz [ 258.301112][ T7] usb 3-1: SerialNumber: syz [ 259.471770][ T7] cdc_ncm 3-1:1.0: bind() failure [ 259.502133][ T7] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 259.523730][ T7] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 259.551819][ T7] usbtest: probe of 3-1:1.1 failed with error -71 [ 259.561040][ T7] usb 3-1: USB disconnect, device number 15 10:19:58 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:19:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8904, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 10:19:58 executing program 0: socketpair(0x0, 0xc4132faab187b6d5, 0x0, 0x0) 10:19:58 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={[], [], @dev}, @empty}}) 10:19:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="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", 0x134}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 10:19:58 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc080661a, &(0x7f00000001c0)=ANY=[]) 10:19:58 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x40049409, &(0x7f00000001c0)=ANY=[]) 10:19:58 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3f, 0x200) [ 259.975267][ T36] audit: type=1800 audit(1614075598.266:10): pid=12667 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=".log" dev="sda1" ino=14216 res=0 errno=0 [ 259.979844][T12668] ptrace attach of "/root/syz-executor.4"[12664] was attempted by "/root/syz-executor.4"[12668] 10:19:58 executing program 5: prctl$PR_GET_TSC(0x21, &(0x7f0000000140)) 10:19:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xa, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:19:58 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0xe, &(0x7f0000000280)={0x0}, 0x10) 10:19:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x6397ff94f0823225, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e21}}]}, 0x24}}, 0x0) [ 260.130477][ T36] audit: type=1800 audit(1614075598.416:11): pid=12677 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=".log" dev="sda1" ino=14214 res=0 errno=0 [ 260.351651][ T9720] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 260.743549][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.951766][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.961792][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.970552][ T9720] usb 3-1: Product: syz [ 260.976575][ T9720] usb 3-1: Manufacturer: syz [ 260.981184][ T9720] usb 3-1: SerialNumber: syz [ 261.651767][ T9720] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 261.658090][ T9720] cdc_ncm 3-1:1.0: bind() failure [ 261.665980][ T9720] cdc_ncm 3-1:1.1: bind() failure 10:20:01 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000008f40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/244, 0xf4}], 0x1) 10:20:01 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x10f802, 0x0) 10:20:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 10:20:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8980, 0x0) 10:20:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, 0x0, 0x0, 0x52e6ea0251392165, 0x0) [ 263.035691][ T7] usb 3-1: USB disconnect, device number 16 10:20:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_deladdr={0x34, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_CACHEINFO={0x14, 0xa}]}, 0x34}}, 0x0) 10:20:01 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) 10:20:01 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f0000000080)=""/255, 0x26, 0xff, 0x1}, 0x20) 10:20:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x2}, 0x0) [ 263.209035][T12729] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 10:20:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x1c, 0x0, 0x3, 0x101, 0x0, 0x0, {}, [@nested={0x4}, @nested={0x4}]}, 0x1c}}, 0x0) 10:20:01 executing program 1: clock_adjtime(0xc28175a5c1717891, &(0x7f0000000040)) [ 263.540037][ T7] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 263.942384][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.171703][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.181368][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.190556][ T7] usb 3-1: Product: syz [ 264.195492][ T7] usb 3-1: Manufacturer: syz [ 264.200241][ T7] usb 3-1: SerialNumber: syz [ 264.881787][ T7] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 264.888114][ T7] cdc_ncm 3-1:1.0: bind() failure [ 264.908796][ T7] cdc_ncm 3-1:1.1: bind() failure 10:20:04 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:04 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40002, 0x0) write$evdev(r0, &(0x7f0000000180)=[{}], 0x18) 10:20:04 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x5452, 0x0) 10:20:04 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/cpuinfo\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/242, 0xf2}, {0x0}, {&(0x7f00000001c0)=""/112, 0x70}], 0x3) 10:20:04 executing program 0: recvmsg(0xffffffffffffffff, 0x0, 0x76bd60d8e7aaae36) 10:20:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x6, 0x1, 0x3}, 0x14}}, 0x0) [ 266.127401][ T9720] usb 3-1: USB disconnect, device number 17 10:20:04 executing program 0: bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) [ 266.200279][ T36] audit: type=1800 audit(1614075604.486:12): pid=12777 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=".log" dev="sda1" ino=14217 res=0 errno=0 10:20:04 executing program 5: bpf$OBJ_GET_PROG(0x14, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00'}, 0x10) 10:20:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, 0x0, &(0x7f0000000040)) 10:20:04 executing program 1: ioprio_set$uid(0x0, 0x0, 0x7) 10:20:04 executing program 3: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x8001, &(0x7f0000000280)) 10:20:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}], 0x0, &(0x7f00000016c0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB]) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) [ 266.423199][T12793] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 266.477066][T12793] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 266.621682][ T9720] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 267.002357][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.191928][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.201399][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.215429][ T9720] usb 3-1: Product: syz [ 267.220065][ T9720] usb 3-1: Manufacturer: syz [ 267.225607][ T9720] usb 3-1: SerialNumber: syz [ 267.931670][ T9720] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 267.938701][ T9720] cdc_ncm 3-1:1.0: bind() failure [ 267.954316][ T9720] cdc_ncm 3-1:1.1: bind() failure 10:20:07 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:07 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x16, &(0x7f0000000280)={0x0}, 0x10) 10:20:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x20, 0x6397ff94f0823225, 0x0, 0x0, {0xa, 0x80}}, 0x1c}}, 0x0) 10:20:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8983, 0x0) 10:20:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x201}, 0x14}}, 0x0) 10:20:07 executing program 0: bpf$BPF_BTF_LOAD(0x5, &(0x7f00000004c0)={0x0, &(0x7f0000000400)=""/138, 0x0, 0xffffffffffffffbe}, 0x20) [ 269.235955][ T19] usb 3-1: USB disconnect, device number 18 10:20:07 executing program 4: bpf$BPF_BTF_LOAD(0x7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 10:20:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 10:20:07 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8913, &(0x7f0000000040)={"eb4a25fcf6bdb6ef3069096c3a1aed55"}) 10:20:07 executing program 0: semtimedop(0x0, 0x0, 0x0, &(0x7f0000000080)) 10:20:07 executing program 5: prctl$PR_GET_TSC(0x2b, 0x0) 10:20:07 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40049409, 0x0) [ 269.794733][ T19] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 270.201775][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.391792][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.401782][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.410080][ T19] usb 3-1: Product: syz [ 270.414476][ T19] usb 3-1: Manufacturer: syz [ 270.419073][ T19] usb 3-1: SerialNumber: syz [ 271.101645][ T19] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 271.108628][ T19] cdc_ncm 3-1:1.0: bind() failure [ 271.126341][ T19] cdc_ncm 3-1:1.1: bind() failure 10:20:10 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)) 10:20:10 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x5452, &(0x7f00000000c0)={@id={0x2, 0x0, @d}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) 10:20:10 executing program 0: socket(0x0, 0xcc02, 0x0) 10:20:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0)='wireguard\x00', 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x23010000, &(0x7f00000000c0)={&(0x7f0000000680)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}}, 0x0) 10:20:10 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x5452, 0x0) [ 272.340152][ T19] usb 3-1: USB disconnect, device number 19 [ 272.420031][ T36] audit: type=1800 audit(1614075610.706:13): pid=12897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=".log" dev="sda1" ino=14217 res=0 errno=0 10:20:10 executing program 4: timer_create(0x1, &(0x7f0000000040)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) 10:20:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000001f0000fc000000fc"], &(0x7f0000000140)=""/202, 0x116, 0xca, 0x1}, 0x20) 10:20:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x20, 0x6397ff94f0823225, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) 10:20:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x52e6ea0251392165, 0x0) 10:20:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0)='wireguard\x00', 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x23010000, &(0x7f00000000c0)={&(0x7f0000000680)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}}, 0x0) 10:20:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4}}]}}, &(0x7f00000002c0)=""/190, 0x32, 0xbe, 0x1}, 0x20) [ 272.871708][ T19] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 273.231709][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.401823][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.412384][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.420734][ T19] usb 3-1: Product: syz [ 273.426083][ T19] usb 3-1: Manufacturer: syz [ 273.430826][ T19] usb 3-1: SerialNumber: syz [ 274.131659][ T19] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 274.138660][ T19] cdc_ncm 3-1:1.0: bind() failure [ 274.158559][ T19] cdc_ncm 3-1:1.1: bind() failure 10:20:13 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:13 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x4030582a, &(0x7f00000001c0)=ANY=[]) 10:20:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0)='wireguard\x00', 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x23010000, &(0x7f00000000c0)={&(0x7f0000000680)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}}, 0x0) 10:20:13 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x401c5820, &(0x7f00000001c0)=ANY=[]) 10:20:13 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0xe200, 0x0) 10:20:13 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891d, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) [ 275.457673][ T9720] usb 3-1: USB disconnect, device number 20 [ 275.559115][ T36] audit: type=1800 audit(1614075613.846:14): pid=12951 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=".log" dev="sda1" ino=14217 res=0 errno=0 10:20:13 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x4, 0x4) 10:20:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0)='wireguard\x00', 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x23010000, &(0x7f00000000c0)={&(0x7f0000000680)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}}, 0x0) 10:20:13 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x4, &(0x7f0000000280)={&(0x7f0000000240)='cma_release\x00'}, 0x10) 10:20:13 executing program 1: bpf$OBJ_GET_PROG(0x10, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00'}, 0x10) 10:20:13 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vcsa\x00', 0x0, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000000080)=""/54, 0x36}, {&(0x7f00000000c0)=""/78, 0x33}, {&(0x7f0000000140)=""/97, 0x61}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000480)=""/215, 0xfffffffffffffffc}, {&(0x7f0000000200)=""/204, 0xc4}], 0x7) [ 275.689311][ T36] audit: type=1800 audit(1614075613.856:15): pid=12950 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=".log" dev="sda1" ino=14218 res=0 errno=0 10:20:14 executing program 3: socketpair$unix(0xa, 0x0, 0x0, &(0x7f0000008f40)) [ 276.011971][ T9720] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 276.431762][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.641913][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.651774][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.660765][ T9720] usb 3-1: Product: syz [ 276.665669][ T9720] usb 3-1: Manufacturer: syz [ 276.670464][ T9720] usb 3-1: SerialNumber: syz [ 277.353426][ T9720] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 277.360195][ T9720] cdc_ncm 3-1:1.0: bind() failure [ 277.369372][ T9720] cdc_ncm 3-1:1.1: bind() failure 10:20:16 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:16 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000080)=@framed={{}, [@exit, @jmp, @map_val, @generic, @map_val, @initr0]}, &(0x7f0000000100)='syzkaller\x00', 0x7f, 0x1000, &(0x7f00000002c0)=""/4096, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x5, 0x400, 0x574e}, 0x10}, 0x78) 10:20:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0xffff, 0x4) bind$inet(r0, &(0x7f0000000940)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x22c4, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:20:16 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:20:16 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2b0982, 0x0) 10:20:16 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [ 278.597720][ T4809] usb 3-1: USB disconnect, device number 21 10:20:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x894c, 0x0) [ 278.681950][ T36] audit: type=1800 audit(1614075616.976:16): pid=13009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".log" dev="sda1" ino=14217 res=0 errno=0 10:20:17 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000080)=@framed={{}, [@exit, @jmp={0x5, 0x1, 0xb, 0x3, 0xb, 0xffffffffffffff7a, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001}, @generic={0x80, 0x7, 0x3, 0x9, 0x1e75bda3}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @initr0]}, &(0x7f0000000100)='syzkaller\x00', 0x7f, 0x1000, &(0x7f00000002c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:20:17 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x5452, 0x53b000) 10:20:17 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 10:20:17 executing program 1: socketpair$unix(0x10, 0x2, 0x0, &(0x7f0000008f40)) 10:20:17 executing program 4: bpf$OBJ_GET_PROG(0x14, 0x0, 0x0) [ 279.101697][ T4809] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 279.493078][ T4809] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.707284][ T4809] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.717214][ T4809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.729885][ T4809] usb 3-1: Product: syz [ 279.734437][ T4809] usb 3-1: Manufacturer: syz [ 279.739139][ T4809] usb 3-1: SerialNumber: syz [ 280.451732][ T4809] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 280.458190][ T4809] cdc_ncm 3-1:1.0: bind() failure [ 280.474797][ T4809] cdc_ncm 3-1:1.1: bind() failure 10:20:20 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:20 executing program 3: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) 10:20:20 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x6, &(0x7f0000000280)={&(0x7f0000000240)='cma_release\x00'}, 0x10) 10:20:20 executing program 0: bpf$OBJ_GET_PROG(0x10, 0x0, 0x0) 10:20:20 executing program 4: syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000000680)=[{0x0, 0x0, 0x3ff}], 0x0, &(0x7f0000000740)={[{@debug='debug'}, {@init_itable_val={'init_itable', 0x3d, 0x2}}]}) 10:20:20 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8949, &(0x7f0000000040)={"eb4a25fcf6bdb6ef3069096c3a1aed55"}) [ 281.696124][ T9720] usb 3-1: USB disconnect, device number 22 10:20:20 executing program 0: clock_adjtime(0x10, &(0x7f0000000040)) 10:20:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newrule={0x4c, 0x20, 0x6397ff94f0823225, 0x0, 0x0, {0xa, 0x80, 0x80}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x4c}}, 0x0) [ 281.788786][T13063] loop4: detected capacity change from 3 to 0 [ 281.808292][T13063] EXT4-fs (loop4): unable to read superblock 10:20:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x17}, 0x40) [ 281.861751][T13063] loop4: detected capacity change from 3 to 0 [ 281.875772][T13063] EXT4-fs (loop4): unable to read superblock 10:20:20 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f00000000c0)={@id={0x2, 0x0, @d}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) 10:20:20 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/cgroups\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 10:20:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty={[0x0, 0x3]}, @empty}}) [ 282.083721][ T36] audit: type=1800 audit(1614075620.376:17): pid=13091 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=".log" dev="sda1" ino=14202 res=0 errno=0 [ 282.228116][ T9720] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 282.603187][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.803307][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.814450][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.822970][ T9720] usb 3-1: Product: syz [ 282.827230][ T9720] usb 3-1: Manufacturer: syz [ 282.831990][ T9720] usb 3-1: SerialNumber: syz [ 283.501813][ T9720] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 283.508056][ T9720] cdc_ncm 3-1:1.0: bind() failure [ 283.516400][ T9720] cdc_ncm 3-1:1.1: bind() failure 10:20:23 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:23 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 10:20:23 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 10:20:23 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 10:20:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00', r0) 10:20:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8907, 0x0) [ 284.786228][ T9660] usb 3-1: USB disconnect, device number 23 10:20:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x1, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0xf0, 0xad9, 0x1f}, 0x0) tkill(0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 10:20:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 10:20:23 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5411, &(0x7f0000000040)={"eb4a25fcf6bdb6ef3069096c3a1aed55"}) 10:20:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5452, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 10:20:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB=',appraise_type=imasig,context8']) 10:20:23 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x5421, 0x401000) [ 285.331798][ T9660] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 285.701845][ T9660] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.921700][ T9660] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.931300][ T9660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.940430][ T9660] usb 3-1: Product: syz [ 285.945083][ T9660] usb 3-1: Manufacturer: syz [ 285.950177][ T9660] usb 3-1: SerialNumber: syz [ 286.661859][ T9660] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 286.669024][ T9660] cdc_ncm 3-1:1.0: bind() failure [ 286.682371][ T9660] cdc_ncm 3-1:1.1: bind() failure 10:20:26 executing program 2: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002b40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) accept(r1, 0x0, 0x0) 10:20:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x1, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0xf0, 0xad9, 0x1f}, 0x0) tkill(0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 10:20:26 executing program 4: socketpair$unix(0x11, 0x2, 0x0, &(0x7f0000008f40)) 10:20:26 executing program 3: bpf$BPF_MAP_GET_NEXT_ID(0xa, &(0x7f0000000180)={0x92}, 0x8) 10:20:26 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) read$char_usb(r0, &(0x7f00000001c0)=""/215, 0xe0) [ 287.887433][ T4809] usb 3-1: USB disconnect, device number 24 10:20:26 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x81007702, 0x0) 10:20:26 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0xc0189436, 0x53b000) 10:20:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x1, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0xf0, 0xad9, 0x1f}, 0x0) tkill(0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 10:20:26 executing program 5: bpf$BPF_BTF_LOAD(0x6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 10:20:26 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x2, 0x0) 10:20:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_deladdr={0x10}, 0x18}}, 0x0) 10:20:26 executing program 2: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x1, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0xf0, 0xad9, 0x1f}, 0x0) tkill(0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 10:20:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8936, 0x0) 10:20:26 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) accept$inet6(r0, 0x0, 0x0) 10:20:26 executing program 4: socketpair(0x0, 0x40c02, 0x0, 0x0) 10:20:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x5421, 0x904f00) 10:20:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000008f40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000000100)={'wg1\x00', @ifru_mtu}) 10:20:27 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/partitions\x00', 0x4000, 0x0) 10:20:27 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0xc0189436, 0xffffffffff600000) 10:20:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB=',appraise_type=imasig,context=s']) 10:20:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', 0x0, 0x0, 0x0, 0x0, 0xb9c4b5139c8671f8, &(0x7f00000000c0)) 10:20:27 executing program 0: prctl$PR_GET_TSC(0x38, &(0x7f0000000140)) 10:20:27 executing program 2: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:27 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000001c0)=ANY=[@ANYBLOB="02"]) 10:20:27 executing program 3: socketpair(0x1, 0x0, 0x6, &(0x7f0000000080)) 10:20:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8904, 0x0) 10:20:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 10:20:27 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x5451, 0x0) 10:20:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_deladdr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 10:20:27 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) [ 289.137161][ T36] audit: type=1800 audit(1614075627.426:18): pid=13260 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=".log" dev="sda1" ino=14217 res=0 errno=0 10:20:27 executing program 3: r0 = inotify_init1(0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 10:20:27 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0046686, 0x0) 10:20:27 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) 10:20:27 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc1='\x00\x00\x11\x11\"\"33'}, 0x10, 0x0, [], @d='abcdefghijklmnop'}) [ 289.278778][ T36] audit: type=1800 audit(1614075627.566:19): pid=13270 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=".log" dev="sda1" ino=14208 res=0 errno=0 [ 289.354969][ T36] audit: type=1800 audit(1614075627.646:20): pid=13275 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=".log" dev="sda1" ino=14208 res=0 errno=0 10:20:27 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:27 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x8010661b, 0x0) 10:20:27 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xfffffec0}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000400)=""/138, 0x1001, 0x8a, 0x1}, 0x20) 10:20:27 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0189436, &(0x7f00000000c0)={@id={0x2, 0x0, @d}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}) 10:20:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000004c0)='fou\x00', r0) 10:20:28 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x9}, &(0x7f00000000c0)={0x4}, 0x0) 10:20:28 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fb1f147a8378f3646021a812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af15228b2188dc27ab29d268e72951d110c17cd3528e84edaf929e84292c2f5e153eb704000000eb298802d8f6c1f307f7018b31a53bad1ec3513c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8ac396203784000400f573fbf000000000000000761f35e959f130dec95128ce7ec033dc0a380543bfc99320be1c1bb99bb063fb66f2defad83ddef7923c6d0db3533db33078b73ebaa3f2f02c7aacc60f076a7967754af73752e", 0xeb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 10:20:28 executing program 3: prctl$PR_GET_TSC(0x2a, &(0x7f0000000140)) [ 289.743839][ T36] audit: type=1800 audit(1614075628.036:21): pid=13287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".log" dev="sda1" ino=14217 res=0 errno=0 10:20:28 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x80086601, &(0x7f00000001c0)=ANY=[]) 10:20:28 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup, 0xffffffffffffffff, 0x5}, 0x10) 10:20:28 executing program 0: perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7ff, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:20:28 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8948, &(0x7f0000000040)={"eb4a25fcf6bdb6ef3069096c3a1aed55"}) [ 289.850420][T13297] ptrace attach of "/root/syz-executor.5"[13295] was attempted by "/root/syz-executor.5"[13297] [ 289.873118][ T36] audit: type=1800 audit(1614075628.046:22): pid=13290 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=".log" dev="sda1" ino=14218 res=0 errno=0 [ 289.932740][ T36] audit: type=1800 audit(1614075628.166:23): pid=13300 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=".log" dev="sda1" ino=14212 res=0 errno=0 10:20:28 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'sit0\x00', 0x0}) 10:20:28 executing program 4: prctl$PR_GET_TSC(0x1d, 0x0) 10:20:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000007c0)={&(0x7f0000000440), 0xc, &(0x7f0000000780)={&(0x7f0000000800)={0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0x2e, 0x0, 0x0, 0x1, [@generic="d9fefd3c5e1c71076749a4dd72744dbdcb8df313b348f20f07c30b252baa3c19e885b1441307c88b5531"]}, @generic="8b221ab489d1ca9d877dfdab5712ea493b93397ac530de6fe6ed210c8e4f0aa8a3eeb7dd87233d733230b98ba1cb3accd93e2586bea14726e9d354dbee0e9b366bd1a0ed93c22ba376bb4d54aea6e727037ddbdf81f4a8069e5cce763f3bca35cce1a3d975b7af8d3bdce77da5939b3baed04bd008f518b853d5763fb5e11346df457d45965360189a8702b61afd8dc1b415cd26c13e40cc2bdbc83cb718729c3d6cdabae06bc7235060", @nested={0x13, 0x0, 0x0, 0x1, [@generic="608577bb38e4e0549bbea5db913d8d"]}, @generic="2f5b256e3fbb1e3d5e46135a4c7cacaf477ab8c26a", @nested={0x1a7, 0x0, 0x0, 0x1, [@generic="8e6f651b364f4de435f0cf8abafe0bd1336645c0853f5f9c395e64cbe308538167816864f452164d539f81ef20d2c61cd3fbe97cd3deddfc8231e77201b4fe4df367ecfaf258d710fa8cc5deee154aa94f5e7769fb7ad29c55ff696d3d16c4e64a9bafc3c69f8726ab3d57574d962e616d0e5f2fd7347ff5c431871e7d6f7ce0d1548a9721af1c950e0ae3fde7e01686feec2b8b259dfdffa73ef3d2ec73e33c74828e77a7684aa821a8d92a3ace8e0b373aefc8fb2b", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private0}, @generic="d9fd367652cf6d5d51266a6be4b881f3e162fb2827cc3da7d8149d7abef73fe9e0f20045c8090f6adbd3da9bb6ba3b3ec7d40775e663770ece5a55f937e06ea07dcfdc4a87a0743934429a49de6e8fe5b89c5192185b7f2dae450e9aa811085842413e07d3f8cb7993e0d7b8fd76f5bc5967099e871da62de111fad52d3dc442c19bc62393db152fc5483211ccb7f81927217e0803d0db174c487779045c59062992a123840ec36c586368fa985c460caa870a08a3", @typed={0x19, 0x0, 0x0, 0x0, @str='\xef\x88_\x88h\x89)\xb1\xb2\x0e\xa4z]?C\x98\x92A\x8eZ\xe2'}]}, @generic="fe26c8ebe90acdc74988987c526fd5e7285fbe1aceb87ba047fc806b255361a22059915b8ba6cadc359a8f2add2dd7bb9c1cefda89da7c8d3d2f290e96bdd7f669f15657481bb79ed34ad8f089aeaf77bd36a7e2494a5e28732b845abaa8be289cd8acc9baab8f87c3c5b4667dc61c152eef34016fa543ed62076f065dd902f8e8efbef5c4ba430e7a402c15056f0e748804f54e87ffc23b666c376d3c497c7a6c49ff9c1a6ee4b4c2204d791f7a07db35d85577b0016da7fa56"]}, 0xfffffdef}, 0x1, 0x0, 0x0, 0x4}, 0x80) 10:20:28 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockname$inet6(r0, 0x0, 0x0) 10:20:28 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f00000002c0)=""/190, 0x26, 0xbe, 0x1}, 0x20) 10:20:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'macvtap0\x00', @ifru_names}) 10:20:28 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0xc0189436, 0x0) 10:20:28 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0189436, 0x0) 10:20:28 executing program 5: readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='\x00', &(0x7f0000000200)=""/63, 0x3f) 10:20:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ec0000001a00f9"], 0xec}}, 0x0) 10:20:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8918, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) [ 290.527935][ T36] audit: type=1800 audit(1614075628.816:24): pid=13333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".log" dev="sda1" ino=14218 res=0 errno=0 10:20:29 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2}}) 10:20:29 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) 10:20:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {}, [@IFA_BROADCAST={0x8, 0x4, @empty}]}, 0x20}}, 0x0) 10:20:29 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000000200)="c4", 0x1}], 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000001c0)=ANY=[@ANYBLOB="02"]) 10:20:29 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x4000, 0x0) 10:20:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f719b4d004e7ff7fc6e5539b9b6e0e8b546a1b28091b0f084de0878f0e1ac6e7049b5068959b419a242a5b67f3988f7ef319520100ffe8d178708c523c921b1b5b0c0a4b9b46d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b35f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d167312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) [ 291.012714][ T36] audit: type=1800 audit(1614075629.306:25): pid=13349 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=".log" dev="sda1" ino=14218 res=0 errno=0 10:20:29 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000001600)=[{&(0x7f0000000380)="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", 0xfffffdef}], 0x0, 0x0) 10:20:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000900)='#\'%nodev\x00\x7f\xe5\xd0ql\x86\xcd\xe6\x14\x93\xb0\x7f_,y<', 0x0) write(r0, &(0x7f0000000040)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) r1 = dup(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000300)=""/76, 0x4c}, {0x0}, {0x0}, {&(0x7f0000000400)=""/185, 0xb9}, {&(0x7f0000000580)=""/81, 0x51}], 0x5, 0x80000000, 0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"/1495], 0x5dc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x68) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x4) 10:20:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_STATUS={0x5}]}, 0x1c}}, 0x0) 10:20:29 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0x100000110) r1 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x1000, 0x20000) openat$cgroup_ro(r1, &(0x7f00000002c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, r3, 0x303}, 0x14}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x17}}}}, [""]}, 0x28}}, 0x0) r4 = epoll_create(0x2000007) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)={0xb0000001}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(r4, &(0x7f0000000240)=[{}], 0xf, 0x2dd) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, r6, 0x303}, 0x14}}, 0x0) 10:20:29 executing program 1: syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a80e79", 0x18, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, [], @loopback}}}}}}, 0x0) 10:20:29 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x1b, 0x0, 0x0) 10:20:29 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 10:20:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000840)={&(0x7f0000000780), 0xc, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000008c0)={'wpan3\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0)='nl802154\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10:20:29 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') 10:20:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={0x0}}, 0x0) 10:20:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) ioprio_get$pid(0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="020902000d0000002dbd7000fddbdf2505001a00ac1414aa000000000000000000000000ac1414aa00000000000000000000000023000414020013009d0000002abd700003350000010014004000000002000100000004d30e08190200000080010016004e210000837c9c48d70e60b0e4bca220187a7c51d3a6"], 0x68}}, 0x4004084) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x38590000000000, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x2}, 0xffffffff, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x80, 0x1fd}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 10:20:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="020902000d0000002dbd7000fddbdf2505001a00ac1414aa000000000000000000000000ac1414aa00000000000000000000000023000414020013009d0000002abd700003350000010014004000000002000100000004d30e08190200000080010016004e210000837c9c48d70e60b0e4bca220187a7c51d3a69d80f7"], 0x68}}, 0x4004084) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev={0xfe, 0x80, [], 0x25}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x38590000000000, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x2}, 0xffffffff, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x1, 0x80}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 10:20:30 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0) 10:20:30 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x0) [ 292.001722][ T9720] usb 3-1: new high-speed USB device number 25 using dummy_hcd 10:20:30 executing program 5: ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000000)) pipe(&(0x7f0000000040)) 10:20:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) [ 292.201612][ T9720] usb 3-1: device descriptor read/64, error 18 [ 292.491832][ T9720] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 292.691632][ T9720] usb 3-1: device descriptor read/64, error 18 [ 292.811817][ T9720] usb usb3-port1: attempt power cycle [ 293.531934][ T9720] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 293.652392][ T9720] usb 3-1: Invalid ep0 maxpacket: 0 [ 293.801751][ T9720] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 293.901802][ T9720] usb 3-1: Invalid ep0 maxpacket: 0 [ 293.907320][ T9720] usb usb3-port1: unable to enumerate USB device 10:20:32 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000005280)={0x77359400}) 10:20:32 executing program 0: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) fork() 10:20:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x225}, 0x14}}, 0x0) 10:20:32 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000140)={0x0, "b5e8ecbc6ac0120e9e82f43bc0d980ce9c88940574ab24e7f5d0de549f37134c466aebe6aee0b2927f0c814180953ccf938d6256195f2b73abdd69660f56879d"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x1}, 0xfffffffffffffffa) 10:20:32 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000400)='/dev/urandom\x00', 0x0, 0x0) 10:20:33 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x4, r1, r0) 10:20:33 executing program 5: sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) getpgrp(0xffffffffffffffff) fork() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10:20:33 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x1, 0x0) 10:20:33 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080)={0xfff}, 0x0, &(0x7f0000000100)={0x77359400}, 0x0) 10:20:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 10:20:33 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/zero\x00', 0x301103, 0x0) sendmsg$TEAM_CMD_NOOP(r0, 0x0, 0x0) [ 295.161716][ T4809] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 295.351683][ T4809] usb 3-1: device descriptor read/64, error 18 [ 295.621636][ T4809] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 295.811594][ T4809] usb 3-1: device descriptor read/64, error 18 [ 295.932347][ T4809] usb usb3-port1: attempt power cycle [ 296.641601][ T4809] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 296.732166][ T4809] usb 3-1: Invalid ep0 maxpacket: 0 [ 296.881657][ T4809] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 296.971771][ T4809] usb 3-1: Invalid ep0 maxpacket: 0 [ 296.971946][ T4809] usb usb3-port1: unable to enumerate USB device 10:20:36 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 10:20:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240)='802.15.4 MAC\x00', r1) 10:20:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000dc0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 10:20:36 executing program 5: futex(&(0x7f0000000480), 0x1, 0x0, &(0x7f0000000500), 0x0, 0x0) 10:20:36 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000003540)='nl80211\x00', 0xffffffffffffffff) 10:20:36 executing program 0: semget(0x2, 0x96cc34bb6bf1d769, 0x0) 10:20:36 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) 10:20:36 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000400)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000000)) 10:20:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xec4, 0x0, 0x400, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xe99, 0xfc, "baf9439651abfa060f2af44d179b9b88342ce4d807332898bf32a985954c47eb752fc274a2347434d086840d7fcf09e4216af977a6a74c67af7063a3698101af7ee7ee39e6575e65905023537e085efe7eebe05db41370a8345a66386acf63e5ea6f53e830455d1fabc198a1d72539bb36336aa9e151d1e22c6a9a47fba6e99cfe5c36e16a6aabfdfa87207e15125961e0c7b9200700aae2b8587a1d0ec6ea0e661c2f31e122c53010a6a2ec03538808081e05ecac75cbf4c2fc4a1fe7ba76ed35606188ad8660a6464b410308efbf0954f95c918d6bd01e990c42d2b566938120403a163fadbba166b705e493acf3226d8cfb20abec6c42fe404e3b656f08d6af4c9050ba1bd60c3a28847d93748a9d6fdb588b0c1a1b71d3c42d462e07ac60d682f07ef756c1099ed49fab3ab0f49e54191bbe146988eed33143d885fd420b22ab95c2015fe3908b5004b4c39b8c30293964521e6568996b46916e289235340dae71320fad38b540c5b3a909847d494fd72880257516a6ad520f268b4ae2de7e731393435d03d6da65c36c574efd118177a7324e74159f1276206e9f7415d1b03c19d395e145b160aa213a1f5077efce48ac76e1881845a7861a0cb275d9e477a10200346074b2d088783780b35034e26a07efc7815b5830860e9045d3674f60db67b1d453696bf5e74b41c4cd4e2e4b11ccb3ebd712056627c0ea12421e81cc8978cbed5913a160868894ba9ac0b3ff8cd86a368c41dcd83a0b9a8cc3db1d3447f76048ec798e84c50e872c30de0ee1c25ee6f66b143d75ae95c4041ecd3869605796ca5399fbbb38c06ee21be89401e8bd469f2c5c9af8b8da76b40f2246296dd0b5fd186b78c35f94a909c31a6960f28779653745f7e7e94a49f55070f379114bcbb59aa9e62c32608ff6942f034977ebb93a90c5b2463e082ced59fd7cf86fb08e89addaa5ef36ca9e77fe7293bd9099cde6068a7a0bc7e38b0a8235625f2231dcbc3ea8c4064027f131ec300f17e14ae4510642a11c6bcf74dd69504f90184b715a727e56e0500524a29f35471719fc6eb27e3621c470045907aedbb44b7a43add5b00823ac0913c33e9a4a269fd1762441b94ed69daaa6704f3087f613601585f1973387271a3d13894ccc2f1791d885cc180a139ac698c3edc0b1ff4f1cd99e93b20d7af47b932870f8403ac4648103823696973b0a7325deeaf297e191387862753897c27c366eeb3fac922281f8dcd0188a3f3df1a6c3b1b524f0ec51707fcf2741e4cc879485faeaefc50c94d060353d897d18700ae58c389f52afdf39ec191d2050034af3ccc8798927b65dc2cff3f24646ec80a5f331ad327f412fc2a87b1ebbca3fbf70ec1088cc853a88a35751d2e455161666b33c14caaf822b748d4154dc1d06dfd827c2db7bd1c6384b9ae66f1291cd00bfa498b871e58430ec9150f83096cce5aa23aa7f9ea9fdf7f12436eef5b0a9c615c639177fc2c7a1d1aa84b66b1e5e16e22623a06569601b50dc074cef630e36aa83e7f09c2c0b7e43add8358400fae5075c903beffd111cd0c475a5b774a1b566a56b8e790cc43c306f5c96d8f61dc49e2dc09f9ef123b9fc6f05a45111d2cd16c331c65ce1d919e240c84aa60f044b78d3f390c406b34b3767ebe364b793614b99a3c7225925642a9ab4cf3944b5d8deec0175cda13a6d25d81976b71809ddc1a7dbebc0b3948613bfe85e6b0aa5802aafb74c179272c9a827e0c116a2b48a09663d807b4596865458f1fab9118776a55d476c1814266ee5ae1e0607225c0f0bc580c057734177c7d448c01401c8979f37a20a4b2e751dfed397da723c5daf71b4a6dfe2fdcc2fd4ad63dfb2fcf0d1b747b26a2697a3128523b0c75787892d8bc09073eff582ac8caa4f85a2d0b3135a4d231c38b34607edf52b0f574870fe3f0e0b6cf03a7754caa5747ec8637db579a440b6b519de3a607228aa6c76a1c434ee5e4895b152393fed06382c782c10e1a00ffef57372b19eae59d35d41d59d0f6693a58f14228ce9cb19f85d5932278abb91e402e7bda767add14a67754f28fdbcd6f30cae3373e5884d520e7a953f4cace6877de2358d62e3d8729da9fb4c43db64db3c03e3e348774f21a5e22a480f03512d4688d967e689967a78d181925c3296e6bec7f3605bfecc3e570b6d4fdbd33f0ae80ed00346bac78e0601826d8ad1e4d48a8d5e38c679f152a4b1fbce9b813c72641c856f8625804834c8135785f35b7d1aa9c218a0c7788de55e6662544e9b0b44b62ecd46731961166fd173b8f3069402bce433993ded5ba5232d1a22e98da915ee32697801946a2e722a927bb2bcbf787dbbafe5e52893c9ca8d83ea588ec3b2f5cda2154639f69c3baed693c890ab2b01f1b55e77e4ddd35726dcf9a0a282a2a030f2515f70d16cff0e98ccf64a0bf1c623ee16c443a9418439ee56be5b74e430672fe2ea2c9e63e048ac037e72436856fc17cd2b2e7f82a2f57420376b29e1f04e1b4a335bb3d9384475e2b3cb74866ced04019b59d0bf2daa607e5da76388f83419397474845761e92ef7b7beffbd7c94e3c22e193399ac81ac1c421dfb67fd560660a63b08f5593c0535d902b8b7fba3d9c877203a59bc3fb9b4cc5f74924018a7c7bece80b0416e7227d50ef37f862ef5a18e332e63df0771aa5afe51c378d9e20630185f9703d39ecfc8c86fa6e21d0617dbe046671f44e1da2e1de2571c8f41d396ad7f1a53f818437acc7eb934a2594d65cbdcc64f4f0924b6e5c95f7108dfaa8a863b25435665eb040c93bd1af4fb98c6dd3934eab5873c0dac0024cf0184603e6eaf20e3496edcb506f0263669a61ce923581790f0294c127c68b6db089ac627ff8bc0573f04dab3dcfa3e047d38e6642cb90d0b5fcf317398cd5b441354b1d3e6c0450e56a81c5550b311bb6c1aa186c682ffeca135dade3e3ce2f30af6c79ba1b7dc94f9c588811d5afe4be09f7eafc8e0eb1fa14c088706484091628a635ef2980cdb4e9beb4ab31e3b85a173a594fc268b1d91494667dff701508975b0691d3a2fe54c92428e2f89df21b0a05cf883bd1193d26f1f0b3a2d8c2b51a42b9723150f7a76c9d535ab378c19352f084c2392de81b54d66df861135e801e9cc67c7e24c97c307fd2a4be78543a4a21c98e62c5f525e794e79ad2281ef836dfc2c300cac5e7d313af8cd257ddf7fe76a88d1377aad6733c76b79b8e6f3d97fec56e0bf93c56783f1ddbea769a8906712aa04d3e3e63439a57d367f9b6ef6ce97573599b91ca32cc57b7f8a947f322919f57d27457ffcad6677c934e478eb4e04ce252a624798a4b34d21a792de0ad822f51a235ad10919fdf3abfe4b4d662bd3d963a1192f9584ffd4fb8cb42e956425bc2eb1c5b63bcdf892ae3b17709fdae71a185488744c890005679d7495344ca4ca9cb7e7b19169d46089968636281146970079164d98084822c4f2282f051a1b4cd27dd24e332a9635aa3e78a4c1fceed7ccd3d44cf3dc2375d2059764dea37700962ac153086d62fb7c0e5f5f25abd234f77d3032f02d4117e954049ff59a49dd73982bf040575f58db24410d20537d1708ec8a73c6aaae93ea33ec884d27e5b832a60fe2cf8b3ad7a61d1972873bf199e52a163a4c1f3db210f39a906a8f9575916a836ea4e03a727ba3599504936787a49d0b8eeed9626d68f06b4e1f073828263cba5371e5b730b6d8829a79d1ff2181da7b9ad6e4cddaeee902c8854d8fff9371ad79ffc6f898a157d1c78347370b7d74c01c5f58224846bff7838b4060ae9c174029aa27683f4149907e8cfbe74581794be07719ebf1ba87e266d5a7c00f78eb99b899a1904e6b05838bb968780ee5de5921e91f754953e6c319176790eafe57f165963944026dd45520d98e0c953bc60f0ee54bfb91845c3010ff82a356f1091103a110397c447580564321326df28212a1ba168c0b90683e763d299fa1aae76d3fc02d8a34a41f1bed711a8eac9b7e3ed2eaccb685be2b60be14a4d3d7c6457c75b39b98ebd592e21dfd66bcc6813dc9009fdfd90797f983d97c6e1b39bf1f4a72c2b544dc254ee445ce0c5e18e7ba0221d763c275d81f8113018b7b03f465c1afd37b6103598958f9971da5c5984c8d51a6c542772236d603f19c3cb433c2f3bdc9c5d0ec7d2b38e2d2900e86d8ff5fd9ce5d748ae6d3279b56aef10269dc4a55fa740d96ef06d44991a98124b1921b2e3c99768bdb1f3318efde25a7c0ab9595eee2b223856a5662f4ff81a93f86cc3def973eaba0e16a896d7d59a94c2278a177baab84280b925821461aa4cf0757aa0cea33fd6e6ca585705f6d04eac5d146cc504b3749090c00732b016b747e33611ce3a35d3a3b84f991e91b25d65cd1473f4cc832941d8a8669e7d8cb55f6776da2f5b28240d932d7b846432f5eac2e0a57ff38b52cd806a42cfa8624254a92111d70482e0f12d6316db3c590bff79dd2ad113a6892f292084ef324612d0ba00ece112e72f6f319c2892d9236301cba3231e037be1b7ccbdb965823e1513e51e1972c3238dce97958ea0ab835c39352d0be858e2a62696ea06c55cf73dde4762039c74efc80f2cf5a9721a814955f0b1bf5343217e3ace7b66027eaa21b80c7f4ed112af9e37cede1a354ad1ec180b0766457d680f5305ff68554c3da229803efbb62ab660c0a716800e255928f69bff14c9c399e02f2f85feee96d53e344e6ba65419a9f1d0d2324670416ffc366e4ca9a61e61031905c5d889d7f56ebe56ab7923add4d8ec42e8a080c3ecad467fa197edc71f7f8c03076f9ebb336b2714ee920e40ac81d6a4f43cecb9b300b9389533ea7a5ed4e2b00484bfc5f600ffec9879f6397f894f3b0a7ac21caeaa6aa8053a967fd0304d911172945f31374f91d5a110be8ceb79f554849b292e3019cb01396db085887c02e47644823a0f0c6b4293381fb674ae37c702ce859c4d99e934a9c9acba886d8eb67773ce6416023b0b1e037ab544ebab0d8529cdb1d650f3e90babefda8241b5fc071b2db861e20597ed4d9e1bd531cccb5a477572cb76dedfe63c8f99b6ce154031181070725ab97fb8ac22814be350be73d13912efe78d9d59c18651f0a746f1723e9ad558690a3d361d90c86f19b1ac9dbe147cc796386e2723dbf0658211d4fd023b00ed22c110603b1d9e0639d45a1d667ef9efb83b81a396b1b54d2296bc26fd03610af3ff4a637e104df28d2249131672135bce04509d467962b161f79198f85ec20e1"}]]}, 0xec4}}, 0x840) 10:20:36 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000004ac0)='wireguard\x00', 0xffffffffffffffff) 10:20:36 executing program 0: socket$inet6(0xa, 0x0, 0xd766) [ 298.211843][ T7] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 298.401777][ T7] usb 3-1: device descriptor read/64, error 18 [ 298.671631][ T7] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 298.871575][ T7] usb 3-1: device descriptor read/64, error 18 [ 298.991799][ T7] usb usb3-port1: attempt power cycle [ 299.701742][ T7] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 299.791640][ T7] usb 3-1: Invalid ep0 maxpacket: 0 [ 299.941813][ T7] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 300.032196][ T7] usb 3-1: Invalid ep0 maxpacket: 0 [ 300.038145][ T7] usb usb3-port1: unable to enumerate USB device 10:20:39 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:39 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1a1000, 0x0) 10:20:39 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000001340)) 10:20:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 10:20:39 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000400)='/dev/urandom\x00', 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000000)) 10:20:39 executing program 0: shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000200)=""/156) 10:20:39 executing program 4: accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)=""/119) 10:20:39 executing program 3: getgroups(0x1, &(0x7f0000000040)=[0xffffffffffffffff]) 10:20:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 10:20:39 executing program 1: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000002140)=""/102389) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001100)=""/4097) 10:20:39 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:20:39 executing program 5: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080)={0xfff}, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8}) [ 301.281671][ T9670] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 301.681718][ T9670] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.852450][ T9670] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.861610][ T9670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.870681][ T9670] usb 3-1: Product: syz [ 301.876578][ T9670] usb 3-1: Manufacturer: syz [ 301.882677][ T9670] usb 3-1: SerialNumber: syz [ 303.001781][ T9670] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 303.020466][ T9670] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 10:20:42 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:42 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002340)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 10:20:42 executing program 3: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/60) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)) 10:20:42 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x301101, 0x0) 10:20:42 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) 10:20:42 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x4f48e15d554307fb, 0x0) [ 304.221205][ T9720] usb 3-1: USB disconnect, device number 37 [ 304.228244][ T9720] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:20:42 executing program 0: syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00', 0xffffffffffffffff) 10:20:42 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc020662a, &(0x7f00000001c0)=ANY=[]) 10:20:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0xb0, 0x1a0, 0x1a0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private, 0x0, 0x0, 'bond_slave_1\x00', 'lo\x00'}, 0x0, 0x90, 0xd0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7fffffff]}}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'tunl0\x00', 'veth1_vlan\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @common=@osf={{0x0, 'osf\x00'}, {'syz0\x00'}}]}, @common=@inet=@SET1={0x0, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x40c) 10:20:42 executing program 5: inotify_add_watch(0xffffffffffffffff, 0x0, 0x42) 10:20:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000040)={0x958, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0x0, 0x935]}}, [@INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "44e638e07fe1edccc61127e96c1d869e514af031a7146acb9f68d3c5002c7748b750526be5214a6416bd1abc77d3e9713d43e8871d6199c2a9cbfbb1a9c277bc752ca536c26dbde05afa66d25bb7c04f6bf393d89f660e0a0dcd9de02fb2e7945a9fe41a4505ef9e697e8855d4559e164ce24dcacfa16a555bacaf98b976fe70fe6ea8aeee8e467e8c0cf81f70754666d5ef5bf90140e2e59aa86dde48c7720ad434b3efcfebbdce6a6ee6f6d68cf594e26bf7bb904eb97b6c9648f4dcc7eca70bf5e3c016677a0e3fafb282947d1ffa14d3ac5928c1be3c58d9f2e0da92f5d239203af307"}, @INET_DIAG_REQ_BYTECODE={0x81d, 0x1, "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"}]}, 0x958}}, 0x0) 10:20:42 executing program 3: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000180)=""/4096) [ 304.440770][ T36] audit: type=1800 audit(1614075642.726:26): pid=13667 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=".log" dev="sda1" ino=14216 res=0 errno=0 [ 304.761742][ T9720] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 305.121691][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.291704][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.302366][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.310764][ T9720] usb 3-1: Product: syz [ 305.315813][ T9720] usb 3-1: Manufacturer: syz [ 305.320511][ T9720] usb 3-1: SerialNumber: syz [ 306.461717][ T9720] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 306.488301][ T9720] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 10:20:45 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:45 executing program 0: syz_emit_ethernet(0x96, &(0x7f00000012c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xa, [@loopback, @broadcast, @private]}]}}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "494f25433b256dd8d06513643de7da16c3191f62717e45978c1281bc35e33ffa", "2ebabf2f246c8fd34204114a7b7f2a14", {"13a16c9591f078cbf51b1293949aab39", "9414846a8d994e69d5cff55d244b4648"}}}}}}}, 0x0) 10:20:45 executing program 4: pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={0x4}, &(0x7f0000000200), 0x0) 10:20:45 executing program 1: r0 = semget$private(0x0, 0x2, 0x160) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 10:20:45 executing program 5: syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0)='nl802154\x00', 0xffffffffffffffff) 10:20:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @tipc, @nl=@proc, @nl=@proc}) [ 307.678524][ T9720] usb 3-1: USB disconnect, device number 38 [ 307.685715][ T9720] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:20:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="f63929f8106b7313a13de5dd2e2d1f68", 0x10) 10:20:46 executing program 5: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x14d7c2, 0x0) close(r0) 10:20:46 executing program 1: r0 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)) 10:20:46 executing program 0: r0 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, 0x0) 10:20:46 executing program 3: syz_usb_connect(0x5, 0x12e, &(0x7f0000000000)={{0x12, 0x1, 0x311, 0x7, 0x45, 0xe6, 0x10, 0x45e, 0x453, 0x4750, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11c, 0x2, 0x81, 0x7f, 0x0, 0x0, [{{0x9, 0x4, 0xe8, 0x0, 0x8, 0x66, 0x58, 0xfa, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x3}, [@feature_unit={0xd, 0x24, 0x6, 0x6, 0x1, 0x3, [0x0, 0x1, 0x0], 0x8}, @selector_unit={0x5}]}, @hid_hid={0x9, 0x21, 0x0, 0x9}], [{{0x9, 0x5, 0xf, 0x0, 0x40, 0x0, 0x0, 0x7, [@generic={0x72, 0x9, "64630dd85d3d8438a1e581ebbb0d3ac8be394914c34d792b7604b0ffd43546a49f9337dc15b31b25731c092c205fcd1e7f19a2143d8d4d64f5df57857953cd77343be8bd6a7e11876594726ab0750f1d2ac9f4fcce80a5180f7451f073d4420e1ba083f42e6b19f84f1ba3542ddd81da"}, @generic={0x3, 0x0, "b1"}]}}, {}, {}, {{0x9, 0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x10}}, {{0x9, 0x5, 0x4, 0x0, 0x0, 0xff, 0x0, 0x4}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x0, 0x80, 0xdd, [@generic={0x3, 0x31, "9b"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, [@generic={0x2, 0x19}]}}]}}, {{0x9, 0x4, 0x3e, 0x5c, 0x3, 0xa, 0x0, 0x0, 0x0, [], [{}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x4b}}, {}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x110, 0x5, 0xfb, 0x1}, 0x16, &(0x7f0000000ac0)={0x5, 0xf, 0x16, 0x1, [@generic={0x11, 0x10, 0x0, "1c923349cabde0c1732493a701c7"}]}, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000e00)=@string={0x2}}, {0x0, 0x0}]}) 10:20:46 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0xa, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @private=0xa010102, {[@lsrr={0x83, 0xf, 0x87, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x89, 0x2}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "8fd3ca", 0x0, "7f8033"}}}}}}, 0x0) [ 307.886413][T13716] loop5: detected capacity change from 264192 to 0 [ 307.991141][ T36] audit: type=1800 audit(1614075646.276:27): pid=13716 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="loop5" ino=3 res=0 errno=0 [ 308.182139][ T4809] Bluetooth: hci4: command 0x0406 tx timeout [ 308.188776][ T4809] Bluetooth: hci5: command 0x0406 tx timeout [ 308.195728][ T4809] Bluetooth: hci0: command 0x0406 tx timeout [ 308.203088][ T4809] Bluetooth: hci1: command 0x0406 tx timeout [ 308.209234][ T4809] Bluetooth: hci2: command 0x0406 tx timeout [ 308.228415][ T4809] Bluetooth: hci3: command 0x0406 tx timeout [ 308.261731][ T19] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 308.264890][ T9720] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 308.532446][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 308.631874][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.781682][ T19] usb 4-1: config 129 has an invalid interface number: 232 but max is 1 [ 308.790877][ T19] usb 4-1: config 129 has an invalid interface number: 62 but max is 1 [ 308.799939][ T19] usb 4-1: config 129 has no interface number 0 [ 308.801742][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.806654][ T19] usb 4-1: config 129 has no interface number 1 [ 308.822146][ T19] usb 4-1: config 129 interface 232 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 308.823913][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.833707][ T19] usb 4-1: config 129 interface 232 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 308.847922][ T9720] usb 3-1: Product: syz [ 308.855134][ T19] usb 4-1: config 129 interface 62 altsetting 92 has an invalid endpoint with address 0x0, skipping [ 308.859667][ T9720] usb 3-1: Manufacturer: syz [ 308.870068][ T19] usb 4-1: config 129 interface 62 altsetting 92 has an invalid endpoint with address 0x0, skipping [ 308.880526][ T9720] usb 3-1: SerialNumber: syz [ 308.886586][ T19] usb 4-1: config 129 interface 62 has no altsetting 0 [ 309.181741][ T19] usb 4-1: string descriptor 0 read error: -22 [ 309.188912][ T19] usb 4-1: New USB device found, idVendor=045e, idProduct=0453, bcdDevice=47.50 [ 309.198888][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.458265][ T9670] usb 4-1: USB disconnect, device number 5 [ 310.031776][ T9720] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 310.052195][ T9720] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 310.242554][ T19] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 310.531659][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 310.761759][ T19] usb 4-1: config 129 has an invalid interface number: 232 but max is 1 [ 310.770913][ T19] usb 4-1: config 129 has an invalid interface number: 62 but max is 1 [ 310.784554][ T19] usb 4-1: config 129 has no interface number 0 [ 310.791075][ T19] usb 4-1: config 129 has no interface number 1 [ 310.799397][ T19] usb 4-1: config 129 interface 232 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 310.815387][ T19] usb 4-1: config 129 interface 232 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 310.830375][ T19] usb 4-1: config 129 interface 62 altsetting 92 has an invalid endpoint with address 0x0, skipping [ 310.842178][ T19] usb 4-1: config 129 interface 62 altsetting 92 has an invalid endpoint with address 0x0, skipping [ 310.853075][ T19] usb 4-1: config 129 interface 62 has no altsetting 0 [ 310.951640][ T19] usb 4-1: string descriptor 0 read error: -71 [ 310.958223][ T19] usb 4-1: New USB device found, idVendor=045e, idProduct=0453, bcdDevice=47.50 [ 310.968481][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.991695][ T19] usb 4-1: can't set config #129, error -71 [ 310.999055][ T19] usb 4-1: USB disconnect, device number 6 10:20:49 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:49 executing program 1: r0 = socket(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 10:20:49 executing program 0: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x1}, 0xfffffffffffffffd) 10:20:49 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 10:20:49 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80301, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) 10:20:49 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x42, 0xda, 0xc7, 0x10, 0x675, 0x200, 0x37de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xc0, 0xd4, 0x4f, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 311.250245][ T9619] usb 3-1: USB disconnect, device number 39 [ 311.257171][ T9619] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:20:49 executing program 4: r0 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4802, 0x0) 10:20:49 executing program 1: syz_usb_connect$uac1(0x0, 0x8b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x60, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3f}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0x0, 0x0, '7'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x6, 0x20, {0x7, 0x25, 0x1, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x3f, 0x0, {0x7, 0x25, 0x1, 0x82}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x7f, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000800)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f00000005c0)='/dev/input/event#\x00', 0xfffffffffffffffd, 0x80501) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000001440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x0, 0x83, 0x0, 0x8}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x422}}]}) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000001480)={0x0, 0xffffffff, 0x80000000}) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x1ff7, 0x13, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9ad}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7a, 0x0, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x0, 0xe9}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x250, 0x5, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000780)=@lang_id={0x4}}]}) 10:20:49 executing program 0: r0 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4808, &(0x7f0000000040)) 10:20:49 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00') r1 = open$dir(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0x0, &(0x7f00000002c0)) 10:20:49 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000200), 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x4040, 0x0) 10:20:49 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) [ 311.595886][ T9720] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 311.601699][ T9670] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 311.762114][ T9619] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 311.771608][ T4809] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 311.841788][ T9670] usb 4-1: Using ep0 maxpacket: 16 [ 311.962464][ T9670] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 311.982509][ T9720] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.021613][ T4809] usb 2-1: Using ep0 maxpacket: 16 [ 312.131680][ T9670] usb 4-1: New USB device found, idVendor=0675, idProduct=0200, bcdDevice=37.de [ 312.141285][ T9670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.155598][ T4809] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 312.167331][ T9670] usb 4-1: Product: syz [ 312.171687][ T9670] usb 4-1: Manufacturer: syz [ 312.176283][ T9670] usb 4-1: SerialNumber: syz [ 312.181594][ T4809] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.183286][ T9720] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.191474][ T9670] usb 4-1: config 0 descriptor?? [ 312.204620][ T9619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.218453][ T9619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.226104][ T4809] usb 2-1: language id specifier not provided by device, defaulting to English [ 312.229964][ T9720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.246973][ T9720] usb 6-1: Product: syz [ 312.251163][ T9720] usb 6-1: Manufacturer: syz [ 312.257146][ T9720] usb 6-1: SerialNumber: syz [ 312.401783][ T9619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.412148][ T9619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.420472][ T9619] usb 3-1: Product: syz [ 312.425813][ T9619] usb 3-1: Manufacturer: syz [ 312.430621][ T9619] usb 3-1: SerialNumber: syz [ 312.458660][ T9670] cxacru 4-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 312.492976][T13848] cxacru 4-1:0.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 312.502510][T13848] cxacru 4-1:0.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 312.655022][ T7] usb 4-1: USB disconnect, device number 7 [ 312.982127][ T4809] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.991476][ T4809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.246234][T13824] udc-core: couldn't find an available UDC or it's busy [ 313.253840][T13824] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 313.381953][ T4809] usb 2-1: 0:2 : does not exist [ 313.410076][ T4809] usb 2-1: USB disconnect, device number 2 [ 313.421908][ T9720] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 313.444387][ T9571] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 313.541860][ T9619] cdc_ncm 3-1:1.0: bind() failure [ 313.549271][ T9619] cdc_ncm 3-1:1.1: bind() failure [ 313.701635][ T9571] usb 4-1: Using ep0 maxpacket: 16 [ 313.831926][ T9571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 313.865379][ T9720] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 314.012629][ T9571] usb 4-1: New USB device found, idVendor=0675, idProduct=0200, bcdDevice=37.de [ 314.022291][ T9571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.030400][ T9571] usb 4-1: Product: syz [ 314.038318][ T9571] usb 4-1: Manufacturer: syz [ 314.043778][ T9720] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 314.052718][ T9571] usb 4-1: SerialNumber: syz [ 314.058588][ T9571] usb 4-1: config 0 descriptor?? [ 314.075296][ T9619] usb 6-1: USB disconnect, device number 2 [ 314.085528][ T9619] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 314.291635][ T9720] usb 2-1: Using ep0 maxpacket: 16 [ 314.342031][ T9571] cxacru 4-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 314.351044][T13919] cxacru 4-1:0.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 314.355185][ T9571] usb 4-1: USB disconnect, device number 8 [ 314.377376][T13919] cxacru 4-1:0.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 314.432159][ T9720] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 314.447021][ T9720] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.496466][ T9720] usb 2-1: language id specifier not provided by device, defaulting to English 10:20:53 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:53 executing program 4: syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) statx(r1, &(0x7f0000000040)='./file1\x00', 0x100, 0x7ff, &(0x7f0000000300)) 10:20:53 executing program 0: r0 = shmget$private(0x0, 0x7000, 0x0, &(0x7f0000ff9000/0x7000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000200)=""/230) [ 314.761677][ T9720] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.769254][ T9670] usb 3-1: USB disconnect, device number 40 [ 314.795855][ T9720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.851845][ T9720] usb 2-1: can't set config #1, error -71 [ 314.861681][ T9619] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 314.891867][ T9720] usb 2-1: USB disconnect, device number 3 [ 315.251590][ T9670] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 315.272472][ T9619] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:20:53 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) 10:20:53 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000540)='/dev/urandom\x00', 0xa001, 0x0) 10:20:53 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x42, 0xda, 0xc7, 0x10, 0x675, 0x200, 0x37de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xc0, 0xd4, 0x4f, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 10:20:53 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={0x0, 0x27}}, 0x0) 10:20:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind(r0, 0x0, 0x0) [ 315.451723][ T9619] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.461086][ T9619] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:20:53 executing program 4: request_key(&(0x7f0000000000)='.request_key_auth\x00', 0x0, 0x0, 0x0) 10:20:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/19) 10:20:53 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x0, 0x0) [ 315.497591][ T9619] usb 6-1: Product: syz 10:20:53 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40040, 0x0) [ 315.542110][ T9619] usb 6-1: can't set config #1, error -71 [ 315.565807][ T9619] usb 6-1: USB disconnect, device number 3 [ 315.612319][ T9670] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.665664][ T9670] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.761804][ T9720] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 315.861690][ T9670] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.871460][ T9670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.895003][ T9670] usb 3-1: Product: syz [ 315.899313][ T9670] usb 3-1: Manufacturer: syz [ 315.909876][ T9670] usb 3-1: SerialNumber: syz [ 316.011786][ T9720] usb 4-1: Using ep0 maxpacket: 16 [ 316.131774][ T9720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 316.339845][ T3221] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.346955][ T3221] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.355425][ T9720] usb 4-1: New USB device found, idVendor=0675, idProduct=0200, bcdDevice=37.de [ 316.365538][ T9720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.373604][ T9720] usb 4-1: Product: syz [ 316.377761][ T9720] usb 4-1: Manufacturer: syz [ 316.382398][ T9720] usb 4-1: SerialNumber: syz [ 316.388215][ T9720] usb 4-1: config 0 descriptor?? [ 316.653653][ T9720] cxacru 4-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 316.664570][T13996] cxacru 4-1:0.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 316.674462][T13996] cxacru 4-1:0.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 316.864791][ T9720] usb 4-1: USB disconnect, device number 9 [ 317.051859][ T9670] cdc_ncm 3-1:1.0: bind() failure [ 317.059864][ T9670] cdc_ncm 3-1:1.1: bind() failure 10:20:56 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:20:56 executing program 4: syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x5f1202) 10:20:56 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000040)={&(0x7f0000000080), 0x7, &(0x7f00000000c0)={0x0, 0xfffffffffffffe26}}, 0x0) 10:20:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000680)='batadv\x00', r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={0x0}}, 0x0) 10:20:56 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 10:20:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836008000b0d6301a4ce8750ce3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002140)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r2, @ANYBLOB='\b'], 0x68}}, 0x0) 10:20:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', r0) [ 318.267658][ T9670] usb 3-1: USB disconnect, device number 41 10:20:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="020eb10803"], 0x18}}, 0x0) 10:20:56 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) [ 318.347361][T14024] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 10:20:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) 10:20:56 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x50040, 0x0) [ 318.436326][T14034] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 10:20:56 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 318.781844][ T9670] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 319.141722][ T9670] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.153111][ T9670] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.321694][ T9670] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.331585][ T9670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.339788][ T9670] usb 3-1: Product: syz [ 319.344994][ T9670] usb 3-1: Manufacturer: syz [ 319.349958][ T9670] usb 3-1: SerialNumber: syz [ 320.491810][ T9670] cdc_ncm 3-1:1.0: bind() failure [ 320.503206][ T9670] cdc_ncm 3-1:1.1: bind() failure 10:21:00 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {}, {}, @rumble}) 10:21:00 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 10:21:00 executing program 5: socketpair(0xa, 0x0, 0x80, 0x0) 10:21:00 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x20, 0x0, 0x61, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:21:00 executing program 0: ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) [ 321.711980][ T19] usb 3-1: USB disconnect, device number 42 10:21:00 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0xec4, 0x12, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "e8c8b11a0ad82cfb16"}, @INET_DIAG_REQ_BYTECODE={0x71, 0x1, "d0c165512e83f7fbc78613f7538391611b3ce6edf585509b8cbeb3dc0a34e88ac117c27b63c0b07a3221ee25d3564b1db61e3a9b74caf29cd565d2c8a679b2cb39aa0e7ce2566390b4176e4618d722401271d43e183c1d2d155baa4a41791bcd4435a5264db0e96417ebc6a24b"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "e84d0438296601e2ec143369302dd979a671dc535256c9a38db166e416771b8c9592dd567685654113de8b19d7fd3bd886ab2c04f33b0f8f589c66d6fc45739df6ea0b80d9149cde50ea317f0b95143ce94b775c4e9be3e31b28d2a0369d235b373d8ebbeb31f8727d9c80d859c4bd857a6cd041cae818880e40613b1e453240346af3c9aa0ffaadc1743968cfd3c1279c5ce80f69e3df66bb5a921dfcc335e091ecbe7d064fbbdfc2b7d0735fb2de285e2fc0ad58fe63f3546f4ab25c42028a76974cefbf3eba551e142f2386860fe730"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "a821b6b0c56421b9cd5d204f05407504b4b927509e11e16b6909d9dde39b093e5dd27b23e95a94360cb4d500457ddd2dc70507686469d3bf55b9ba875572e497e2ab7ff2568fb7b40667355030e03b8e44140d3506b23203a82a62676ae306af1e73f0704ec008fa9a704bffb4072f0c0210cc96f0989abc151d84575602562a6903fa2b4272e5f8f01beb7fe7b4eef3666b42ed69dba3d147cc74c30ed7963999d89a63b52cba50d47b8189d1f44f05936b916ae7603f57b2611f0aef367607833982dd125e212157d8c4dcadd384480ca2d4330fab6e19a2e411780e52fd1d416e09e2f89b7d1458357eda06"}, @INET_DIAG_REQ_BYTECODE={0xc25, 0x1, "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"}]}, 0xec4}}, 0x0) 10:21:00 executing program 1: syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x4, 0x280000) 10:21:00 executing program 4: mq_open(&(0x7f0000000800)='--\x00', 0x0, 0x0, 0x0) 10:21:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 10:21:00 executing program 3: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x4}, 0x0, 0x0, 0x0) 10:21:00 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000340)) [ 322.261624][ T19] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 322.621765][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.633586][ T19] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 322.644545][ T19] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 322.812165][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.822958][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.831225][ T19] usb 3-1: Product: syz [ 322.836873][ T19] usb 3-1: Manufacturer: syz [ 322.841454][ T19] usb 3-1: SerialNumber: syz [ 323.981780][ T19] cdc_ncm 3-1:1.0: bind() failure [ 324.002782][ T19] cdc_ncm 3-1:1.1: bind() failure 10:21:03 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:03 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x453, 0x0, 0x0, 0x0, 'W'}, 0x14}}, 0x0) 10:21:03 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 10:21:03 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000004c0)) 10:21:03 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0xfffffffffffffec7) 10:21:03 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0) [ 325.198482][ T4809] usb 3-1: USB disconnect, device number 43 10:21:03 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0xa0800, 0x0) [ 325.265085][ T36] audit: type=1107 audit(1614075663.556:28): pid=14106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='W' 10:21:03 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000440)) 10:21:03 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 10:21:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) 10:21:03 executing program 4: futex(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0) 10:21:03 executing program 1: syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x521000) [ 325.801676][ T4809] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 326.192143][ T4809] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.203629][ T4809] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 326.215463][ T4809] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 326.382170][ T4809] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.391427][ T4809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.411562][ T4809] usb 3-1: Product: syz [ 326.416362][ T4809] usb 3-1: Manufacturer: syz [ 326.421472][ T4809] usb 3-1: SerialNumber: syz [ 327.561745][ T4809] cdc_ncm 3-1:1.0: bind() failure [ 327.569087][ T4809] cdc_ncm 3-1:1.1: bind() failure 10:21:07 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:07 executing program 0: shmat(0x0, &(0x7f0000ff7000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ff7000/0x1000)=nil, 0x0) 10:21:07 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x12800) getpeername(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) syz_genetlink_get_family_id$team(&(0x7f00000060c0)='team\x00', 0xffffffffffffffff) 10:21:07 executing program 3: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) 10:21:07 executing program 1: syz_open_procfs$namespace(0x0, 0x0) getpgid(0x0) 10:21:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, 0x0) [ 328.786296][ T19] usb 3-1: USB disconnect, device number 44 10:21:07 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x82f00, 0x0) 10:21:07 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x434503, 0x0) 10:21:07 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x44800, 0x0) 10:21:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1) 10:21:07 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) 10:21:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)=@newqdisc={0x24}, 0x24}}, 0x0) [ 329.331632][ T19] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 329.701816][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.714154][ T19] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 329.724815][ T19] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 329.892146][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.902169][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.911471][ T19] usb 3-1: Product: syz [ 329.916816][ T19] usb 3-1: Manufacturer: syz [ 329.921398][ T19] usb 3-1: SerialNumber: syz [ 331.061693][ T19] cdc_ncm 3-1:1.0: bind() failure [ 331.079574][ T19] cdc_ncm 3-1:1.1: bind() failure 10:21:10 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="1e283943e26ca1d6b877e26804df94050eb52653744e79d323", 0x19}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 10:21:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) 10:21:10 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/nvram\x00', 0x0, 0x0) 10:21:10 executing program 3: fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)) waitid(0x1, 0x0, &(0x7f00000001c0), 0x4, 0x0) 10:21:10 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1) [ 332.279228][ T9720] usb 3-1: USB disconnect, device number 45 10:21:10 executing program 1: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) 10:21:10 executing program 5: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @broadcast, @val={@void, {0x8100, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @local, @broadcast, @multicast2}}}}, 0x0) 10:21:10 executing program 0: syz_emit_ethernet(0x92, &(0x7f00000002c0)={@dev, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f6ad18", 0x5c, 0x2f, 0x0, @private1, @private0, {[@hopopts={0x0, 0x2, [], [@generic={0x0, 0xe, "7d7579e317e176bc5d11989f319e"}]}]}}}}}, 0x0) 10:21:10 executing program 4: syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') 10:21:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8983, 0x0) 10:21:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0xa2}}, 0x0) [ 332.831655][ T9720] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 333.191824][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.203068][ T9720] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 333.214416][ T9720] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 333.381723][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.391156][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.399331][ T9720] usb 3-1: Product: syz [ 333.403887][ T9720] usb 3-1: Manufacturer: syz [ 333.408573][ T9720] usb 3-1: SerialNumber: syz [ 334.551843][ T9720] cdc_ncm 3-1:1.0: bind() failure [ 334.560918][ T9720] cdc_ncm 3-1:1.1: bind() failure 10:21:14 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:14 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) getdents64(r0, &(0x7f0000000280)=""/66, 0x42) 10:21:14 executing program 4: r0 = creat(&(0x7f0000002440)='./file0\x00', 0x0) r1 = creat(&(0x7f0000002440)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xfb3f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) setxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f00000020c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 10:21:14 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x2000000, &(0x7f00000000c0)=ANY=[]) getdents64(r0, 0x0, 0x0) 10:21:14 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0xacec, 0x2}) 10:21:14 executing program 0: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)) [ 335.775851][ T4809] usb 3-1: USB disconnect, device number 46 10:21:14 executing program 3: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000100)={0x7}, 0x7) write$P9_RREAD(r0, 0x0, 0x1000) 10:21:14 executing program 0: pselect6(0x40, &(0x7f0000000180)={0x5}, &(0x7f00000001c0), &(0x7f0000000200)={0x3}, 0x0, &(0x7f00000002c0)={0x0}) 10:21:14 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 10:21:14 executing program 5: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x14d7c2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000140)='./file0/file0\x00', 0x27ffd) 10:21:14 executing program 4: r0 = creat(&(0x7f0000002440)='./file0\x00', 0x0) r1 = creat(&(0x7f0000002440)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xfb3f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) setxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f00000020c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) [ 336.027659][T14285] loop5: detected capacity change from 264192 to 0 10:21:14 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) read$FUSE(r0, 0x0, 0x0) [ 336.070144][ T36] audit: type=1800 audit(1614075674.356:29): pid=14285 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="loop5" ino=4 res=0 errno=0 [ 336.321641][ T4809] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 336.682179][ T4809] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.698244][ T4809] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 336.708810][ T4809] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 336.881662][ T4809] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 336.892833][ T4809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.901130][ T4809] usb 3-1: Product: syz [ 336.906802][ T4809] usb 3-1: Manufacturer: syz [ 336.911472][ T4809] usb 3-1: SerialNumber: syz [ 338.021834][ T4809] cdc_ncm 3-1:1.0: bind() failure [ 338.029906][ T4809] cdc_ncm 3-1:1.1: bind() failure 10:21:17 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:17 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={[], [{@func={'func', 0x3d, 'PATH_CHECK'}}]}) 10:21:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x1e, 0x0, &(0x7f0000000040)) 10:21:17 executing program 1: io_setup(0x7, &(0x7f00000000c0)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:21:17 executing program 5: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x14d7c2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000140)='./file0/file0\x00', 0x27ffd) 10:21:17 executing program 4: r0 = creat(&(0x7f0000002440)='./file0\x00', 0x0) r1 = creat(&(0x7f0000002440)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xfb3f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) setxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f00000020c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) [ 339.236861][ T4809] usb 3-1: USB disconnect, device number 47 [ 339.303435][T14319] loop5: detected capacity change from 264192 to 0 10:21:17 executing program 0: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) [ 339.347052][ T36] audit: type=1800 audit(1614075677.636:30): pid=14319 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="loop5" ino=5 res=0 errno=0 10:21:17 executing program 4: r0 = creat(&(0x7f0000002440)='./file0\x00', 0x0) r1 = creat(&(0x7f0000002440)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xfb3f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) setxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f00000020c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 10:21:17 executing program 3: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0xc0000, 0x0) 10:21:17 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000100)=ANY=[]) 10:21:17 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) preadv(r1, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/193, 0xc1}], 0x1, 0x0, 0x0) 10:21:17 executing program 5: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x14d7c2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000140)='./file0/file0\x00', 0x27ffd) [ 339.693139][T14342] new mount options do not match the existing superblock, will be ignored [ 339.714374][ T4809] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 339.748153][T14342] new mount options do not match the existing superblock, will be ignored [ 339.781092][T14348] loop5: detected capacity change from 264192 to 0 [ 339.802477][ T36] audit: type=1800 audit(1614075678.096:31): pid=14348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="loop5" ino=6 res=0 errno=0 [ 340.092344][ T4809] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.109646][ T4809] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 340.120944][ T4809] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 340.281785][ T4809] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.291045][ T4809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.299207][ T4809] usb 3-1: Product: syz [ 340.303483][ T4809] usb 3-1: Manufacturer: syz [ 340.308174][ T4809] usb 3-1: SerialNumber: syz [ 341.451882][ T4809] cdc_ncm 3-1:1.0: bind() failure [ 341.459832][ T4809] cdc_ncm 3-1:1.1: bind() failure 10:21:20 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00', r0) 10:21:20 executing program 3: openat$hwrng(0xffffffffffffff9c, 0x0, 0x18482, 0x0) 10:21:21 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) preadv(r1, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/193, 0xc1}], 0x1, 0x0, 0x0) 10:21:21 executing program 4: msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0xee00, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce}) 10:21:21 executing program 5: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x14d7c2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000140)='./file0/file0\x00', 0x27ffd) [ 342.670730][ T9619] usb 3-1: USB disconnect, device number 48 10:21:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000003900)={'batadv0\x00', @ifru_hwaddr=@broadcast}) 10:21:21 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x20082, 0x0) 10:21:21 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) preadv(r1, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/193, 0xc1}], 0x1, 0x0, 0x0) [ 342.775771][T14378] new mount options do not match the existing superblock, will be ignored [ 342.788420][T14380] loop5: detected capacity change from 264192 to 0 10:21:21 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000002080)={{0x77359400}}, 0x0) 10:21:21 executing program 3: pselect6(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0xf4]}, 0x8}) [ 342.847703][ T36] audit: type=1800 audit(1614075681.136:32): pid=14380 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="loop5" ino=7 res=0 errno=0 10:21:21 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000080)='4\x00', 0x2) [ 343.036974][T14398] new mount options do not match the existing superblock, will be ignored [ 343.222856][ T9619] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 343.611708][ T9619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.822443][ T9619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 343.831658][ T9619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.839723][ T9619] usb 3-1: Product: syz [ 343.845497][ T9619] usb 3-1: Manufacturer: syz [ 343.850305][ T9619] usb 3-1: SerialNumber: syz [ 344.541756][ T9619] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 344.547916][ T9619] cdc_ncm 3-1:1.0: bind() failure [ 344.569435][ T9619] cdc_ncm 3-1:1.1: bind() failure 10:21:24 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0xc020660b, 0x0) 10:21:24 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) 10:21:24 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x40085400, 0x400000) read$FUSE(r2, &(0x7f0000000000)={0x2020}, 0x2020) 10:21:24 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000300)={[{@check_int_print_mask={'check_int_print_mask', 0x3d, 0x7ff}}]}) 10:21:24 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) preadv(r1, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/193, 0xc1}], 0x1, 0x0, 0x0) [ 345.767534][ T9720] usb 3-1: USB disconnect, device number 49 [ 345.837604][T14425] new mount options do not match the existing superblock, will be ignored 10:21:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='/'], 0x48}}, 0x0) 10:21:24 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) read$FUSE(r0, 0x0, 0xf0ffffff7f0000) 10:21:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @l2tp={0x2, 0x0, @multicast2}, @ipx={0x4, 0x0, 0x0, "506df5d3a361"}, @l2}) 10:21:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x40085400, 0x400000) read$FUSE(r2, &(0x7f0000000000)={0x2020}, 0x2020) 10:21:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x10, 0x0, &(0x7f0000000040)) 10:21:24 executing program 3: io_setup(0x80d7, &(0x7f0000000000)=0x0) socket(0x1d, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) io_getevents(r0, 0xfffffffdfffffffa, 0x800000000000177, &(0x7f00000001c0)=[{}], &(0x7f00000000c0)={r1, r2+60000000}) pipe2(&(0x7f0000000440), 0x0) [ 346.175059][T14449] can: request_module (can-proto-0) failed. [ 346.191322][T14449] can: request_module (can-proto-0) failed. [ 346.271758][ T9720] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 346.662655][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.841836][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.850996][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.859988][ T9720] usb 3-1: Product: syz [ 346.864636][ T9720] usb 3-1: Manufacturer: syz [ 346.869229][ T9720] usb 3-1: SerialNumber: syz [ 347.561733][ T9720] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 347.568633][ T9720] cdc_ncm 3-1:1.0: bind() failure [ 347.587822][ T9720] cdc_ncm 3-1:1.1: bind() failure 10:21:27 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:27 executing program 5: pselect6(0x40, &(0x7f0000000180)={0x5}, 0x0, 0x0, 0x0, 0x0) 10:21:27 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) socketpair(0xf, 0x0, 0x0, &(0x7f00000002c0)) 10:21:27 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f8", 0x16}], 0x0, &(0x7f00000009c0)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x14d7c2, 0x0) truncate(&(0x7f0000000140)='./file0/file0\x00', 0x27ffd) 10:21:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000c00)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xe74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe6d, 0x5, "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"}]}]}, 0xec4}}, 0x0) 10:21:27 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000300)={[{@metadata_ratio={'metadata_ratio'}}]}) [ 348.866033][ T9720] usb 3-1: USB disconnect, device number 50 10:21:27 executing program 5: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x3098a5) 10:21:27 executing program 3: timer_create(0x6, &(0x7f0000000080)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 10:21:27 executing program 0: msgrcv(0x0, 0x0, 0x0, 0x0, 0x86f89ce68eb96eb3) [ 348.963185][T14481] loop4: detected capacity change from 264192 to 0 [ 348.996631][T14481] FAT-fs (loop4): bogus number of FAT sectors 10:21:27 executing program 1: geteuid() r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x14}, 0x14}}, 0x0) [ 349.072529][ T36] audit: type=1800 audit(1614075687.366:33): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=14205 res=0 errno=0 [ 349.094554][T14481] FAT-fs (loop4): Can't find a valid FAT filesystem 10:21:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000040)) [ 349.147148][T14481] loop4: detected capacity change from 264192 to 0 [ 349.174110][T14481] FAT-fs (loop4): bogus number of FAT sectors [ 349.180223][T14481] FAT-fs (loop4): Can't find a valid FAT filesystem 10:21:27 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x2, 0x2800) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x5452, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "697511b5d2e5bd3e0e2e3e454d3e210e449dfe5df95b9664cb58e2e23779fe50"}) [ 349.408021][ T9720] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 349.791714][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.981765][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 349.991769][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.000242][ T9720] usb 3-1: Product: syz [ 350.004599][ T9720] usb 3-1: Manufacturer: syz [ 350.009188][ T9720] usb 3-1: SerialNumber: syz [ 350.722126][ T9720] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 350.729057][ T9720] cdc_ncm 3-1:1.0: bind() failure [ 350.739104][ T9720] cdc_ncm 3-1:1.1: bind() failure 10:21:30 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:30 executing program 4: msgctl$IPC_SET(0x0, 0x5, 0x0) 10:21:30 executing program 3: accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x100000) 10:21:30 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 10:21:30 executing program 0: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/btrfs-control\x00'}}]}) 10:21:30 executing program 5: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 351.970257][ T2927] usb 3-1: USB disconnect, device number 51 10:21:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x60402) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 10:21:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x40085400, 0x400000) 10:21:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0xc0189436, 0x0) 10:21:30 executing program 3: syz_open_dev$ndb(&(0x7f0000000840)='/dev/nbd#\x00', 0x0, 0x0) 10:21:30 executing program 0: io_setup(0x8000, &(0x7f0000000000)=0x0) io_destroy(r0) 10:21:30 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000080)={0x0, 0x5, "2b338ccc14"}) [ 352.185658][T14543] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.491701][ T2927] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 352.852460][ T2927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.021636][ T2927] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.032805][ T2927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.040831][ T2927] usb 3-1: Product: syz [ 353.046137][ T2927] usb 3-1: Manufacturer: syz [ 353.050821][ T2927] usb 3-1: SerialNumber: syz [ 353.752019][ T2927] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 353.758965][ T2927] cdc_ncm 3-1:1.0: bind() failure [ 353.778174][ T2927] cdc_ncm 3-1:1.1: bind() failure 10:21:33 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:33 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@check_int_print_mask={'check_int_print_mask', 0x3d, 0x7ff}}]}) 10:21:33 executing program 4: syz_open_dev$ndb(&(0x7f0000000640)='/dev/nbd#\x00', 0x0, 0x0) 10:21:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000640)={0x1, 0x0, 0x1b, 0x19, 0x10b, &(0x7f0000000240)}) 10:21:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x8, 0x0, &(0x7f0000000040)) 10:21:33 executing program 0: creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000100)=ANY=[]) [ 355.079975][ T9619] usb 3-1: USB disconnect, device number 52 10:21:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0xa, 0x0, &(0x7f0000000040)) 10:21:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0xfffffffffffffeff) 10:21:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x22, 0x0, &(0x7f0000000040)) 10:21:33 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2003, 0x0) 10:21:33 executing program 0: creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000100)=ANY=[]) 10:21:33 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 355.493417][T14602] block nbd1: shutting down sockets [ 355.571691][T14602] block nbd1: Device being setup by another task [ 355.579097][T14607] block nbd1: shutting down sockets [ 355.623569][ T9619] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 356.001689][ T9619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.181828][ T9619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.190990][ T9619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.200107][ T9619] usb 3-1: Product: syz [ 356.204735][ T9619] usb 3-1: Manufacturer: syz [ 356.209337][ T9619] usb 3-1: SerialNumber: syz [ 356.912206][ T9619] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 356.918484][ T9619] cdc_ncm 3-1:1.0: bind() failure [ 356.937944][ T9619] cdc_ncm 3-1:1.1: bind() failure 10:21:36 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:36 executing program 4: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{0x0}], 0x2, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r2, 0x1000) lseek(0xffffffffffffffff, 0x0, 0x2) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)) sendfile(r3, r0, 0x0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r4, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[], 0x68}}, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffa) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0xc1, 0x0, 0x0, 0x60, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x8}, 0x1004, 0xa4a9, 0x9, 0x8, 0x9, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r6 = dup(0xffffffffffffffff) open(&(0x7f0000000140)='./file1\x00', 0x2181c0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:21:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 10:21:36 executing program 5: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x141, 0x0) 10:21:36 executing program 0: creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000100)=ANY=[]) 10:21:36 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x81, 0x0) [ 358.193870][ T4809] usb 3-1: USB disconnect, device number 53 10:21:36 executing program 3: accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 10:21:36 executing program 0: creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000100)=ANY=[]) 10:21:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8903, &(0x7f0000003900)={'batadv0\x00', @ifru_hwaddr=@broadcast}) [ 358.303037][T14632] loop4: detected capacity change from 264192 to 0 10:21:36 executing program 1: select(0x8, 0x0, &(0x7f0000000280), &(0x7f00000002c0)={0x4b7dc621}, &(0x7f0000000300)={0x77359400}) [ 358.397259][T14632] FAT-fs (loop4): bogus number of reserved sectors 10:21:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x3, 0x0, &(0x7f0000000040)) [ 358.443089][ T36] audit: type=1804 audit(1614075696.736:34): pid=14642 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir957775624/syzkaller.bfKXxZ/214/file1/bus" dev="sda1" ino=14218 res=1 errno=0 [ 358.490956][T14632] FAT-fs (loop4): Can't find a valid FAT filesystem 10:21:36 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @rc, @l2tp={0x2, 0x0, @broadcast}, @ipx={0x4, 0x0, 0x0, "ad5355c85e2b"}}) [ 358.610143][ T36] audit: type=1804 audit(1614075696.796:35): pid=14646 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir957775624/syzkaller.bfKXxZ/214/file1/bus" dev="sda1" ino=14218 res=1 errno=0 [ 358.716644][T14632] loop4: detected capacity change from 264192 to 0 [ 358.726452][T14632] FAT-fs (loop4): bogus number of reserved sectors [ 358.733315][ T4809] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 358.744549][T14632] FAT-fs (loop4): Can't find a valid FAT filesystem [ 359.101800][ T4809] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.272019][ T4809] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 359.283789][ T4809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.293115][ T4809] usb 3-1: Product: syz [ 359.297627][ T4809] usb 3-1: Manufacturer: syz [ 359.303708][ T4809] usb 3-1: SerialNumber: syz [ 360.011747][ T4809] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 360.018136][ T4809] cdc_ncm 3-1:1.0: bind() failure [ 360.038434][ T4809] cdc_ncm 3-1:1.1: bind() failure 10:21:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000800)) 10:21:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x13, 0x0, &(0x7f0000000040)) 10:21:39 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x5452, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "697511b5d2e5bd3e0e2e3e454d3e210e449dfe5df95b9664cb58e2e23779fe50"}) 10:21:39 executing program 0: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000600)=[{0x0, 0x0, 0x200000}], 0x0, &(0x7f00000006c0)={[], [{@func={'func', 0x3d, 'PATH_CHECK'}}]}) 10:21:39 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:39 executing program 4: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{0x0}], 0x2, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r2, 0x1000) lseek(0xffffffffffffffff, 0x0, 0x2) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)) sendfile(r3, r0, 0x0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r4, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[], 0x68}}, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffa) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0xc1, 0x0, 0x0, 0x60, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x8}, 0x1004, 0xa4a9, 0x9, 0x8, 0x9, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r6 = dup(0xffffffffffffffff) open(&(0x7f0000000140)='./file1\x00', 0x2181c0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 361.285950][ T19] usb 3-1: USB disconnect, device number 54 10:21:39 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) [ 361.343836][T14694] loop4: detected capacity change from 264192 to 0 [ 361.379402][T14694] FAT-fs (loop4): bogus number of reserved sectors 10:21:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000080)) 10:21:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x894c, 0x0) [ 361.399492][T14694] FAT-fs (loop4): Can't find a valid FAT filesystem 10:21:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) [ 361.488316][ T36] audit: type=1804 audit(1614075699.776:36): pid=14694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir957775624/syzkaller.bfKXxZ/215/file1/bus" dev="sda1" ino=14210 res=1 errno=0 10:21:39 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) [ 361.572689][ T36] audit: type=1804 audit(1614075699.866:37): pid=14715 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir957775624/syzkaller.bfKXxZ/215/file1/bus" dev="sda1" ino=14210 res=1 errno=0 10:21:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000040)) 10:21:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @l2tp={0x2, 0x0, @multicast2}, @ipx={0x4, 0x0, 0x0, "506df5d3a361"}, @l2, 0xfff7}) 10:21:40 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x3, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000780)="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", 0x1000, 0x28, 0x0, 0x2, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="037d56fc415f923ba6b6f745b0bd5c92aacf1ae493bff23647ed5cc24351fa0dc4394078ae63cc6660bc75aa", 0x2c, 0x80, 0x0, 0x2, r2}]) 10:21:40 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 10:21:40 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) socket$nl_audit(0x10, 0x3, 0x9) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 361.807700][T14694] syz-executor.4 (14694) used greatest stack depth: 22800 bytes left [ 361.816256][ T19] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 362.026486][T14744] block nbd5: shutting down sockets [ 362.095122][ T2037] block nbd5: Receive control failed (result -32) [ 362.099358][T14744] block nbd5: shutting down sockets [ 362.201678][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.371797][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.381216][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.390201][ T19] usb 3-1: Product: syz [ 362.394493][ T19] usb 3-1: Manufacturer: syz [ 362.399261][ T19] usb 3-1: SerialNumber: syz [ 363.101696][ T19] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 363.101775][ T19] cdc_ncm 3-1:1.0: bind() failure [ 363.126543][ T19] cdc_ncm 3-1:1.1: bind() failure 10:21:42 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:42 executing program 4: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{0x0}], 0x2, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r2, 0x1000) lseek(0xffffffffffffffff, 0x0, 0x2) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)) sendfile(r3, r0, 0x0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r4, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[], 0x68}}, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffa) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0xc1, 0x0, 0x0, 0x60, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x8}, 0x1004, 0xa4a9, 0x9, 0x8, 0x9, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r6 = dup(0xffffffffffffffff) open(&(0x7f0000000140)='./file1\x00', 0x2181c0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:21:42 executing program 3: syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[{&(0x7f00000000c0)="af", 0x1}, {&(0x7f0000000140)="d2", 0x1}, {&(0x7f00000002c0)='v', 0x1}, {&(0x7f0000000440)="0f", 0x1}], 0x0, 0x0) 10:21:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x10e, 0x0, 0x0, 0x0) 10:21:42 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 10:21:42 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) socket$nl_audit(0x10, 0x3, 0x9) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 364.376614][ T19] usb 3-1: USB disconnect, device number 55 10:21:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x1a, 0x0, &(0x7f0000000040)) 10:21:42 executing program 1: socketpair(0x10, 0x0, 0x0, &(0x7f0000000a40)) [ 364.450319][T14771] loop4: detected capacity change from 264192 to 0 [ 364.475150][T14771] FAT-fs (loop4): bogus number of reserved sectors [ 364.483872][T14771] FAT-fs (loop4): Can't find a valid FAT filesystem 10:21:42 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tpin6, 0x80, &(0x7f0000000140), 0x1000000000000018, &(0x7f0000000080)=""/77, 0x53}, 0x0) 10:21:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000100)=ANY=[]) [ 364.601875][T14791] block nbd5: shutting down sockets [ 364.608427][ T36] audit: type=1804 audit(1614075702.896:38): pid=14771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir957775624/syzkaller.bfKXxZ/216/file1/bus" dev="sda1" ino=14225 res=1 errno=0 10:21:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xfffffffc}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 10:21:43 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) socket$nl_audit(0x10, 0x3, 0x9) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 364.680377][ T36] audit: type=1804 audit(1614075702.966:39): pid=14785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir957775624/syzkaller.bfKXxZ/216/file1/bus" dev="sda1" ino=14225 res=1 errno=0 [ 364.756488][T14800] sd 0:0:1:0: device reset [ 364.818331][T14805] sd 0:0:1:0: device reset [ 364.966960][ T19] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 365.003217][T14815] block nbd5: shutting down sockets [ 365.381988][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.592126][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 365.601324][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.610421][ T19] usb 3-1: Product: syz [ 365.616259][ T19] usb 3-1: Manufacturer: syz [ 365.621088][ T19] usb 3-1: SerialNumber: syz [ 366.301756][ T19] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 366.307912][ T19] cdc_ncm 3-1:1.0: bind() failure [ 366.328619][ T19] cdc_ncm 3-1:1.1: bind() failure 10:21:45 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:45 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) 10:21:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8981, 0x0) 10:21:45 executing program 4: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{0x0}], 0x2, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r2, 0x1000) lseek(0xffffffffffffffff, 0x0, 0x2) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)) sendfile(r3, r0, 0x0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r4, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[], 0x68}}, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffa) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0xc1, 0x0, 0x0, 0x60, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x8}, 0x1004, 0xa4a9, 0x9, 0x8, 0x9, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r6 = dup(0xffffffffffffffff) open(&(0x7f0000000140)='./file1\x00', 0x2181c0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:21:45 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) socket$nl_audit(0x10, 0x3, 0x9) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 10:21:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xfffffffc}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) [ 367.523074][ T9619] usb 3-1: USB disconnect, device number 56 10:21:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xfffffffc}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) [ 367.616848][T14843] loop4: detected capacity change from 264192 to 0 10:21:45 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000140)) timer_gettime(0x0, &(0x7f0000000640)) [ 367.709417][T14843] FAT-fs (loop4): bogus number of reserved sectors [ 367.714398][T14859] block nbd5: shutting down sockets [ 367.746084][ T36] audit: type=1804 audit(1614075706.036:40): pid=14860 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir957775624/syzkaller.bfKXxZ/217/file1/bus" dev="sda1" ino=14211 res=1 errno=0 10:21:46 executing program 1: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000100)={0x7}, 0x7) write$P9_RREAD(r0, &(0x7f00000005c0)=ANY=[], 0x1000) [ 367.824090][T14843] FAT-fs (loop4): Can't find a valid FAT filesystem 10:21:46 executing program 5: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_ifreq(r1, 0x5452, &(0x7f0000003900)={'batadv0\x00', @ifru_hwaddr=@broadcast}) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000000)={0x78}, 0x78) [ 367.917783][ T36] audit: type=1804 audit(1614075706.166:41): pid=14864 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir957775624/syzkaller.bfKXxZ/217/file1/bus" dev="sda1" ino=14211 res=1 errno=0 10:21:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x3b, 0x0, &(0x7f0000000040)) [ 368.021686][ T9619] usb 3-1: new high-speed USB device number 57 using dummy_hcd 10:21:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000180)="ed41000000080000d3f4655fd3f4655fd3f4655f0000000000000400", 0x1c, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000980)="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", 0x2000, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)={0x18, 0xffffffffffffffda, 0x0, {0x3013}}, &(0x7f0000002a00)={0x28, 0xfffffffffffffff5, 0x64a, {{0x0, 0x100000001}}}, &(0x7f0000002a40)={0x60, 0x0, 0xffff, {{0x2, 0x4b, 0x0, 0x20, 0x7}}}, 0x0, 0x0, &(0x7f0000002b40)={0x20, 0x0, 0x6, {0x0, 0xf}}, 0x0, &(0x7f0000002c80)={0x90, 0x0, 0x9, {0x4, 0x1, 0x2, 0xfffffffffffffffe, 0x8001, 0x1, {0x1, 0x0, 0x0, 0x7, 0x0, 0xea, 0x0, 0x6, 0x0, 0xa000, 0x7f}}}, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="c0000000f5ffffff018000000000000000000000000000000200000000000000030d0000000000000000000000006795315b9f2c920e081acf6d58cc4a0000000000000705000000000000000000000000000000000000ffffffff000000000300000000", @ANYRES32=0x0, @ANYBLOB="0600000001ff64db00405d7d23215d282d5e1e2f845defd0f5235fd2845e7d33217b5c293a232b242c5b000000"], &(0x7f0000003000)={0xa0, 0x0, 0x81, {{0x1, 0x0, 0x8, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000, 0x6b, 0xee01, 0xee01, 0x3}}}}, &(0x7f00000030c0)={0x20, 0xfffffffffffffffe, 0xffffffff, {0x0, 0x0, 0x0, 0x1}}}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="1f5583624999c40180a705afd2bc33c719cf136ec7b4f16248da42428721c47b4435641f0733413a4d1653282390d1e499b0366031a8e8b634319192a0e4", 0x3e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00, 0xffffffffffffffff}}}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 368.290094][T14884] ptrace attach of "/root/syz-executor.1"[14883] was attempted by "/root/syz-executor.1"[14884] [ 368.402297][ T9619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.613695][ T9619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.623545][ T9619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.633471][ T9619] usb 3-1: Product: syz [ 368.637646][ T9619] usb 3-1: Manufacturer: syz [ 368.643019][ T9619] usb 3-1: SerialNumber: syz [ 369.321615][ T9619] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 369.328005][ T9619] cdc_ncm 3-1:1.0: bind() failure [ 369.346229][ T9619] cdc_ncm 3-1:1.1: bind() failure 10:21:48 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:48 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 10:21:48 executing program 1: timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000140)) timer_gettime(0x0, &(0x7f0000000640)) 10:21:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x7, 0x0, &(0x7f0000000040)) 10:21:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xfffffffc}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 10:21:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xfffffffc}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) [ 370.599408][ T2927] usb 3-1: USB disconnect, device number 57 10:21:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, &(0x7f0000000040)) 10:21:49 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, 0x0, 0x2, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r0, 0x0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020902000d"], 0x68}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r3 = dup(0xffffffffffffffff) open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:21:49 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) 10:21:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5500000018007f5f00fe01b2a4a2800001020b00000a000f003500281014000000190015407fffffff0022de1338d54400009b84136ef75afb83de4411001600c43ab82200005307f23f00000000000001f0ffff00", 0x55}], 0x1}, 0x0) [ 370.928301][ T36] audit: type=1804 audit(1614075709.216:42): pid=14925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir594642117/syzkaller.UCMfdA/244/file1/bus" dev="sda1" ino=14226 res=1 errno=0 10:21:49 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40800, 0x0) 10:21:49 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7e, 0x1110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xa00d}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000100)=ANY=[]) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) [ 371.102048][ T2927] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 371.229354][T14941] sd 0:0:1:0: device reset [ 371.279956][T14941] sd 0:0:1:0: device reset [ 371.501851][ T2927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.701844][ T2927] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 371.711381][ T2927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.721015][ T2927] usb 3-1: Product: syz [ 371.725710][ T2927] usb 3-1: Manufacturer: syz [ 371.730680][ T2927] usb 3-1: SerialNumber: syz [ 372.441758][ T2927] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 372.448589][ T2927] cdc_ncm 3-1:1.0: bind() failure [ 372.469329][ T2927] cdc_ncm 3-1:1.1: bind() failure 10:21:51 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:51 executing program 4: pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x84000) ioctl$sock_ifreq(r0, 0x5450, 0x0) 10:21:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xfffffffc}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 10:21:51 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, 0x0, 0x2, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r0, 0x0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020902000d"], 0x68}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r3 = dup(0xffffffffffffffff) open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:21:51 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 10:21:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xfffffffc}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) [ 373.679394][ T9619] usb 3-1: USB disconnect, device number 58 10:21:52 executing program 5: pselect6(0x40, &(0x7f0000000180)={0x5}, &(0x7f00000001c0), &(0x7f0000000200)={0x3}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x100000000]}, 0x8}) [ 373.759382][ T36] audit: type=1804 audit(1614075712.046:43): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir594642117/syzkaller.UCMfdA/245/file1/bus" dev="sda1" ino=14223 res=1 errno=0 10:21:52 executing program 4: socketpair(0x2, 0x0, 0x800, &(0x7f0000000100)) 10:21:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xfffffffc}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 10:21:52 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000001400)=[{&(0x7f0000000280)="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", 0xff9, 0x8}, {&(0x7f0000001280)="ca", 0x1, 0x3b32}], 0x0, 0x0) 10:21:52 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, 0x0, 0x2, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r0, 0x0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020902000d"], 0x68}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r3 = dup(0xffffffffffffffff) open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 374.181666][ T9619] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 374.207028][T14999] loop4: detected capacity change from 59 to 0 10:21:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x4, 0x0, &(0x7f0000000040)) [ 374.334636][ T36] audit: type=1804 audit(1614075712.626:44): pid=15006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir594642117/syzkaller.UCMfdA/246/file1/bus" dev="sda1" ino=14223 res=1 errno=0 [ 374.392304][T14999] loop4: detected capacity change from 59 to 0 [ 374.542749][ T9619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.741692][ T9619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.750768][ T9619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.759656][ T9619] usb 3-1: Product: syz [ 374.764251][ T9619] usb 3-1: Manufacturer: syz [ 374.769028][ T9619] usb 3-1: SerialNumber: syz [ 375.461735][ T9619] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 375.468089][ T9619] cdc_ncm 3-1:1.0: bind() failure [ 375.482501][ T9619] cdc_ncm 3-1:1.1: bind() failure 10:21:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0xc0045878, 0x0) 10:21:55 executing program 0: syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xfe12, 0x0) 10:21:55 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:55 executing program 4: msgctl$IPC_SET(0x0, 0xd, &(0x7f00000003c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}}) 10:21:55 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, 0x0, 0x2, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r0, 0x0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020902000d"], 0x68}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r3 = dup(0xffffffffffffffff) open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:21:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xfffffffc}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 376.786316][ T19] usb 3-1: USB disconnect, device number 59 10:21:55 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) fsync(r0) 10:21:55 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) pwrite64(r2, &(0x7f0000000140)="9e", 0x1, 0x10001) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffff7f0800000500, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a000000}]) 10:21:55 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x5, &(0x7f0000000600)=[{&(0x7f00000000c0)="af7e51bcbf2e27e66f89174d0af21824961670df6e18082783e4e05d92408aaf7fc173cee79965b7a5e4adf36b2718f010dcd58397d79abc3b91940df5e83bcef0", 0x41, 0x6}, {&(0x7f0000000140)="d237ddb725dbc7fa9b03193a47e37c6d6203eabec3759278bae8b1a3ca96020b50bd38a50bf2cbf2799d263f4bb1c196442568973b7f8747c525429aec66a574fc28ded0dfb25973fd9cc2bef8eab8d11b57bc21da9ab561e21898decee0b765e8f89db4e37eb074fe46fc8f2880dc548db0829dfaa67b09998887982febba163de94e225daf5bbf19c3a5efc629674382c01b0eb78d42dd9fc7d394cc59f13f38808365b481a974b413b5e041bc1f6388db75d52e8f36e3c57ac5b8be54a8bf6e0670783f819ef6b0188bf1aaf4c1eb7ea295e2da617eb1c87f47db21a7db60f5e880", 0xe3, 0x2}, {&(0x7f0000000240)="323c099ecbea0e745501f834363b4e7543ae747e97a4fc9bb22da887f0553a6e46f4237105f6d9a2df0a426c4416a743ae5aa5040bec1cfb59a6c2f8784bf1e668d6cd9230d07b79b7baca47caf356cc69", 0x51, 0x200000}, {&(0x7f00000002c0)="76755348a6341ebf43a946c5c4e3d142f48275627f1450f6317dc3f83b49da467b138c8fbbd6360f1fa2015a688d453d4bdb1590d1ab000a2ada10c6d79aa219f55c306aaa00bb29695bcd5deab8b4c436ceda50e087807158d8982d24772c2d387ea61772774ebbeb18c4d9f783c59436e30f353f2c8ccb9efdfefe5c059201f02fa7ba8561db4bc0e7bb9bee1f4222e64c56e09597cd227f213bd6", 0x9c, 0x9}, {&(0x7f0000000440)="0f", 0x1}], 0x28000, &(0x7f00000006c0)={[{@space_cache_v2='space_cache=v2'}, {@nodiscard='nodiscard'}], [{@func={'func', 0x3d, 'PATH_CHECK'}}]}) [ 376.885543][ T36] audit: type=1804 audit(1614075715.176:45): pid=15045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir594642117/syzkaller.UCMfdA/247/file1/bus" dev="sda1" ino=14226 res=1 errno=0 10:21:55 executing program 0: io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)) 10:21:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xfffffffc}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 377.058856][T15066] loop4: detected capacity change from 8192 to 0 [ 377.138584][T15066] loop4: detected capacity change from 8192 to 0 10:21:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00kf{'], 0x34}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00', r0) 10:21:55 executing program 4: semget(0x2, 0x0, 0x405) 10:21:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vxcan1\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r1, &(0x7f00000017c0), 0x3ca, 0x0, 0x0) [ 377.311744][ T19] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 377.681693][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.772972][ T3221] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.779382][ T3221] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.851915][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.861305][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.870169][ T19] usb 3-1: Product: syz [ 377.875694][ T19] usb 3-1: Manufacturer: syz [ 377.880411][ T19] usb 3-1: SerialNumber: syz [ 378.581816][ T19] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 378.587999][ T19] cdc_ncm 3-1:1.0: bind() failure [ 378.608030][ T19] cdc_ncm 3-1:1.1: bind() failure 10:21:58 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:21:58 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) pwrite64(r2, &(0x7f0000000140)="9e", 0x1, 0x10001) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffff7f0800000500, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a000000}]) 10:21:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000002b00)=0x5, 0x4) 10:21:58 executing program 4: syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[{&(0x7f00000000c0)="af", 0x1}, {&(0x7f0000000140)="d2", 0x1}, {&(0x7f0000000240)='2', 0x1}], 0x0, 0x0) 10:21:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x2c, 0x0, &(0x7f0000000040)) 10:21:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xfffffffc}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 379.855795][ T9720] usb 3-1: USB disconnect, device number 60 10:21:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000740), &(0x7f0000000780)=0x4) 10:21:58 executing program 0: inotify_add_watch(0xffffffffffffffff, 0x0, 0x8000000) 10:21:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00002f5ff8)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 10:21:58 executing program 4: select(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x6}, 0x0, &(0x7f0000000300)={0x77359400}) 10:21:58 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f00000005c0)=ANY=[], 0x1000) 10:21:58 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/mnt\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) [ 380.361727][ T9720] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 380.772179][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.961836][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 380.971073][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.980096][ T9720] usb 3-1: Product: syz [ 380.984637][ T9720] usb 3-1: Manufacturer: syz [ 380.989225][ T9720] usb 3-1: SerialNumber: syz [ 381.711755][ T9720] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 381.717904][ T9720] cdc_ncm 3-1:1.0: bind() failure [ 381.728813][ T9720] cdc_ncm 3-1:1.1: bind() failure 10:22:01 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:01 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40002043) 10:22:01 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x6001, 0x0) 10:22:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x9, 0x0, &(0x7f0000000040)) 10:22:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x5, 0x0, &(0x7f0000000040)) 10:22:01 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) pwrite64(r2, &(0x7f0000000140)="9e", 0x1, 0x10001) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffff7f0800000500, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a000000}]) [ 382.963453][ T9720] usb 3-1: USB disconnect, device number 61 10:22:01 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x0, 0x141002) write$FUSE_ENTRY(r0, 0x0, 0x0) 10:22:01 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', 0x0}) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) 10:22:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000040)=0x1) 10:22:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000840)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000480)) 10:22:01 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 10:22:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0), 0x0) poll(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) [ 383.462631][ T9720] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 383.861711][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.032576][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.042190][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.050538][ T9720] usb 3-1: Product: syz [ 384.056691][ T9720] usb 3-1: Manufacturer: syz [ 384.061293][ T9720] usb 3-1: SerialNumber: syz [ 384.751670][ T9720] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 384.758010][ T9720] cdc_ncm 3-1:1.0: bind() failure [ 384.768515][ T9720] cdc_ncm 3-1:1.1: bind() failure 10:22:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000002b00), 0x4) 10:22:04 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) pwrite64(r2, &(0x7f0000000140)="9e", 0x1, 0x10001) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffff7f0800000500, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a000000}]) 10:22:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @l2tp={0x2, 0x0, @multicast2}, @ipx={0x4, 0x0, 0x0, "506df5d3a361"}, @l2, 0xfff7, 0x0, 0x0, 0x0, 0xf801}) 10:22:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000640)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:04 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:04 executing program 1: msgctl$IPC_SET(0x0, 0xc, &(0x7f00000003c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}}) [ 386.056152][ T4809] usb 3-1: USB disconnect, device number 62 10:22:04 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001d40), 0x8, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 10:22:04 executing program 0: ioctl$CHAR_RAW_PG(0xffffffffffffffff, 0x1269, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x80000001) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000001, 0xfffffffffffffa01}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) 10:22:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0xe, 0x0, &(0x7f0000000040)) 10:22:04 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200040, 0x0) fcntl$addseals(r0, 0x409, 0x0) 10:22:04 executing program 4: socketpair(0xf, 0x3, 0x0, &(0x7f0000000140)) 10:22:04 executing program 5: pselect6(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0xf4]}, 0x8}) 10:22:04 executing program 1: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a000000}]) [ 386.294143][T15240] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:22:04 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="f098cb7deca7", @multicast1, @broadcast, @broadcast}}}}, 0x0) 10:22:04 executing program 5: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) inotify_add_watch(r0, 0x0, 0x291) 10:22:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) [ 386.581836][ T4809] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 386.961842][ T4809] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.161809][ T4809] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 387.171861][ T4809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.180007][ T4809] usb 3-1: Product: syz [ 387.185893][ T4809] usb 3-1: Manufacturer: syz [ 387.190499][ T4809] usb 3-1: SerialNumber: syz [ 387.871747][ T4809] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 387.878549][ T4809] cdc_ncm 3-1:1.0: bind() failure [ 387.890580][ T4809] cdc_ncm 3-1:1.1: bind() failure 10:22:07 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x300, 0x0, 0x0, 0x0) 10:22:07 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000001d00)) 10:22:07 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 10:22:07 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000300)) 10:22:07 executing program 0: ioctl$CHAR_RAW_PG(0xffffffffffffffff, 0x1269, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x80000001) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000001, 0xfffffffffffffa01}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) [ 389.150992][ T9720] usb 3-1: USB disconnect, device number 63 10:22:07 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) 10:22:07 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) 10:22:07 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) 10:22:07 executing program 5: mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) 10:22:07 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x9b57a17480211423, 0x0) 10:22:07 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x59}}) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000300)='~', 0x1}], 0x3) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) [ 389.603445][T15308] ptrace attach of "/root/syz-executor.4"[15307] was attempted by "/root/syz-executor.4"[15308] [ 389.631746][ T9720] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 390.011695][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.181903][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.191429][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.200821][ T9720] usb 3-1: Product: syz [ 390.205606][ T9720] usb 3-1: Manufacturer: syz [ 390.210374][ T9720] usb 3-1: SerialNumber: syz [ 391.351782][ T9720] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 391.358673][ T9720] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 391.375191][ T9720] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 391.795967][ T9720] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 391.817258][ T9720] usb 3-1: USB disconnect, device number 64 [ 391.831079][ T9720] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:22:10 executing program 3: sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0xf7a29563fe652234) 10:22:10 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0xc0189436, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "697511b5d2e5bd3e0e2e3e454d3e210e449dfe5df95b9664cb58e2e23779fe50"}) 10:22:10 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x2, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r2, 0x1000) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)) sendfile(r3, r0, 0x0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r4, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020902000d"], 0x68}}, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffa) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0xc1, 0x0, 0x0, 0x60, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x8}, 0x1004, 0xa4a9, 0x9, 0x8, 0x9, 0x5, 0xd2}, 0x0, 0x8, 0xffffffffffffffff, 0x9) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r6 = dup(0xffffffffffffffff) open(&(0x7f0000000140)='./file1\x00', 0x2181c0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:22:10 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000840)='/dev/nbd#\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 10:22:10 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:10 executing program 0: ioctl$CHAR_RAW_PG(0xffffffffffffffff, 0x1269, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x80000001) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000001, 0xfffffffffffffa01}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) 10:22:10 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @xdp, @rc={0x1f, @fixed}}) 10:22:10 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x8208200) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000140)) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) getitimer(0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) getpgid(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0xf9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}, 0x40, 0x9, 0x0, 0x0, 0x5, 0x1}, r3, 0xe, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r2, 0x200000) pread64(r2, &(0x7f0000000000)=""/42, 0xfffffdef, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) pipe(0x0) [ 392.362584][ T36] audit: type=1804 audit(1614075730.646:46): pid=15357 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir594642117/syzkaller.UCMfdA/261/bus" dev="sda1" ino=14225 res=1 errno=0 10:22:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000840)='/dev/nbd#\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 10:22:10 executing program 5: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 392.528712][ T36] audit: type=1804 audit(1614075730.766:47): pid=15369 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir594642117/syzkaller.UCMfdA/261/bus" dev="sda1" ino=14225 res=1 errno=0 10:22:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x19, 0x0, &(0x7f0000000040)) [ 392.631843][ T4809] usb 3-1: new high-speed USB device number 65 using dummy_hcd 10:22:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480)='NLBL_MGMT\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}}, 0x0) 10:22:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2fdf"], 0x48}}, 0x0) [ 392.722946][ T36] audit: type=1804 audit(1614075731.006:48): pid=15382 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir594642117/syzkaller.UCMfdA/261/bus" dev="sda1" ino=14225 res=1 errno=0 10:22:11 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x2, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r2, 0x1000) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)) sendfile(r3, r0, 0x0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r4, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020902000d"], 0x68}}, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffa) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0xc1, 0x0, 0x0, 0x60, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x8}, 0x1004, 0xa4a9, 0x9, 0x8, 0x9, 0x5, 0xd2}, 0x0, 0x8, 0xffffffffffffffff, 0x9) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r6 = dup(0xffffffffffffffff) open(&(0x7f0000000140)='./file1\x00', 0x2181c0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:22:11 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x122, 0x0) 10:22:11 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10140, 0x0) [ 392.949604][ T36] audit: type=1804 audit(1614075731.056:49): pid=15369 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir594642117/syzkaller.UCMfdA/261/bus" dev="sda1" ino=14225 res=1 errno=0 [ 393.032303][ T4809] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.061451][ T36] audit: type=1804 audit(1614075731.286:50): pid=15400 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir594642117/syzkaller.UCMfdA/262/bus" dev="sda1" ino=14211 res=1 errno=0 [ 393.150112][ T36] audit: type=1804 audit(1614075731.436:51): pid=15411 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir594642117/syzkaller.UCMfdA/262/bus" dev="sda1" ino=14211 res=1 errno=0 [ 393.281685][ T4809] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 393.291715][ T4809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.299720][ T4809] usb 3-1: Product: syz [ 393.304777][ T4809] usb 3-1: Manufacturer: syz [ 393.309823][ T4809] usb 3-1: SerialNumber: syz [ 394.461819][ T4809] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 394.468437][ T4809] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 394.484854][ T4809] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 394.905335][ T4809] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 394.932496][ T4809] usb 3-1: USB disconnect, device number 65 [ 394.938948][ T4809] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:22:13 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:13 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x7f, 0x182) sendfile(r0, r0, 0x0, 0x24000000) 10:22:13 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)=@abs, 0x6e) 10:22:13 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) clock_getres(0x6, &(0x7f0000000480)) 10:22:13 executing program 0: ioctl$CHAR_RAW_PG(0xffffffffffffffff, 0x1269, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x80000001) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x80000001, 0xfffffffffffffa01}, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) 10:22:13 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x2, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r2, 0x1000) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)) sendfile(r3, r0, 0x0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r4, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020902000d"], 0x68}}, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffa) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0xc1, 0x0, 0x0, 0x60, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x8}, 0x1004, 0xa4a9, 0x9, 0x8, 0x9, 0x5, 0xd2}, 0x0, 0x8, 0xffffffffffffffff, 0x9) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r6 = dup(0xffffffffffffffff) open(&(0x7f0000000140)='./file1\x00', 0x2181c0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:22:13 executing program 5: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 10:22:13 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0)='ethtool\x00', 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) [ 395.486211][ T36] audit: type=1804 audit(1614075733.776:52): pid=15453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir594642117/syzkaller.UCMfdA/263/bus" dev="sda1" ino=14225 res=1 errno=0 10:22:13 executing program 4: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) 10:22:14 executing program 5: socketpair(0x1, 0x0, 0x0, &(0x7f0000000080)) [ 395.658628][ T36] audit: type=1804 audit(1614075733.946:53): pid=15468 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir594642117/syzkaller.UCMfdA/263/bus" dev="sda1" ino=14225 res=1 errno=0 10:22:14 executing program 3: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000780)="0148cf4782ad1d541b7cb2d4f7ae3d647c25b4506ebb36c945be85cb6770f1e886b9bc1f99267288dbc37695d3be724ce60b2569ed2a5fd30acebdb442bd13d8389d0ae3d47ceceb45ca6b135aa0cca04f4c135236e82e9b38655b04d819c4c2430f2882fc56bf746c065dd8cb14cf25bf31334b48a2999c48cb19c26ab9a0760a9cbf5a208f5f4756", 0x89}]) 10:22:14 executing program 4: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000780)="0148cf4782ad1d541b", 0x9}]) [ 395.741771][ T9720] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 396.112241][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.281746][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.291799][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.300112][ T9720] usb 3-1: Product: syz [ 396.305120][ T9720] usb 3-1: Manufacturer: syz [ 396.309735][ T9720] usb 3-1: SerialNumber: syz [ 397.462363][ T9720] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 397.468866][ T9720] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 397.486336][ T9720] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 397.905190][ T9720] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 397.925759][ T9720] usb 3-1: USB disconnect, device number 66 [ 397.951158][ T9720] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:22:16 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:16 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x2, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r2, 0x1000) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)) sendfile(r3, r0, 0x0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r4, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020902000d"], 0x68}}, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffa) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0xc1, 0x0, 0x0, 0x60, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x8}, 0x1004, 0xa4a9, 0x9, 0x8, 0x9, 0x5, 0xd2}, 0x0, 0x8, 0xffffffffffffffff, 0x9) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r6 = dup(0xffffffffffffffff) open(&(0x7f0000000140)='./file1\x00', 0x2181c0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:22:16 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 10:22:16 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 10:22:16 executing program 4: r0 = inotify_init1(0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x5) 10:22:16 executing program 0: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000001400)=[{&(0x7f0000001280)="ca", 0x1, 0x3b32}], 0x0, 0x0) 10:22:16 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40096101, 0x0) 10:22:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x2a, 0x0, &(0x7f0000000040)) [ 398.460780][ T36] audit: type=1804 audit(1614075736.746:54): pid=15526 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir594642117/syzkaller.UCMfdA/264/bus" dev="sda1" ino=14222 res=1 errno=0 10:22:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x4020940d, 0x0) 10:22:16 executing program 0: waitid(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)) [ 398.529337][T15536] QAT: failed to copy from user cfg_data. 10:22:16 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 10:22:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, 0x0) [ 398.614934][ T36] audit: type=1804 audit(1614075736.906:55): pid=15543 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir594642117/syzkaller.UCMfdA/264/bus" dev="sda1" ino=14222 res=1 errno=0 [ 398.791613][ T9720] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 399.241896][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.451874][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 399.461215][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.469588][ T9720] usb 3-1: Product: syz [ 399.473861][ T9720] usb 3-1: Manufacturer: syz [ 399.478664][ T9720] usb 3-1: SerialNumber: syz [ 400.671814][ T9720] cdc_ncm 3-1:1.0: bind() failure [ 400.691842][ T9720] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 400.711896][ T9720] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 400.731964][ T9720] usbtest: probe of 3-1:1.1 failed with error -71 [ 400.742954][ T9720] usb 3-1: USB disconnect, device number 67 10:22:19 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x1, 0x0, &(0x7f0000000000)) 10:22:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) 10:22:19 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x2}}) 10:22:19 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x1, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 10:22:19 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 10:22:19 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 10:22:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) 10:22:19 executing program 4: clock_getres(0x2, &(0x7f0000000240)) 10:22:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004500)) 10:22:19 executing program 3: semget$private(0x0, 0x4, 0x6dd) 10:22:19 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003980)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, 0x0, 0xfffffffffffffd00) [ 401.481690][ T9720] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 401.861849][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.061814][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.071198][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.080068][ T9720] usb 3-1: Product: syz [ 402.085008][ T9720] usb 3-1: Manufacturer: syz [ 402.090108][ T9720] usb 3-1: SerialNumber: syz [ 403.311737][ T9720] cdc_ncm 3-1:1.0: bind() failure [ 403.337734][ T9720] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 403.365537][ T9720] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 403.392001][ T9720] usbtest: probe of 3-1:1.1 failed with error -71 [ 403.403349][ T9720] usb 3-1: USB disconnect, device number 68 10:22:22 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:22 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88200, 0x0) 10:22:22 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='status\x00') setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 10:22:22 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/143) 10:22:22 executing program 3: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) 10:22:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:22:22 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) 10:22:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/udp6\x00') openat$cgroup_subtree(r0, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) 10:22:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') futimesat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 10:22:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 10:22:22 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x1, 0x0) 10:22:22 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) [ 404.147662][ T9619] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 404.521797][ T9619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.691676][ T9619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 404.701376][ T9619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.710595][ T9619] usb 3-1: Product: syz [ 404.715350][ T9619] usb 3-1: Manufacturer: syz [ 404.720465][ T9619] usb 3-1: SerialNumber: syz [ 405.901918][ T9619] cdc_ncm 3-1:1.0: bind() failure [ 405.921865][ T9619] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 405.943199][ T9619] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 405.966670][ T9619] usbtest: probe of 3-1:1.1 failed with error -71 [ 405.975896][ T9619] usb 3-1: USB disconnect, device number 69 10:22:24 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:24 executing program 0: pipe2(0x0, 0x80400) 10:22:24 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x38) 10:22:24 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x199243, 0x0) 10:22:24 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f00000001c0)=@known='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 10:22:24 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) 10:22:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r0, 0x0, 0x0) 10:22:24 executing program 4: select(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x0, 0x2710}) 10:22:24 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 10:22:24 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 10:22:24 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 10:22:24 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003980)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_DIRENT(r0, 0x0, 0x0) [ 406.718539][ T19] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 407.141873][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.311725][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 407.321450][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.330578][ T19] usb 3-1: Product: syz [ 407.335370][ T19] usb 3-1: Manufacturer: syz [ 407.339984][ T19] usb 3-1: SerialNumber: syz [ 408.521986][ T19] cdc_ncm 3-1:1.0: bind() failure [ 408.549225][ T19] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 408.571758][ T19] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 408.591651][ T19] usbtest: probe of 3-1:1.1 failed with error -71 [ 408.599822][ T19] usb 3-1: USB disconnect, device number 70 10:22:27 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:27 executing program 3: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f000000fe00)='cgroup.subtree_control\x00', 0x2, 0x0) 10:22:27 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') utimensat(r0, &(0x7f0000000040)='.\x00', 0x0, 0x0) 10:22:27 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000fdc0)) 10:22:27 executing program 5: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$unix(r0, 0x0, 0x0) 10:22:27 executing program 1: getrandom(&(0x7f0000000180)=""/114, 0x72, 0x2) 10:22:27 executing program 4: openat$cgroup(0xffffffffffffffff, &(0x7f0000001100)='syz1\x00', 0x200002, 0x0) 10:22:27 executing program 0: pipe2(&(0x7f0000000b00)={0xffffffffffffffff}, 0x0) mknodat$loop(r0, &(0x7f0000000b40)='./file0\x00', 0x0, 0x0) 10:22:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, 0x0, &(0x7f0000000100)) 10:22:27 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0xa000) 10:22:27 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x84800, 0x0) 10:22:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) [ 409.351600][ T19] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 409.721877][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.921772][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.932434][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.941423][ T19] usb 3-1: Product: syz [ 409.945805][ T19] usb 3-1: Manufacturer: syz [ 409.950453][ T19] usb 3-1: SerialNumber: syz [ 411.141850][ T19] cdc_ncm 3-1:1.0: bind() failure [ 411.167821][ T19] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 411.206041][ T19] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 411.241781][ T19] usbtest: probe of 3-1:1.1 failed with error -71 [ 411.250144][ T19] usb 3-1: USB disconnect, device number 71 10:22:29 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:29 executing program 4: add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) 10:22:29 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') ioctl$TCGETS(r0, 0x5401, 0x0) 10:22:29 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_subtree(r0, &(0x7f000000fe00)='cgroup.subtree_control\x00', 0x2, 0x0) 10:22:29 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) sendmsg$netlink(r0, 0x0, 0x0) 10:22:29 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003980)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 10:22:29 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) getsockname$netlink(r0, 0x0, 0x0) 10:22:30 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000), &(0x7f0000000040)) 10:22:30 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') utimensat(r0, 0x0, 0x0, 0x0) 10:22:30 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002100)='rdma.current\x00', 0x0, 0x0) 10:22:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/udp6\x00') sendmsg(r0, 0x0, 0x0) 10:22:30 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, 0x0) [ 412.001718][ T19] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 412.381814][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.581711][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.591284][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.600371][ T19] usb 3-1: Product: syz [ 412.605500][ T19] usb 3-1: Manufacturer: syz [ 412.610130][ T19] usb 3-1: SerialNumber: syz [ 413.801830][ T19] cdc_ncm 3-1:1.0: bind() failure [ 413.822701][ T19] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 413.841790][ T19] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 413.861769][ T19] usbtest: probe of 3-1:1.1 failed with error -71 [ 413.870435][ T19] usb 3-1: USB disconnect, device number 72 10:22:32 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:32 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x1000) 10:22:32 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 10:22:32 executing program 3: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) 10:22:32 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000140)=""/171) 10:22:32 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') utimensat(r0, 0x0, 0x0, 0x0) 10:22:32 executing program 1: r0 = socket(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 10:22:32 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x7000) 10:22:32 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/34) 10:22:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x242000) signalfd(r0, &(0x7f0000000040), 0x8) 10:22:32 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') utimensat(r0, 0x0, 0x0, 0x0) 10:22:32 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, 0x0}) [ 414.621751][ T9619] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 415.011643][ T9619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.181630][ T9619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 415.190903][ T9619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.199956][ T9619] usb 3-1: Product: syz [ 415.204926][ T9619] usb 3-1: Manufacturer: syz [ 415.209685][ T9619] usb 3-1: SerialNumber: syz [ 416.431781][ T9619] cdc_ncm 3-1:1.0: bind() failure [ 416.451740][ T9619] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 416.471752][ T9619] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 416.497175][ T9619] usbtest: probe of 3-1:1.1 failed with error -71 [ 416.507086][ T9619] usb 3-1: USB disconnect, device number 73 10:22:35 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') utimensat(r0, 0x0, 0x0, 0x0) 10:22:35 executing program 3: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f000000fe80)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) 10:22:35 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x200040, 0x0) 10:22:35 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003980)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0xffffffffffffff2d) 10:22:35 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:35 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x0) 10:22:35 executing program 5: mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 10:22:35 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) open$dir(&(0x7f0000000080)='./file0\x00', 0x20c440, 0x0) 10:22:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r0, r1) 10:22:35 executing program 1: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$cgroup(r0, &(0x7f000000fe40)='syz0\x00', 0x200002, 0x0) 10:22:35 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') execveat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 10:22:35 executing program 5: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002240)='cpu.weight\x00', 0x2, 0x0) 10:22:35 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="944e2601889a", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "892454", 0x18, 0x0, 0x0, @private2, @private2, {[@hopopts={0x0, 0x1, [], [@jumbo, @enc_lim, @pad1]}]}}}}}, 0x0) 10:22:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 10:22:35 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) 10:22:35 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x3, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) [ 417.321591][ T2927] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 417.701726][ T2927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.871819][ T2927] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 417.881316][ T2927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.890294][ T2927] usb 3-1: Product: syz [ 417.894741][ T2927] usb 3-1: Manufacturer: syz [ 417.899592][ T2927] usb 3-1: SerialNumber: syz [ 419.131924][ T2927] cdc_ncm 3-1:1.0: bind() failure [ 419.163334][ T2927] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 419.181873][ T2927] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 419.201898][ T2927] usbtest: probe of 3-1:1.1 failed with error -71 [ 419.211311][ T2927] usb 3-1: USB disconnect, device number 74 10:22:37 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:37 executing program 5: clock_gettime(0x1, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket(0x10, 0x6, 0xffffffff) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_newnexthop={0x44, 0x68, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0x4, 0x0, 0x27}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x1c, 0x2, [{0x2, 0x8}, {0x1}, {0x2, 0x81}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004090}, 0x8081) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)={0x1130, 0x14, 0x510, 0x70bd2d, 0x25dfdbfb, {0x13, 0x3f}, [@INET_DIAG_REQ_BYTECODE={0x4c, 0x1, "fdd9b44d82f26dff339b15dfc77f5038ba8076c9c6d08ada47bf6fca4aba560b83fa1915906830dfd27506461b128491b92e60208e8100708f4e1b9f6cadc86bcb568b04a0845224"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "021cbc159e02c4a7086c4ffc6f56931b02209f0ad5c9562853367b5c00e58deeb7e6419818ecb5743d4415db9e62bdadf3ecfa292fa642e2d200a59f74dddcd07dd89420df2fd8793e164c19e4a0ccbd74c164fccb0cd6fb6bdb10e07247ca3fa3fbdb145cef83875bed032f292b317f6aac1e28756ddd5b6baca7745fefd0c665d532b6cec6f8f67f32e42d868707fc6eb909bd2148f4739aa9babf2d82dc590c9d473813689ab887ff06f7e8ba619b80fd5d5e6742b3d3a2c0b29eb772549b7bd3fb7cb6"}]}, 0x1130}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x8, 0x3, [0x0, 0x1, 0xe39]}, 0xe) clock_gettime(0x6, &(0x7f0000000080)) connect$can_bcm(r1, &(0x7f0000000040), 0x10) 10:22:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@gettaction={0x18, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 10:22:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x10, 0x3}, 0x14}}, 0x0) 10:22:37 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x6801, 0x0) 10:22:37 executing program 0: r0 = socket(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 10:22:38 executing program 3: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x0, &(0x7f0000000200)={[0x2]}, 0x8) 10:22:38 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) bind$l2tp(r0, 0x0, 0x0) 10:22:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xb0, 0x3, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x2c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}]}}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_LABELS={0xffffffffffffff64, 0x16, 0x1, 0x0, [0x0, 0x0, 0x2, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x400]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_STATUS={0x8}]}, 0xb0}}, 0x0) 10:22:38 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) 10:22:38 executing program 1: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0) 10:22:38 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000300)=ANY=[], &(0x7f00000000c0)=0xa0) [ 419.824626][T15913] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 419.951828][ T9619] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 420.342416][ T9619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.542190][ T9619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 420.551696][ T9619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.559880][ T9619] usb 3-1: Product: syz [ 420.564911][ T9619] usb 3-1: Manufacturer: syz [ 420.569520][ T9619] usb 3-1: SerialNumber: syz [ 421.791787][ T9619] cdc_ncm 3-1:1.0: bind() failure [ 421.811748][ T9619] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 421.833245][ T9619] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 421.852012][ T9619] usbtest: probe of 3-1:1.1 failed with error -71 [ 421.860451][ T9619] usb 3-1: USB disconnect, device number 75 10:22:40 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:40 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f0000000000), 0xc) 10:22:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8001}, 0x10) 10:22:40 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) dup2(r0, r0) 10:22:40 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) fsync(r0) 10:22:40 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/91, 0x5b}], 0x1}, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/93, 0x5d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvfrom$unix(r4, &(0x7f0000000a00)=""/102393, 0x18ff9, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 10:22:40 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) connect(r0, &(0x7f00000000c0)=@un=@abs={0x8}, 0x8) 10:22:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/78, 0x4e}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/160, 0xa0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/159, 0x9f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d) shutdown(r5, 0x0) r7 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r7, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) shutdown(r6, 0x0) shutdown(r3, 0x0) 10:22:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x54, 0x0, 0x0) 10:22:40 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@in={0x10, 0x2}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)="a1", 0x1}], 0x1}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000000280)="4a208bb1827ae7f90b99ab111efb8c9d1af62096a95780dd64e8e45ac584315eb793baa756d60bdcc8faaccf2fe791aee41e23a83c29b58c31f0d2e125b4b6f5", 0x40}, {&(0x7f00000002c0)="b609a2bafe26666ad60acbb54a20535ba67bd99edf4a333090df521d7a4ba3afad521af278f5", 0x26}, {&(0x7f0000001500)="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", 0x547}], 0x3}, 0x0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r1, r0) 10:22:40 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendmsg(r0, &(0x7f00000015c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001340)=[{0xc}], 0xc}, 0x0) 10:22:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x400, &(0x7f0000000000), 0x4) [ 422.631705][ T9571] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 423.062349][ T9571] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.251740][ T9571] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 423.261285][ T9571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.270313][ T9571] usb 3-1: Product: syz [ 423.274933][ T9571] usb 3-1: Manufacturer: syz [ 423.279604][ T9571] usb 3-1: SerialNumber: syz [ 424.491739][ T9571] cdc_ncm 3-1:1.0: bind() failure [ 424.533862][ T9571] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 424.561977][ T9571] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 424.581967][ T9571] usbtest: probe of 3-1:1.1 failed with error -71 [ 424.592528][ T9571] usb 3-1: USB disconnect, device number 76 10:22:43 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000002a80)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000025c0)=[{0x10, 0x84, 0x9, "dd"}], 0x10}, 0x0) 10:22:43 executing program 3: faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 10:22:43 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f00000010c0), 0x4) 10:22:43 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040)=0x1, 0x4) 10:22:43 executing program 4: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) bind(r0, &(0x7f0000000100)=@in6={0x1c, 0x1c}, 0x1c) sendmsg(r0, &(0x7f0000001340)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="9c2ac6f57725ea6bd4a7190e0408e4a9f4c1be9186ba34fee5699d6ea87d65c37556704c9a04fa3db41920dd37f28701098cecc6aae390db3553f65aaceb2b4a5c3de894bfcab53a2720dcd996c5fd779906bad956ac03f237b5156f0963c80f6ed51722148bcb70a7acc1fee9d70a911638d8805eb8544bda55c6cdeabc5a559879c87f1e6b54c9e88259358502ed370aae5ba746b6caefa1a86c6c301cbcd85ae6d20042a3abb8e9a31ef27e21ea4e9bbe1d25ae9438cd7a92b829416089d11906db90a3a77599418512967dd757e68fb8986c564eb16ce450b33fc6c748533499f057e7", 0xe5}, {&(0x7f0000000080)="1d0eab6d76f47e084e299c24", 0xc}], 0x3, &(0x7f0000001280)=[{0xc}], 0xc}, 0x20104) 10:22:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x20188, 0x0, 0x0) 10:22:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000002a80)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x84, 0x9, "ce"}], 0x10}, 0x0) 10:22:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getown(r0, 0x5) 10:22:43 executing program 0: fcntl$dupfd(0xffffffffffffffff, 0x11, 0xffffffffffffff9c) 10:22:43 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x14, 0x84, 0x7, '\x00\x00\x00\x00\x00'}], 0x14}, 0x0) 10:22:43 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$sock_int(r0, 0xffff, 0x4000, &(0x7f0000000300), 0x4) [ 425.301655][ T9660] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 425.662136][ T9660] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.831867][ T9660] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 425.841049][ T9660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.850630][ T9660] usb 3-1: Product: syz [ 425.855490][ T9660] usb 3-1: Manufacturer: syz [ 425.860281][ T9660] usb 3-1: SerialNumber: syz [ 427.085352][ T9660] cdc_ncm 3-1:1.0: bind() failure [ 427.112525][ T9660] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 427.132177][ T9660] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 427.151892][ T9660] usbtest: probe of 3-1:1.1 failed with error -71 [ 427.163068][ T9660] usb 3-1: USB disconnect, device number 77 10:22:45 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:45 executing program 4: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r0, &(0x7f00000015c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[{0xc}], 0xc}, 0x0) 10:22:45 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x180, 0x0, 0x0) 10:22:45 executing program 0: fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000001c0)) 10:22:45 executing program 3: getgroups(0x3, &(0x7f0000000000)=[0x0, 0x0, 0xffffffffffffffff]) setresgid(r0, 0x0, 0x0) 10:22:45 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) fstat(r1, &(0x7f0000000000)) 10:22:45 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) bind(r0, &(0x7f0000000100)=@in6={0x1c, 0x1c}, 0x1c) 10:22:45 executing program 1: r0 = socket$inet6(0x1c, 0x3, 0x0) bind(r0, &(0x7f00000001c0)=@in6={0x1c, 0x1c}, 0x1c) 10:22:45 executing program 0: open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0) 10:22:45 executing program 3: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f00000001c0)=@un=@abs={0x8}, 0x8, &(0x7f0000000280)=[{&(0x7f0000000200)='~', 0x1}, {&(0x7f0000000580)='d', 0x1}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x248}, 0x189) 10:22:46 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in={0x10, 0x2}, 0x10) 10:22:46 executing program 0: symlinkat(&(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00') lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) [ 427.901732][ T9571] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 428.302062][ T9571] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.481809][ T9571] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.491578][ T9571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.499695][ T9571] usb 3-1: Product: syz [ 428.506152][ T9571] usb 3-1: Manufacturer: syz [ 428.510995][ T9571] usb 3-1: SerialNumber: syz [ 429.721824][ T9571] cdc_ncm 3-1:1.0: bind() failure [ 429.753623][ T9571] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 429.772136][ T9571] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 429.791889][ T9571] usbtest: probe of 3-1:1.1 failed with error -71 [ 429.800141][ T9571] usb 3-1: USB disconnect, device number 78 10:22:48 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:48 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000001300)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 10:22:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002380)={0x0, 0x0, 0x0}, 0x0) 10:22:48 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, &(0x7f0000000140)=""/184, 0x32, 0xb8, 0x1}, 0x20) 10:22:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa, 0x7, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x6, [], 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x40) 10:22:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000140)=""/184, 0x36, 0xb8, 0x1}, 0x20) 10:22:48 executing program 4: bpf$BPF_PROG_GET_FD_BY_ID(0x15, 0x0, 0x0) 10:22:48 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x3, &(0x7f0000000a00)=@framed, &(0x7f0000000a80)='GPL\x00', 0x0, 0x4d, &(0x7f0000000ac0)=""/77, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:22:48 executing program 1: r0 = socket$inet(0x2, 0x3, 0x81) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x5c8}}], 0x2, 0x0) 10:22:48 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x19, 0x0, 0x0) 10:22:48 executing program 4: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440)='802.15.4 MAC\x00', 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:22:48 executing program 3: syz_genetlink_get_family_id$SEG6(&(0x7f0000001500)='SEG6\x00', 0xffffffffffffffff) [ 430.501644][ T9571] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 430.941713][ T9571] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.112459][ T9571] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.122287][ T9571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.133109][ T9571] usb 3-1: Product: syz [ 431.137690][ T9571] usb 3-1: Manufacturer: syz [ 431.144001][ T9571] usb 3-1: SerialNumber: syz [ 432.281773][ T9571] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 432.505050][ T9571] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 432.525449][ T9571] usb 3-1: USB disconnect, device number 79 [ 432.537935][ T9571] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:22:51 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:51 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)) 10:22:51 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x73) 10:22:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x6, 0x6cb, 0x0, &(0x7f0000000040)) 10:22:51 executing program 4: pipe(&(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) 10:22:51 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={0x0, &(0x7f00000013c0)=""/244, 0x9d, 0xf4}, 0x20) 10:22:51 executing program 5: sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) 10:22:51 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x3, 0x3, &(0x7f0000001200)=@framed, &(0x7f0000001280)='syzkaller\x00', 0x2, 0xde, &(0x7f00000012c0)=""/222, 0x0, 0x0, [0x73], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:22:51 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsa\x00', 0x111100, 0x0) 10:22:51 executing program 3: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10:22:51 executing program 4: io_uring_setup(0x0, &(0x7f0000000000)) syz_io_uring_setup(0x576c, &(0x7f00000000c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x48a2, &(0x7f0000000380), &(0x7f0000001000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:22:51 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x6000001, 0x10010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x576c, &(0x7f00000000c0)={0x0, 0x728e, 0x8, 0x2, 0x352}, &(0x7f0000001000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x48a2, &(0x7f0000000380)={0x0, 0xeec3, 0x2, 0x0, 0x1c4}, &(0x7f0000001000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 433.361763][ T9571] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 433.752194][ T9571] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.922521][ T9571] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.932758][ T9571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.941283][ T9571] usb 3-1: Product: syz [ 433.945756][ T9571] usb 3-1: Manufacturer: syz [ 433.950524][ T9571] usb 3-1: SerialNumber: syz [ 435.091812][ T9571] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 435.314588][ T9571] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 435.337782][ T9571] usb 3-1: USB disconnect, device number 80 [ 435.355137][ T9571] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:22:54 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, "0e97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:22:54 executing program 3: socket$can_raw(0x1d, 0x3, 0x1) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x105000, 0x0) 10:22:54 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) socket$can_raw(0x1d, 0x3, 0x1) 10:22:54 executing program 1: syz_io_uring_setup(0x48a2, &(0x7f0000000380)={0x0, 0x0, 0x2}, &(0x7f0000001000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 10:22:54 executing program 4: syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}, @selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 10:22:54 executing program 5: syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x408000) 10:22:54 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000003600)='/dev/zero\x00', 0x0, 0x0) clone3(&(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000035c0)=[0x0], 0x1}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000003c40)='l2tp\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000003e00)='802.15.4 MAC\x00', 0xffffffffffffffff) 10:22:54 executing program 5: syz_mount_image$romfs(&(0x7f0000000140)='romfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)) 10:22:54 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) socket$can_raw(0x1d, 0x3, 0x1) 10:22:54 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2ac500, 0x0) 10:22:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f0000000100)) [ 436.043532][T16305] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 436.058134][T16305] VFS: Can't find a romfs filesystem on dev loop5. [ 436.058134][T16305] 10:22:54 executing program 0: r0 = socket(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) [ 436.111717][ T9720] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 436.161619][ T9670] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 436.482222][ T9720] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 436.490966][ T9720] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 436.502741][ T9720] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.621769][ T9670] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.672170][ T9720] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.687791][ T9720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.696302][ T9720] usb 5-1: Product: syz [ 436.700455][ T9720] usb 5-1: Manufacturer: syz [ 436.705740][ T9720] usb 5-1: SerialNumber: syz [ 436.832117][ T9670] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 436.846473][ T9670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.855302][ T9670] usb 3-1: Product: syz [ 436.859729][ T9670] usb 3-1: Manufacturer: syz [ 436.868725][ T9670] usb 3-1: SerialNumber: syz [ 437.031801][ T9720] usb 5-1: 0:2 : does not exist [ 437.054507][ T9720] usb 5-1: USB disconnect, device number 2 [ 437.744475][ T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 438.012350][ T9670] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 438.151877][ T19] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 438.160618][ T19] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 438.176684][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.225178][ T9670] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 438.249592][ T9670] usb 3-1: USB disconnect, device number 81 [ 438.262817][ T9670] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 438.381728][ T19] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 438.391037][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.400792][ T19] usb 5-1: Product: syz [ 438.406085][ T19] usb 5-1: Manufacturer: syz [ 438.410783][ T19] usb 5-1: SerialNumber: syz 10:22:57 executing program 5: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$cgroup_freezer_state(r0, &(0x7f00000000c0)='freezer.state\x00', 0x2, 0x0) 10:22:57 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x200000, 0x0) 10:22:57 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/urandom\x00', 0x200001, 0x0) 10:22:57 executing program 0: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$CHAR_RAW_DISCARD(r0, 0x1277, 0x0) 10:22:57 executing program 4: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) 10:22:57 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 438.763356][ T19] usb 5-1: 0:2 : does not exist [ 438.805568][ T19] usb 5-1: USB disconnect, device number 3 10:22:57 executing program 0: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 10:22:57 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendmsg$unix(r0, 0x0, 0x8045) 10:22:57 executing program 5: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) 10:22:57 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) 10:22:57 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/user\x00') 10:22:57 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x22382) 10:22:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, &(0x7f00000004c0)) 10:22:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10"], 0x10}, 0x0) 10:22:57 executing program 5: clock_gettime(0x0, &(0x7f0000002480)) 10:22:57 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:22:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/206, 0xce}], 0x1) [ 439.131677][ T9660] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 439.219608][ T3221] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.225994][ T3221] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.532462][ T9660] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.731730][ T9660] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.741247][ T9660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.750853][ T9660] usb 3-1: Product: syz [ 439.756717][ T9660] usb 3-1: Manufacturer: syz [ 439.761325][ T9660] usb 3-1: SerialNumber: syz [ 440.901853][ T9660] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 441.125219][ T9660] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 441.139537][ T9660] usb 3-1: USB disconnect, device number 82 [ 441.147793][ T9660] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:22:59 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:22:59 executing program 4: socket(0x26, 0x5, 0x928) 10:22:59 executing program 3: clock_nanosleep(0x7, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) 10:22:59 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) 10:22:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x10}}], 0x10}, 0x0) 10:22:59 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x511002, 0x0) 10:22:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 10:23:00 executing program 0: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 10:23:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004740)={'team0\x00'}) 10:23:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) 10:23:00 executing program 5: openat$nvram(0xffffffffffffff9c, 0x0, 0x450000, 0x0) 10:23:00 executing program 3: syz_open_procfs$namespace(0x0, 0x0) pipe2(0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000003f80)='nl80211\x00', 0xffffffffffffffff) [ 442.021730][ T9660] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 442.381668][ T9660] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.551664][ T9660] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 442.561060][ T9660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.569704][ T9660] usb 3-1: Product: syz [ 442.573996][ T9660] usb 3-1: Manufacturer: syz [ 442.578586][ T9660] usb 3-1: SerialNumber: syz [ 443.731848][ T9660] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 443.956080][ T9660] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 443.977030][ T9660] usb 3-1: USB disconnect, device number 83 [ 443.989997][ T9660] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:23:02 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:23:02 executing program 1: r0 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) 10:23:02 executing program 4: sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) 10:23:02 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xf7}}) 10:23:02 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev}}) 10:23:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}) 10:23:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:23:02 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0xe2142) 10:23:02 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffe01, 0x80000000}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003040)=[{{0x0, 0x1d9, &(0x7f0000000100), 0x0, &(0x7f0000001700)}}], 0x40000e5, 0x0) 10:23:02 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x20000010304, @remote}, 0x0, {0x2, 0x0, @multicast1}}) 10:23:02 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 10:23:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003040)=[{{0x0, 0x1d9, &(0x7f0000000100), 0x0, &(0x7f0000001700)}}], 0x40000e5, 0x0) [ 444.871581][ T9720] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 445.291729][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.501714][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.511106][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.520094][ T9720] usb 3-1: Product: syz [ 445.524776][ T9720] usb 3-1: Manufacturer: syz [ 445.529381][ T9720] usb 3-1: SerialNumber: syz [ 446.661858][ T9720] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 446.885269][ T9720] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 446.908608][ T9720] usb 3-1: USB disconnect, device number 84 [ 446.928094][ T9720] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:23:05 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:23:05 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003040)=[{{0x0, 0x1d9, &(0x7f0000000100), 0x0, &(0x7f0000001700)}}], 0x40000e5, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 10:23:05 executing program 3: socketpair(0x1d, 0x0, 0x9, &(0x7f0000000000)) 10:23:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000040)) 10:23:05 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x1, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x24) 10:23:05 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0xd07b, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x8000000) 10:23:05 executing program 3: syz_io_uring_setup(0x4997, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1b38, &(0x7f0000000640), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) 10:23:05 executing program 1: syz_io_uring_setup(0x646d, &(0x7f0000000680), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) 10:23:05 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, 0x0) 10:23:05 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, &(0x7f0000000140)}, 0x0) 10:23:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x20202) write$FUSE_DIRENT(r0, &(0x7f0000000100)=ANY=[], 0x38) 10:23:05 executing program 3: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) [ 447.704209][T16643] sg_write: data in/out 76/14 bytes for SCSI command 0x0-- guessing data in; [ 447.704209][T16643] program syz-executor.4 not setting count and/or reply_len properly [ 447.731239][ T9720] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 448.121873][ T9720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.322677][ T9720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 448.333158][ T9720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.341291][ T9720] usb 3-1: Product: syz [ 448.345803][ T9720] usb 3-1: Manufacturer: syz [ 448.350505][ T9720] usb 3-1: SerialNumber: syz [ 449.473994][ T9720] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 449.685728][ T9720] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 449.714011][ T9720] usb 3-1: USB disconnect, device number 85 [ 449.731201][ T9720] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:23:08 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:23:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ae88bff8240300005a90f57f07706deff0f64ecace9509fef634f941b46b7bd5e0bbee07962c22772e11b44e2ac8bb8c43b460e4", 0x34}, {&(0x7f0000000100)="a74e0024002000100200200000000000002612ab345f0e48bb97f33c1a4351c4a1020000000000000006", 0x2a}], 0x2) 10:23:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0) 10:23:08 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]) r0 = socket(0x400000000000010, 0x2, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r2, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000480)=""/17, 0x11}, {0x0}, {&(0x7f0000000540)=""/200, 0xc8}, {0x0}], 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="fea2032677e7b24edf251c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099bdcb0000007600000028fa"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x400a084) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00') 10:23:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 10:23:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') write$apparmor_current(r0, 0x0, 0x2d) 10:23:08 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') getpeername$l2tp6(r0, 0x0, 0x0) 10:23:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 10:23:08 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/icmp6\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x4020940d, 0x0) [ 450.287075][T16694] device lo entered promiscuous mode 10:23:08 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) 10:23:08 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="922fb7", 0x3}}, 0x0) [ 450.550508][ T2927] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 450.574526][T16712] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.922436][ T2927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.985613][T16699] Y­4`Ò˜: renamed from lo [ 451.092406][ T2927] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.119648][ T2927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.152083][ T2927] usb 3-1: Product: syz [ 451.156303][ T2927] usb 3-1: Manufacturer: syz [ 451.161617][ T2927] usb 3-1: SerialNumber: syz [ 451.549965][T13494] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.686111][T13494] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.837848][T13494] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.964776][T13494] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.301760][ T2927] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 452.680788][ T2927] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 452.694984][ T2927] usb 3-1: USB disconnect, device number 86 [ 452.712077][ T2927] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:23:11 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:23:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:23:11 executing program 1: io_uring_setup(0x7749, &(0x7f0000000280)={0x0, 0x0, 0x2}) 10:23:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="930e3fb6", 0x4) 10:23:11 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x719c, &(0x7f00000008c0)) fork() syz_open_procfs$namespace(0x0, &(0x7f0000001b80)='ns/time_for_children\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001e80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001c40)={0x14, 0xb, 0x9, 0x801}, 0x14}}, 0x0) 10:23:11 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() syz_open_procfs$namespace(0x0, &(0x7f0000001b80)='ns/time_for_children\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001e80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001c40)={0x14, 0xb, 0x9, 0x801}, 0x14}}, 0x0) 10:23:11 executing program 5: setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000001c0)={0x0, @dev, 0x0, 0x0, 'none\x00'}, 0xffffffffffffff93) 10:23:11 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x40040, 0x0) 10:23:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 10:23:11 executing program 0: io_setup(0x6, &(0x7f00000008c0)=0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f00000009c0)={0x0, 0x0, 0x0, 0x3, 0x0, r1, &(0x7f0000000900)}]) 10:23:11 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1271c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x40049409, &(0x7f00000001c0)=ANY=[]) 10:23:11 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) [ 453.333385][ T36] audit: type=1800 audit(1614075791.626:56): pid=16834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=".log" dev="sda1" ino=14221 res=0 errno=0 [ 453.401628][ T2927] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 453.779101][ T2927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.963190][ T2927] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.982668][ T2927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.016153][ T2927] usb 3-1: Product: syz [ 454.020558][ T2927] usb 3-1: Manufacturer: syz [ 454.035914][ T2927] usb 3-1: SerialNumber: syz [ 455.096527][T13494] device hsr_slave_0 left promiscuous mode [ 455.104360][T13494] device hsr_slave_1 left promiscuous mode [ 455.114668][T13494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.122617][T13494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.132886][T13494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.140452][T13494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.149453][T13494] device bridge_slave_1 left promiscuous mode [ 455.157782][T13494] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.175052][T13494] device bridge_slave_0 left promiscuous mode [ 455.181422][T13494] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.192005][ T2927] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 455.200861][T13494] device veth1_macvtap left promiscuous mode [ 455.208322][T13494] device veth0_macvtap left promiscuous mode [ 455.214675][T13494] device veth1_vlan left promiscuous mode [ 455.221046][T13494] device veth0_vlan left promiscuous mode 10:23:14 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:23:14 executing program 4: io_setup(0x6, &(0x7f00000008c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[0x0]) 10:23:14 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000004bc0)='/dev/full\x00', 0x0, 0x0) syz_io_uring_setup(0x268, &(0x7f0000000100)={0x0, 0x5b27, 0x28, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 10:23:14 executing program 0: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x8001, 0x224400) 10:23:14 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000001600)=[{&(0x7f0000000380)="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", 0x7fffffffffffffff}], 0x0, 0x0) [ 456.216010][T16863] loop5: detected capacity change from 32760 to 0 [ 459.158708][T13494] team0 (unregistering): Port device team_slave_1 removed [ 459.173551][T13494] team0 (unregistering): Port device team_slave_0 removed [ 459.186948][T13494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.206492][T13494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.264264][T13494] bond0 (unregistering): Released all slaves [ 459.330750][ T2927] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 459.339338][T16876] IPVS: ftp: loaded support on port[0] = 21 [ 459.345467][ T2927] usb 3-1: USB disconnect, device number 87 [ 459.358546][ T2927] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 459.532483][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 459.596570][T16876] chnl_net:caif_netlink_parms(): no params data found [ 459.689582][T16876] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.708908][T16876] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.717732][T16876] device bridge_slave_0 entered promiscuous mode [ 459.727981][T16876] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.737047][T16876] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.745324][T16876] device bridge_slave_1 entered promiscuous mode [ 459.779263][T16876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.795538][T16876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.827650][T16876] team0: Port device team_slave_0 added [ 459.837656][T16876] team0: Port device team_slave_1 added [ 459.875853][T16876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.890870][T16876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.925174][T16876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.940603][T16876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.948361][T16876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.975378][T16876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.007825][T16876] device hsr_slave_0 entered promiscuous mode [ 460.020572][T16876] device hsr_slave_1 entered promiscuous mode [ 460.030670][T16876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.045129][T16876] Cannot create hsr debugfs directory [ 460.191968][T16876] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.199457][T16876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.207148][T16876] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.214284][T16876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.292937][T16876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.316784][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.331557][ T2927] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.349186][ T2927] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.372308][T16876] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.392581][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 460.408879][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 460.419957][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.427214][ T9619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.452624][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 460.461488][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 460.470999][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.478172][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.486962][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 460.506895][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 460.516331][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 460.525452][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 460.546647][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 460.554754][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 460.569340][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 460.579315][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 460.594799][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.610799][T16876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.630450][T16876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 460.640449][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 460.661215][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.692789][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 460.700474][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 460.716708][T16876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.821306][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 460.832117][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 460.857025][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 460.865767][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.883379][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.891426][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 460.915749][T16876] device veth0_vlan entered promiscuous mode [ 460.939326][T16876] device veth1_vlan entered promiscuous mode [ 460.977694][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 460.987195][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 460.997173][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 461.008004][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 461.021298][T16876] device veth0_macvtap entered promiscuous mode [ 461.038656][T16876] device veth1_macvtap entered promiscuous mode [ 461.060562][T16876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.073226][T16876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.084293][T16876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.095967][T16876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.107820][T16876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.123158][T16876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.135417][T16876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.147930][T16876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.161169][T16876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.173204][T16876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.184742][T16876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.194258][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 461.202420][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 461.210229][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 461.219679][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 461.237919][T16876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.248526][T16876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.259002][T16876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.270209][T16876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.280189][T16876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.290958][T16876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.302319][T16876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.312835][T16876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.322809][T16876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.333311][T16876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.344353][T16876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.352472][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 461.362764][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 461.438360][T13494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.447470][T13494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.475163][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 10:23:19 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4a8) 10:23:19 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/dsp\x00', 0x101fe0, 0x0) 10:23:19 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000280)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x19\xff\xe6*\xc3\xb4\xf65\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x4) fallocate(r0, 0x0, 0x0, 0x6) 10:23:19 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x5411, 0x0) 10:23:19 executing program 5: bpf$MAP_CREATE(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 10:23:19 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 461.495216][T13500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.507019][T13500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.520560][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:23:19 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8903, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:23:19 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000300)='\x00'}, 0x10) [ 461.612080][ T2927] Bluetooth: hci3: command 0x041b tx timeout 10:23:19 executing program 5: semctl$GETALL(0x0, 0x0, 0x6, &(0x7f0000000180)=""/215) 10:23:20 executing program 1: socket(0x1f, 0x5, 0x0) 10:23:20 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchownat(r0, 0x0, 0x0, 0x0, 0x0) 10:23:20 executing program 4: r0 = socket(0x1f, 0x5, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x11, &(0x7f0000001700), &(0x7f0000001740)=0xc) socket$inet(0x2, 0x0, 0x6) 10:23:20 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f00000002c0)="9e", 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 10:23:20 executing program 0: io_setup(0x1, &(0x7f0000000100)=0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 10:23:20 executing program 1: socket(0x1f, 0x5, 0x2) 10:23:20 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x0) [ 461.901687][ T2927] usb 3-1: new high-speed USB device number 88 using dummy_hcd 10:23:20 executing program 1: r0 = socket(0x1f, 0x5, 0x2) setsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000001580)=0x100, 0x4) [ 462.174588][ T9619] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 462.272126][ T2927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.431737][ T9619] usb 6-1: Using ep0 maxpacket: 32 [ 462.452549][ T2927] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 462.462942][ T2927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.471455][ T2927] usb 3-1: Product: syz [ 462.477616][ T2927] usb 3-1: Manufacturer: syz [ 462.483207][ T2927] usb 3-1: SerialNumber: syz [ 462.552610][ T9619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 462.722300][ T9619] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 462.738254][ T9619] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.746991][ T9619] usb 6-1: Product: syz [ 462.751175][ T9619] usb 6-1: Manufacturer: syz [ 462.760286][ T9619] usb 6-1: SerialNumber: syz [ 462.770283][ T9619] usb 6-1: config 0 descriptor?? [ 462.826120][ T9619] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 462.850206][ T9619] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 463.129962][ T9619] usb 6-1: USB disconnect, device number 4 [ 463.141823][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 463.148949][T17180] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 463.166029][ T9619] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 463.621781][ T2927] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 463.691689][ T9619] Bluetooth: hci3: command 0x040f tx timeout [ 463.845333][ T2927] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 464.045034][ T9619] usb 3-1: USB disconnect, device number 88 [ 464.063331][ T9619] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 464.141952][ T2927] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 464.381613][ T2927] usb 6-1: Using ep0 maxpacket: 32 10:23:22 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:23:22 executing program 0: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}) 10:23:22 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 10:23:22 executing program 4: fchown(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) connect(0xffffffffffffffff, 0x0, 0x0) socketpair(0x6, 0x0, 0x0, 0x0) pipe(0x0) pipe(0x0) 10:23:22 executing program 1: setsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, 0x0, 0x0) r0 = socket(0x1f, 0x5, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x11, &(0x7f0000001700), &(0x7f0000001740)=0xc) [ 464.512548][ T2927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 10:23:22 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect(r0, &(0x7f00000000c0), 0xe) 10:23:22 executing program 0: semctl$GETALL(0x0, 0x0, 0x6, &(0x7f00000002c0)=""/70) [ 464.682264][ T2927] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 464.691885][ T2927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.716925][ T2927] usb 6-1: Product: syz [ 464.727393][ T2927] usb 6-1: Manufacturer: syz [ 464.733821][ T2927] usb 6-1: SerialNumber: syz [ 464.764386][ T2927] usb 6-1: config 0 descriptor?? [ 464.814492][ T2927] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 464.840513][ T2927] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 10:23:23 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f00000002c0)="9e", 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 10:23:23 executing program 1: r0 = socket(0x1f, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:23:23 executing program 4: r0 = socket(0x1f, 0x5, 0x0) getpeername(r0, 0x0, 0x0) 10:23:23 executing program 3: r0 = socket(0x1f, 0x5, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x11, 0x0, 0x0) getpeername(r0, 0x0, 0x0) 10:23:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@private2, 0x0, 0x1}, 0x20) [ 464.901145][ T2927] usb 6-1: USB disconnect, device number 5 [ 464.907409][ T9619] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 464.950874][ T2927] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 465.311817][ T9619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.431688][ T2927] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 465.502345][ T9619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.511946][ T9619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.519973][ T9619] usb 3-1: Product: syz [ 465.524968][ T9619] usb 3-1: Manufacturer: syz [ 465.529728][ T9619] usb 3-1: SerialNumber: syz [ 465.692079][ T2927] usb 6-1: Using ep0 maxpacket: 32 [ 465.772006][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 465.822124][ T2927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 466.023023][ T2927] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 466.032371][ T2927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.040496][ T2927] usb 6-1: Product: syz [ 466.047096][ T2927] usb 6-1: Manufacturer: syz [ 466.052624][ T2927] usb 6-1: SerialNumber: syz [ 466.060609][ T2927] usb 6-1: config 0 descriptor?? [ 466.112801][ T2927] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 466.138690][ T2927] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 466.433893][ T7] usb 6-1: USB disconnect, device number 6 [ 466.447534][T17314] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 466.459913][ T7] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 466.641743][ T9619] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 466.875281][ T9619] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 467.074644][ T9619] usb 3-1: USB disconnect, device number 89 [ 467.081155][ T9619] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:23:25 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x1, "0e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:23:25 executing program 0: socketpair(0x6, 0x0, 0x6, 0x0) 10:23:25 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', 0x0}) 10:23:25 executing program 3: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}}) 10:23:25 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 10:23:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002b40)={&(0x7f0000000480)=@abs={0x8}, 0x8, &(0x7f0000002a00)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000004c0)="e70b9c78650e11cb85a9f131f9f6dcd738bb7552175d4436133d0292cbe7d900270f5b5c791870d685384288a35464fbe6332c79d2af842f330a84fa99a5", 0x3e}, {&(0x7f0000000500)="3765fcb91d4ef784c55c8ada07646707550ea19fad7ed7e10a4c5eb16b6e6238ad728a43f14fd4b51c05be77cd5ef71ca256a735178b4831a7959d3db146c8c38b9e1d52214cd6d013450333b6aec7675211b22d0352335f40f97e", 0x5b}, {&(0x7f00000015c0)="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", 0xfc}, {&(0x7f00000016c0)="9f5fa0eb26ca16522871ff546193e53c33fa7199eba6931c2f52e9b6a70c7a59fc417e701e9dae39e30bfc01ea59b3d7671781ff6e9b3a8f5fa69a2896e21f431e1cd3b841091cacf553c2f78a9ab3db064a75b6059e90cca0fb7b2df223ad4f840b45292f186dacbc1e1562", 0x6c}], 0x5}, 0x0) 10:23:25 executing program 5: setrlimit(0x7, &(0x7f0000000180)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780)='/dev/hwrng\x00', 0x0, 0x0) 10:23:26 executing program 3: sysfs$1(0x1, &(0x7f0000000000)=']:@\x00') 10:23:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f0000000280)) 10:23:26 executing program 4: clock_gettime(0x6, &(0x7f00000002c0)) 10:23:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000240)={'ah\x00'}, &(0x7f0000000280)=0x1e) 10:23:26 executing program 3: socket(0x26, 0x5, 0xff) [ 467.809805][T17402] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 467.951629][ T9619] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 468.351750][ T9619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.561797][ T9619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 468.571407][ T9619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.582113][ T9619] usb 3-1: Product: syz [ 468.586327][ T9619] usb 3-1: Manufacturer: syz [ 468.591383][ T9619] usb 3-1: SerialNumber: syz [ 469.741716][ T9619] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 469.959515][ T9619] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 470.159788][ T19] usb 3-1: USB disconnect, device number 90 [ 470.167892][ T19] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:23:28 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000006c0)={'sit0\x00', 0x0}) 10:23:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:23:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) 10:23:28 executing program 0: perf_event_open(&(0x7f000000dd80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:23:28 executing program 1: process_vm_readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, &(0x7f0000001500)=[{0x0}, {0x0}], 0x2, 0x0) 10:23:28 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x1, "0e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:23:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) 10:23:29 executing program 1: r0 = gettid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) 10:23:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, &(0x7f0000000040)) 10:23:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x400, 0x300, 0x0, 0x0, 0x3d0, 0x118, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'bridge_slave_0\x00', 'tunl0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) 10:23:29 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) 10:23:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x90) 10:23:29 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:23:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f0000000100)) 10:23:29 executing program 4: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) 10:23:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000), 0x8) 10:23:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x300, 0x0, 0x0, 0x3d0, 0x118, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'bridge_slave_0\x00', 'tunl0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) [ 471.021692][ T9619] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 471.067175][T17484] xt_check_table_hooks: 2 callbacks suppressed [ 471.067193][T17484] x_tables: duplicate underflow at hook 1 [ 471.442748][ T9619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.651849][ T9619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 471.661622][ T9619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.669837][ T9619] usb 3-1: Product: syz [ 471.674874][ T9619] usb 3-1: Manufacturer: syz [ 471.679591][ T9619] usb 3-1: SerialNumber: syz [ 472.851746][ T9619] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 473.065506][ T9619] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 473.272604][ T7] usb 3-1: USB disconnect, device number 91 [ 473.279235][ T7] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:23:32 executing program 1: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1282fa68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:23:32 executing program 5: pselect6(0x40, &(0x7f00000016c0), 0x0, 0x0, &(0x7f00000017c0), 0x0) 10:23:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) 10:23:32 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, &(0x7f00000000c0)) 10:23:32 executing program 0: r0 = socket(0xa, 0x3, 0x5) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 10:23:32 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1710}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x1, "0e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:23:32 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0), 0x0) 10:23:32 executing program 0: clock_getres(0x57cb2c85260b8902, 0x0) 10:23:32 executing program 1: capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)={0x4}) 10:23:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev}) 10:23:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x9, 0x4) 10:23:32 executing program 0: r0 = socket(0x2, 0x3, 0x9) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 10:23:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f00000001c0)) 10:23:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 10:23:32 executing program 3: setrlimit(0x7, &(0x7f0000000040)={0x0, 0xfffffffffffffffc}) 10:23:32 executing program 1: perf_event_open(&(0x7f000000dd80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:23:32 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80040, 0x0) [ 474.171707][ T9670] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 474.551770][ T9670] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.721713][ T9670] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 474.731251][ T9670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.749449][ T9670] usb 3-1: Product: syz [ 474.754215][ T9670] usb 3-1: Manufacturer: syz [ 474.758896][ T9670] usb 3-1: SerialNumber: syz [ 475.891920][ T9670] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 476.125274][ T9670] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 476.332969][ T9670] usb 3-1: USB disconnect, device number 92 [ 476.339902][ T9670] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 10:23:35 executing program 3: perf_event_open(&(0x7f000000dd80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) 10:23:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1}, 0x40) 10:23:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00000002c0), 0x4) 10:23:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(r0, 0x0, 0x27, 0x40002142, 0x0, 0x0) 10:23:35 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0xc0001, 0x0) 10:23:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4(r0, 0x0, 0x0, 0x0) 10:23:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) 10:23:35 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, 0x0) 10:23:35 executing program 4: pselect6(0x40, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x0, 0x0) 10:23:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) 10:23:35 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @mcast1}}) 10:23:35 executing program 2: socket$inet6(0xa, 0x0, 0x401) 10:23:35 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780)='/dev/hwrng\x00', 0x0, 0x0) inotify_rm_watch(r0, 0x0) 10:23:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00000000c0)) 10:23:35 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x48) 10:23:35 executing program 0: pselect6(0x40, &(0x7f0000000040)={0x7}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0) 10:23:35 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780)='/dev/hwrng\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) 10:23:35 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) 10:23:35 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780)='/dev/hwrng\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 10:23:35 executing program 4: r0 = gettid() process_vm_readv(r0, &(0x7f0000000740)=[{0x0}, {&(0x7f00000006c0)=""/72, 0x48}], 0x2, &(0x7f0000001800)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0) 10:23:35 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780)='/dev/hwrng\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 10:23:35 executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10:23:35 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780)='/dev/hwrng\x00', 0x0, 0x0) dup(r0) 10:23:35 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00') 10:23:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x7ffffffd, 0x4) 10:23:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @remote}}) 10:23:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="7365f9ffffffffff721000000000000000000000000000ff000000000000000003"], 0x58) 10:23:35 executing program 0: syz_open_procfs(0x0, &(0x7f0000000940)='fd/4\x00') 10:23:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "5b60d8a8"}, &(0x7f0000000000)=0x28) 10:23:35 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') 10:23:35 executing program 2: socket(0x11, 0x80000, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid_for_children\x00') socket(0x2b, 0x80000, 0x36) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) accept(r0, 0x0, 0x0) 10:23:35 executing program 5: socket$inet(0x2, 0x0, 0x733) 10:23:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f00000000c0)) 10:23:35 executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)) 10:23:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 10:23:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) 10:23:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x4, 0x0, 0x80000001, 0x0, 0x1}, 0x40) 10:23:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 10:23:36 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') 10:23:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 10:23:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) 10:23:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000140)=0x20) 10:23:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x0, 0x0, 0xff, 0xb, 0x0, 0x5266}, 0x20) 10:23:36 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') 10:23:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1b, 0x5, 0x650, 0x0, 0x0, 0xffffffff, 0x330, 0x1e0, 0x470, 0x470, 0xffffffff, 0x470, 0x470, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x0, 'DNAT\x00', 0x1, {0x0, @ipv4=@multicast1, @ipv4=@remote, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={[], [], @local}, @ipv4=@dev, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@frag={{0x30, 'frag\x00'}}]}, @NETMAP={0x0, 'NETMAP\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@local, @icmp_id}}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @common=@mh={{0x0, 'mh\x00'}, {"895a"}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d9) 10:23:36 executing program 4: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 10:23:36 executing program 0: perf_event_open(&(0x7f000000dd80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:23:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x300, 0x0, 0x0, 0x3d0, 0x118, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}, {0x0, 0x10c}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'bridge_slave_0\x00', 'tunl0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) 10:23:36 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 10:23:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 10:23:36 executing program 3: r0 = gettid() process_vm_readv(r0, &(0x7f0000000740)=[{0x0}, {&(0x7f00000006c0)=""/72, 0x48}], 0x2, &(0x7f0000001800)=[{&(0x7f0000000780)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 10:23:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@private2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x89d}, 0x20) [ 478.111390][T17699] x_tables: duplicate underflow at hook 1 10:23:36 executing program 0: setrlimit(0x0, &(0x7f0000000000)={0x9ad}) 10:23:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x800}, 0x1c) 10:23:36 executing program 4: clock_getres(0x1c8f2209cbbfab63, 0x0) 10:23:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'nat\x00', 0x2, [{}, {}]}, 0x48) 10:23:36 executing program 1: perf_event_open(&(0x7f000000dd80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:23:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 10:23:36 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0x10) 10:23:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000001940)='TIPCv2\x00', r0) 10:23:36 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x7, &(0x7f00000006c0)=@raw=[@func, @btf_id, @ldst, @initr0, @jmp={0x5, 0x0, 0x0, 0x5}], &(0x7f0000000700)='syzkaller\x00', 0x8000, 0x8, &(0x7f0000000740)=""/8, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f00000007c0), 0x10}, 0x53) 10:23:36 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x4020940d, 0x0) 10:23:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={0x0}}, 0x0) 10:23:36 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x5761, 0x0) 10:23:36 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001580)={&(0x7f0000000300)=@nl=@unspec, 0x80, 0x0}, 0x0) 10:23:36 executing program 2: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8911, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}}}) 10:23:36 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000040)="4c69c17de78dc74c7aa6c076d445c969a68a9c6a3200b414b224c00a2eabcc43afe8a21a6f9599cd57218b78c56e204e06a27123ede0372091fa2095b767c78868ce4a66e85f33f8ffa2679bd0607bd0ecf6f79a6950999956164daa0e693a920a1c0892937b4d691643b266144cd3b7642a61dc5009206b89180daa3ec48e15ff6c5c0bc9228a5edf3f5a63c48352", 0x8f}, {&(0x7f0000000100)="8b01f6931bcc50", 0x7}, {&(0x7f0000000140)="5329f76144c78fca0a3e22f05d9101d08c9ddf58600b3e4a057e1d2dc228a7aa52d666f178f0449ba4abd175cbd7da447189ced4774e3e577b769d7ace5c65c504c6a1d366c36e395bc3dd9d8bc3ee4997cc9df5b61fffad0e64a06ca6ac94481f2a0f8e2605e797fea563afcf14951b76f6e99d9fe430bffb7c5dd21c602a9ba0b6bf1ee52fa0d7a0e59d5ea6c41d0c32bdd2ff1bfeefe560d556f056e5b9e42139d789bcb2", 0xa6}, {&(0x7f0000000200)="4687d70c1191596dfadd4afd81c5ff914cbc2705d7719a21110fc588e85ebfb6f9cc4f9f26a14ca71f7033aa0cdc40fd1c74a93ad9e1d7e42985acf83e08badd4cc0adef3b363f9a96ca8f96cb2555880c6668eefb3f2744efbc8e2e68f8b1c5a88d9b7003fd1d6c1b8de0f665a5f527c67dc7f1", 0x74}, {&(0x7f0000000280)="7db04333378bb1f2bd50b2348f72f37c0acef84520d67119aed6e86f0b91792222f41a13b22ddb443523f6eeace0553dcfc9f6e8f9d466b3edcf6e73f39d6c415d8b46c5457b9d5db784d3cd0143cfc7d0e167b2b0440554fc1df7e9c8bfbd90e3775de196a64ff63645748ac9faba52f7b80b2714dff5d7fab62cec80be00e1c3961ffac8787534ef8e167455b388b79b021157d17e1841bab04d62cd1d8a29b4bfffad8c589936cec64d45dfea7ab64f255390bf6a0e7f746030d0f874621f1c4c264bd696e9cccac551a74605788c4e6962f59a146c51a70fd0eda6621e335ee0320eb4bc04650a56971088bfbfa885250262015e41e4b2beae0c86a7ad98fcfef739717430940aa39d18ccae3a8162de8d933d57f73b0bcafbf0f81d87f2e966dac268ab3450590939adf25d28f32aaef510a6cdfa2bd200ca4a18a3419a045e9400271cc5c345eea0fb10d3f5cd4d9cd54c4362a95f865e2f25a4673547b8157d0b5e81b9d02bd7616972969334df21cfd85834211e539b0b78506bce211565f266eaf27d809ae9ffc3b81eb3b700c2442e5f69e41ce084d7359f6442afbd82990ffc342ee7554fccc459b6ba290de47efa29e92ab597f862eefc9e0960e6f0fcf4755dc9b443926c628dca737e1d0b3286212d8740b184aa73e11d8f343ec76ddb3c22ec786339693de883ac1cb523e0c35a71e30a3c7bf0b82298854791e3e4b85bceaee10a540a552bf7db58a4d83ff455e51d6b6dec7b8142525a32c06b996ae0fe05e67642099687c3ad1ebe0fbb63cece13234c99307e9cafec565c2360bab834696a2fcf1d3665a58337ffaa54bcc7a5e3b6fb496e7b7e2d0b737d91d00dd7f45566b03893be9897e43f16b15a9de1cf9b68a714476dfaecb9b628f9348106337857424989b759a6a89deb0c4eeb3b51a66a50095cf360255f1142478889aafdc69ca0b452d8796e2c12912434495301882b054d38948416479ea06ac615a179e061fb0b822ce8b7f10118f11710d36a34c46b6f7eec218eab36153d06fafe976277cec7f9ff266ad52a36501e3f5a5463a729b19c375b72ac60dbb4d16d1cf4a8b2d18ac1d0a39c4ed56ce473a3236a4e23413b2403c98e16f7a4ca24158b3fb2e830be93c187badea99c2360337f4c50adf64630b0f8a5f70cfff01d7020d3331e79e3a9b93e5b57717c5f856218fa181b29dedca4de133e8036f6e3c630f839ee5998623b2ab9af6e510b250d65cf2f6030ac298bdc2089cda6f073c2481620f471e0c139cb22e0e4651d09db4f005f4a570c93a25b9a40adfc800c75070015ec59f0046dc656f2adad1893cbec535c4cfad0daf640aeb6e4270e3092cb0dd2b40267b6ab2b174b26bf70421e49c29733fc0684d397b7d806660b57020351ebcfad6b33370bd445acf9596c6563e3b342fba6fd9864691992acd0601a73883cb9f6f575f5ee169bba455aaefa5747a93faa3379be6facfc34c568d8e900ed1f92b5ad9eb2cd", 0x42d}], 0x5}, 0x0) 10:23:36 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10:23:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}}, 0x0) 10:23:36 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 10:23:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) 10:23:36 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000001400)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x41}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000000040)="9d0cd7d58bfa05d8a28730b87a2dfea465d3dc36e7fdcec9ad686200b6b882f53ffc024c9023cfa91eb24bbb768445d5a59777c84010dadc0e89a8b69d5eb720383ef3f5cac8ae74804f4ab6ca17775f1ff86aa9fdaac31bdfcb70981ed3f2b5597527f8c5a37f7ca93ece3982f15d71be5d318ed682b4e2fba6f29fe9bc744391b7e97a590f8c05ca6ce75b73d08521f5d7e4085f795511c9ca8df92d01938fcce9017a6e026acb8120d0119943148ce8200dc979e5803a2b00cbbdc3dbb6a45061716f5d122ee89f433757f68dfb3cc21bd19248fe1f48e518b4d7ee0c70203aae9ea886ed965bcbf1f50623", 0xed}, {&(0x7f0000000140)="7c0828354e75dd2ebaf8989ceae8dcaf2970fa2eb4cada21d91f3a0de5ede20b554d80fc3d4bd2e1f138bd33fc861d6c8ffd7ccf751e842c8291d27c66bf094a22015b0c08a3f85ee8524ff79d37019df26f880f52abccf7", 0x58}, {&(0x7f00000001c0)="893419c55f", 0x5}, {&(0x7f0000000340)="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", 0x9a3}], 0x4, &(0x7f00000015c0)=ANY=[@ANYBLOB="14"], 0x18}, 0x44804) 10:23:36 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x12, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:37 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) 10:23:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000300)=0x12, 0x4) 10:23:37 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002e80)={0x0, 0x2, &(0x7f0000002cc0)=@raw=[@btf_id], &(0x7f0000002d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:23:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000010103"], 0x2c}}, 0x0) 10:23:37 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x1404, 0x1}, 0x10}}, 0x0) 10:23:37 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @dev}, @llc, @isdn, 0x5}) 10:23:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x89e0, 0x0) 10:23:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 10:23:37 executing program 1: bpf$MAP_CREATE(0x9, 0x0, 0x0) [ 478.942780][T17766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 10:23:37 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000001480)={@private0, @dev, @private0}) 10:23:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="10000000020603"], 0x1c}}, 0x0) 10:23:37 executing program 2: socketpair(0x2c, 0x3, 0x3, &(0x7f00000002c0)) 10:23:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x9, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x4, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0x50}}, 0x0) 10:23:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) 10:23:37 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8982, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:23:37 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="c5", 0x1}], 0x1) 10:23:37 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x5460, 0x0) [ 479.159562][T17784] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 10:23:37 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) getsockname(r0, 0x0, &(0x7f0000000000)) 10:23:37 executing program 5: r0 = socket(0x11, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000340)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) 10:23:37 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000002b00)='/dev/net/tun\x00', 0x240002, 0x0) 10:23:37 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a00)='ns/pid\x00') 10:23:37 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000000100)="8b", 0x1}], 0x2}, 0x0) 10:23:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x5}], {0x14}}, 0x50}}, 0x0) 10:23:37 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101000, 0x0) 10:23:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 10:23:37 executing program 5: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8931, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:37 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x40305829, 0x0) 10:23:37 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8923, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:23:37 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @default, @netrom={'nr', 0x0}, 0x0, 'syz1\x00', @null, 0x0, 0x1, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 10:23:37 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 10:23:37 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002dc0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001480)={@private0, @dev, @private0, 0x0, 0x21, 0x8000, 0x0, 0x0, 0x1000001, r2}) 10:23:37 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000001400)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000001340)=[{0x0}, {0x0}, {&(0x7f00000001c0)="89", 0x1}], 0x3, &(0x7f00000015c0)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) 10:23:37 executing program 1: bpf$MAP_CREATE(0x21, 0x0, 0x0) 10:23:37 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x8916, &(0x7f0000001480)={@private0, @dev, @private0}) 10:23:38 executing program 2: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8947, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:38 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x77359400}, &(0x7f00000008c0)={0x0}) 10:23:38 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x541b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @dev}, @llc, @isdn}) 10:23:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 10:23:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000001fc0)={'sit0\x00', &(0x7f0000001f40)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private1}}) 10:23:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) 10:23:38 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000001480)={@private0, @dev, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 10:23:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x10}]}, 0x1c}}, 0x0) 10:23:38 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x8912, &(0x7f0000001480)={@private0, @dev, @private0}) 10:23:38 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000001480)={@private0, @dev, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 10:23:38 executing program 4: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000004ac0)={'erspan0\x00', 0x0}) 10:23:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x7}, 0x40) 10:23:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc) 10:23:38 executing program 1: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f8, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:38 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)="aac30a51880b7f16a108b48fbfba036088c62bdf3d7dcde43ce459", 0x1b}}, 0x0) 10:23:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000300)=0x12, 0x4) 10:23:38 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001480)={@private0, @dev, @private0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x1000001}) 10:23:38 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8912, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:23:38 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @remote}, @llc, @isdn, 0x5}) 10:23:39 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) [ 480.708459][T17883] ieee802154 phy0 wpan0: encryption failed: -22 10:23:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000940)) 10:23:39 executing program 4: pselect6(0x40, &(0x7f0000000780), &(0x7f00000007c0)={0x100000000}, &(0x7f0000000800), &(0x7f0000000840)={0x77359400}, &(0x7f00000008c0)={0x0}) 10:23:39 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) 10:23:39 executing program 5: r0 = socket(0x22, 0x2, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 10:23:39 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 10:23:39 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0xf, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) 10:23:39 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0x2}, 0x8) 10:23:39 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5460, 0x0) 10:23:39 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x30, 0x0, 0x0) 10:23:39 executing program 0: r0 = gettid() pipe(&(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, r1, 0x0, 0x0, 0x0}, 0x30) 10:23:39 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001480)={@private0, @dev, @private0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x1000001}) 10:23:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 10:23:39 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)) 10:23:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000040)="4c69c17de78dc74c7aa6c076d445c969a68a9c6a3200b414b224c00a2eabcc43afe8a21a6f9599cd57218b78c56e204e06a27123ede0372091fa2095b767c78868ce4a66e85f33f8ffa2679bd0607bd0ecf6f79a6950999956164daa0e693a920a1c0892937b4d691643b266144cd3b7642a61dc5009206b89180daa3ec48e15ff6c5c0bc9228a5edf3f5a63c48352", 0x8f}, {&(0x7f0000000100)="8b01f6931bcc50", 0x7}, {&(0x7f0000000140)="5329f76144c78fca0a3e22f05d9101d08c9ddf58600b3e4a057e1d2dc228a7aa52d666f178f0449ba4abd175cbd7da447189ced4774e3e577b769d7ace5c65c504c6a1d366c36e395bc3dd9d8bc3ee4997cc9df5b61fffad0e64a06ca6ac94481f2a0f8e2605e797fea563afcf14951b76f6e99d9fe430bffb7c5dd21c602a9ba0b6bf1ee52fa0d7a0e59d5ea6c41d0c32bdd2ff1bfeefe560d556f056e5b9e42139d789bcb2", 0xa6}, {&(0x7f0000000200)="4687d70c1191596dfadd4afd81c5ff914cbc2705d7719a21110fc588e85ebfb6f9cc4f9f26a14ca71f7033aa0cdc40fd1c74a93ad9e1d7e42985acf83e08badd4cc0adef3b363f9a96ca8f96cb2555880c6668eefb3f2744efbc8e2e68f8b1c5a88d9b7003fd1d6c1b8de0f665a5f527c67dc7f137047fdb", 0x78}, {&(0x7f0000000280)="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", 0x99d}], 0x5}, 0x0) 10:23:39 executing program 1: bpf$MAP_CREATE(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 10:23:39 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002dc0)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 10:23:39 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x67}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x50) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/109, 0x6d}, {&(0x7f00000003c0)=""/24, 0x18}], 0x2, &(0x7f0000000440)=""/4096, 0x1000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002dc0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002e80)={0x11, 0xb, &(0x7f0000002cc0)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @generic={0xde, 0xc, 0x1, 0x7, 0x9}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @jmp={0x5, 0x1, 0xb, 0x0, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffc}, @alu={0x0, 0x1, 0x4, 0xa, 0x2, 0x1, 0xffffffffffffffff}, @ldst={0x1, 0x2, 0x3, 0x6, 0x3, 0xfffffffffffffff0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000002d40)='GPL\x00', 0x2, 0x3c, &(0x7f0000002d80)=""/60, 0x41100, 0x10, [], r5, 0x0, r2, 0x8, &(0x7f0000002e00)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000002e40)={0x4, 0x6, 0xff, 0x3}, 0x10}, 0x78) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1, 0x3a, r5}) getsockname(r0, 0x0, &(0x7f0000000300)) 10:23:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000180), 0x4) 10:23:39 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8927, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:23:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, 0x0) 10:23:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x3, 0x0, &(0x7f0000000000)=0x52) 10:23:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00', r0) 10:23:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f00000012c0)) 10:23:39 executing program 4: bpf$MAP_CREATE(0xe, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 10:23:39 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x21, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$nfc_raw(r0, &(0x7f0000000000), 0x10) 10:23:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xcb}, 0x1c, 0x0}, 0x0) 10:23:39 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 10:23:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x8, 0x6, 0x401}, 0x14}}, 0x0) 10:23:39 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@private, @loopback}, 0xc) 10:23:39 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000280)={'vcan0\x00'}) 10:23:39 executing program 4: r0 = epoll_create1(0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100), 0x0, 0x0) 10:23:39 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8940, 0x0) 10:23:39 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$binfmt_aout(r0, &(0x7f0000000180), 0x20) 10:23:40 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x4020940d, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:23:40 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockname(r0, 0x0, &(0x7f00000000c0)) 10:23:40 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)) 10:23:40 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x5eb0c0, 0x0) 10:23:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2, 0x7, 0x3}, 0x14}}, 0x0) 10:23:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000180)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0) 10:23:40 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1b768, 0x0, 0x0) 10:23:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$can_bcm(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x61) 10:23:40 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0xc0189436, &(0x7f0000000280)={'vlan0\x00'}) 10:23:40 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x77359400}, 0x0) 10:23:40 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x9c02) 10:23:40 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0xc0189436, 0x0) 10:23:40 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$l2tp(r0, 0x0, 0x0) 10:23:40 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0x5421, 0x0) 10:23:40 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x10, 0x0) 10:23:40 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000001280)={&(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x3ff}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=[@hoplimit_2292={{0x14}}], 0x18}, 0xc0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @dev}, @llc, @isdn, 0xfffd}) 10:23:40 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x702) 10:23:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000001240)=""/81, &(0x7f00000012c0)=0x51) 10:23:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0xb, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 10:23:40 executing program 1: socketpair(0x6, 0x0, 0x0, &(0x7f00000015c0)) 10:23:40 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x8918, 0x0) 10:23:41 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x3d, 0x0, &(0x7f00000000c0)) 10:23:41 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, 0x0, 0x0) 10:23:41 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x2000) 10:23:41 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8910, &(0x7f0000000280)={'vlan0\x00'}) 10:23:41 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8983, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 10:23:41 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x5452, &(0x7f0000000280)={'ipvlan1\x00'}) 10:23:41 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 10:23:41 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140c, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 10:23:41 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ppoll(&(0x7f0000000680)=[{r0, 0x110}], 0x1, 0x0, 0x0, 0x0) 10:23:41 executing program 0: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8913, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x348, 0x290, 0x1b8, 0xffffffff, 0x290, 0x1b8, 0x448, 0x448, 0xffffffff, 0x448, 0x448, 0x5, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @rand_addr, @port, @gre_key}}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'dummy0\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @multicast2, @remote, @port, @gre_key}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'syzkaller1\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@dev, @ipv4=@local, @icmp_id}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 10:23:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x541b, 0x0) 10:23:41 executing program 5: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8970, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:41 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x15, 0x0, 0x0) 10:23:41 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x7, &(0x7f00000006c0)=@raw=[@func, @btf_id, @ldst, @initr0, @jmp], &(0x7f0000000700)='syzkaller\x00', 0x8000, 0x8, &(0x7f0000000740)=""/8, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f00000007c0), 0x10}, 0x53) 10:23:41 executing program 2: bpf$MAP_CREATE(0x12, 0x0, 0x0) 10:23:41 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x40305828, 0x0) 10:23:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 10:23:41 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x5460, 0x0) 10:23:41 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8940, &(0x7f0000000280)={'vlan0\x00'}) 10:23:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2, 0xa, 0x3}, 0x14}}, 0x0) 10:23:41 executing program 2: pselect6(0x3e, &(0x7f0000000040), &(0x7f0000000180), 0x0, 0x0, 0x0) 10:23:41 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x19, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:41 executing program 4: syz_genetlink_get_family_id$batadv(0xfffffffffffffffd, 0xffffffffffffffff) 10:23:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3}}]}, 0x1c}}, 0x0) 10:23:41 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x8, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:41 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x40049409, 0x0) 10:23:41 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0xb00) 10:23:41 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8902, 0x0) 10:23:41 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8913, &(0x7f0000000280)={'vlan0\x00'}) 10:23:41 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x891e, &(0x7f0000000280)={'vlan0\x00'}) 10:23:41 executing program 1: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:41 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000380), 0x12) 10:23:42 executing program 2: r0 = socket(0x2, 0xa, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, 0x0) 10:23:42 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x8, 0x0, 0x0) 10:23:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 10:23:42 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:42 executing program 1: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x894a, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:42 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x8936, &(0x7f0000001480)={@private0, @dev, @private0}) 10:23:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, 0x2, 0x9, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x2c}}, 0x0) 10:23:42 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) 10:23:42 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000140), 0x0, 0x0) 10:23:42 executing program 4: process_vm_readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 10:23:42 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000b00)={&(0x7f0000000500)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 10:23:42 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0xc0045878, 0x0) 10:23:42 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0x5450, 0x0) 10:23:42 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x5452, &(0x7f0000000280)={'vlan0\x00'}) 10:23:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000500)=0x9, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00', r0) 10:23:42 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={0x0}}, 0x0) 10:23:42 executing program 1: bpf$MAP_CREATE(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 10:23:42 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000001480)={@private0, @dev, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001}) 10:23:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 10:23:43 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)='$', 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000004b40)={0x0, 0x0, 0x0}, 0x0) 10:23:43 executing program 5: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000c00)={0xfffffff7}, 0x8) 10:23:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14}}, 0x54}}, 0x0) 10:23:43 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) 10:23:43 executing program 2: r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 10:23:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300)='NLBL_MGMT\x00', r1) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r2, 0x919}, 0x14}}, 0x0) 10:23:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000002010300000000000000000000000000180002"], 0x2c}}, 0x0) 10:23:43 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0xc0189436, 0x0) 10:23:43 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8940, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:23:43 executing program 5: bpf$MAP_CREATE(0x21, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 10:23:43 executing program 0: sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000280)={'vlan0\x00'}) 10:23:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0xb, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 484.940616][T18212] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 10:23:43 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x40049409, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 10:23:43 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$llc(r0, 0x0, 0x0) [ 485.002323][T18220] vlan0: mtu greater than device maximum [ 485.041378][T18222] vlan0: mtu greater than device maximum 10:23:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=ANY=[@ANYBLOB="d00100002b0073"], 0x1d0}}, 0x0) 10:23:43 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001480)={@private0, @dev, @private0, 0x0, 0x21, 0x8000, 0x0, 0x0, 0x1000001}) 10:23:43 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x26, 0x0, &(0x7f00000000c0)) 10:23:43 executing program 1: r0 = socket(0x15, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000002180)={0x0, 0x0, 0x0}, 0x40012022) 10:23:43 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x10, 0x0) 10:23:43 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) 10:23:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x6, 0x6, 0x401}, 0x14}}, 0x0) 10:23:43 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000001480)={@private0, @dev, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80240098}) 10:23:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}, 0x0) 10:23:43 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x14, 0x0, &(0x7f00000000c0)) 10:23:43 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x14, 0x0, 0x0) 10:23:43 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x541b, 0xb05300) 10:23:43 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x40049409, 0x0) 10:23:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockname(r0, 0x0, &(0x7f0000000300)) 10:23:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001600)={0x14, r1, 0x1}, 0x14}}, 0x0) 10:23:43 executing program 3: pipe(&(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netrom_SIOCDELRT(r0, 0x541b, 0x0) 10:23:43 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x31, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:43 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x7, &(0x7f00000006c0)=@raw=[@func, @btf_id, @ldst, @initr0, @jmp], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x8, &(0x7f0000000740)=""/8, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f00000007c0), 0x10}, 0x53) 10:23:43 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a0, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:23:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc) 10:23:43 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x1405, 0x1}, 0x10}}, 0x0) 10:23:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0xb11, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x24}}, 0x0) 10:23:43 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8914, &(0x7f0000000280)={'vlan0\x00'}) 10:23:43 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000001400)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000001340)=[{0x0}, {&(0x7f0000000140)='|', 0x1}], 0x2, &(0x7f00000015c0)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) 10:23:44 executing program 5: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8930, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x38, 0x0, &(0x7f00000000c0)) 10:23:44 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8946, &(0x7f0000000280)={'vlan0\x00'}) 10:23:44 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 10:23:44 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x89e1, 0x0) 10:23:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4d8, 0x200, 0x0, 0x298, 0x298, 0x100, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'geneve0\x00', 'virt_wifi0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @TTL={0x28, 'TTL\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 10:23:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000000c0)) 10:23:44 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000003940)="ef", 0x1}], 0x1}, 0x0) 10:23:44 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, 0x0, &(0x7f0000000080)) 10:23:44 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2042) [ 485.971096][T18299] x_tables: duplicate underflow at hook 1 10:23:44 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, @llc, @isdn, 0x5}) 10:23:44 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:44 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 10:23:44 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet6(r0, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)=[@flowinfo={{0x14}}], 0x18}, 0x0) 10:23:44 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x5760, 0x0) 10:23:44 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@local, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x40, 0x5}) 10:23:44 executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x4e0, 0x290, 0x1b8, 0xffffffff, 0x290, 0x1b8, 0x448, 0x448, 0xffffffff, 0x448, 0x448, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010101, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x180, 0x1b8, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}, @common=@unspec=@string={{0xc0, 'string\x00'}, {0xffff, 0x2, 'bm\x00', "48a98b4f850ce0f8ecdf8fbad51f34273e92b5a9b5470436f7389455282628b04515f25a3779e23e7f7542a08d92196d1f51e8ce906a8b56e9110b24faa995a77e34134eca33d18786e79b335a9c0bb32f384d441e6364fd0333f6d3b9c17b09949817d3aa4e175b2544ea4ed8e5a7ebabe00926ed4e27b330b5126d436a8bc5", 0x57, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @rand_addr, @port, @gre_key=0x2}}}}, {{@ip={@broadcast, @private=0xa010102, 0x0, 0x0, 'dummy0\x00', 'macvlan0\x00', {}, {}, 0x4}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[], 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast2, @remote, @port=0x4e22, @gre_key=0x8}}}}, {{@ip={@dev, @broadcast, 0x0, 0xff000000, 'syzkaller1\x00', 'wlan0\x00', {0xff}, {0xff}, 0x6c, 0x3, 0x60}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@length={{0x28, 'length\x00'}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@dev={0xfe, 0x80, [], 0x25}, @ipv4=@local, @icmp_id=0x65, @port=0x4e23}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x2]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) 10:23:44 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f31d0a", 0x10, 0x11, 0x0, @rand_addr=' \x01\x00', @private2, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 10:23:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x9, 0x6, 0x401}, 0x14}}, 0x0) 10:23:44 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x137db84890643511) 10:23:44 executing program 3: bpf$MAP_CREATE(0x1c, 0x0, 0x0) [ 486.406614][T18326] x_tables: duplicate underflow at hook 1 [ 486.434808][T18328] x_tables: duplicate underflow at hook 1 10:23:44 executing program 0: r0 = socket(0x22, 0x2, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x80) 10:23:44 executing program 3: syz_genetlink_get_family_id$tipc(0xfffffffffffffffe, 0xffffffffffffffff) pipe(&(0x7f0000000bc0)) 10:23:44 executing program 1: bpf$MAP_CREATE(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 10:23:45 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) read(r0, &(0x7f00000000c0)=""/172, 0xac) 10:23:45 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x12023) 10:23:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc) 10:23:45 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x1a, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:45 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8904, 0x0) 10:23:45 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0x2, 0x0) 10:23:45 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @dev}, @llc, @isdn, 0x5}) 10:23:45 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 10:23:45 executing program 3: r0 = socket(0x11, 0x3, 0x0) bind$ax25(r0, 0x0, 0x0) 10:23:45 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x7, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:45 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0xc0045878, 0x0) 10:23:45 executing program 5: bpf$MAP_CREATE(0x4, 0x0, 0x0) 10:23:45 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0xd, 0x0, &(0x7f00000000c0)) 10:23:45 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x5452, &(0x7f0000001480)={@private0, @dev, @private0}) 10:23:45 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x16, 0x0, 0x0) 10:23:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0xf, 0xa, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 10:23:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0xb, 0x6, 0x401}, 0x14}}, 0x0) 10:23:45 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x31, 0x0, &(0x7f00000000c0)) 10:23:45 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x2f, 0x0, &(0x7f00000000c0)) 10:23:45 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x2, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:45 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0x5460, 0x0) 10:23:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, 0x0) 10:23:45 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x25, 0x0, &(0x7f00000000c0)) 10:23:45 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x2, 0x0) 10:23:45 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2121) 10:23:45 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8983, 0x0) 10:23:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{}, "0f998162e0defb5a", "831a584f25aa2f9be36a85969a8e5c72", "c2ff6908", "820e7e5a46d97e7a"}, 0x28) 10:23:45 executing program 3: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8943, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:45 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000), 0x26) 10:23:45 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0xb, 0x0, 0x0) 10:23:46 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8983, 0x0) 10:23:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000200)='GPL\x00', 0x5, 0xf5, &(0x7f0000000240)=""/245, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:23:46 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x39, 0x0, &(0x7f00000000c0)) 10:23:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000000140)='S', 0x1}], 0x2}, 0x0) 10:23:46 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x2a, 0x0, 0x0) 10:23:46 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x13, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:46 executing program 1: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89b1, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:46 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x40) 10:23:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x6, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 10:23:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000020a41"], 0x14}}, 0x0) 10:23:46 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 10:23:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000480)=0x788, 0x4) 10:23:46 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x5460, 0x0) 10:23:46 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x18, 0x0, 0x0) 10:23:46 executing program 5: sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0xc0189436, &(0x7f0000000280)={'vlan0\x00'}) 10:23:46 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 10:23:46 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8906, 0x0) 10:23:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x24, 0x2, 0x9, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 10:23:46 executing program 1: r0 = socket(0x15, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, 0x0) 10:23:46 executing program 4: r0 = socket(0x15, 0x5, 0x0) recvmsg$can_bcm(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x10040) 10:23:46 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8911, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:23:46 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000180)=0xc71, 0x4) 10:23:46 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x2, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 10:23:46 executing program 5: socketpair(0x18, 0x0, 0x2, &(0x7f0000000380)) 10:23:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x7, 0x801, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 10:23:46 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8993, &(0x7f0000000280)={'vlan0\x00'}) 10:23:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@ipv4_getnexthop={0x18, 0x6a, 0x101}, 0x18}}, 0x0) 10:23:47 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', r0) 10:23:47 executing program 5: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 10:23:47 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x89a1, 0x0) 10:23:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 10:23:47 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x107, 0x1, 0x0, 0x0) 10:23:47 executing program 4: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8993, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:47 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002dc0)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x1, r2, 0x1, 0x0, 0x6, @local}, 0x14) 10:23:47 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004b40)={0x0, 0x0, 0x0}, 0x0) 10:23:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000040)="4c69c17de78dc74c7aa6c076d445c969a68a9c6a3200b414b224c00a2eabcc43afe8a21a6f9599cd57218b78c56e204e06a27123ede0372091fa2095b767c78868ce4a66e85f33f8ffa2679bd0607bd0ecf6f79a6950999956164daa0e693a920a1c0892937b4d691643b266144cd3b7642a61dc5009206b89180daa3ec48e15ff6c5c0bc9228a5edf3f5a63c48352", 0x8f}, {&(0x7f0000000100)="8b01f6931bcc50", 0x7}, {&(0x7f0000000140)="5329f76144c78fca0a3e22f05d9101d08c9ddf58600b3e4a057e1d2dc228a7aa52d666f178f0449ba4abd175cbd7da447189ced4774e3e577b769d7ace5c65c504c6a1d366c36e395bc3dd9d8bc3ee4997cc9df5b61fffad0e64a06ca6ac94481f2a0f8e2605e797fea563afcf14951b76f6e99d9fe430bffb7c5dd21c602a9ba0b6bf1ee52fa0d7a0e59d5ea6c41d0c32bdd2ff1bfeefe560d556f056e5b9e42139d789bcb2", 0xa6}, {&(0x7f0000000200)="4687d70c1191596dfadd4afd81c5ff914cbc2705d7719a21110fc588e85ebfb6f9cc4f9f26a14ca71f7033aa0cdc40fd1c74a93ad9e1d7e42985acf83e08badd4cc0adef3b363f9a96ca8f96cb2555880c6668eefb3f2744efbc8e2e68f8b1c5a88d9b7003fd1d6c1b8de0f665a5f527c67dc7f137047fdb", 0x78}, {&(0x7f0000000280)="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", 0x401}], 0x5}, 0x0) 10:23:47 executing program 4: socketpair(0x2c, 0x3, 0x0, &(0x7f00000002c0)) 10:23:47 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000040)='L', 0x1}, {&(0x7f0000000100)="8b01f6931bcc50", 0x7}, {&(0x7f0000000140)='S', 0x1}], 0x3}, 0x0) 10:23:47 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x19, 0x0, 0x0) 10:23:47 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0x40049409, 0x0) 10:23:47 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0x4020940d, 0x0) 10:23:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@ipv4_getnexthop={0x20, 0x6a, 0x101, 0x0, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) 10:23:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x0, 0x82a}, 0x40) 10:23:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 10:23:47 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0xf02) 10:23:47 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0x40305839, 0x0) 10:23:47 executing program 1: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8971, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:47 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002600)={'batadv_slave_0\x00'}) 10:23:47 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x1d, 0x0, &(0x7f00000000c0)) 10:23:47 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000001480)={@private0, @dev, @private0, 0x0, 0x300}) 10:23:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) 10:23:47 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x700}, 0x0) 10:23:47 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x4020940d, &(0x7f0000000280)={'vlan0\x00'}) 10:23:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}, 0x300}, 0x0) 10:23:47 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000141) 10:23:47 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000001580)='ns/cgroup\x00') 10:23:48 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'virt_wifi0\x00'}) 10:23:48 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8911, &(0x7f0000000280)={'vlan0\x00'}) 10:23:48 executing program 5: bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 10:23:48 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002dc0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1, 0x0, r2}) 10:23:48 executing program 3: r0 = socket(0x1d, 0x2, 0x7) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={0x0}}, 0x0) 10:23:48 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x11, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:48 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x5411, &(0x7f0000001480)={@private0, @dev, @private0}) 10:23:48 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000040)="4c69c17de78dc74c7aa6c076d445c969a68a9c6a3200b414b224c00a2eabcc43afe8a21a6f9599cd57218b78c56e204e06a27123ede0372091fa2095b767c78868ce4a66e85f33f8ffa2679bd0607bd0ecf6f79a6950999956164daa0e693a920a1c0892937b4d691643b266144cd3b7642a61dc5009206b89180daa3ec48e15ff6c5c0bc9228a5edf3f5a", 0x8b}, {&(0x7f0000000100)="8b01f6931bcc50", 0x7}, {&(0x7f0000000140)="5329f76144c78fca0a3e22f05d9101d08c9ddf58600b3e4a057e1d2dc228a7aa52d666f178f0449ba4abd175cbd7da447189ced4774e3e577b769d7ace5c65c504c6a1d366c36e395bc3dd9d8bc3ee4997cc9df5b61fffad0e64a06ca6ac94481f2a0f8e2605e797fea563afcf14951b76f6e99d9fe430bffb7c5dd21c602a9ba0b6bf1ee52fa0d7a0e59d5ea6c41d0c32bdd2ff1bfeefe560d556f056e5b9e42139d789bcb2", 0xa6}, {&(0x7f0000000200)="4687d70c1191596dfadd4afd81c5ff914cbc2705d7719a21110fc588e85ebfb6f9cc4f9f26a14ca71f7033aa0cdc40fd1c74a93ad9e1d7e42985acf83e08badd4cc0adef3b363f9a96ca8f96cb2555880c6668eefb3f2744efbc8e2e68f8b1c5a88d9b7003fd1d6c1b8de0f665a5f527c67dc7f1", 0x74}, {&(0x7f0000000280)="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", 0x409}], 0x5}, 0x0) 10:23:48 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0) 10:23:48 executing program 3: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x891d, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:48 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, 0x0) 10:23:48 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891e, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:23:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000000201033f8d404ac8dbc3d0449dc1"], 0x2c}}, 0x0) 10:23:48 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x14, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:48 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x55) 10:23:48 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x541b, &(0x7f0000001480)={@private0, @dev, @private0}) 10:23:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x40) 10:23:48 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x541b, 0x0) 10:23:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0) 10:23:48 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000004c0)={@dev, @loopback, @private2, 0x0, 0x8001}) [ 490.660600][T18602] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 10:23:49 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @dev}, @llc, @isdn, 0xfffd}) 10:23:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x5, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 10:23:49 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x541b, 0x0) 10:23:49 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'ipvlan0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@local, @mcast1, [], [], 'tunl0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "a819"}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) [ 490.838082][T18618] x_tables: duplicate underflow at hook 3 10:23:49 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0}, 0x0) 10:23:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x400}, 0x40) 10:23:49 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x140c, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) 10:23:49 executing program 4: socketpair(0x1, 0x0, 0x3, &(0x7f0000000080)) 10:23:49 executing program 0: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8924, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:49 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000001400)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='M'], 0x18}, 0x0) 10:23:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x34}}, 0x0) 10:23:49 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000500)={0x2, 0x0, @multicast1}, 0x10) 10:23:49 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, 0x700) 10:23:49 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r0, 0x0, 0x0, 0x141, 0x0, 0x0) 10:23:49 executing program 5: socket$inet6(0xa, 0x5, 0x0) 10:23:49 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x894c, 0x0) 10:23:49 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0xc0189436, &(0x7f0000000280)={'ipvlan1\x00'}) 10:23:49 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x40305839, 0x0) 10:23:49 executing program 0: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8910, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:49 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, 0x0) 10:23:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)=@gettclass={0x24, 0x2a, 0x1}, 0x24}}, 0x0) 10:23:49 executing program 3: r0 = socket(0x1d, 0x2, 0x2) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={0x0}}, 0x0) 10:23:49 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r0, 0x0, 0x0, 0x10062, 0x0, 0x0) 10:23:49 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0xc020660b, 0x0) 10:23:49 executing program 0: bpf$MAP_CREATE(0x22, 0x0, 0x0) 10:23:49 executing program 4: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000080)) 10:23:49 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x5421, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 10:23:49 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000001400)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000001340)=[{0x0}, {0x0}, {&(0x7f0000000340)="f6", 0x1}], 0x3, &(0x7f00000015c0)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) 10:23:49 executing program 5: pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ppoll(&(0x7f0000000680)=[{r0}, {r1, 0x110}], 0x2, 0x0, 0x0, 0x0) 10:23:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14}}, 0x68}}, 0x0) 10:23:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000040)="4c69c17de78dc74c7aa6c076d445c969a68a9c6a3200b414b224c00a2eabcc43afe8a21a6f9599cd57218b78c56e204e06a27123ede0372091fa2095b767c78868ce4a66e85f33f8ffa2679bd0607bd0ecf6f79a6950999956164daa0e693a920a1c0892937b4d691643b266144cd3b7642a61dc5009206b89180daa3ec48e15ff6c5c0bc9228a5edf3f5a63c48352", 0x8f}, {0x0}, {&(0x7f0000000140)="5329f76144c78fca0a3e22f05d9101d08c9ddf58600b3e4a057e1d2dc228a7aa52d666f178f0449ba4abd175cbd7da447189ced4774e3e577b769d7ace5c65c504c6a1d366c36e395bc3dd9d8bc3ee4997cc9df5b61fffad0e64a06ca6ac94481f2a0f8e2605e797fea563afcf14951b76f6e99d9fe430bffb7c5dd21c602a9ba0b6bf1ee52fa0d7a0e59d5ea6c41d0c32bdd2ff1bfeefe560d556f056e5b9e42139d789bcb2", 0xa6}, {&(0x7f0000000200)="4687d70c1191596dfadd4afd81c5ff914cbc2705d7719a21110fc588e85ebfb6f9cc4f9f26a14ca71f7033aa0cdc40fd1c74a93ad9e1d7e42985acf83e08badd4cc0adef3b363f9a96ca8f96cb2555880c6668eefb3f2744efbc8e2e68f8b1c5a88d9b7003fd1d6c1b8de0f665a5f527c67dc7f1", 0x74}, {&(0x7f0000000280)="7db04333378bb1f2bd50b2348f72f37c0acef84520d67119aed6e86f0b91792222f41a13b22ddb443523f6eeace0553dcfc9f6e8f9d466b3edcf6e73f39d6c415d8b46c5457b9d5db784d3cd0143cfc7d0e167b2b0440554fc1df7e9c8bfbd90e3775de196a64ff63645748ac9faba52f7b80b2714dff5d7fab62cec80be00e1c3961ffac8787534ef8e167455b388b79b021157d17e1841bab04d62cd1d8a29b4bfffad8c589936cec64d45dfea7ab64f255390bf6a0e7f746030d0f874621f1c4c264bd696e9cccac551a74605788c4e6962f59a146c51a70fd0eda6621e335ee0320eb4bc04650a56971088bfbfa885250262015e41e4b2beae0c86a7ad98fcfef739717430940aa39d18ccae3a8162de8d933d57f73b0bcafbf0f81d87f2e966dac268ab3450590939adf25d28f32aaef510a6cdfa2bd200ca4a18a3419a045e9400271cc5c345eea0fb10d3f5cd4d9cd54c4362a95f865e2f25a4673547b8157d0b5e81b9d02bd7616972969334df21cfd85834211e539b0b78506bce211565f266eaf27d809ae9ffc3b81eb3b700c2442e5f69e41ce084d7359f6442afbd82990ffc342ee7554fccc459b6ba290de47efa29e92ab597f862eefc9e0960e6f0fcf4755dc9b443926c628dca737e1d0b3286212d8740b184aa73e11d8f343ec76ddb3c22ec786339693de883ac1cb523e0c35a71e30a3c7bf0b82298854791e3e4b85bceaee10a540a552bf7db58a4d83ff455e51d6b6dec7b8142525a32c06b996ae0fe05e67642099687c3ad1ebe0fbb63cece13234c99307e9cafec565c2360bab834696a2fcf1d3665a58337ffaa54bcc7a5e3b6fb496e7b7e2d0b737d91d00dd7f45566b03893be9897e43f16b15a9de1cf9b68a714476dfaecb9b628f9348106337857424989b759a6a89deb0c4eeb3b51a66a50095cf360255f1142478889aafdc69ca0b452d8796e2c12912434495301882b054d38948416479ea06ac615a179e061fb0b822ce8b7f10118f11710d36a34c46b6f7eec218eab36153d06fafe976277cec7f9ff266ad52a36501e3f5a5463a729b19c375b72ac60dbb4d16d1cf4a8b2d18ac1d0a39c4ed56ce473a3236a4e23413b2403c98e16f7a4ca24158b3fb2e830be93c187badea99c2360337f4c50adf64630b0f8a5f70cfff01d7020d3331e79e3a9b93e5b57717c5f856218fa181b29dedca4de133e8036f6e3c630f839ee5998623b2ab9af6e510b250d65cf2f6030ac298bdc2089cda6f073c2481620f471e0c139cb22e0e4651d09db4f005f4a570c93a25b9a40adfc800c75070015ec59f0046dc656f2adad1893cbec535c4cfad0daf640aeb6e4270e3092cb0dd2b40267b6ab2b174b26bf70421e49c29733fc0684d397b7d806660b57020351ebcfad6b33370bd445acf9596c6563e3b342fba6fd9864691992acd0601a73883cb9f6f575f5", 0x40c}], 0x5}, 0x0) 10:23:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 10:23:49 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 10:23:49 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) 10:23:49 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8910, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:23:50 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0xc, 0x0, 0x0) 10:23:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@local, @mcast1, [0x0, 0x0, 0xff], [], 'tunl0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "a819"}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 10:23:50 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x2, 0x0, 0x0) 10:23:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000001680)=0x1c, 0x4) 10:23:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x5, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 10:23:50 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x89a1, &(0x7f0000001480)={@private0, @dev, @private0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x1000001}) [ 491.806303][T18693] x_tables: duplicate underflow at hook 3 10:23:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@ipv4_getnexthop={0x20, 0x6a, 0x101, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 10:23:50 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x89a0, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 10:23:50 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x7, &(0x7f00000006c0)=@raw=[@func, @btf_id, @ldst, @initr0, @jmp={0x5, 0x0, 0x0, 0x5}], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x8, &(0x7f0000000740)=""/8, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x8, 0x10, &(0x7f00000007c0), 0x10}, 0x53) 10:23:50 executing program 4: bpf$MAP_CREATE(0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 10:23:50 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x8901, &(0x7f0000001480)={@private0, @dev, @private0}) 10:23:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_FLAGS={0x8}]}, 0x38}}, 0x0) 10:23:50 executing program 0: pipe(&(0x7f0000000bc0)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r0, 0x541b, &(0x7f0000000000)={0x0, @l2, @llc, @isdn}) 10:23:50 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8993, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:23:50 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x400, 0x0) 10:23:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYRES32], 0x14}}, 0x0) 10:23:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000140)={0x14, 0x12, 0x0, 0x301}, 0x14}}, 0x0) 10:23:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 10:23:50 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @loopback}, @llc, @isdn, 0x5}) 10:23:50 executing program 5: pselect6(0x40, &(0x7f0000000780), 0x0, &(0x7f0000000800), 0x0, 0x0) 10:23:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@remote, @dev={0xfe, 0x80, [], 0x34}, [], [0xff000000, 0xffffffff], 'ipvlan0\x00', 'bond0\x00', {}, {0xff}, 0x6c}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@local, @mcast1, [], [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], 'tunl0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x2b}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x11, "a819"}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4, 0x1, 0x5, '\x00', {0x4}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) socket(0x0, 0x0, 0x0) 10:23:50 executing program 0: sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8910, &(0x7f0000000280)={'vlan0\x00'}) 10:23:50 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0xde03) 10:23:50 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x28, 0x0, &(0x7f00000000c0)) 10:23:50 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0x4c01, 0x0) [ 492.327602][T18736] x_tables: duplicate underflow at hook 3 10:23:50 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x541b, 0x970000) [ 492.431104][T18736] x_tables: duplicate underflow at hook 3 10:23:50 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:23:50 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x140a, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 10:23:50 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x15, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:50 executing program 4: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8927, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:50 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x5452, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 10:23:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x10, 0x6, 0x401}, 0x14}}, 0x0) 10:23:51 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0xa}, @sadb_ident={0x2, 0xa}]}, 0x30}}, 0x0) 10:23:51 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x5421, 0x0) 10:23:51 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0xc, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:51 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x13, 0x0, 0x0) 10:23:51 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000180)={0x9}, 0x0, 0x0, 0x0) 10:23:51 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20800, 0x0) 10:23:51 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8927, &(0x7f0000000280)={'vlan0\x00'}) 10:23:51 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x140, 0x398, 0xffffffff, 0x0, 0x540, 0x688, 0x688, 0xffffffff, 0x688, 0x688, 0x5, 0x0, {[{{@ipv6={@local, @private2, [], [], 'bond_slave_1\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv4=@multicast1, @icmp_id, @icmp_id}}}, {{@ipv6={@private0, @remote, [], [], 'macvtap0\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4, @ipv4=@broadcast, @gre_key, @gre_key}}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@broadcast, @gre_key, @gre_key}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @remote, [], [], 'veth1_virt_wifi\x00', 'wg2\x00', {}, {}, 0x0, 0x0, 0x0, 0x345b245b21ee9cca}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={[], [], @broadcast}, @ipv4=@multicast2, @gre_key, @icmp_id}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 10:23:51 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x2, &(0x7f0000000280)={'vlan0\x00'}) 10:23:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000140)={0x18, 0x12, 0x0, 0x301, 0x0, 0x0, {}, [@nested={0x4}]}, 0x18}}, 0x0) 10:23:51 executing program 5: bpf$MAP_CREATE(0x23, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 10:23:51 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0x5451, 0x0) 10:23:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc) 10:23:51 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000140) 10:23:51 executing program 3: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0xc0189436, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:51 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8902, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 10:23:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x9}]}, 0x1c}}, 0x0) 10:23:51 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x2d, 0x0, &(0x7f00000000c0)) 10:23:51 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvmsg(r0, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x22140) 10:23:51 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @dev}, @llc, @isdn={0x22, 0x0, 0x0, 0x0, 0x9}}) 10:23:51 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xb) 10:23:52 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8912, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) [ 493.670926][T18824] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 10:23:52 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000001480)={@private0, @dev, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 10:23:52 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0xc0045878, 0x0) 10:23:52 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r0, 0x0, 0x0) 10:23:52 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8983, &(0x7f0000000280)={'vlan0\x00'}) 10:23:52 executing program 0: setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000001c0), 0xffffffffffffff22) 10:23:52 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x3b, 0x0, &(0x7f00000000c0)) 10:23:52 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00'}) 10:23:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000001fc0)={'sit0\x00', &(0x7f0000001f40)={'syztnl2\x00', 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @loopback, @private1}}) 10:23:52 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @private0}) 10:23:52 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:52 executing program 5: bpf$MAP_CREATE(0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 10:23:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x90a, 0x1}, 0x40) 10:23:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010"], 0x14}}, 0x0) 10:23:52 executing program 2: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x891e, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', r0) 10:23:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000020103"], 0x2c}}, 0x0) 10:23:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000020103b388bdb33c56b0a3fe24e3"], 0x2c}}, 0x0) 10:23:52 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x1) 10:23:52 executing program 1: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x5452, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:52 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000017c0)={0x2, 0x0, @loopback}, 0x10) [ 494.234165][T18871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 494.248748][T18872] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 10:23:52 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x21, 0x0, 0x0) 10:23:52 executing program 3: r0 = epoll_create1(0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 10:23:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x2, 0x9, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) 10:23:52 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @dev}, @llc={0x2}, @isdn, 0x5}) 10:23:52 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0xa}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@loopback}}]}, 0x60}}, 0x0) 10:23:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'ipvlan0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@local, @mcast1, [], [], 'tunl0\x00', 'syzkaller1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "a819"}}]}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 10:23:52 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @dev}, @llc, @isdn, 0x6}) 10:23:53 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8901, &(0x7f0000000280)={'vlan0\x00'}) 10:23:53 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:53 executing program 4: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8921, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:53 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0x40305829, 0x0) 10:23:53 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0x40186366, 0x0) 10:23:53 executing program 1: socketpair(0x1, 0x801, 0x0, &(0x7f0000000140)) 10:23:53 executing program 3: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8929, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:53 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000001400)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000015c0)=ANY=[], 0x18}, 0x0) 10:23:53 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x19, 0x0, &(0x7f00000000c0)) 10:23:53 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, 0x0) 10:23:53 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0x5452, 0x0) 10:23:53 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x6, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)={0x1c, 0x2, 0x8, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) 10:23:53 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x140c, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 10:23:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$netlink(r0, 0x0, &(0x7f00000000c0)) 10:23:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x2, 0x9, 0x301}, 0x14}}, 0x0) 10:23:53 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x42, 0x0, &(0x7f00000000c0)) 10:23:53 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x89a1, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 10:23:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, 0x2, 0x9, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @multicast2}}}]}]}, 0x2c}}, 0x0) 10:23:53 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x891d, &(0x7f0000000280)={'vlan0\x00'}) 10:23:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 10:23:53 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000001300)=ANY=[]) 10:23:53 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000180)={0x9}, 0x0, 0x0, 0x0) 10:23:53 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8901, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) [ 495.577149][T18943] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 10:23:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8}]}, 0x2c}}, 0x0) 10:23:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 10:23:54 executing program 1: pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ppoll(&(0x7f0000000680)=[{r1}, {r0}, {r2}], 0x3, 0x0, 0x0, 0x0) 10:23:54 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8943, &(0x7f0000000280)={'vlan0\x00'}) 10:23:54 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x15, 0x0, &(0x7f00000000c0)) 10:23:54 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8904, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:23:54 executing program 3: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f4, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:54 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) 10:23:54 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0xa, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x10000}, 0x40) 10:23:54 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)) 10:23:54 executing program 4: pipe(&(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_SIOCDELRT(r0, 0x541b, &(0x7f0000001480)={@mcast2, @dev, @private0}) 10:23:54 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002dc0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x89a0, &(0x7f0000001480)={@private0, @dev, @private0, 0x0, 0x21, 0x8000, 0x0, 0x0, 0x1000001, r2}) 10:23:54 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x140a}, 0x40) 10:23:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 10:23:54 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x140c, 0x1}, 0x10}}, 0x0) 10:23:54 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r0, 0x0, &(0x7f00000001c0)) 10:23:54 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) accept4(r0, 0x0, 0x0, 0x0) 10:23:54 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) 10:23:54 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa944e2601889a86dd6089245400200000fc020000000000000000000000000000fc"], 0x0) 10:23:54 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000200)=ANY=[]) 10:23:54 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8904, 0x0) 10:23:54 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0) 10:23:54 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000), 0x10) 10:23:54 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x67}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x50) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/109, 0x6d}, {&(0x7f00000003c0)=""/24, 0x18}], 0x2, &(0x7f0000000440)=""/4096, 0x1000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002dc0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002e80)={0x11, 0xb, &(0x7f0000002cc0)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @generic={0xde, 0xc, 0x1, 0x7, 0x9}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @jmp={0x5, 0x1, 0xb, 0x0, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffc}, @alu={0x0, 0x1, 0x4, 0xa, 0x2, 0x1, 0xffffffffffffffff}, @ldst={0x1, 0x2, 0x3, 0x6, 0x3, 0xfffffffffffffff0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000002d40)='GPL\x00', 0x2, 0x3c, &(0x7f0000002d80)=""/60, 0x41100, 0x10, [], r5, 0x0, r2, 0x8, &(0x7f0000002e00)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000002e40)={0x4, 0x6, 0xff, 0x3}, 0x10}, 0x78) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x3a, r5}) getsockname(r0, 0x0, &(0x7f0000000300)) 10:23:54 executing program 0: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8923, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:54 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000001480)={@private0, @dev, @private0, 0x0, 0x0, 0x2}) 10:23:54 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x4020940d, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 10:23:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 10:23:54 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_l2cap(r0, 0x0, 0x0) 10:23:54 executing program 5: socketpair(0x27, 0x0, 0x0, &(0x7f0000000040)) 10:23:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000000000006306"], 0x14}}, 0x0) 10:23:54 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x2b, 0x0, 0x0) 10:23:54 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8982, &(0x7f0000000280)={'vlan0\x00'}) 10:23:54 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x28, 0x0, 0x0) 10:23:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000300)) 10:23:54 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x5421, &(0x7f0000000280)={'ipvlan1\x00'}) 10:23:54 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x18, 0x140a, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 10:23:54 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x8982, &(0x7f0000001480)={@private0, @dev, @private0}) 10:23:54 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000001480)={@private0, @dev, @private0, 0x0, 0x0, 0x300}) 10:23:54 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40000, 0x0) 10:23:55 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0xa, 0x0, 0x0) 10:23:55 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x185802, 0x0) 10:23:55 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x3, 0x0, 0x0) 10:23:55 executing program 1: bpf$MAP_CREATE(0x13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 10:23:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) 10:23:55 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0x541b, 0x0) 10:23:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc25770d86deb8985, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:23:55 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x140a, 0x1}, 0x10}}, 0x0) 10:23:55 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) 10:23:55 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x101041, 0x0) 10:23:55 executing program 1: bpf$MAP_CREATE(0x1c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 10:23:55 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001480)={@private0, @dev, @private0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x1000001}) 10:23:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x5, 0x6, 0x401}, 0x14}}, 0x0) 10:23:55 executing program 0: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8937, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:55 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x32, 0x0, 0x0) 10:23:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x1000}, 0x40) 10:23:55 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x8983, &(0x7f0000001480)={@private0, @dev, @private0}) 10:23:55 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff}, 0x0) 10:23:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x9, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0x50}}, 0x0) 10:23:55 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, 0x0, &(0x7f0000000280)) 10:23:55 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x5451, 0x0) 10:23:55 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) 10:23:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) 10:23:55 executing program 3: bpf$MAP_CREATE(0x17, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 497.242499][T19093] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 497.274388][T19093] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 10:23:55 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 10:23:55 executing program 5: r0 = socket(0x10, 0x2, 0x6) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) 10:23:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x20, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}}, 0x0) 10:23:55 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x62c700, 0x0) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000180)={0x9}, 0x0, 0x0, 0x0) 10:23:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xffffffffffffff81, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}}, 0x0) 10:23:55 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_netrom_SIOCDELRT(r1, 0x40305828, 0x0) 10:23:55 executing program 4: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8914, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}}}, 0x24}}, 0x0) 10:23:55 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x8918, &(0x7f0000001480)={@private0, @dev, @private0}) 10:23:55 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x22, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) 10:23:55 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x5411, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 10:23:56 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000140), 0x18) 10:23:56 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@private, @remote}, 0xc) 10:23:56 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ppoll(&(0x7f0000000680)=[{r0}], 0x1, 0x0, 0x0, 0x0) 10:23:56 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) 10:23:56 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8904, &(0x7f0000000280)={'vlan0\x00'}) 10:23:56 executing program 5: syz_emit_ethernet(0x10d, &(0x7f0000000140)=ANY=[@ANYBLOB="fffffffffffffbffffffffff86dd657c408900d72ffffe8000000000000000000000000000bbfedf"], 0x0) 10:23:56 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:23:56 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x541b, 0x0) 10:23:56 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x37, 0x0, &(0x7f00000000c0)) 10:23:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x2, 0x6, 0x301}, 0x14}}, 0x0) 10:23:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x7}]}, 0x1c}}, 0x0) 10:23:56 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x24, 0x0, &(0x7f00000000c0)) 10:23:56 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x4020940d, 0x0) 10:23:56 executing program 5: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x5421, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:56 executing program 3: pselect6(0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x0) 10:23:57 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000001480)={@private0, @dev, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 10:23:57 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x11, 0x0, 0x0) 10:23:57 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x541b, 0x0) 10:23:57 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000040)="4c69c17de78dc74c7aa6c076d445c969a68a9c6a3200b414b224c00a2eabcc43afe8a21a6f9599cd57218b78c56e204e06a27123ede0372091fa2095b767c78868ce4a66e85f33f8ffa2679bd0607bd0ecf6f79a6950999956164daa0e693a920a1c0892937b4d691643b266144cd3b7642a61dc5009206b89180daa3ec48e15ff6c5c0bc9228a5edf3f5a63c483", 0x8e}, {&(0x7f0000000100)="8b01f6931bcc50", 0x7}, {&(0x7f0000000140)="5329f76144c78fca0a3e22f05d9101d08c9ddf58600b3e4a057e1d2dc228a7aa52d666f178f0449ba4abd175cbd7da447189ced4774e3e577b769d7ace5c65c504c6a1d366c36e395bc3dd9d8bc3ee4997cc9df5b61fffad0e64a06ca6ac94481f2a0f8e2605e797fea563afcf14951b76f6e99d9fe430bffb7c5dd21c602a9ba0b6bf1ee52fa0d7a0e59d5ea6c41d0c32bdd2ff1bfeefe560d556f056e5b9e42139d789bcb2", 0xa6}, {&(0x7f0000000200)="4687d70c1191596dfadd4afd81c5ff914cbc2705d7719a21110fc588e85ebfb6f9cc4f9f26a14ca71f7033aa0cdc40fd1c74a93ad9e1d7e42985acf83e08badd4cc0adef3b363f9a96ca8f96cb2555880c6668eefb3f2744efbc8e2e68f8b1c5a88d9b7003fd1d6c1b8de0f665a5f527c67dc7f1", 0x74}, {&(0x7f0000000280)="7db04333378bb1f2bd50b2348f72f37c0acef84520d67119aed6e86f0b91792222f41a13b22ddb443523f6eeace0553dcfc9f6e8f9d466b3edcf6e73f39d6c415d8b46c5457b9d5db784d3cd0143cfc7d0e167b2b0440554fc1df7e9c8bfbd90e3775de196a64ff63645748ac9faba52f7b80b2714dff5d7fab62cec80be00e1c3961ffac8787534ef8e167455b388b79b021157d17e1841bab04d62cd1d8a29b4bfffad8c589936cec64d45dfea7ab64f255390bf6a0e7f746030d0f874621f1c4c264bd696e9cccac551a74605788c4e6962f59a146c51a70fd0eda6621e335ee0320eb4bc04650a56971088bfbfa885250262015e41e4b2beae0c86a7ad98fcfef739717430940aa39d18ccae3a8162de8d933d57f73b0bcafbf0f81d87f2e966dac268ab3450590939adf25d28f32aaef510a6cdfa2bd200ca4a18a3419a045e9400271cc5c345eea0fb10d3f5cd4d9cd54c4362a95f865e2f25a4673547b8157d0b5e81b9d02bd7616972969334df21cfd85834211e539b0b78506bce211565f266eaf27d809ae9ffc3b81eb3b700c2442e5f69e41ce084d7359f6442afbd82990ffc342ee7554fccc459b6ba290de47efa29e92ab597f862eefc9e0960e6f0fcf4755dc9b443926c628dca737e1d0b3286212d8740b184aa73e11d8f343ec76ddb3c22ec786339693de883ac1cb523e0c35a71e30a3c7bf0b82298854791e3e4b85bceaee10a540a552bf7db58a4d83ff455e51d6b6dec7b8142525a32c06b996ae0fe05e67642099687c3ad1ebe0fbb63cece13234c99307e9cafec565c2360bab834696a2fcf1d3665a58337ffaa54bcc7a5e3b6fb496e7b7e2d0b737d91d00dd7f45566b03893be9897e43f16b15a9de1cf9b68a714476dfaecb9b628f9348106337857424989b759a6a89deb0c4eeb3b51a66a50095cf360255f1142478889aafdc69ca0b452d8796e2c12912434495301882b054d38948416479ea06ac615a179e061fb0b822ce8b7f10118f11710d36a34c46b6f7eec218eab36153d06fafe976277cec7f9ff266ad52a36501e3f5a5463a729b19c375b72ac60dbb4d16d1cf4a8b2d18ac1d0a39c4ed56ce473a3236a4e23413b2403c98e16f7a4ca24158b3fb2e830be93c187badea99c2360337f4c50adf64630b0f8a5f70cfff01d7020d3331e79e3a9b93e5b57717c5f856218fa181b29dedca4de133e8036f6e3c630f839ee5998623b2ab9af6e510b250d65cf2f6030ac298bdc2089cda6f073c2481620f471e0c139cb22e0e4651d09db4f005f4a570c93a25b9a40adfc800c75070015ec59f0046dc656f2adad1893cbec535c4cfad0daf640aeb6e4270e3092cb0dd2b40267b6ab2b174b26bf70421e49c29733fc0684d397b7d806660b57020351ebcfad6b33370bd445acf9596c6563e3b342fba6fd9864691992acd0601a7388", 0x406}], 0x5}, 0x0) 10:23:57 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x1a, 0x0, 0x0) 10:23:57 executing program 2: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89b0, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:57 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8901, 0x0) 10:23:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x2}]}, 0x1c}}, 0x0) 10:23:57 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) 10:23:57 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x3c) 10:23:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) [ 499.086344][T19194] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 10:23:57 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet6(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@hoplimit_2292={{0x14}}, @hopopts={{0x18}}], 0x30}, 0x0) 10:23:57 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @dev}, @llc, @isdn, 0x4}) 10:23:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x18, 0x1}, 0x40) 10:23:57 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:23:57 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 10:23:57 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, 0x0) 10:23:57 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000180)={0x9}, 0x0, 0x0, 0x0) 10:23:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002dc0)={'batadv_slave_0\x00', 0x0}) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@loopback, 0x0, r1}) 10:23:58 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x4020940d, &(0x7f0000001480)={@private0, @dev, @private0}) 10:23:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000000801"], 0x14}}, 0x0) 10:23:58 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8947, &(0x7f0000000280)={'vlan0\x00'}) 10:23:58 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="a9", 0x1}], 0x1}, 0x0) 10:23:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) 10:23:58 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000001400)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) 10:23:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000540)={'sit0\x00', 0x0}) 10:23:58 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) 10:23:58 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0xc020660b, 0x0) 10:23:58 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8940, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) [ 499.955040][T19233] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 10:23:58 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvfrom(r0, 0x0, 0x0, 0x40002180, 0x0, 0x0) 10:23:58 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000001300)=ANY=[@ANYBLOB="ffff225bee210000db11020000f90c12a8"]) 10:23:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x6, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 10:23:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @local}], 0x10) 10:23:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x2, 0x8, 0x301}, 0x14}}, 0x0) 10:23:58 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 10:23:58 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x5450, 0x0) 10:23:58 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000001800)=[{}, {}], 0x10) 10:23:58 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8914, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 10:23:58 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8901, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:23:58 executing program 4: bpf$MAP_CREATE(0x15, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 10:23:58 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8903, &(0x7f0000000280)={'vlan0\x00'}) 10:23:58 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @dev}, @llc, @isdn}) 10:23:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 10:23:58 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8903, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 10:23:58 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000280)=0xfffffffffffffe7a) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, 0x0, 0x1, {0x2, 0x0, 0x4}, 0xfe}, 0x18) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000240)={0x100, 0x7, 0x10000}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) pread64(r5, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) pread64(r6, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00', r3) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000ac0)={0xb0c, r8, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x1b}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x20}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x5b3, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x403, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4}, @device_b, @device_b, @from_mac, {0x0, 0x3e}}, 0x286, @random=0x8, 0x1000, @void, @val={0x1, 0x2, [{0x1, 0x1}, {0x9}]}, @val={0x3, 0x1, 0x8}, @val={0x4, 0x6, {0x48, 0x3f, 0x4, 0x9}}, @val={0x6, 0x2, 0x5}, @val={0x5, 0xf1, {0x5, 0x1b, 0x7, "6f732f39dc5c1448e90d2b0f642c2b473efa70561a8d2a0e78cfb43b431d5344e6d7f71c53988dfb3d1a719013fd716004af0869bba728b48c9aef3ce6b1c66956de7229401b653b5dbff01afaf9965327226a1d40cf9223be7f8787857024f04e783a039936eead08628285a133553b3bcf72dc2636094e285c4ed77d5259ce0c1e2c6a17b96052db2ae88a55ac3f157d4d1937a7c0a26be33cb9cbaca88bf85d0e8f6e06404f11f13db320d99e7c6f6a5e78841d5ee72c8f2b58361a88c6beb8dbf24b8a373bf85ff44365c26094c163b6a7cc87fab018a3d91bac6e89496a8539a1614876f1e234decbbdb9a8"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x1, 0xa5, 0x1}}, @val={0x2d, 0x1a, {0x401c, 0x2, 0x0, 0x0, {0xcbba, 0x3f, 0x0, 0x1f, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x8, 0x8001, 0x8}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0xc1}}, @val={0x76, 0x6, {0x38, 0x6, 0x7, 0x6}}, [{0xdd, 0x1e, "c9879ef7e72885d0f93045cf7243410a4be770e73e1e3cbdc4267b4b7896"}, {0xdd, 0xf8, "18ae32fb17ac7b8879a29d55d00a7603579c27fcc377a6e7864bb60d5c3495fbeab00504bb156987a4900f918509aeead234af5a069a98b186c2a61613278610d155eb68d4cbacd62d02e2d4c5de40d92d65bd3c18844d007c5cfb2c2eddd5e013729dc97bcb8d015db4cf16f567d6b474b4c3dae91a3dac6c7c7f7dda290520d2ebddf88775f26c0866354295c6077b6be122e45fcd1648649ecfa1b837f8802c6ba5b968800d254b8f022d5b7d2ba53e021f9e4a328bff8e33042bb018bc7f7e56b745208321bc2abc51beefb5c91090398fcb1a93ce3f6289da14dc4cd5e3b4f06dd4339c2575e922cba500cbb59a768f007a6dc9b825"}, {0xdd, 0x36, "424f6a78139a0fcd36169b8e1693329977e3addc273ef3d81a856d59ba9ef6efb78d78ca196e3bd9e0c76f2032e0e35a467b6274e40d"}, {0xdd, 0x14, "2495b4e6f60fef8815a36795166160079021225e"}, {0xdd, 0xd0, "98629d5fc209304a2ecd962b409791b88aa04cd8f1f2d03fd9e9860d966a02959c8e7654c7c34751688735741cb8ba7f93ab2db76457fd37c4c6c9e6addfbaa68d087f271ef802697a20327ea9f864a28bfd5a2a9e2979b03f68f76c70dc6b58d0898199b8d7591e9a2920dbf91c1db8ef6223840ab9d0f1d91c18f1220752d0b83165bfda3623e95a4a4b01187f3e183c6a56d7c1254988f9b437b12e1493ebf8803269c9b9b91daac405a3cea11f61f538180e7a9fa4492007faf7e77a57b37156a6354231f0f36aa60c5bf48adff8"}, {0xdd, 0x34, "02b8f719f471ee2e7cbb7348b5fabdde09fb07bbe7ef961969f4854be18cc5272bfc8304c3163ef48ee52cc68133ca1fef4e06fe"}, {0xdd, 0x28, "4ee648dabbb834bc298a77703b2b62db491fa4e235e689941650308d1acc0351906e93e2210ff2d0"}]}}, @NL80211_ATTR_FTM_RESPONDER={0xf0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x82, 0x3, "f1bc18adc84c049c5a178a9906573e5f5f7b6c6f86d1b9b48f90f874e36b3e46cc08acacdb3867693e335704e6b6c9c3b5f7e9ccd79886ad5f62ad2b75239966b72139aeec33ae5638d8f8bf7caadaf45ac45e9f86cfabe2368691c6141c70d03db7097fb580ad0271d243a2482ee7c7cb7f16cce335a42f78b295355f72"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x62, 0x3, "a34dbd7363be4c7cbf42935393fa851b7e83638a1325b499e93513edc8c986b1dc9ee7c3ee9e93f187e40e04bd6edf444e5c914692c1bdeb74901a8bbb8f521650f0e1587ac1a28b837e31dff71ac2514108d09e4233895ed435b719d365"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}]]}, 0xb0c}, 0x1, 0x0, 0x0, 0x810}, 0x884) pread64(r7, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r9, &(0x7f0000000180)=@rc={0x1f, @fixed}, &(0x7f0000000200)=0x10c86166) getsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x10, 0x0) 10:23:58 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x80108906, 0x0) 10:23:58 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x12, 0x0, 0x0) 10:23:58 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0xf, 0x0, 0x0) 10:23:58 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x80108906, 0x0) 10:23:58 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8943, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:23:58 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) 10:23:58 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002dc0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x89a1, &(0x7f0000001480)={@private0, @dev, @private0, 0x0, 0x21, 0x8000, 0x0, 0x0, 0x1000001, r2}) 10:23:58 executing program 0: r0 = socket(0x15, 0x5, 0x0) bind$netrom(r0, 0x0, 0x0) 10:23:58 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = gettid() r2 = gettid() sendmsg$netlink(r0, &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005700)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee00, 0xee00}}}], 0x40}, 0x0) 10:23:58 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 500.652853][ T3221] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.659287][ T3221] ieee802154 phy1 wpan1: encryption failed: -22 10:23:59 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x4000041) 10:23:59 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xffff7ffd}, 0x8) 10:23:59 executing program 5: socket$rds(0x15, 0x5, 0x0) pselect6(0x3e, &(0x7f0000000040), &(0x7f0000000180)={0x9}, 0x0, 0x0, 0x0) 10:23:59 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x5452, 0x0) 10:23:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 10:23:59 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @dev}, @llc, @isdn, 0x104}) 10:23:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'ipvlan0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@local, @mcast1, [], [], 'tunl0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "a819"}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) socket(0x0, 0x0, 0x0) 10:23:59 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@loopback}) 10:23:59 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) gettid() gettid() sendmsg$netlink(r0, &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}, 0x0) 10:23:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[], 0x12c}}, 0x0) 10:23:59 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x12, 0x0, &(0x7f00000000c0)) [ 500.960204][T19316] x_tables: duplicate underflow at hook 3 10:23:59 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x7, 0x0, 0x0, 0x0) 10:23:59 executing program 2: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8922, &(0x7f0000000080)={'sit0\x00', 0x0}) [ 501.045595][T19316] x_tables: duplicate underflow at hook 3 10:23:59 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x29, 0x0, &(0x7f00000000c0)) 10:23:59 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) 10:23:59 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@remote, @empty}, 0xc) [ 501.113175][T19330] sit0: mtu less than device minimum 10:23:59 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8904, 0x0) 10:23:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x2}}}}, 0x30}}, 0x0) 10:23:59 executing program 2: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8932, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000012c0)=[{0x0}, {0x0}, {&(0x7f0000000280)='}', 0x1}], 0x3}, 0x0) 10:23:59 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8940, 0x0) 10:23:59 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x89a0, &(0x7f0000001480)={@private0, @dev, @private0}) 10:23:59 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x8912, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @dev}, @llc, @isdn}) 10:23:59 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x894c, 0x0) 10:23:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) 10:23:59 executing program 0: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8946, &(0x7f0000000080)={'sit0\x00', 0x0}) 10:23:59 executing program 1: syz_genetlink_get_family_id$tipc(0xfffffffffffffffe, 0xffffffffffffffff) 10:23:59 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0xb, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:59 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8904, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 10:23:59 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x80108906, 0x0) 10:23:59 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @dev}, @llc, @isdn, 0x5, 0x0, 0x0, 0x0, 0x2}) 10:23:59 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:23:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 10:23:59 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x6, 0x0, 0x0) 10:23:59 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$binfmt_aout(r0, &(0x7f0000000180)={{0x0, 0x4}}, 0x20) 10:23:59 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:23:59 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x601) 10:24:00 executing program 0: socketpair(0x26, 0x5, 0x1f, &(0x7f00000002c0)) 10:24:00 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, 0x7) 10:24:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x3, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 10:24:00 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x40186366, 0x0) 10:24:00 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x122) 10:24:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 10:24:00 executing program 2: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8942, &(0x7f0000000080)={'sit0\x00', 0x0}) [ 501.874106][T19399] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:24:00 executing program 0: r0 = socket(0x15, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000000)={{0x3, @bcast}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 10:24:00 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x31, 0x0, 0x0) 10:24:00 executing program 1: pselect6(0x3e, &(0x7f0000000040), &(0x7f0000000180)={0x9}, 0x0, 0x0, 0x0) 10:24:00 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8) write$binfmt_misc(r0, 0x0, 0x0) 10:24:00 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x5421, &(0x7f0000000280)={'vlan0\x00'}) 10:24:00 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x24) 10:24:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 10:24:00 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x29, 0x0, 0x0) 10:24:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x40) 10:24:01 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x40049409, 0x0) 10:24:01 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000001480)={@private0, @dev, @private0, 0x300}) 10:24:01 executing program 2: bpf$MAP_CREATE(0x3, 0x0, 0x0) 10:24:01 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000004ac0)=[{0x0}, {&(0x7f0000003940)="ef", 0x1}, {&(0x7f0000003a40)="05", 0x1}], 0x3}, 0x0) 10:24:01 executing program 3: pselect6(0x0, 0x0, 0x0, &(0x7f0000000800), &(0x7f0000000840)={0x77359400}, &(0x7f00000008c0)={0x0}) 10:24:01 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x2a, 0x0, &(0x7f00000000c0)) 10:24:01 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x541b, 0x53b000) 10:24:01 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000005a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005980)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee01}}}], 0x20}, 0x0) 10:24:01 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 10:24:01 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8910, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 10:24:01 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8901, 0x0) 10:24:01 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x541b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 10:24:01 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) 10:24:01 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0xb, 0x0, &(0x7f00000000c0)) 10:24:01 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000004ac0)=[{0x0}, {0x0}, {&(0x7f0000003a40)="05", 0x1}], 0x3}, 0x0) 10:24:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@report={0x4c, 0x20, 0xff368cebaa6abf5b, 0x0, 0x0, {0x0, {@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x4c}}, 0x0) 10:24:02 executing program 3: socketpair(0x23, 0x0, 0x3, &(0x7f00000000c0)) 10:24:02 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000001400)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000000040)="9d0cd7d58bfa05d8a28730b87a2dfea465d3dc36e7fdcec9ad686200b6b882f53ffc024c9023cfa91eb24bbb768445d5a59777c84010dadc0e89a8b69d5eb720383ef3f5cac8ae74804f4ab6ca17775f1ff86aa9fdaac31bdfcb70981ed3f2b5597527f8c5a37f7ca93ece3982f15d71be5d318ed682b4e2fba6f29fe9bc744391b7e97a590f8c05ca6ce75b73d08521f5d7e4085f795511c9ca8df92d01938fcce9017a6e026acb8120d0119943148ce8200dc979e5803a2b00cbbdc3dbb6a45061716f5d122ee89f433757f68dfb3c", 0xd0}, {&(0x7f0000000140)="7c0828354e75dd2ebaf8989ceae8dcaf2970fa2eb4cada21d91f3a0de5ede20b554d80fc3d4bd2e1f138bd33fc861d6c8ffd7ccf751e842c8291d27c66bf094a22015b0c08a3f85ee8524ff79d37019df26f880f52abccf7", 0x58}, {&(0x7f00000001c0)="893419c55f", 0x5}, {&(0x7f0000000340)="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", 0x484}], 0x4, &(0x7f00000015c0)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) 10:24:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14, r1, 0x1}, 0x14}}, 0x0) 10:24:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x12, 0x2, 0x9, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @multicast2}}}]}]}, 0x2c}}, 0x0) 10:24:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002a000187"], 0x24}}, 0x0) 10:24:02 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @dev}, @llc, @isdn={0x2}}) 10:24:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x1f, 0x4) 10:24:02 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x56}, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x4}, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200}) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x1, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 10:24:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002dc0)={'batadv_slave_0\x00'}) 10:24:02 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 10:24:02 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080), 0xc, 0x0}, 0x884) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0) 10:24:02 executing program 0: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000002840)={0x0, 'syz1\x00'}) 10:24:02 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x10, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:24:02 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) write$ppp(r0, 0x0, 0x0) 10:24:02 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) 10:24:02 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x17, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) 10:24:02 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x5450, 0x0) 10:24:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1, &(0x7f0000000180)=@raw=[@func], &(0x7f0000000200)='GPL\x00', 0x5, 0xf5, &(0x7f0000000240)=""/245, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:24:02 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4, 0x0, &(0x7f00000000c0)) 10:24:02 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x541b, &(0x7f0000000280)={'ipvlan1\x00'}) 10:24:02 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x2000) 10:24:02 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800), 0x8) 10:24:02 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000001480)={@private0, @dev, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 10:24:02 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f0000000680)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, 0x0}, 0x0) 10:24:02 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x0, 0xffff}}}, 0x24}}, 0x0) 10:24:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0x0, 0xffff}}}, 0x24}}, 0x0) 10:24:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 10:24:02 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000042c0)={&(0x7f0000004180), 0xc, &(0x7f0000004280)={0x0}}, 0x0) 10:24:02 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @remote}, 0x1}}, 0x26) 10:24:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x9c) 10:24:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0xb0000010}) 10:24:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x3, 'veth0_macvtap\x00'}) 10:24:02 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5, 0x141) write$evdev(r0, &(0x7f0000000040)=[{{0x0, 0x2710}}], 0x10) 10:24:02 executing program 5: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$link(0x8, r0, r1) 10:24:02 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8983, &(0x7f0000000140)={'batadv_slave_1\x00'}) 10:24:02 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x1001) 10:24:02 executing program 3: openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x2960c3, 0x0) syz_open_dev$loop(&(0x7f0000001480)='/dev/loop#\x00', 0x0, 0x0) 10:24:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 10:24:02 executing program 2: r0 = socket(0x26, 0x5, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) 10:24:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x20d}, 0x20}}, 0x0) 10:24:02 executing program 1: r0 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) 10:24:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r2}]}, 0x24}}, 0x0) 10:24:03 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000001480)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 10:24:03 executing program 4: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, 0xfffffffffffffffb) 10:24:03 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r0) 10:24:03 executing program 5: openat$nvram(0xffffff9c, 0x0, 0x0, 0x0) 10:24:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002e00)={&(0x7f0000002bc0), 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)=@getchain={0x24}, 0x24}}, 0x0) 10:24:03 executing program 3: openat$nvram(0xffffff9c, 0x0, 0x511000, 0x0) 10:24:03 executing program 0: syz_open_dev$loop(&(0x7f0000001480)='/dev/loop#\x00', 0x0, 0x3e942) 10:24:03 executing program 4: add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 10:24:03 executing program 1: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='syz', 0xfffffffffffffffc) 10:24:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x18, 0x1, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x0) 10:24:03 executing program 2: add_key$keyring(&(0x7f0000001180)='keyring\x00', &(0x7f00000011c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) 10:24:03 executing program 3: request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0xfffffffffffffffa) 10:24:03 executing program 0: timer_create(0x0, &(0x7f0000001040)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}, 0x0) 10:24:03 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0) 10:24:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r2}}]}, 0x28}}, 0x0) 10:24:03 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000000)='logon\x00', &(0x7f0000000040)='\x00') 10:24:03 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timerfd_gettime(r0, 0x0) 10:24:03 executing program 3: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000004c0)='*}:\xda\r\xdd\x9c/!PJ\xa78\xaa7(\xd0H:\x9d\xd7\xf2p\x8bQ}:\x8euj\x8e\xbff\xca\x8a\v\xfd\x81\v\xd0\xc355B\'\x8e\x81%\rY*Tp\x8f\xbe\xfb\x91\r\xb9O=O\x9f\x86\x9a\r\xd2H\xbc\x86\x1f\xd2\xd1\x956\xc7X\\*\xc2\x06Y[\xb5\xdb&\x02$\xbf\x1f\xcc\x9a\a\xa2\xf9l\x00', 0xfffffffffffffffd) 10:24:03 executing program 5: r0 = socket(0x2, 0x1, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20004081) 10:24:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TUPLE={0x4}]}, 0x38}}, 0x0) 10:24:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000003c0)={0x0, 'bond_slave_1\x00'}) 10:24:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000001480)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 10:24:03 executing program 0: keyctl$search(0xa, 0x0, &(0x7f0000000000)='.request_key_auth\x00', 0x0, 0xfffffffffffffffb) 10:24:03 executing program 3: request_key(&(0x7f0000000100)='id_resolver\x00', 0x0, &(0x7f0000000180)='(\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0xd, 0xa, 0x401, 0x0, 0x0, {0x54c83f4a0a3352ac, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24040800}, 0x20004800) 10:24:03 executing program 5: request_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) 10:24:03 executing program 1: request_key(&(0x7f00000002c0)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0) 10:24:03 executing program 0: openat$cgroup_root(0xffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) 10:24:03 executing program 2: add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000180)='(\x00', 0x0) 10:24:03 executing program 3: request_key(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 10:24:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000004800017f00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff010000000000000000000000000001080002"], 0x38}}, 0x0) 10:24:03 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8983, 0x0) 10:24:03 executing program 1: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) 10:24:03 executing program 0: keyctl$link(0x8, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 10:24:03 executing program 1: syz_emit_ethernet(0x83, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "931edc", 0x4d, 0x11, 0x0, @private2, @local, {[], {0x0, 0x0, 0x4d, 0x0, @gue={{0x2}, "35c9b25bb5ac964324b4baa1ef21f334100afcf833e9676706bc1d5b5b5f75b08648345500af669ed7d54a3131e235ea1d1629d31e71a4fa77514119cd"}}}}}}}, 0x0) 10:24:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_FLAGS={0x8}]}, 0x34}}, 0x0) 10:24:04 executing program 3: keyctl$reject(0x13, 0x0, 0x0, 0x5, 0xfffffffffffffff8) 10:24:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0xd, 0xa, 0x401}, 0x14}}, 0x0) 10:24:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@NDA_DST_IPV6={0x14, 0x1, @private0}]}, 0x30}}, 0x0) 10:24:04 executing program 0: add_key$keyring(&(0x7f0000001100)='keyring\x00', 0x0, 0x0, 0x0, 0x0) 10:24:04 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4004700e, 0x0) 10:24:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000001480)='/dev/loop#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, 0x0) 10:24:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 10:24:04 executing program 5: r0 = getpid() wait4(r0, 0x0, 0x0, &(0x7f0000000040)) 10:24:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000001480)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 10:24:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000001040)={0x0, @sco={0x1f, @none}, @in={0x2, 0x0, @private}, @tipc=@id, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)='ip6_vti0\x00'}) 10:24:04 executing program 1: openat$rtc(0xffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x41, 0x0) 10:24:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'wg2\x00'}) 10:24:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000300), &(0x7f0000000340)=0x4) 10:24:04 executing program 2: r0 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 10:24:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) 10:24:04 executing program 0: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x585140) 10:24:04 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001480)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) 10:24:04 executing program 3: socket(0xa, 0x0, 0x6580) 10:24:04 executing program 5: request_key(&(0x7f0000000000)='id_resolver\x00', 0x0, 0x0, 0xfffffffffffffff9) 10:24:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x14, 0x6, 0x1, 0x3}, 0x14}}, 0x0) 10:24:04 executing program 4: r0 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 10:24:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000001480)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000001480)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 10:24:04 executing program 2: getresuid(&(0x7f0000000040), 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) 10:24:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000001480)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000000)={[], 0x0, 0xfe6, 0xffff6f2d}) 10:24:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000001480)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 10:24:04 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "931edc", 0x10, 0x11, 0x0, @private2, @local, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 10:24:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f0000000340)) 10:24:04 executing program 0: openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x80, 0x0) 10:24:04 executing program 2: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) pipe2(&(0x7f00000019c0), 0x0) 10:24:04 executing program 3: r0 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 10:24:04 executing program 4: getresuid(&(0x7f0000000040), 0x0, 0x0) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 10:24:04 executing program 5: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000080)={0x0, "8edaf5610a61cc6b3c739075761c342815406ba3ee51971cf1ddba615e3db01c7544aa21336b1288af17d662d2e6d41a383ca7288fc98cbdc3b7b0c0715840d6"}, 0x48, 0xfffffffffffffffc) 10:24:04 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$inet6(r0, 0x0, &(0x7f0000000040)) 10:24:04 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@dontfrag={{0x14}}, @rthdr_2292={{0x18}}], 0x30}}], 0x1, 0x0) 10:24:04 executing program 2: r0 = socket(0x26, 0x5, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 10:24:04 executing program 4: r0 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0) 10:24:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xba, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) 10:24:04 executing program 0: r0 = socket(0x10, 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00', r0) 10:24:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{}, {0x6}]}) 10:24:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={0x0, 0x7ffffffff000}}, 0x0) 10:24:05 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptp0\x00', 0x0, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) 10:24:05 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x40012001, 0x0, 0x0) 10:24:05 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x7}, {0x6}]}) 10:24:05 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4e, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'xfrm0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private2, @dev, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "7e9448422ba2a7f332ce850fa5e9252775c5997ef3143f31d8cbed14a631"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) [ 506.800922][ T36] audit: type=1326 audit(1614075845.086:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19763 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x465ef9 code=0x0 10:24:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002180)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)=ANY=[], 0x28}}, 0x0) 10:24:05 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r0, 0x0, 0x0) 10:24:05 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) [ 506.903312][ T36] audit: type=1326 audit(1614075845.186:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19771 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x465ef9 code=0x0 10:24:05 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f0000003140)={&(0x7f0000000cc0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000030c0)=[{&(0x7f0000000d00)="55dcfe", 0x3}, {0x0}, {&(0x7f0000001e40)="8b", 0x1}], 0x3}, 0x0) 10:24:05 executing program 2: r0 = socket(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) 10:24:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004000000c0b80f", 0xf, 0x800}, {0x0, 0x0, 0xffe}, {&(0x7f0000000180)="ed41000000080000d3f4655fd3f4655fd3f4655f0000000000000400048580d7050a737e1d", 0x25, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf5, 0x3}, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x1) pwritev(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x8841, 0x80) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)="0d4287a7d6", 0x5}, {0x0}], 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000", @ANYRES32, @ANYRESOCT, @ANYBLOB, @ANYRES16, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB], 0x78, 0x8082}, 0x2000050) syz_mount_image$tmpfs(0x0, 0x0, 0x3, 0x7, &(0x7f0000003b00)=[{0x0, 0x0, 0x40004000}, {&(0x7f0000003f00)="e5b3135b83763ca2aeb71680f640e11c00fb0a69188de29659096618c77061d8584a932fb9664c01a0de1b1cb9fd1cdcb7a19253d9438c0d2ae9bc4220ab0256254995359fbc8006e76505497bf902d375000000006c8b6f35ea623b88a03b1f91603b8fbd299e3dbe8522523fbf869dd234dd587cc530c863dea1a256ffd112054d58f613aaeedb7bc4b77e0bd398a93d8dc2adf0c7387bb0e79e5be20fdcbbdbe6a2c43e777028683266298e2fe068227285b3a7e5d2937267104b21d99e08af3709f31a5fee519c1061f1974385e79e0a93679a0e3cafda1e7e478c3f58e68629b7198380413ff0fa15355b90a5fd9fd09d8d878dcf2f4f48509536c772a65f32218b93ecad253f4ca5fc542b86faffbe2c852a6dc9a922452cd1f8750ede55ebb121b80a4a8592c8a98f73049841abd3a2b9eda9018cd02c6bb04e15e7d307fb283861e2addeec0cdbc9946d071d63e46580052211aab734478b17de33792a4e0b57f7e6c20d3055ad8ffe1fb5263fccb4760e2aa3577b6c74f2d32c709f94", 0x181, 0x9b}, {&(0x7f0000000640)="38edad5fcd3596893d363ce7a55319e0dbd6c52b556866afa6d57c4639cfee6a3a1a27dbb6270391c8630c1b10cee4ca8a027cec3f04988d5b9e47784ccddb4240a4f44d821f51227781b8c00ef307a31bcfd9e4bb6b890600000000000000a357973e0c8855e14b6518abc8286e00b34e4a00099f20cfb80f406cf596dcbd61890ec33f14f6b521225d75916951037e5713dbe79e1921d99ae17b91", 0x9c, 0x29}, {&(0x7f0000000700)="a22786001e33645b69f057d2c5fa881c2d01b1f790b37a464d3db1b0fb45c987a2d1a114439e2662c2a5d5623b6606227a94a75f4fc10cdc826b82f746c2478731ca651299374d28528b0c36dac31ae6e296f3fb2514b6584090b4f5e6e940205aa3d3968d178d795e80c7c18fea2204da4713baa5c75899875c4e78c25ad256fa6770ab1829a73470e507b3a3a833f3f2d401a5aa38", 0x96, 0xf7f2}, {&(0x7f0000003e00)="51c880ae3f59189c255f164d7a1c847da21b9c48a73340af23a9f371fface853519ff4f0ea54c2c28749c6e9fa806799f345e3cf282d30f973baa32609ccfae425bbfe0d1ac913632358035361c047486a7d9b58250cb3135f74eaeabe9ea32ee38c7a0ac245310b53b72e9468c4099e154760267147045cc6091edc41ff255d5f5e7b1fde61adc9f9a460db89512caf8440ed0bc1cb7deefd831236c27b38a9f4024e2253f05417fa06481881f8e06f8da591088faa61990f312fa9cdfa3e196a37c7c26e6f", 0xc6, 0x1}, {&(0x7f0000002a00)="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", 0xf80, 0x4000000000005}, {&(0x7f0000003a00)='i', 0x1, 0x7ff}], 0x2004404, &(0x7f0000003d00)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) getpgid(0x0) tkill(0x0, 0x3d) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 10:24:05 executing program 5: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffc, 0x0, &(0x7f0000000080)='/dev/hwrng\x00') 10:24:05 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 10:24:05 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x5, 0x0, 0x0, 0x1ff}, {0x0, 0x2}, {0x80, 0x3, 0x7, 0x3}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x7, 0x31}, {0x3, 0x4, 0x95, 0x8}, {0x6, 0xfa, 0x0, 0x2}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x0, 0x0) gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) 10:24:05 executing program 4: setgroups(0x4, &(0x7f0000000440)=[0x0, 0xee01, 0xee00, 0xee01]) 10:24:05 executing program 1: syz_mount_image$romfs(&(0x7f00000000c0)='romfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x10b800, &(0x7f0000000380)) 10:24:06 executing program 5: r0 = socket(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002100)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}, 0x0) [ 507.742021][ T36] audit: type=1326 audit(1614075846.036:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19806 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x465ef9 code=0x0 10:24:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f0000000480), 0x0) 10:24:06 executing program 4: socket(0x10, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"c6704dd6841edea2f53e8663f20540c5", 0x0, 0x0, {}, {}, 0x20, [0x0, 0x0, 0x0, 0x9, 0x9, 0x8, 0xffffffffffff7c1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) 10:24:06 executing program 1: r0 = socket(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002100)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000021c0)=[@hopopts={{0x18}}], 0x18}, 0x0) 10:24:06 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4d, 0x0, 0x0) 10:24:06 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={0x0, 0xffffffffffffff29}}, 0x0) 10:24:06 executing program 5: r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x7) 10:24:06 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)='V', 0x1}, {&(0x7f0000000080)="81", 0x1}], 0x2}}], 0x1, 0x0) 10:24:06 executing program 1: r0 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4b, 0x0, 0x0) 10:24:06 executing program 2: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f00000000c0)) 10:24:06 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') 10:24:06 executing program 4: syz_emit_ethernet(0x1a, &(0x7f0000000040)={@broadcast, @local, @val={@void}, {@llc={0x4, {@snap={0x0, 0x0, '|', "0c419b"}}}}}, 0x0) 10:24:06 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptp0\x00', 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) 10:24:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x28}}, 0x0) 10:24:06 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)='V', 0x1}, {&(0x7f0000001080)='w', 0x1}], 0x2}}], 0x1, 0x0) 10:24:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000015c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xeb0, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x6d4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3c4f28870aecda7ba3f5d1d25ff9e967f0a17dbc8dced81ba7423a2773169c89"}, @WGPEER_A_ALLOWEDIPS={0x680, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}]}]}, {0x670, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}, @WGPEER_A_ALLOWEDIPS={0x164, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4a8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @dev}}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private2}}]}, {0x104, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x100, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) 10:24:06 executing program 1: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 10:24:06 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'xfrm0\x00', 'wlan0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private2, @dev, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "7e9448422ba2a7f332ce850fa5e9252775c5997ef3143f31d8cbed14a631"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 10:24:06 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='syzkaller\x00', &(0x7f0000000180)='encrypted\x00') 10:24:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="ca511d7c520b2e4a1070586ba1e5d88538791d9a02d3e6b392b252e8ba8dda63c1eec3742cbc6b751b36a793", 0x2c) 10:24:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f0000003140)={&(0x7f0000000cc0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000030c0)=[{&(0x7f0000000d00)='U', 0x1}, {&(0x7f0000001e40)="8b", 0x1}], 0x2}, 0x0) 10:24:07 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000100)={0x0, "71d476e15da156069ee8083b35204d5c6eb03b1293b10ba74ef927efe0633464e6e37b9628285cc78091966d84273c91f703673b52cd887b9dc1ea0de7f3e381"}, 0x48, 0xfffffffffffffffd) keyctl$describe(0x6, r0, 0x0, 0x0) 10:24:07 executing program 1: syz_mount_image$vfat(&(0x7f0000001380)='vfat\x00', &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001540), 0xc000, &(0x7f0000001580)={[{@uni_xlate='uni_xlate=1'}]}) 10:24:07 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r0, 0x0, 0x0) [ 508.789426][T19861] x_tables: duplicate underflow at hook 3 10:24:07 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'xfrm0\x00', 'wlan0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private2, @dev, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "7e9448422ba2a7f332ce850fa5e9252775c5997ef3143f31d8cbed14a631"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 10:24:07 executing program 2: socket(0xa, 0x1, 0x6) 10:24:07 executing program 3: r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00', r0) 10:24:07 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000006300)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x10) 10:24:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x80}, {0x6}]}) 10:24:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x55}}, 0x0) 10:24:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={0x0, 0x28}}, 0x0) 10:24:07 executing program 4: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0x0) fanotify_init(0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) dup2(r0, r1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 508.999347][ T36] audit: type=1326 audit(1614075847.286:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19878 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x465ef9 code=0x0 10:24:07 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000006300)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x10) 10:24:07 executing program 3: r0 = socket(0x10, 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xc74ccc8f8f9334d8, 0x0, 0x0) 10:24:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0xffff}, {}, {0x6, 0xfa, 0x5, 0x2}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x0, 0x0) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/time_for_children\x00') 10:24:07 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f00000013c0)=[@hopopts={{0x18}}, @dontfrag={{0x14}}], 0x30}}], 0x1, 0x0) 10:24:07 executing program 2: r0 = socket(0x2, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) 10:24:07 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000006300)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x10) [ 509.231032][ T36] audit: type=1326 audit(1614075847.516:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19892 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x465ef9 code=0x0 10:24:07 executing program 3: r0 = timerfd_create(0x9, 0x0) timerfd_gettime(r0, 0x0) 10:24:07 executing program 5: r0 = socket(0x10, 0x2, 0x2) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 10:24:07 executing program 2: memfd_create(&(0x7f0000000000)='.\x00', 0x6) 10:24:07 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4e, 0x0, 0x0) 10:24:07 executing program 2: syz_mount_image$romfs(&(0x7f0000000100)='romfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20001, &(0x7f0000000900)) [ 510.067853][ T36] audit: type=1326 audit(1614075848.346:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19892 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x465ef9 code=0x0 [ 562.092884][ T3221] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.099296][ T3221] ieee802154 phy1 wpan1: encryption failed: -22 [ 584.651611][ T2927] Bluetooth: hci3: command 0x0406 tx timeout [ 623.532698][ T3221] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.539056][ T3221] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.980611][ T3221] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.986960][ T3221] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.413717][ T3221] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.420139][ T3221] ieee802154 phy1 wpan1: encryption failed: -22 [ 768.585492][ T1369] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 10:28:26 executing program 4: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0x0) fanotify_init(0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) dup2(r0, r1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 10:28:26 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000006300)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x10) 10:28:26 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockname$inet6(r0, 0x0, &(0x7f0000000080)) 10:28:26 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x30, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'xfrm0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private2, @dev, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "7e9448422ba2a7f332ce850fa5e9252775c5997ef3143f31d8cbed14a631"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) 10:28:26 executing program 2: r0 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x49, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'xfrm0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private2, @dev, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "7e9448422ba2a7f332ce850fa5e9252775c5997ef3143f31d8cbed14a631"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) 10:28:26 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r0, &(0x7f0000000080)=""/207, 0xcf) 10:28:27 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0x0) fanotify_init(0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) dup2(r0, r1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 10:28:27 executing program 2: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffc, &(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='/dev/hwrng\x00') 10:28:27 executing program 5: add_key(&(0x7f00000001c0)='keyring\x00', 0x0, &(0x7f0000000240)="c2", 0x1, 0xfffffffffffffffd) 10:28:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000680)={&(0x7f00000005c0), 0xb, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x1c}}, 0x0) 10:28:27 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) 10:28:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000003380)={[{@uni_xlateno='uni_xlate=0'}]}) [ 769.159783][T19957] FAT-fs (loop5): bogus number of reserved sectors [ 769.174459][T19957] FAT-fs (loop5): Can't find a valid FAT filesystem [ 769.210187][ T1369] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.261685][T19957] FAT-fs (loop5): bogus number of reserved sectors [ 769.269520][T19957] FAT-fs (loop5): Can't find a valid FAT filesystem [ 769.508041][ T1369] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.068739][ T1369] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.558710][T20002] IPVS: ftp: loaded support on port[0] = 21 [ 773.815479][T20002] chnl_net:caif_netlink_parms(): no params data found [ 774.055516][T20002] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.069433][T20002] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.079538][T20002] device bridge_slave_0 entered promiscuous mode [ 774.348617][T20002] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.355939][T20002] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.372958][T20002] device bridge_slave_1 entered promiscuous mode [ 774.469274][T20002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.484447][T20002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.514390][T20002] team0: Port device team_slave_0 added [ 774.732189][T20002] team0: Port device team_slave_1 added [ 774.766738][T20002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.778736][T20002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.818584][T20002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.870135][T20002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.894997][T20002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.946125][T20002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.200538][T20002] device hsr_slave_0 entered promiscuous mode [ 775.224278][T20002] device hsr_slave_1 entered promiscuous mode [ 775.241797][T20002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 775.249574][T20002] Cannot create hsr debugfs directory [ 775.371666][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 775.450093][ T1369] device hsr_slave_0 left promiscuous mode [ 775.467353][ T1369] device hsr_slave_1 left promiscuous mode [ 775.477397][ T1369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.495373][ T1369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.509504][ T1369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.526413][ T1369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.783597][ T1369] device bridge_slave_1 left promiscuous mode [ 775.789836][ T1369] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.817407][ T1369] device bridge_slave_0 left promiscuous mode [ 775.831605][ T1369] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.312571][ T1369] device veth1_macvtap left promiscuous mode [ 777.318745][ T1369] device veth0_macvtap left promiscuous mode [ 777.337577][ T1369] device veth1_vlan left promiscuous mode [ 777.345299][ T1369] device veth0_vlan left promiscuous mode [ 777.477002][ T9619] Bluetooth: hci4: command 0x041b tx timeout [ 779.531668][ T9619] Bluetooth: hci4: command 0x040f tx timeout [ 781.631476][ T9619] Bluetooth: hci4: command 0x0419 tx timeout [ 783.462409][ T1369] team0 (unregistering): Port device team_slave_1 removed [ 783.476036][ T1369] team0 (unregistering): Port device team_slave_0 removed [ 783.490027][ T1369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.505855][ T1369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.561730][ T1369] bond0 (unregistering): Released all slaves [ 783.733310][T20002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.754119][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 783.762881][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 783.776305][T20002] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.787563][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 783.798891][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 783.809036][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.816459][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.825290][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 783.836803][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 783.846711][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 783.855741][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.862874][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.881870][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 783.891030][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 783.900344][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 783.909940][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 783.919385][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 783.928666][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 783.938808][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 783.954786][T19983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 783.963334][T19983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 783.978164][T20002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 783.990079][T20002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 783.999462][T19983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 784.009069][T19983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 784.045107][T19983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 784.053713][T19983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 784.068306][T20002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.154619][T19983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 784.169332][T19983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 784.202364][T19983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 784.210679][T19983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 784.220183][T19983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 784.232368][T20002] device veth0_vlan entered promiscuous mode [ 784.249346][T20002] device veth1_vlan entered promiscuous mode [ 784.277349][T19983] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 784.286094][T19983] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 784.295291][T19983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 784.309859][T20002] device veth0_macvtap entered promiscuous mode [ 784.330100][T20002] device veth1_macvtap entered promiscuous mode [ 784.354041][T20002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 784.367065][T20002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.377832][T20002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 784.388993][T20002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.399947][T20002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 784.411372][T20002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.421910][T20002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 784.434173][T20002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.450926][T20002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 784.470363][T20002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.489441][T20002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.501358][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 784.517951][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 784.527475][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 784.539662][T20002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 784.551644][T20002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.562161][T20002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 784.575717][T20002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.586273][T20002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 784.598637][T20002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.609659][T20002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 784.621014][T20002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.632877][T20002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 784.644478][T20002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.662833][T20002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.672781][T19983] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 784.681364][T19983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 784.793587][T13500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.830097][T13500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.884727][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 784.905669][T13500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.915641][T13500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.930555][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 807.852895][ T3221] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.860454][ T3221] ieee802154 phy1 wpan1: encryption failed: -22 10:30:01 executing program 4: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0x0) fanotify_init(0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) dup2(r0, r1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 10:30:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000080)) 10:30:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1da4c946e1a57c3d}, 0x14}}, 0x0) 10:30:01 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r0, 0x84, 0x23, 0x0, 0x0) 10:30:01 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000006300)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000002480)=ANY=[], 0x10) 10:30:01 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0x0) fanotify_init(0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) dup2(r0, r1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 10:30:02 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x1, 0x0) 10:30:02 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @remote}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000004d80), 0x5e, 0x4000000) 10:30:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f00000009c0)={{0x2, 0x0, @local}, {0x0, @local}, 0xc, {0x2, 0x0, @multicast1}, 'veth0_to_bond\x00'}) 10:30:02 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0x5, 0x0, 0x40, 0x1ff}, {0x790, 0x4, 0x1, 0xfffffff8}, {0x8, 0x2, 0x1, 0xf64}, {0x80, 0x3, 0x7, 0x3}, {0x0, 0x9, 0x1, 0x5}, {0x7fff, 0x61, 0x3, 0x5}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x7, 0x31, 0x1, 0xffff}, {0x3, 0x4, 0x95, 0x8}, {0x6, 0xfa, 0x5, 0x2}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/time_for_children\x00') ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r1, 0x167c, 0x7a525fc7}) 10:30:02 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, "1a5d6f4a"}, &(0x7f0000000140)=0x28) [ 864.099826][ T36] audit: type=1326 audit(1614076202.386:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20284 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x465ef9 code=0x0 10:30:02 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x2, 0x280, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'xfrm0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private2, @dev, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "7e9448422ba2a7f332ce850fa5e9252775c5997ef3143f31d8cbed14a631"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) [ 864.882770][ T36] audit: type=1326 audit(1614076203.176:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20284 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x465ef9 code=0x0 [ 867.677963][T20299] IPVS: ftp: loaded support on port[0] = 21 [ 868.289456][T20299] chnl_net:caif_netlink_parms(): no params data found [ 868.388816][T20299] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.396128][T20299] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.407573][T20299] device bridge_slave_0 entered promiscuous mode [ 868.416364][T20299] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.426363][T20299] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.440697][T20299] device bridge_slave_1 entered promiscuous mode [ 868.680124][T20299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.705382][T20299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.854726][ T24] device hsr_slave_0 left promiscuous mode [ 868.876839][ T24] device hsr_slave_1 left promiscuous mode [ 868.893491][ T24] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.901247][ T24] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.930464][ T24] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.940010][ T24] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.965399][ T24] device bridge_slave_1 left promiscuous mode [ 868.981555][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.007407][ T24] device bridge_slave_0 left promiscuous mode [ 869.016510][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.056412][ T24] device veth1_macvtap left promiscuous mode [ 869.072879][ T24] device veth0_macvtap left promiscuous mode [ 869.086754][ T24] device veth1_vlan left promiscuous mode [ 869.095503][ T24] device veth0_vlan left promiscuous mode [ 869.481705][ T3221] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.488120][ T3221] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.611615][T19983] Bluetooth: hci4: command 0x0409 tx timeout [ 871.692419][ T9670] Bluetooth: hci4: command 0x041b tx timeout [ 873.787910][T19983] Bluetooth: hci4: command 0x040f tx timeout [ 875.876533][ T24] team0 (unregistering): Port device team_slave_1 removed [ 875.895114][ T24] team0 (unregistering): Port device team_slave_0 removed [ 875.908281][ T24] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.925245][ T24] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.978305][ T24] bond0 (unregistering): Released all slaves [ 876.068241][T20299] team0: Port device team_slave_0 added [ 876.076447][T20299] team0: Port device team_slave_1 added [ 876.096959][T20299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.104757][T20299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.131185][T20299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.144052][T20299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.151123][T20299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.179771][ T19] Bluetooth: hci4: command 0x0419 tx timeout [ 876.180615][T20299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.226463][T20299] device hsr_slave_0 entered promiscuous mode [ 876.233890][T20299] device hsr_slave_1 entered promiscuous mode [ 876.240472][T20299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 876.249051][T20299] Cannot create hsr debugfs directory [ 876.379205][T20299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.399508][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 876.407207][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 876.419805][T20299] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.430449][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 876.443998][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 876.454626][ T9571] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.461837][ T9571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.472739][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 876.504317][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 876.520228][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 876.529201][ T9571] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.536413][ T9571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.563360][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 876.573073][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 876.581734][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 876.590527][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 876.612020][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 876.620210][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 876.628704][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 876.637113][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 876.649635][T20299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 876.674786][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 876.685662][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 876.701918][T20299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.783779][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 876.813661][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 876.823482][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 876.831226][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 876.842624][T20299] device veth0_vlan entered promiscuous mode [ 876.859048][T20299] device veth1_vlan entered promiscuous mode [ 876.887153][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 876.896690][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 876.905901][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 876.917632][T20299] device veth0_macvtap entered promiscuous mode [ 876.931109][T20299] device veth1_macvtap entered promiscuous mode [ 876.965074][T20299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 876.979411][T20299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.996767][T20299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 877.008966][T20299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.019843][T20299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 877.031348][T20299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.042505][T20299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 877.053791][T20299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.063826][T20299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 877.075284][T20299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.088502][T20299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.098852][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 877.110596][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 877.128117][T20299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 877.148923][T20299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.167220][T20299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 877.178626][T20299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.194810][T20299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 877.208286][T20299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.229589][T20299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 877.247392][T20299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.258239][T20299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 877.276805][T20299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.290708][T20299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.312176][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 877.320806][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 877.458295][T13500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.491131][T13500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.497115][ T1369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.522983][ T1369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.525114][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 877.572036][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 930.732846][ T3221] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.739342][ T3221] ieee802154 phy1 wpan1: encryption failed: -22 10:31:30 executing program 4: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0x0) fanotify_init(0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) dup2(r0, r1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 10:31:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002180)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)=ANY=[@ANYRES16], 0x28}}, 0x0) 10:31:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f00000009c0)={{0x2, 0x0, @local}, {0x0, @local}, 0xc, {0x2, 0x0, @multicast1}, 'veth0_to_bond\x00'}) 10:31:30 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) 10:31:30 executing program 2: r0 = socket(0xa, 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:31:30 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0x0) fanotify_init(0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) dup2(r0, r1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 10:31:30 executing program 5: r0 = socket(0x1, 0x2, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 10:31:30 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x104c40, 0x0) 10:31:30 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x20000398, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'xfrm0\x00', 'wlan0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private2, @dev, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "7e9448422ba2a7f332ce850fa5e9252775c5997ef3143f31d8cbed14a631"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 10:31:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200)='802.15.4 MAC\x00', r0) 10:31:30 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x5}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) [ 952.302572][ T36] audit: type=1800 audit(1614076290.596:65): pid=20574 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=14218 res=0 errno=0 10:31:30 executing program 5: socketpair(0x0, 0x80e, 0x0, &(0x7f0000003540)) [ 952.406559][ T36] audit: type=1800 audit(1614076290.596:66): pid=20574 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=14218 res=0 errno=0 [ 955.993744][T20587] IPVS: ftp: loaded support on port[0] = 21 [ 957.851512][T20220] Bluetooth: hci4: command 0x0409 tx timeout [ 959.931492][T20220] Bluetooth: hci4: command 0x041b tx timeout [ 962.011474][T20220] Bluetooth: hci4: command 0x040f tx timeout [ 964.091612][ T9619] Bluetooth: hci4: command 0x0419 tx timeout [ 964.942881][T20587] chnl_net:caif_netlink_parms(): no params data found [ 965.045993][T20587] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.059932][T20587] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.079022][T20587] device bridge_slave_0 entered promiscuous mode [ 965.259469][T20587] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.274247][T20587] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.288833][T20587] device bridge_slave_1 entered promiscuous mode [ 965.330976][T20587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 965.350100][T20587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.428494][T20587] team0: Port device team_slave_0 added [ 965.441033][T20587] team0: Port device team_slave_1 added [ 965.488895][T20587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.501061][T20587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.537892][T20587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.559601][T20587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.567688][T20587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.605175][T20587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.674207][T20587] device hsr_slave_0 entered promiscuous mode [ 965.905309][T20587] device hsr_slave_1 entered promiscuous mode [ 965.919977][T20587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 965.950120][T20587] Cannot create hsr debugfs directory [ 966.693379][T20587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.712312][T20587] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.762289][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 966.770097][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 966.780847][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 966.791030][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 966.802296][ T9571] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.809468][ T9571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.820404][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 966.839715][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 966.848427][ T9571] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.855535][ T9571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.873388][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 967.219473][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 967.234841][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 967.250260][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 967.267233][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 967.278631][ T9571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 967.344896][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 967.367757][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 967.407870][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 967.452091][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 967.477267][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 967.486754][T20220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 967.507240][T20587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 967.906680][T20587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.920487][T20794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 967.939152][T20794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 968.105343][ T1369] device hsr_slave_0 left promiscuous mode [ 968.120741][ T1369] device hsr_slave_1 left promiscuous mode [ 968.595883][ T1369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 968.609048][ T1369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.628898][ T1369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.637585][ T1369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.693678][ T1369] device bridge_slave_1 left promiscuous mode [ 968.699895][ T1369] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.720373][ T1369] device bridge_slave_0 left promiscuous mode [ 968.727332][ T1369] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.769339][ T1369] device veth1_macvtap left promiscuous mode [ 968.776625][ T1369] device veth0_macvtap left promiscuous mode [ 968.790789][ T1369] device veth1_vlan left promiscuous mode [ 968.799033][ T1369] device veth0_vlan left promiscuous mode [ 975.534027][ T1369] team0 (unregistering): Port device team_slave_1 removed [ 975.551475][ T1369] team0 (unregistering): Port device team_slave_0 removed [ 975.563694][ T1369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.577469][ T1369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.630528][ T1369] bond0 (unregistering): Released all slaves [ 975.733337][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 975.743074][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 975.769314][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 975.778410][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 975.793622][T20587] device veth0_vlan entered promiscuous mode [ 975.803599][T20794] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 975.812181][T20794] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 975.826930][T20587] device veth1_vlan entered promiscuous mode [ 975.856753][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 975.865247][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 975.873689][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 975.882807][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 975.894467][T20587] device veth0_macvtap entered promiscuous mode [ 975.916969][T20587] device veth1_macvtap entered promiscuous mode [ 975.936994][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 975.948710][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.959849][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 975.970705][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.980941][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 975.992457][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.002790][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 976.015438][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.027011][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 976.037983][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.049680][T20587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.059719][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 976.069447][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 976.078998][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 976.088877][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 976.102489][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 976.113601][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.127279][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 976.137809][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.147727][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 976.159826][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.171439][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 976.183265][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.194996][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 976.206493][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.217359][T20587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.227081][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 976.237996][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 976.318563][T13494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.352431][T13494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.386405][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 976.412589][T13494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.431774][T13494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.441552][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 992.173188][ T3221] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.179711][ T3221] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.612887][ T3221] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.619386][ T3221] ieee802154 phy1 wpan1: encryption failed: -22 [ 1083.664789][T19983] Bluetooth: hci4: command 0x0406 tx timeout [ 1115.053342][ T3221] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.059690][ T3221] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.492862][ T3221] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.499192][ T3221] ieee802154 phy1 wpan1: encryption failed: -22 [ 1232.521457][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1232.528160][ C1] rcu: 1-....: (10381 ticks this GP) idle=aa2/1/0x4000000000000000 softirq=44865/44866 fqs=5174 [ 1232.539687][ C1] (t=10502 jiffies g=67377 q=107) [ 1232.544788][ C1] NMI backtrace for cpu 1 [ 1232.549105][ C1] CPU: 1 PID: 20832 Comm: syz-executor.4 Not tainted 5.11.0-syzkaller #0 [ 1232.557499][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.567625][ C1] Call Trace: [ 1232.570974][ C1] [ 1232.573800][ C1] dump_stack+0xfa/0x151 [ 1232.578060][ C1] nmi_cpu_backtrace.cold+0x44/0xd7 [ 1232.583268][ C1] ? lapic_can_unplug_cpu+0x80/0x80 [ 1232.588450][ C1] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 1232.594434][ C1] rcu_dump_cpu_stacks+0x222/0x2a7 [ 1232.599619][ C1] rcu_sched_clock_irq.cold+0x4f7/0x11dd [ 1232.605252][ C1] ? lock_release+0x3bb/0x710 [ 1232.609925][ C1] ? rcutree_dead_cpu+0x50/0x50 [ 1232.614761][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 1232.619641][ C1] ? lock_is_held_type+0xd5/0x130 [ 1232.624856][ C1] update_process_times+0x16d/0x200 [ 1232.630038][ C1] tick_sched_handle+0x9b/0x180 [ 1232.634877][ C1] tick_sched_timer+0x1b0/0x2d0 [ 1232.639903][ C1] ? get_cpu_iowait_time_us+0x3f0/0x3f0 [ 1232.645445][ C1] __hrtimer_run_queues+0x1c0/0xe40 [ 1232.650639][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 1232.656605][ C1] ? ktime_get_update_offsets_now+0x262/0x340 [ 1232.662662][ C1] hrtimer_interrupt+0x334/0x940 [ 1232.667589][ C1] __sysvec_apic_timer_interrupt+0x146/0x540 [ 1232.673844][ C1] sysvec_apic_timer_interrupt+0x48/0x100 [ 1232.679553][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1232.686094][ C1] RIP: 0010:check_preemption_disabled+0x9/0x150 [ 1232.692469][ C1] Code: 04 31 ff 89 de 0f 1f 44 00 00 85 db 75 ae 0f 1f 44 00 00 41 bc 01 00 00 00 e8 53 73 bd fa eb 9f cc 41 56 41 55 49 89 f5 41 54 <55> 48 89 fd 53 0f 1f 44 00 00 65 44 8b 25 bd 11 00 77 65 8b 1d 0e [ 1232.712350][ C1] RSP: 0018:ffffc90000db0a08 EFLAGS: 00000202 [ 1232.718407][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000100 [ 1232.726358][ C1] RDX: ffff888019303780 RSI: ffffffff89bf0d20 RDI: ffffffff89bf0d60 [ 1232.734509][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1232.742568][ C1] R10: ffffffff885417f1 R11: 0000000000000000 R12: 0000000000000000 [ 1232.750534][ C1] R13: ffffffff89bf0d20 R14: dffffc0000000000 R15: ffff88801bd11480 [ 1232.758579][ C1] ? __rhashtable_lookup+0x301/0x780 [ 1232.763858][ C1] ? jhash+0x4d6/0x5d0 [ 1232.767910][ C1] rcu_is_watching+0xe/0xc0 [ 1232.772489][ C1] rcu_read_lock_held+0x18/0x40 [ 1232.777322][ C1] __rhashtable_lookup+0x550/0x780 [ 1232.782511][ C1] ? rht_key_get_hash.isra.0+0x80/0x80 [ 1232.788127][ C1] ? lock_acquire+0x1bb/0x730 [ 1232.793172][ C1] sta_info_get_bss+0x144/0x3f0 [ 1232.798331][ C1] ? sta_info_get+0x380/0x380 [ 1232.803683][ C1] ? ieee80211_rx_list+0x8f5/0x2680 [ 1232.809272][ C1] ieee80211_rx_list+0x910/0x2680 [ 1232.814464][ C1] ? ieee80211_prepare_and_rx_handle+0x5070/0x5070 [ 1232.820951][ C1] ? lock_is_held_type+0xd5/0x130 [ 1232.825959][ C1] ? find_held_lock+0x2d/0x110 [ 1232.830705][ C1] ? lock_release+0x3bb/0x710 [ 1232.835366][ C1] ? skb_dequeue+0x125/0x180 [ 1232.840030][ C1] ieee80211_rx_napi+0xf7/0x3d0 [ 1232.844865][ C1] ? ieee80211_rx_list+0x2680/0x2680 [ 1232.850133][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 1232.855316][ C1] ? _raw_spin_unlock_irqrestore+0x33/0x50 [ 1232.861126][ C1] ieee80211_tasklet_handler+0xd4/0x130 [ 1232.866655][ C1] tasklet_action_common.constprop.0+0x1d7/0x2d0 [ 1232.872969][ C1] __do_softirq+0x29b/0x9f6 [ 1232.877457][ C1] asm_call_irq_on_stack+0xf/0x20 [ 1232.882566][ C1] [ 1232.885570][ C1] do_softirq_own_stack+0xaa/0xd0 [ 1232.890577][ C1] irq_exit_rcu+0x134/0x200 [ 1232.895066][ C1] sysvec_apic_timer_interrupt+0x4d/0x100 [ 1232.900857][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1232.906818][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 1232.912889][ C1] Code: e9 22 fd ff ff b9 ff ff ff ff ba 08 00 00 00 4d 8b 03 48 0f bd ca 49 8b 45 00 48 63 c9 e9 64 ff ff ff 0f 1f 84 00 00 00 00 00 <65> 8b 05 e9 7f 8e 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 1232.933110][ C1] RSP: 0018:ffffc900028ff790 EFLAGS: 00000246 [ 1232.939721][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888019303780 [ 1232.948158][ C1] RDX: 0000000000000000 RSI: ffff888019303780 RDI: 0000000000000003 [ 1232.956129][ C1] RBP: ffffea0000529b80 R08: 0000000000000000 R09: 0000000000000000 [ 1232.964264][ C1] R10: ffffffff81a638e3 R11: 0000000000000000 R12: 0000000000000000 [ 1232.972229][ C1] R13: ffff888011f0c060 R14: dffffc0000000000 R15: 00007f47f580d000 [ 1232.980509][ C1] ? unmap_page_range+0xe63/0x2650 [ 1232.985806][ C1] unmap_page_range+0x12b8/0x2650 [ 1232.990832][ C1] ? asm_sysvec_irq_work+0x12/0x20 [ 1232.996579][ C1] ? vm_normal_page_pmd+0x510/0x510 [ 1233.001789][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 1233.006993][ C1] ? asm_sysvec_irq_work+0x12/0x20 [ 1233.012115][ C1] ? uprobe_munmap+0x1c/0x560 [ 1233.016795][ C1] unmap_single_vma+0x198/0x300 [ 1233.021670][ C1] unmap_vmas+0x16d/0x2f0 [ 1233.026001][ C1] ? zap_vma_ptes+0x100/0x100 [ 1233.030768][ C1] ? lru_add_drain_cpu+0x4a8/0x8c0 [ 1233.035888][ C1] exit_mmap+0x2a8/0x590 [ 1233.040131][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 1233.045330][ C1] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 1233.051335][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1233.057590][ C1] ? __khugepaged_exit+0x2d9/0x470 [ 1233.062707][ C1] __mmput+0x122/0x470 [ 1233.067082][ C1] mmput+0x58/0x60 [ 1233.070804][ C1] do_exit+0xb6f/0x2ae0 [ 1233.075407][ C1] ? asm_sysvec_irq_work+0x12/0x20 [ 1233.080503][ C1] ? mm_update_next_owner+0x7a0/0x7a0 [ 1233.085863][ C1] ? asm_sysvec_irq_work+0x12/0x20 [ 1233.091176][ C1] ? do_group_exit+0xab/0x310 [ 1233.095845][ C1] do_group_exit+0x125/0x310 [ 1233.100425][ C1] get_signal+0x42c/0x2100 [ 1233.104821][ C1] ? futex_exit_release+0x220/0x220 [ 1233.110003][ C1] ? __wake_up_common+0x147/0x650 [ 1233.115071][ C1] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 1233.120786][ C1] ? lock_release+0x3bb/0x710 [ 1233.125535][ C1] ? ring_buffer_wakeup+0x194/0x2b0 [ 1233.130723][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 1233.135557][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1233.142606][ C1] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1233.148809][ C1] ? __do_sys_futex+0x2a2/0x470 [ 1233.153821][ C1] ? __do_sys_futex+0x2ab/0x470 [ 1233.158735][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 1233.164092][ C1] ? do_futex+0x1710/0x1710 [ 1233.168591][ C1] exit_to_user_mode_prepare+0x148/0x250 [ 1233.174211][ C1] syscall_exit_to_user_mode+0x19/0x50 [ 1233.179659][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1233.185535][ C1] RIP: 0033:0x465ef9 [ 1233.189425][ C1] Code: Unable to access opcode bytes at RIP 0x465ecf. [ 1233.196337][ C1] RSP: 002b:00007f47f30f0218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1233.205028][ C1] RAX: fffffffffffffe00 RBX: 000000000056bf68 RCX: 0000000000465ef9 [ 1233.213008][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf68 [ 1233.220968][ C1] RBP: 000000000056bf60 R08: 0000000000000000 R09: 0000000000000000 [ 1233.229010][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf6c [ 1233.237050][ C1] R13: 00007ffefa044f0f R14: 00007f47f30f0300 R15: 0000000000022000 [ 1237.934658][ T3221] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.941336][ T3221] ieee802154 phy1 wpan1: encryption failed: -22