PC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7a86}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4f3}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4004004}, 0x80000) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:50:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 13:50:56 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000000)={0x7, 0x8, 0x7fff, 0x0, 0x1631800, 0xffffffffffffffc0, 0x631}, &(0x7f0000000040)={0x9, 0x8000000000000001, 0x0, 0x1, 0x5, 0xffff, 0x1, 0x4}, &(0x7f0000000080)={0x3, 0x2, 0x20, 0x5, 0x8, 0x35f6451f, 0x101, 0x5}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x101]}, 0x8}) 13:50:56 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000056579610b11342005c090102030109021b0001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x0, 0x10, 0x87, {0x87, 0xb, "b3afaaef33ff323a24aa6e2251bec8a6503358909f238be54ac66b70623be6a57dce3ec065a3290c412f6c888e1557093ac2c90cd8192219253b62f28d1e0ac7d71e07ca3b8d690f15001687876a3e412fdd087054b31c7c6f6eacdb9e15fd0267788a55f3aee21ff0bf4804234a0a992fc29edafb4a6482350cd0337818e4f62b99b7b88f"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000140)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1, 0x8, 0x7ff, 0x1}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x81, 0x80, "beed9d76", "91e901dc"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x7f, 0x6d, 0x0, 0x1, 0x101}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xf, 0xea, "2c65d281c0edc233c358bbdbfa8d155c00d716f9dc7857fbb13ee3f44af8cac5022b59354196fe371f4aab47cb8f85823f59af9b68b8f4e2582e0340690a083c364aadf92d24d054a02feca171371799399afc472adb4b836f4a351b43899e1adbd2d2286ec79537626df425d5976781a9a96bfd9faa65a28445d3e2992986015ff50f514f1e1d8fdb1d600da5f778b1be708d740ab8e5a3aaca21b4ef23dcbe17a0f91fc48cc644aac5ff1eb69c1b367f0d0e88187c094f5f66309620a196a2ff68fdbb279d52440bb4e98898b361703d78a62fe0bf23a7c06a9ecc9ba581b9fc3b123f13e95fe3d23a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x20, 0x2, [0xf0f0]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "05d6"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000580)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, '+B'}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f0000000640)={0x40, 0x1c, 0x1}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x40, 0x26, 0x3b, {0x3b, 0x31, "309a9cdd1c5cf393d9781728778b80101df92727e4c3fe43ed4cda9d890bcf6d2b140862e4cc2b4c13cbbc758e3238a2e2c0c201852f26712a"}}, &(0x7f0000000840)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "c40e73aa71c9c5e33f719e49cd80f1336e86bd2398e0b4316a19008e2be93d1fc74c4d21402f96b0022460fffbb92c17b163982d951d5c1067323ffef3a5b4d165c24b6402499d6ee31ca5ca211888873f9705865bccf0a462c33c5597447ce8022c934ca15710346d6276c21e143a46e861a893653203cd9d868768a7be90d126f6e40631d18c5e5b8cc101"}}, &(0x7f0000000900)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x3, "c9d1"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x0, 0x1, 0xb}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0xfc, 0x1, {0x22, 0xc69}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f00000009c0)={0x20, 0x8, 0xf6, "8196e83a3034b06f1c34da06e725992add8672444d47df203f099b985ffc5c37dde9930478d58e3eb8602f4bec82e6071fe6f42b3c246a9b0fd6e59898ecb1cf1a952b8ed8de7a4854478d0bf34be49f66ae9a1c9f0ec349a31d303ed72ce3288a8d0236a223c371166ed52f52726f19c45a1fc045f35b5b28974b4bba7847e73f4d870b21bd21c4297bfb22ea3411e284a38648b6dbcc4b4bef0ff37f5114a03ce3847803a08fc29731183cfc91ed6a9d880232fe9a29bb9bcd2b6727bd489e726b9f56695f6a3cb90ba98885fb0694c5d692a4c284e7e15562204b23ce47393d9fccbfd94be7d19bbd59524d6700495904762de802"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x18}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000b40)={0x20, 0x1, 0xfc, "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"}, &(0x7f0000000c80)={0x20, 0x3, 0x1}}) [ 283.849994][ T7612] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:50:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) [ 283.918105][ T3677] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 284.027955][ T3677] usb 4-1: Using ep0 maxpacket: 8 [ 284.067911][ T3677] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 284.137948][ T144] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 284.187893][ T3677] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 284.195504][ T3677] usb 4-1: can't read configurations, error -61 [ 284.207773][ T6774] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 284.347677][ T3677] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 284.417703][ T144] usb 3-1: Using ep0 maxpacket: 16 [ 284.438201][ T3677] usb 4-1: Using ep0 maxpacket: 8 [ 284.477759][ T6774] usb 1-1: Using ep0 maxpacket: 16 [ 284.478216][ T3677] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 284.557897][ T144] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.617876][ T6774] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.617978][ T3677] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 284.635809][ T3677] usb 4-1: can't read configurations, error -61 [ 284.642811][ T3677] usb usb4-port1: unable to enumerate USB device [ 284.727833][ T144] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 9.5c [ 284.737068][ T144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.745319][ T144] usb 3-1: Product: syz [ 284.749898][ T144] usb 3-1: Manufacturer: syz [ 284.756139][ T144] usb 3-1: SerialNumber: syz [ 284.762530][ T144] usb 3-1: config 0 descriptor?? [ 284.788027][ T6774] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 9.5c [ 284.797127][ T6774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.805554][ T6774] usb 1-1: Product: syz [ 284.812103][ T6774] usb 1-1: Manufacturer: syz [ 284.817096][ T6774] usb 1-1: SerialNumber: syz [ 284.822959][ T144] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 284.833978][ T6774] usb 1-1: config 0 descriptor?? [ 284.895312][ T6774] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! 13:50:58 executing program 3: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088deef1fd674c11ccafe02ed8cf1adb2361000000f20000000000000000000904000003fe03010009058d1effe400000009050502ba4d6844fcb3b4033072f7757c869f391e7eaa327a63af1a7823a977b193f33513b5e2bc92b0cb08f320b6e177fc3abce84906313845fcb8af6853f2bd8f9175b60fd37dcb8fb13ec272fe07632f0054ecf024e29f0dd48f6da7b3ef0a04f653bb0185691f85b22e8892734ef21e011b2d250520a3ef8b5dee2416312b0b3f0f1ab394193cadf3d05bb958163a79a333fd35ec5ea6bda9535fa3ba7eb867637b696a5e9f1802b58683b2ec90b4ef1a2bf3d97ca401e957e83fab39183c2010fe2e7bf4fb488471d01a20336397ed30a3894eb1387c215e45af44d511e4f1d403d63fbc0776fe75"], 0x0) syz_usb_connect(0x1, 0x9bf, &(0x7f0000001280)={{0x12, 0x1, 0x201, 0x99, 0x73, 0xb1, 0x20, 0x1bc7, 0x1052, 0x7596, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9ad, 0x3, 0x2, 0x1, 0x40, 0x8b, [{{0x9, 0x4, 0x9a, 0xd0, 0x6, 0xff, 0x77, 0xb8, 0x3, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x4, 0x20, 0x4, "e1e3b331a27bfaa8d9"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x1001}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x7, 0x3, "", "6709b1"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x3, 0x2, 0x1f, "1c", ';X'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x81, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x1}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "173fd525"}, {0x5, 0x24, 0x0, 0x3f}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x80, 0x20, 0x20}, {0x6, 0x24, 0x1a, 0x8, 0x10}, [@acm={0x4, 0x24, 0x2, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x8}, @dmm={0x7, 0x24, 0x14, 0x2, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x6, 0x1}]}], [{{0x9, 0x5, 0x7, 0x0, 0x3ff, 0xfd, 0x3f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x1, 0x1}, @generic={0xcf, 0xf, "ab249d5fbeaa13e2d0c9417faf0662fac8d2a39ace76e43d64ad07e2be82d9d4574141bf07e79b60aef4b69d0467b6eef833d4bb304e13d8add9002801e0cee501003671961814c49c1bab07f4f92dbdbc8f6c456700bb1a253e379abc76e80816f435eebdbe90bf4646ac4ab5c94a9c00f6b57ae02b59b3436f6caee78f4b588db1c9adbec29a49356c575012227c4d64b6ad02fbe6e4395c98862417b21dd8d10edb087dbd5155a93efe3941a299e261f36de4585918e11cc32f25cb691fde9a39a2ae7162500a43dd4f17a9"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x0, 0x28, 0x0, 0x1f, [@generic={0x58, 0x10, "a9b30ecbf758dad301b5c28f36c22e7adc88f98d4029e0f537bedf7ad4b41c4a3724acad0cf897200031ae22900c77a1c1eeea4e8328c6ab77b96caaa1145f4e0ffc8a0954f165cd52419234497fe5bfb9918c32ca7c"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x6c, 0xf5, 0x2a}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0x6, 0x10, 0x5, [@generic={0xf2, 0x22, "5c0343b6c91d7ca56d5133d288bdbbba2e4361865a87b21053b8c2094eb92f0565a39a7a15d770bf08029541c8c68dfefc972f3ede8b5ca1cdc523f810440d198043bc2f6963041f37fa796dc9237272855922c38a1e5cfc8de63ac2efeee3d2c4f72482ea9f83ae89f4d9f17190dc8843cafc08550662d247b04b5a164583f2bbeeb82c79e05f4673d7956d1be9acecc3527fa85c7ada47d04729f21e2e9e770190795f95940ebd013e6411db60037e778e8ccc6eded7d72d2d0bc22b4be1c369d0d6b665818a87a3f9f9859a5dfd475ee7b2a4ded172e2fbd438dc0a3ef56bee63c72cc9a98fd576b10d9fd57fa248"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4a, 0x4}]}}, {{0x9, 0x5, 0x9, 0x7, 0x0, 0x9, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xc0a}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x7, 0x1d, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x9}]}}]}}, {{0x9, 0x4, 0xde, 0x81, 0xd, 0x7b, 0xda, 0x96, 0x7, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, ',-'}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x9, 0x1, 0x3}, {0x6, 0x24, 0x1a, 0x5, 0x8}}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "b6"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0xcdf5, 0xe6}, {0x6, 0x24, 0x1a, 0x5, 0x11}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0xa160, 0x3, 0x5, 0x9, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1}]}], [{{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x1, 0xd7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8}, @generic={0x32, 0xc, "47331578d28d5d32f19ddbc65bbae42eae5fa44fcf1fd1560f186521697586d09bdf3154b0b9f0ed060e21962b72b40c"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x3f, 0x3, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x6}]}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x6, 0x81, 0x9, [@generic={0x80, 0x9, "a9828f69f4f1d3737da43de24ef17e7b611852fbe095073ec4c5949ea483a245f20b1af0669b237b238d63a3d24fc605851367ac306216f1c59a1e2971f951624d39e55cbfa1d2e9c723a336ac030f11242899193a1887828270772cf4bd6a65d06b1a269d5929cd5c652944e8646ce78edfe93f6a5ce575aed0a7c4b2fc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xe1, 0x3}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0xa, 0x1, 0x1, [@generic={0x5, 0x3, "9e02ed"}, @generic={0x24, 0x21, "d3ec4cb2916eee9553670b5125c7563233667b9c1d41e106c7178449d4de6d571211"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x0, 0x40, 0x1, [@generic={0xda, 0x5, "6368a97c6f11f1fbbf9d318f61039ed64d7f8c4929690f8a580d61f5d146f136a1ff3ace8d8ca895d8a6e15c522d8225d03311b0d749a5cc5a07fa2c8ef0cee69cb08b6e9631fb8fb16361d9a593653615212047a04c05dd0b101e9c167431c0b0d236c2ce86f8a541599614e5f2f899d45ab625f0a9c2c4f761209b984ac5e2c2eafec9849fd7b039093ac7e6a7a3e3cd8fba3c6b1c3eebb6c57ab4606d6b0cc8cf0340ab3308f996f1166e056e5fc63e47efd2a934cb38b59224b0e73320b070440c759206232478a3eb09f0c8e2300e9fe1dc227d6188"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x7, 0x81, 0xee}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x1f, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}, @generic={0x6e, 0x7, "2a47db619adc76bbabff9a74a1390bc56e06c8ccc59a1dbc8e002838deb7da3ee9c15936c49a40cdc1865be6f043998439a992c55d29ef3e83586c287097f70a38fe7597ca6173099aeb3365b0044c8e1c15f8e81ac8c2f989c97d758748c9addbd387841df2f59929138642"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x7f, 0xff, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1f, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x7f, 0x3f}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x3, 0x3f, 0xa2}}, {{0x9, 0x5, 0x0, 0x8, 0x1df, 0x6, 0x7f, 0x1}}, {{0x9, 0x5, 0x7e26ea81e6a0305a, 0x3, 0x20, 0x6, 0xfc, 0x7, [@generic={0x6d, 0x8, "bcf613da3542c834baa2b7a1516bd5a5d58b3c8d5eb8ea47f4e16fd2b836dcefc639799691ba61fab7892dab38394425560909e140cd90b7dd87725e4f26a8bf646e8e5490c4aa037816af4a8c5ef51b4eed854b8c7560e7b48adc5e97ecdc53aa78f42b5e1c770488ff5a"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x420, 0x3, 0x7}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x7, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xfffc}]}}]}}, {{0x9, 0x4, 0x54, 0x14, 0xd, 0x17, 0x81, 0x3a, 0xff, [], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x40, 0x3f, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xa7, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xb5}]}}, {{0x9, 0x5, 0xb, 0xc, 0x0, 0x5, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x27}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x3f, 0x2, 0x7}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x1, 0x7, 0x7}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x5, 0x3, 0x80, [@generic={0x7d, 0x23, "5a8126fffe3f9bb865c5f263de44b71b5cd7cc428c3fdeae8687cef913695c4feac36d7d21ddb840b54acf85f73aa68aa4a89ef2d1cabc7ef681dcd54ec927eda915e75c6061287041a142377e3399c1bbab5808c32eee8d8a7aca121407943ee54215f1aef3a31797d6994858f3ad0f923787f760475c5dbaadf3"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x0, 0xc9, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x400}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x2, 0x31, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x5}, @generic={0x46, 0x4, "0ff3e4b912403e83501c66cf8f90c81439c67d2302e95cb2b91913db52ea14ad90240edae3ccb775929d91509a4042f4b853c475568cea8b87a6b83dbea0929746e40f65"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x7f, 0x9, 0xc5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}, @generic={0xed, 0x2, "2ace19c7b7da925c0fb6c7d95bc5ff9108508766f39d7a9a3a0e60a8b353f0a83b19b9d4a925c0417e46130a4c2d9c01818b67a10699a3062f2dd8a20da4153ba3043c1567af1dd92a64b57fb7bd7c439cb3ceca223eacc3d7f3b86da91b1baefe509754ec6f96fb26c060b65aaaaf7f3fc4d047c53e251e8c3a7b20cfcb4ef120b64b9ec50b66111ff72c9368f56dc0aa27fe793715638069eaf47d8cbc871af0f73ff5f3de885febac7820e139e3c683212038ab765de195d411fa28ab9be9df5fefcf3efb21be1b4b42261d846bf5e53f94dc1c721dc61e5cf5b756f3d68ed699eac5cf0d04b5f90d08"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x40, 0x8, 0x1}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0xa6, 0x4, 0x9}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x9, 0xa9, 0x9, [@generic={0xa4, 0x30, "c13b4ec80fb02a522fea56c18285092191a1ab9edc49dca861ce8225c67e66822eaec431cb9f0d4f096a9e0ab2df9d4e74dacc7de02d3dec1373ee5ffe29e8355da7d7e46562610f8b91e2597ca80cba5ae7264fd1b9e41f854f91d26c47817a845687e573f33e4b742c9cf57ac36d2151549f02222cdf82099e60612f7f0736a6378224136cf0fee64f8d5459fee7bd0c6ce89b0f0616cd5aea062b9e9d957e0d46"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x9, 0xff, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xbc, 0x4, 0x2a, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x86, 0xffff}]}}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x200, 0x81, 0x20, 0x3a, 0x38, 0x54}, 0x16, &(0x7f0000000e00)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0xb, 0xb0b}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0x7, 0x7}]}, 0x3, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x380a}}, {0xa8, &(0x7f0000000e80)=@string={0xa8, 0x3, "1718fc6087a2b7da67d2b18af8a5222af60d0c4fdde5b4fd8942f62e2809dddff930d33e9b45e0cf46c74761c43602f232e37f5f36ef7e043ce8dc9c2062fa828138b478b8aa5d48b6b4d2ec61d97c532b2deba071a0edea28930d08575c5358d42e014e0aee72d7c538f170b9e9803de5d00a8ce6b7397b1dd71f59ee1e13c3f4eb0a1b96d7e3e410767850fae9146ebe6475fff0a35b7335f1a7beb8551ca71c6a24026782"}}, {0x7b, &(0x7f0000000f40)=@string={0x7b, 0x3, "ec7bc55104905fd175533cff404cc872cacc0a1c3c9759877a30f1403dc9158839a66e458bfb2f00331735a70f6011a01e666d8a4728190439ff0280cfe99bf09f6c7dd0a3413c6dbbc6a3bab7e6c58369ef05978e00600abd076295b076fda63a1e04daf3e3a2a9dfba034ac495c1b9d8d9ca5e07497c5c9e"}}]}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x596, 0x506, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_ep_write(r2, 0x0, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x20, 0x2, 0xc3, {0xc3, 0xc, "de9e42106e7d4f5ee59c5e958e4c84dbce0e9be0bc65bbb3eb9a7df995368d4c0a69ce4b0eabac1372f1e49b2dd49e7eb69f5f6644b6a00d0b45955b458b18066347a94ed0c28a66458452789007c0a4330847f1a70f773993d5b717e74f41cdbc41e962abce169e3b4791c40a8286302c703c721073afcce727a207e2c94abd3418dad7c7de37987c817b2d0aa766b0b5f94d43fb338e12c29b2907657e41a35b67dc6165adf8eebda1c37c97a233cab354f1d7241676604ef4303b9edc24c5aa"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x1, 0x7, "79788292", "cfe8ca73"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x2, 0x6, 0x0, 0x1, 0x6, 0x2}}}, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x40, 0x30, 0xbb, "a67399c65492ab3465506762d7fd42f7e125566afa37031ad4330a95e52234da88a40fb9e87f0ec94a692b2b5b70f911d5fe6cd1ed5d8ec4830c3183780fd6c55191d2ee23b5749616d9df8adeaa8a03f0be58ae6a8baef0aabd9d3deedf41817410a1baa8b480feeb8ec883981b606b975812375a228c17ee0f7f5f74d282aa75cd5d0600402c451184402bff5902c22cdbe86b3c7ac90db3bd23b29e63601b6e5a47e233bc3b130d29d547fe3948e3f5d442619b0581f59e820c"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xd5}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x100, 0x10, [0xff]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "deb7"}, &(0x7f0000000700)={0x40, 0xf, 0x2}, &(0x7f0000000740)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000780)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000007c0)={0x40, 0x19, 0x2, './'}, &(0x7f0000000800)={0x40, 0x1a, 0x2}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0xb0}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xf8}}) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6cb, 0x73f5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0xe3, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x81, {0x9, 0x21, 0x1fe4, 0x3, 0x1, {0x22, 0x453}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff, 0xb5, 0x4}}}}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x0, 0x11, 0x4, 0x3, 0x38, 0x8}, 0x108, &(0x7f0000000a40)={0x5, 0xf, 0x108, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xa, 0x5, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0x0, 0x1}, @generic={0xe0, 0x10, 0xb, "018b29021dd2fdcac9c45082dd9052e4d8b8fa1c013ebf23fb7b7e58df31e72f39b8623e18b1c04386ab3f18f562b1d3c755bb15baf97e941269eaefc747837d364cdb945def510ef5e69665f3c1b37f8fcb83929585222c548c6f8763b4f93db8249307fe61a7a49a4b3a171e4b656ff95ff3d4d94cbfd2d2b5dc3ca5cedbe4f1cfc544bed7fb6191be3eadfb11d32aeb2ea4b613a83c9e6bbecc34b39ee1dcdc599d2c69ac593652070b8255eb53c0f93dc2d9fb45c2dc195a20d4d113016def5c9f9a4578d89741de693da213b9991a347ce1c128487403e056e1d7"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x12, 0x7e, 0x4, 0x41a}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x8, 0x1bf}]}, 0x4, [{0xe8, &(0x7f0000000b80)=@string={0xe8, 0x3, "1f4f3d1d5ff7db536c09d51bdaed61b8b6aee7ca402703ec5f092de8364f96976b18d2075d45e8e7640a6cf56c1f8cb8d1222d5e469457d2d5f80839fae615463f8d01b07cc4c3352db0a914ca762a98bdf7b0adc7c5fcc06bab1a9e4c805ae6c69b5686960bf2ba69bec9b7305ef5397e8898c5ccca092b6b5655742bcdee82bcf0b508817f019117657f1aff2b1fe4ab117eaa3931ec63f38fd2aa9c176fa1ecb9660608bf059b943398691dec1c82087bdb0d4ecf15469a42746e4a703f4e1da35ed2d89703ea4ac978db8df831eb515cfd962b11e6859e88c60b45b81b9fa3fc194886e4"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x41a}}, {0x3e, &(0x7f0000000cc0)=@string={0x3e, 0x3, "8db1e8b8cfeef661211c17b799c91ba5a325a8b95f6aa23124524de04f12d35dfb969a700477f7c4283e4a58db29721718bd9a595c2c1776590ab460"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x427}}]}) (async) write$char_usb(r1, &(0x7f0000000040)="ff", 0x1) 13:50:58 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000000)={0x7, 0x8, 0x7fff, 0x0, 0x1631800, 0xffffffffffffffc0, 0x631}, &(0x7f0000000040)={0x9, 0x8000000000000001, 0x0, 0x1, 0x5, 0xffff, 0x1, 0x4}, &(0x7f0000000080)={0x3, 0x2, 0x20, 0x5, 0x8, 0x35f6451f, 0x101, 0x5}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x101]}, 0x8}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x7, 0x8, 0x7fff, 0x0, 0x1631800, 0xffffffffffffffc0, 0x631}, &(0x7f0000000040)={0x9, 0x8000000000000001, 0x0, 0x1, 0x5, 0xffff, 0x1, 0x4}, &(0x7f0000000080)={0x3, 0x2, 0x20, 0x5, 0x8, 0x35f6451f, 0x101, 0x5}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x101]}, 0x8}) (async) 13:50:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000a40), 0x7, 0x300) sendmsg$nl_route(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv6_getnetconf={0x2c, 0x52, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x200}, @NETCONFA_IFINDEX={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfb02eca103c5a671}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002000000427bd7000fedbdf2502348000200000033a0000000800040007000000"], 0x24}}, 0x4) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000bc0)={0x0, 0xc2}, &(0x7f0000000c00)=0x8) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3, 0x7c422}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@deltclass={0x84, 0x29, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0xfff1}, {0xffff, 0x1}, {0x0, 0x2}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x1e}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7f}}}, @TCA_RATE={0x6, 0x5, {0xe0, 0x5}}, @TCA_RATE={0x6, 0x5, {0x10, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x9, 0x20}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000980)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000540)={0x3f4, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6b, 0x3, "f5b8ea036662450016eeb6ab784832aa20291e3e34c33d438931701edd2f9bd8b81409280a8332e6efd168d0c948961804cb39ce5f30cdf6aedb77608bc29ceeada002822f397752cee27f6d7126f7739f121b24b9a2e0f3c89474aaef2fe0c0af0d1014a25b2a"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "cfdfc10d4b3debc125d91f5431323a397275259324b454dd"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "4bc7d8c7c0ef701ba16e9209c812c96570146d1166eaa83873706f7bb1a61e29"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "8fd098dd04bf0cd0e03f7a4fa587741569b28f382dc2e953"}}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5a}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa703}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7a86}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4f3}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4004004}, 0x80000) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:50:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x3}]}, 0x28}}, 0x0) [ 285.189017][ T7641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 285.229862][ T11] usb 3-1: Unsupported hardware version: 0x6fb03430 [ 285.236764][ T11] usb 3-1: could not get hw params (-22) [ 285.252039][ T11] usb 3-1: could not probe fw (-22) [ 285.337878][ T61] usb 1-1: Unsupported hardware version: 0x6fb03430 [ 285.344991][ T61] usb 1-1: could not get hw params (-22) [ 285.350968][ T61] usb 1-1: could not probe fw (-22) [ 285.430340][ T7620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.439137][ T7620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.544624][ T3684] usb 1-1: USB disconnect, device number 26 [ 285.627784][ T6927] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 285.897738][ T6927] usb 4-1: Using ep0 maxpacket: 8 [ 285.937888][ T6927] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 286.057795][ T6927] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 286.065432][ T6927] usb 4-1: can't read configurations, error -61 [ 286.218038][ T6927] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 286.457695][ T6927] usb 4-1: Using ep0 maxpacket: 8 [ 286.498049][ T6927] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 286.617815][ T6927] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 286.625558][ T6927] usb 4-1: can't read configurations, error -61 [ 286.638345][ T6927] usb usb4-port1: attempt power cycle 13:50:59 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000056579610b11342005c090102030109021b0001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x0, 0x10, 0x87, {0x87, 0xb, "b3afaaef33ff323a24aa6e2251bec8a6503358909f238be54ac66b70623be6a57dce3ec065a3290c412f6c888e1557093ac2c90cd8192219253b62f28d1e0ac7d71e07ca3b8d690f15001687876a3e412fdd087054b31c7c6f6eacdb9e15fd0267788a55f3aee21ff0bf4804234a0a992fc29edafb4a6482350cd0337818e4f62b99b7b88f"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000140)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1, 0x8, 0x7ff, 0x1}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x81, 0x80, "beed9d76", "91e901dc"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x7f, 0x6d, 0x0, 0x1, 0x101}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xf, 0xea, "2c65d281c0edc233c358bbdbfa8d155c00d716f9dc7857fbb13ee3f44af8cac5022b59354196fe371f4aab47cb8f85823f59af9b68b8f4e2582e0340690a083c364aadf92d24d054a02feca171371799399afc472adb4b836f4a351b43899e1adbd2d2286ec79537626df425d5976781a9a96bfd9faa65a28445d3e2992986015ff50f514f1e1d8fdb1d600da5f778b1be708d740ab8e5a3aaca21b4ef23dcbe17a0f91fc48cc644aac5ff1eb69c1b367f0d0e88187c094f5f66309620a196a2ff68fdbb279d52440bb4e98898b361703d78a62fe0bf23a7c06a9ecc9ba581b9fc3b123f13e95fe3d23a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x20, 0x2, [0xf0f0]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "05d6"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000580)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, '+B'}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f0000000640)={0x40, 0x1c, 0x1}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x40, 0x26, 0x3b, {0x3b, 0x31, "309a9cdd1c5cf393d9781728778b80101df92727e4c3fe43ed4cda9d890bcf6d2b140862e4cc2b4c13cbbc758e3238a2e2c0c201852f26712a"}}, &(0x7f0000000840)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "c40e73aa71c9c5e33f719e49cd80f1336e86bd2398e0b4316a19008e2be93d1fc74c4d21402f96b0022460fffbb92c17b163982d951d5c1067323ffef3a5b4d165c24b6402499d6ee31ca5ca211888873f9705865bccf0a462c33c5597447ce8022c934ca15710346d6276c21e143a46e861a893653203cd9d868768a7be90d126f6e40631d18c5e5b8cc101"}}, &(0x7f0000000900)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x3, "c9d1"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x0, 0x1, 0xb}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0xfc, 0x1, {0x22, 0xc69}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f00000009c0)={0x20, 0x8, 0xf6, "8196e83a3034b06f1c34da06e725992add8672444d47df203f099b985ffc5c37dde9930478d58e3eb8602f4bec82e6071fe6f42b3c246a9b0fd6e59898ecb1cf1a952b8ed8de7a4854478d0bf34be49f66ae9a1c9f0ec349a31d303ed72ce3288a8d0236a223c371166ed52f52726f19c45a1fc045f35b5b28974b4bba7847e73f4d870b21bd21c4297bfb22ea3411e284a38648b6dbcc4b4bef0ff37f5114a03ce3847803a08fc29731183cfc91ed6a9d880232fe9a29bb9bcd2b6727bd489e726b9f56695f6a3cb90ba98885fb0694c5d692a4c284e7e15562204b23ce47393d9fccbfd94be7d19bbd59524d6700495904762de802"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x18}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000b40)={0x20, 0x1, 0xfc, "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"}, &(0x7f0000000c80)={0x20, 0x3, 0x1}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000056579610b11342005c090102030109021b0001000000000904"], 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x0, 0x10, 0x87, {0x87, 0xb, "b3afaaef33ff323a24aa6e2251bec8a6503358909f238be54ac66b70623be6a57dce3ec065a3290c412f6c888e1557093ac2c90cd8192219253b62f28d1e0ac7d71e07ca3b8d690f15001687876a3e412fdd087054b31c7c6f6eacdb9e15fd0267788a55f3aee21ff0bf4804234a0a992fc29edafb4a6482350cd0337818e4f62b99b7b88f"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000140)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1, 0x8, 0x7ff, 0x1}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x81, 0x80, "beed9d76", "91e901dc"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x7f, 0x6d, 0x0, 0x1, 0x101}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xf, 0xea, "2c65d281c0edc233c358bbdbfa8d155c00d716f9dc7857fbb13ee3f44af8cac5022b59354196fe371f4aab47cb8f85823f59af9b68b8f4e2582e0340690a083c364aadf92d24d054a02feca171371799399afc472adb4b836f4a351b43899e1adbd2d2286ec79537626df425d5976781a9a96bfd9faa65a28445d3e2992986015ff50f514f1e1d8fdb1d600da5f778b1be708d740ab8e5a3aaca21b4ef23dcbe17a0f91fc48cc644aac5ff1eb69c1b367f0d0e88187c094f5f66309620a196a2ff68fdbb279d52440bb4e98898b361703d78a62fe0bf23a7c06a9ecc9ba581b9fc3b123f13e95fe3d23a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x20, 0x2, [0xf0f0]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "05d6"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000580)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, '+B'}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f0000000640)={0x40, 0x1c, 0x1}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x4}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x40, 0x26, 0x3b, {0x3b, 0x31, "309a9cdd1c5cf393d9781728778b80101df92727e4c3fe43ed4cda9d890bcf6d2b140862e4cc2b4c13cbbc758e3238a2e2c0c201852f26712a"}}, &(0x7f0000000840)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "c40e73aa71c9c5e33f719e49cd80f1336e86bd2398e0b4316a19008e2be93d1fc74c4d21402f96b0022460fffbb92c17b163982d951d5c1067323ffef3a5b4d165c24b6402499d6ee31ca5ca211888873f9705865bccf0a462c33c5597447ce8022c934ca15710346d6276c21e143a46e861a893653203cd9d868768a7be90d126f6e40631d18c5e5b8cc101"}}, &(0x7f0000000900)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x3, "c9d1"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x0, 0x1, 0xb}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0xfc, 0x1, {0x22, 0xc69}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f00000009c0)={0x20, 0x8, 0xf6, "8196e83a3034b06f1c34da06e725992add8672444d47df203f099b985ffc5c37dde9930478d58e3eb8602f4bec82e6071fe6f42b3c246a9b0fd6e59898ecb1cf1a952b8ed8de7a4854478d0bf34be49f66ae9a1c9f0ec349a31d303ed72ce3288a8d0236a223c371166ed52f52726f19c45a1fc045f35b5b28974b4bba7847e73f4d870b21bd21c4297bfb22ea3411e284a38648b6dbcc4b4bef0ff37f5114a03ce3847803a08fc29731183cfc91ed6a9d880232fe9a29bb9bcd2b6727bd489e726b9f56695f6a3cb90ba98885fb0694c5d692a4c284e7e15562204b23ce47393d9fccbfd94be7d19bbd59524d6700495904762de802"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x18}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000b40)={0x20, 0x1, 0xfc, "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"}, &(0x7f0000000c80)={0x20, 0x3, 0x1}}) (async) 13:50:59 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000000)={0x7, 0x8, 0x7fff, 0x0, 0x1631800, 0xffffffffffffffc0, 0x631}, &(0x7f0000000040)={0x9, 0x8000000000000001, 0x0, 0x1, 0x5, 0xffff, 0x1, 0x4}, &(0x7f0000000080)={0x3, 0x2, 0x20, 0x5, 0x8, 0x35f6451f, 0x101, 0x5}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x101]}, 0x8}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x7, 0x8, 0x7fff, 0x0, 0x1631800, 0xffffffffffffffc0, 0x631}, &(0x7f0000000040)={0x9, 0x8000000000000001, 0x0, 0x1, 0x5, 0xffff, 0x1, 0x4}, &(0x7f0000000080)={0x3, 0x2, 0x20, 0x5, 0x8, 0x35f6451f, 0x101, 0x5}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x101]}, 0x8}) (async) 13:50:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x3}]}, 0x28}}, 0x0) 13:50:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 13:50:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000a40), 0x7, 0x300) sendmsg$nl_route(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv6_getnetconf={0x2c, 0x52, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x200}, @NETCONFA_IFINDEX={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfb02eca103c5a671}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002000000427bd7000fedbdf2502348000200000033a0000000800040007000000"], 0x24}}, 0x4) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000bc0)={0x0, 0xc2}, &(0x7f0000000c00)=0x8) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3, 0x7c422}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@deltclass={0x84, 0x29, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0xfff1}, {0xffff, 0x1}, {0x0, 0x2}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x1e}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7f}}}, @TCA_RATE={0x6, 0x5, {0xe0, 0x5}}, @TCA_RATE={0x6, 0x5, {0x10, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x9, 0x20}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000980)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000540)={0x3f4, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6b, 0x3, "f5b8ea036662450016eeb6ab784832aa20291e3e34c33d438931701edd2f9bd8b81409280a8332e6efd168d0c948961804cb39ce5f30cdf6aedb77608bc29ceeada002822f397752cee27f6d7126f7739f121b24b9a2e0f3c89474aaef2fe0c0af0d1014a25b2a"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "cfdfc10d4b3debc125d91f5431323a397275259324b454dd"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "4bc7d8c7c0ef701ba16e9209c812c96570146d1166eaa83873706f7bb1a61e29"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "8fd098dd04bf0cd0e03f7a4fa587741569b28f382dc2e953"}}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5a}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa703}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7a86}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4f3}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4004004}, 0x80000) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 286.853043][ T3684] usb 3-1: USB disconnect, device number 7 [ 286.899212][ T7652] device veth0_to_bridge entered promiscuous mode 13:51:00 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000240), 0x7, 0x400000) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x3, 0x10) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) dup(r5) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x32542, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x400}, {r3, 0x108}, {0xffffffffffffffff, 0x200}, {r4, 0x80}, {r5}, {r6, 0x80}], 0x6, &(0x7f0000000340), &(0x7f0000000380), 0x8) pselect6(0x40, &(0x7f0000000000)={0x5, 0x3, 0x68, 0x7, 0x6, 0xffffffffffffd964, 0x9, 0x8}, &(0x7f0000000040)={0x1f, 0x8, 0x7, 0x7, 0x200, 0x2a2, 0x8000, 0x80}, &(0x7f0000000080)={0x0, 0x6, 0x7fffffffffffffff, 0x4, 0xffffffffffff7b1e, 0x0, 0x23, 0x100000000}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7fff]}, 0x8}) [ 286.941978][ T7652] device batadv_slave_0 entered promiscuous mode [ 286.950918][ T7652] debugfs: Directory 'hsr1' with parent 'hsr' already present! 13:51:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) r1 = syz_clone(0xca803400, &(0x7f0000000040)="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", 0x578, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)="2325a2a6e943c93fcf434a") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001100)=r1, 0x12) recvmsg$unix(r0, 0x0, 0x40000020) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)="ebc51cbdea4a25c94d589a64e531756efd645420fb8b8ad18304cbf9ffdc6b81e51b236fd1db8d2af466608919c17051af7847877316d4672a444666640a430772eed09015fb236be9bca7bd907243089ca3d6422e8c1f698de6c461ff5f37266be9798d1721d82103ed0126db3df69ffc0a12ac44bda8a53fa7f44d3df15bfac18e84c487183e72b76bbea6f0ea3cd9771031d17d48ba00c224df44475423f811de475e7c2ac44d2b883567e1161edd5c8c169c1e341df785e81ed316fd23b838f92bac78dfef", 0xc7}, {&(0x7f00000006c0)="bb8ed4e47c821e4b3e651c393bf680359fb5e736a38fa448a0eccac81eb55458ba17a1029b7a89ac16b95e88c957a9be32afcd0ad5da7c1fcb1d1d5e9fba1ce6fa45912870633dbe15b3e6ecad4b99cb651cb7251e582e01d4a9738b66ec3b151fe20369c627755548c1ad680be52d4171a168a1d79e1642abf89c73de38f049b84a7008e0a9d0d799e10933e3ff54b030b79548a1f382093935a13d429539ab55fd3ca4c556a3e38cd89f0472fcee2396ec8cdf252ce67511d12e54aec11771d2570740e15cba3d438acdea3341a97f54267379abfa2f76a644cee2adaccc815b838d59198a266775ab59b474cceb0467fad96c", 0xf4}], 0x2}, 0x48084) syz_open_procfs$namespace(0x0, &(0x7f0000001580)='ns/uts\x00') bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000015c0), 0x8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f00000016c0), 0x12) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001740)={&(0x7f0000001700)='./file0\x00', 0x0, 0x18}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000017c0)={0x424c07ef}, 0x8) r2 = syz_open_dev$audion(&(0x7f0000000840), 0x4d81, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001840)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f0000001880)='devices.allow\x00', 0x2, 0x0) 13:51:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x3}]}, 0x28}}, 0x0) [ 286.984174][ T7652] Cannot create hsr debugfs directory [ 286.991306][ T7653] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 287.013220][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 287.048030][ T6927] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 287.148163][ T6927] usb 4-1: Using ep0 maxpacket: 8 [ 287.188149][ T6927] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 287.297995][ T3684] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 287.307881][ T6927] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 287.315528][ T6927] usb 4-1: can't read configurations, error -61 [ 287.467814][ T6927] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 287.537829][ T3684] usb 3-1: Using ep0 maxpacket: 16 [ 287.567967][ T6927] usb 4-1: Using ep0 maxpacket: 8 [ 287.607904][ T6927] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 287.657842][ T3684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.728019][ T6927] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 287.735731][ T6927] usb 4-1: can't read configurations, error -61 [ 287.742751][ T6927] usb usb4-port1: unable to enumerate USB device [ 287.827891][ T3684] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 9.5c [ 287.836966][ T3684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.845487][ T3684] usb 3-1: Product: syz [ 287.849983][ T3684] usb 3-1: Manufacturer: syz [ 287.854604][ T3684] usb 3-1: SerialNumber: syz [ 287.871415][ T3684] usb 3-1: config 0 descriptor?? [ 287.915088][ T3684] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! 13:51:01 executing program 3: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect(0x1, 0x9bf, &(0x7f0000001280)={{0x12, 0x1, 0x201, 0x99, 0x73, 0xb1, 0x20, 0x1bc7, 0x1052, 0x7596, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9ad, 0x3, 0x2, 0x1, 0x40, 0x8b, [{{0x9, 0x4, 0x9a, 0xd0, 0x6, 0xff, 0x77, 0xb8, 0x3, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x4, 0x20, 0x4, "e1e3b331a27bfaa8d9"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x1001}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x7, 0x3, "", "6709b1"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x3, 0x2, 0x1f, "1c", ';X'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x81, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x1}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "173fd525"}, {0x5, 0x24, 0x0, 0x3f}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x80, 0x20, 0x20}, {0x6, 0x24, 0x1a, 0x8, 0x10}, [@acm={0x4, 0x24, 0x2, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x8}, @dmm={0x7, 0x24, 0x14, 0x2, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x6, 0x1}]}], [{{0x9, 0x5, 0x7, 0x0, 0x3ff, 0xfd, 0x3f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x1, 0x1}, @generic={0xcf, 0xf, "ab249d5fbeaa13e2d0c9417faf0662fac8d2a39ace76e43d64ad07e2be82d9d4574141bf07e79b60aef4b69d0467b6eef833d4bb304e13d8add9002801e0cee501003671961814c49c1bab07f4f92dbdbc8f6c456700bb1a253e379abc76e80816f435eebdbe90bf4646ac4ab5c94a9c00f6b57ae02b59b3436f6caee78f4b588db1c9adbec29a49356c575012227c4d64b6ad02fbe6e4395c98862417b21dd8d10edb087dbd5155a93efe3941a299e261f36de4585918e11cc32f25cb691fde9a39a2ae7162500a43dd4f17a9"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x0, 0x28, 0x0, 0x1f, [@generic={0x58, 0x10, "a9b30ecbf758dad301b5c28f36c22e7adc88f98d4029e0f537bedf7ad4b41c4a3724acad0cf897200031ae22900c77a1c1eeea4e8328c6ab77b96caaa1145f4e0ffc8a0954f165cd52419234497fe5bfb9918c32ca7c"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x6c, 0xf5, 0x2a}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0x6, 0x10, 0x5, [@generic={0xf2, 0x22, "5c0343b6c91d7ca56d5133d288bdbbba2e4361865a87b21053b8c2094eb92f0565a39a7a15d770bf08029541c8c68dfefc972f3ede8b5ca1cdc523f810440d198043bc2f6963041f37fa796dc9237272855922c38a1e5cfc8de63ac2efeee3d2c4f72482ea9f83ae89f4d9f17190dc8843cafc08550662d247b04b5a164583f2bbeeb82c79e05f4673d7956d1be9acecc3527fa85c7ada47d04729f21e2e9e770190795f95940ebd013e6411db60037e778e8ccc6eded7d72d2d0bc22b4be1c369d0d6b665818a87a3f9f9859a5dfd475ee7b2a4ded172e2fbd438dc0a3ef56bee63c72cc9a98fd576b10d9fd57fa248"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4a, 0x4}]}}, {{0x9, 0x5, 0x9, 0x7, 0x0, 0x9, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xc0a}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x7, 0x1d, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x9}]}}]}}, {{0x9, 0x4, 0xde, 0x81, 0xd, 0x7b, 0xda, 0x96, 0x7, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, ',-'}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x9, 0x1, 0x3}, {0x6, 0x24, 0x1a, 0x5, 0x8}}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "b6"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0xcdf5, 0xe6}, {0x6, 0x24, 0x1a, 0x5, 0x11}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0xa160, 0x3, 0x5, 0x9, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1}]}], [{{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x1, 0xd7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8}, @generic={0x32, 0xc, "47331578d28d5d32f19ddbc65bbae42eae5fa44fcf1fd1560f186521697586d09bdf3154b0b9f0ed060e21962b72b40c"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x3f, 0x3, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x6}]}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x6, 0x81, 0x9, [@generic={0x80, 0x9, "a9828f69f4f1d3737da43de24ef17e7b611852fbe095073ec4c5949ea483a245f20b1af0669b237b238d63a3d24fc605851367ac306216f1c59a1e2971f951624d39e55cbfa1d2e9c723a336ac030f11242899193a1887828270772cf4bd6a65d06b1a269d5929cd5c652944e8646ce78edfe93f6a5ce575aed0a7c4b2fc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xe1, 0x3}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0xa, 0x1, 0x1, [@generic={0x5, 0x3, "9e02ed"}, @generic={0x24, 0x21, "d3ec4cb2916eee9553670b5125c7563233667b9c1d41e106c7178449d4de6d571211"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x0, 0x40, 0x1, [@generic={0xda, 0x5, "6368a97c6f11f1fbbf9d318f61039ed64d7f8c4929690f8a580d61f5d146f136a1ff3ace8d8ca895d8a6e15c522d8225d03311b0d749a5cc5a07fa2c8ef0cee69cb08b6e9631fb8fb16361d9a593653615212047a04c05dd0b101e9c167431c0b0d236c2ce86f8a541599614e5f2f899d45ab625f0a9c2c4f761209b984ac5e2c2eafec9849fd7b039093ac7e6a7a3e3cd8fba3c6b1c3eebb6c57ab4606d6b0cc8cf0340ab3308f996f1166e056e5fc63e47efd2a934cb38b59224b0e73320b070440c759206232478a3eb09f0c8e2300e9fe1dc227d6188"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x7, 0x81, 0xee}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x1f, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}, @generic={0x6e, 0x7, "2a47db619adc76bbabff9a74a1390bc56e06c8ccc59a1dbc8e002838deb7da3ee9c15936c49a40cdc1865be6f043998439a992c55d29ef3e83586c287097f70a38fe7597ca6173099aeb3365b0044c8e1c15f8e81ac8c2f989c97d758748c9addbd387841df2f59929138642"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x7f, 0xff, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1f, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x7f, 0x3f}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x3, 0x3f, 0xa2}}, {{0x9, 0x5, 0x0, 0x8, 0x1df, 0x6, 0x7f, 0x1}}, {{0x9, 0x5, 0x7e26ea81e6a0305a, 0x3, 0x20, 0x6, 0xfc, 0x7, [@generic={0x6d, 0x8, "bcf613da3542c834baa2b7a1516bd5a5d58b3c8d5eb8ea47f4e16fd2b836dcefc639799691ba61fab7892dab38394425560909e140cd90b7dd87725e4f26a8bf646e8e5490c4aa037816af4a8c5ef51b4eed854b8c7560e7b48adc5e97ecdc53aa78f42b5e1c770488ff5a"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x420, 0x3, 0x7}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x7, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xfffc}]}}]}}, {{0x9, 0x4, 0x54, 0x14, 0xd, 0x17, 0x81, 0x3a, 0xff, [], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x40, 0x3f, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xa7, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xb5}]}}, {{0x9, 0x5, 0xb, 0xc, 0x0, 0x5, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x27}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x3f, 0x2, 0x7}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x1, 0x7, 0x7}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x5, 0x3, 0x80, [@generic={0x7d, 0x23, "5a8126fffe3f9bb865c5f263de44b71b5cd7cc428c3fdeae8687cef913695c4feac36d7d21ddb840b54acf85f73aa68aa4a89ef2d1cabc7ef681dcd54ec927eda915e75c6061287041a142377e3399c1bbab5808c32eee8d8a7aca121407943ee54215f1aef3a31797d6994858f3ad0f923787f760475c5dbaadf3"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x0, 0xc9, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x400}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x2, 0x31, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x5}, @generic={0x46, 0x4, "0ff3e4b912403e83501c66cf8f90c81439c67d2302e95cb2b91913db52ea14ad90240edae3ccb775929d91509a4042f4b853c475568cea8b87a6b83dbea0929746e40f65"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x7f, 0x9, 0xc5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}, @generic={0xed, 0x2, "2ace19c7b7da925c0fb6c7d95bc5ff9108508766f39d7a9a3a0e60a8b353f0a83b19b9d4a925c0417e46130a4c2d9c01818b67a10699a3062f2dd8a20da4153ba3043c1567af1dd92a64b57fb7bd7c439cb3ceca223eacc3d7f3b86da91b1baefe509754ec6f96fb26c060b65aaaaf7f3fc4d047c53e251e8c3a7b20cfcb4ef120b64b9ec50b66111ff72c9368f56dc0aa27fe793715638069eaf47d8cbc871af0f73ff5f3de885febac7820e139e3c683212038ab765de195d411fa28ab9be9df5fefcf3efb21be1b4b42261d846bf5e53f94dc1c721dc61e5cf5b756f3d68ed699eac5cf0d04b5f90d08"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x40, 0x8, 0x1}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0xa6, 0x4, 0x9}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x9, 0xa9, 0x9, [@generic={0xa4, 0x30, "c13b4ec80fb02a522fea56c18285092191a1ab9edc49dca861ce8225c67e66822eaec431cb9f0d4f096a9e0ab2df9d4e74dacc7de02d3dec1373ee5ffe29e8355da7d7e46562610f8b91e2597ca80cba5ae7264fd1b9e41f854f91d26c47817a845687e573f33e4b742c9cf57ac36d2151549f02222cdf82099e60612f7f0736a6378224136cf0fee64f8d5459fee7bd0c6ce89b0f0616cd5aea062b9e9d957e0d46"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x9, 0xff, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xbc, 0x4, 0x2a, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x86, 0xffff}]}}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x200, 0x81, 0x20, 0x3a, 0x38, 0x54}, 0x16, &(0x7f0000000e00)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0xb, 0xb0b}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0x7, 0x7}]}, 0x3, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x380a}}, {0xa8, &(0x7f0000000e80)=@string={0xa8, 0x3, "1718fc6087a2b7da67d2b18af8a5222af60d0c4fdde5b4fd8942f62e2809dddff930d33e9b45e0cf46c74761c43602f232e37f5f36ef7e043ce8dc9c2062fa828138b478b8aa5d48b6b4d2ec61d97c532b2deba071a0edea28930d08575c5358d42e014e0aee72d7c538f170b9e9803de5d00a8ce6b7397b1dd71f59ee1e13c3f4eb0a1b96d7e3e410767850fae9146ebe6475fff0a35b7335f1a7beb8551ca71c6a24026782"}}, {0x7b, &(0x7f0000000f40)=@string={0x7b, 0x3, "ec7bc55104905fd175533cff404cc872cacc0a1c3c9759877a30f1403dc9158839a66e458bfb2f00331735a70f6011a01e666d8a4728190439ff0280cfe99bf09f6c7dd0a3413c6dbbc6a3bab7e6c58369ef05978e00600abd076295b076fda63a1e04daf3e3a2a9dfba034ac495c1b9d8d9ca5e07497c5c9e"}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x596, 0x506, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_ep_write(r2, 0x0, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x20, 0x2, 0xc3, {0xc3, 0xc, "de9e42106e7d4f5ee59c5e958e4c84dbce0e9be0bc65bbb3eb9a7df995368d4c0a69ce4b0eabac1372f1e49b2dd49e7eb69f5f6644b6a00d0b45955b458b18066347a94ed0c28a66458452789007c0a4330847f1a70f773993d5b717e74f41cdbc41e962abce169e3b4791c40a8286302c703c721073afcce727a207e2c94abd3418dad7c7de37987c817b2d0aa766b0b5f94d43fb338e12c29b2907657e41a35b67dc6165adf8eebda1c37c97a233cab354f1d7241676604ef4303b9edc24c5aa"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x1, 0x7, "79788292", "cfe8ca73"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x2, 0x6, 0x0, 0x1, 0x6, 0x2}}}, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x40, 0x30, 0xbb, "a67399c65492ab3465506762d7fd42f7e125566afa37031ad4330a95e52234da88a40fb9e87f0ec94a692b2b5b70f911d5fe6cd1ed5d8ec4830c3183780fd6c55191d2ee23b5749616d9df8adeaa8a03f0be58ae6a8baef0aabd9d3deedf41817410a1baa8b480feeb8ec883981b606b975812375a228c17ee0f7f5f74d282aa75cd5d0600402c451184402bff5902c22cdbe86b3c7ac90db3bd23b29e63601b6e5a47e233bc3b130d29d547fe3948e3f5d442619b0581f59e820c"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xd5}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x100, 0x10, [0xff]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "deb7"}, &(0x7f0000000700)={0x40, 0xf, 0x2}, &(0x7f0000000740)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000780)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000007c0)={0x40, 0x19, 0x2, './'}, &(0x7f0000000800)={0x40, 0x1a, 0x2}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0xb0}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xf8}}) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6cb, 0x73f5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0xe3, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x81, {0x9, 0x21, 0x1fe4, 0x3, 0x1, {0x22, 0x453}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff, 0xb5, 0x4}}}}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x0, 0x11, 0x4, 0x3, 0x38, 0x8}, 0x108, &(0x7f0000000a40)={0x5, 0xf, 0x108, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xa, 0x5, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0x0, 0x1}, @generic={0xe0, 0x10, 0xb, "018b29021dd2fdcac9c45082dd9052e4d8b8fa1c013ebf23fb7b7e58df31e72f39b8623e18b1c04386ab3f18f562b1d3c755bb15baf97e941269eaefc747837d364cdb945def510ef5e69665f3c1b37f8fcb83929585222c548c6f8763b4f93db8249307fe61a7a49a4b3a171e4b656ff95ff3d4d94cbfd2d2b5dc3ca5cedbe4f1cfc544bed7fb6191be3eadfb11d32aeb2ea4b613a83c9e6bbecc34b39ee1dcdc599d2c69ac593652070b8255eb53c0f93dc2d9fb45c2dc195a20d4d113016def5c9f9a4578d89741de693da213b9991a347ce1c128487403e056e1d7"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x12, 0x7e, 0x4, 0x41a}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x8, 0x1bf}]}, 0x4, [{0xe8, &(0x7f0000000b80)=@string={0xe8, 0x3, "1f4f3d1d5ff7db536c09d51bdaed61b8b6aee7ca402703ec5f092de8364f96976b18d2075d45e8e7640a6cf56c1f8cb8d1222d5e469457d2d5f80839fae615463f8d01b07cc4c3352db0a914ca762a98bdf7b0adc7c5fcc06bab1a9e4c805ae6c69b5686960bf2ba69bec9b7305ef5397e8898c5ccca092b6b5655742bcdee82bcf0b508817f019117657f1aff2b1fe4ab117eaa3931ec63f38fd2aa9c176fa1ecb9660608bf059b943398691dec1c82087bdb0d4ecf15469a42746e4a703f4e1da35ed2d89703ea4ac978db8df831eb515cfd962b11e6859e88c60b45b81b9fa3fc194886e4"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x41a}}, {0x3e, &(0x7f0000000cc0)=@string={0x3e, 0x3, "8db1e8b8cfeef661211c17b799c91ba5a325a8b95f6aa23124524de04f12d35dfb969a700477f7c4283e4a58db29721718bd9a595c2c1776590ab460"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x427}}]}) write$char_usb(r1, &(0x7f0000000040)="ff", 0x1) 13:51:01 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x78}, &(0x7f00008e0000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000180)={0x0, 0x0, '\x00', {0x0, @reserved}}) dup(0xffffffffffffffff) 13:51:01 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r3 = syz_open_dev$hidraw(&(0x7f0000000240), 0x7, 0x400000) (async) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x3, 0x10) (async) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) dup(r5) (async) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x32542, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x400}, {r3, 0x108}, {0xffffffffffffffff, 0x200}, {r4, 0x80}, {r5}, {r6, 0x80}], 0x6, &(0x7f0000000340), &(0x7f0000000380), 0x8) pselect6(0x40, &(0x7f0000000000)={0x5, 0x3, 0x68, 0x7, 0x6, 0xffffffffffffd964, 0x9, 0x8}, &(0x7f0000000040)={0x1f, 0x8, 0x7, 0x7, 0x200, 0x2a2, 0x8000, 0x80}, &(0x7f0000000080)={0x0, 0x6, 0x7fffffffffffffff, 0x4, 0xffffffffffff7b1e, 0x0, 0x23, 0x100000000}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7fff]}, 0x8}) 13:51:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x40}}, 0x0) [ 288.348094][ T41] usb 3-1: Unsupported hardware version: 0x6fb03430 [ 288.363077][ T41] usb 3-1: could not get hw params (-22) [ 288.396534][ T41] usb 3-1: could not probe fw (-22) [ 288.549305][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.589170][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.677959][ T6774] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 288.928256][ T6774] usb 4-1: Using ep0 maxpacket: 8 [ 288.981941][ T6774] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 289.119360][ T6774] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 289.126989][ T6774] usb 4-1: can't read configurations, error -61 [ 289.297788][ T6774] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 289.537888][ T6774] usb 4-1: Using ep0 maxpacket: 8 [ 289.577855][ T6774] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 289.700706][ T6774] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 289.708494][ T6774] usb 4-1: can't read configurations, error -61 [ 289.715109][ T6774] usb usb4-port1: attempt power cycle 13:51:03 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r2, r1) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000002c0)={&(0x7f00000001c0), &(0x7f0000000200)=""/138, 0x8a}) add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000180)="80", 0x1, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r3, r3) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) 13:51:03 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000240), 0x7, 0x400000) (async) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x3, 0x10) (async) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) dup(r5) (async) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x32542, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x400}, {r3, 0x108}, {0xffffffffffffffff, 0x200}, {r4, 0x80}, {r5}, {r6, 0x80}], 0x6, &(0x7f0000000340), &(0x7f0000000380), 0x8) pselect6(0x40, &(0x7f0000000000)={0x5, 0x3, 0x68, 0x7, 0x6, 0xffffffffffffd964, 0x9, 0x8}, &(0x7f0000000040)={0x1f, 0x8, 0x7, 0x7, 0x200, 0x2a2, 0x8000, 0x80}, &(0x7f0000000080)={0x0, 0x6, 0x7fffffffffffffff, 0x4, 0xffffffffffff7b1e, 0x0, 0x23, 0x100000000}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7fff]}, 0x8}) 13:51:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) r1 = syz_clone(0xca803400, &(0x7f0000000040)="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", 0x578, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)="2325a2a6e943c93fcf434a") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001100)=r1, 0x12) (async) recvmsg$unix(r0, 0x0, 0x40000020) (async) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)="ebc51cbdea4a25c94d589a64e531756efd645420fb8b8ad18304cbf9ffdc6b81e51b236fd1db8d2af466608919c17051af7847877316d4672a444666640a430772eed09015fb236be9bca7bd907243089ca3d6422e8c1f698de6c461ff5f37266be9798d1721d82103ed0126db3df69ffc0a12ac44bda8a53fa7f44d3df15bfac18e84c487183e72b76bbea6f0ea3cd9771031d17d48ba00c224df44475423f811de475e7c2ac44d2b883567e1161edd5c8c169c1e341df785e81ed316fd23b838f92bac78dfef", 0xc7}, {&(0x7f00000006c0)="bb8ed4e47c821e4b3e651c393bf680359fb5e736a38fa448a0eccac81eb55458ba17a1029b7a89ac16b95e88c957a9be32afcd0ad5da7c1fcb1d1d5e9fba1ce6fa45912870633dbe15b3e6ecad4b99cb651cb7251e582e01d4a9738b66ec3b151fe20369c627755548c1ad680be52d4171a168a1d79e1642abf89c73de38f049b84a7008e0a9d0d799e10933e3ff54b030b79548a1f382093935a13d429539ab55fd3ca4c556a3e38cd89f0472fcee2396ec8cdf252ce67511d12e54aec11771d2570740e15cba3d438acdea3341a97f54267379abfa2f76a644cee2adaccc815b838d59198a266775ab59b474cceb0467fad96c", 0xf4}], 0x2}, 0x48084) (async) syz_open_procfs$namespace(0x0, &(0x7f0000001580)='ns/uts\x00') bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000015c0), 0x8) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f00000016c0), 0x12) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001740)={&(0x7f0000001700)='./file0\x00', 0x0, 0x18}, 0x10) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000017c0)={0x424c07ef}, 0x8) (async) r2 = syz_open_dev$audion(&(0x7f0000000840), 0x4d81, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001840)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f0000001880)='devices.allow\x00', 0x2, 0x0) 13:51:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x40}}, 0x0) 13:51:03 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x78}, &(0x7f00008e0000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000180)={0x0, 0x0, '\x00', {0x0, @reserved}}) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x78}, &(0x7f00008e0000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x0) (async) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000180)={0x0, 0x0, '\x00', {0x0, @reserved}}) (async) dup(0xffffffffffffffff) (async) [ 289.919071][ T6927] usb 3-1: USB disconnect, device number 8 13:51:03 executing program 1: add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000006c0)={'fscrypt:', @desc1}, &(0x7f0000000700)={0x0, "098354fc1781908a39a9b3fb638fa1219c0daa0cab0fafc7a3a01479405fa240f9cfb846130a12210eb369133f3071e229aaa19e945c08ebb4ad300a2741c435", 0x1e}, 0x48, 0xfffffffffffffffc) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x83, 0x4200) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000280)={0xa, 0x4e21, 0x1, @empty, 0x20}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="14afd1c95694a2726c1260c0e211ce504977ecb4345e3945767d226812990559fe160b0e8577ac5c4afafc89c892275673f71b27800439fe3de5016d1ac82b34673d39d5b9065ea1a51a1cc383895e8e2ce48aca060d8b3cf8e6b9e6848f0c166d24768844b034e0a22df9dce54ce4574e5f7770121bcf77d8893ba88b6e0dc9f043aeb424057f59355f57467360d9f48653bb645ef3836f75c9922d3413270b2d350173c44e500f0504a950e32102fbc71c1979baac4a17f5e798a6f8f57d86e045d4ebb2f114d218b56c020cda7dedb7e08729a996889e693c24a85a7dfdc2", 0xe0}], 0x1}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfb02eca103c5a671}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002000000427bd7000fedbdf2502348000200000033a0000000800040007000000"], 0x24}}, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3, 0x7c422}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip6gre0\x00', r3, 0x2f, 0xfe, 0x20, 0xffffffff, 0x23, @mcast2, @private1, 0x40, 0x700, 0x101, 0x2}}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000040)={0x1f, [0x10000003, 0x8, 0x9], [{0x76, 0x5, 0x1, 0x0, 0x1}, {0x5, 0x9, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x1, 0x1, 0x1}, {0xffffffff, 0x481, 0x1, 0x1, 0x0, 0x1}, {0x8, 0xfffffffc, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x1f, 0x0, 0x1, 0x1, 0x1}, {0x7b5, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x10001, 0x2d, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x8, 0x1, 0x1, 0x1}, {0x3, 0xfdbb, 0x1, 0x0, 0x0, 0x1}, {0x80000001, 0xffff, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x100}], 0x7}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x40031, 0xffffffffffffffff, 0x9c40f000) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000fedbdf25801000013e00005c009cdad518a520dfab00000066f26e94e10a45588e5a7a99d1a54d1b0451455b74275305e5a2316990"], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4048000) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000480)={0x2, 0x0, @ioapic={0x1, 0x9, 0x80, 0x8000, 0x0, [{0x7, 0x80, 0x9, '\x00', 0xff}, {0x8, 0x7, 0x20, '\x00', 0x6}, {0x40, 0x6, 0x40, '\x00', 0x1}, {0x81, 0x8, 0x3f, '\x00', 0xfb}, {0x2, 0x93, 0x5, '\x00', 0xe0}, {0x0, 0x1, 0x4, '\x00', 0x7f}, {0x20, 0x3f, 0x9, '\x00', 0x3}, {0x77, 0x71, 0x1f}, {0x2, 0x5, 0x0, '\x00', 0x1}, {0x5, 0x2, 0x8e, '\x00', 0xfb}, {0x4, 0xfd, 0x6, '\x00', 0x1}, {0x1, 0x7f, 0xf9, '\x00', 0x80}, {0xfe, 0x0, 0x9}, {0x8, 0xff, 0x5, '\x00', 0x7}, {0x5, 0x5, 0x7, '\x00', 0xfb}, {0x5, 0x9, 0x95, '\x00', 0xb9}, {0xa4, 0x0, 0x2, '\x00', 0x5}, {0x3f, 0xbe, 0x3, '\x00', 0x6}, {0x7f, 0x4, 0x7f, '\x00', 0x6}, {0x2, 0x1, 0x3, '\x00', 0xff}, {0x10, 0x1, 0x1, '\x00', 0x4}, {0x20, 0x4, 0x4, '\x00', 0x9}, {0x5, 0x4, 0x77, '\x00', 0x8}, {0x1, 0x8, 0x8, '\x00', 0x4}]}}) 13:51:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x40}}, 0x0) 13:51:03 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x78}, &(0x7f00008e0000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x0) (async) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000180)={0x0, 0x0, '\x00', {0x0, @reserved}}) dup(0xffffffffffffffff) [ 290.127815][ T6774] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 290.237759][ T6774] usb 4-1: Using ep0 maxpacket: 8 [ 290.278158][ T6774] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 290.397872][ T6774] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 290.405481][ T6774] usb 4-1: can't read configurations, error -61 [ 290.557807][ T6774] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 290.647873][ T6774] usb 4-1: Using ep0 maxpacket: 8 [ 290.688007][ T6774] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 290.808026][ T6774] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 290.816221][ T6774] usb 4-1: can't read configurations, error -61 [ 290.831545][ T6774] usb usb4-port1: unable to enumerate USB device 13:51:04 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x30719000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x645f, &(0x7f0000000240)={0x0, 0xe11, 0x10, 0x403}, &(0x7f0000ac5000/0x9000)=nil, &(0x7f0000ac9000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) getpid() r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x11, 0xa, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="0100b3422000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1f00}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='macvlan1\x00'}) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r6) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000200)={0x0, 0xfffffffffffff000, 0x4, 0x1, 0x8}) 13:51:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:04 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) (async) dup2(r2, r1) (async) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000002c0)={&(0x7f00000001c0), &(0x7f0000000200)=""/138, 0x8a}) add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000180)="80", 0x1, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r3, r3) (async) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r3) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) 13:51:04 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r2, r1) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000002c0)={&(0x7f00000001c0), &(0x7f0000000200)=""/138, 0x8a}) add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000180)="80", 0x1, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r3, r3) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) 13:51:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) r1 = syz_clone(0xca803400, &(0x7f0000000040)="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", 0x578, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)="2325a2a6e943c93fcf434a") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001100)=r1, 0x12) recvmsg$unix(r0, 0x0, 0x40000020) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)="ebc51cbdea4a25c94d589a64e531756efd645420fb8b8ad18304cbf9ffdc6b81e51b236fd1db8d2af466608919c17051af7847877316d4672a444666640a430772eed09015fb236be9bca7bd907243089ca3d6422e8c1f698de6c461ff5f37266be9798d1721d82103ed0126db3df69ffc0a12ac44bda8a53fa7f44d3df15bfac18e84c487183e72b76bbea6f0ea3cd9771031d17d48ba00c224df44475423f811de475e7c2ac44d2b883567e1161edd5c8c169c1e341df785e81ed316fd23b838f92bac78dfef", 0xc7}, {&(0x7f00000006c0)="bb8ed4e47c821e4b3e651c393bf680359fb5e736a38fa448a0eccac81eb55458ba17a1029b7a89ac16b95e88c957a9be32afcd0ad5da7c1fcb1d1d5e9fba1ce6fa45912870633dbe15b3e6ecad4b99cb651cb7251e582e01d4a9738b66ec3b151fe20369c627755548c1ad680be52d4171a168a1d79e1642abf89c73de38f049b84a7008e0a9d0d799e10933e3ff54b030b79548a1f382093935a13d429539ab55fd3ca4c556a3e38cd89f0472fcee2396ec8cdf252ce67511d12e54aec11771d2570740e15cba3d438acdea3341a97f54267379abfa2f76a644cee2adaccc815b838d59198a266775ab59b474cceb0467fad96c", 0xf4}], 0x2}, 0x48084) (async) syz_open_procfs$namespace(0x0, &(0x7f0000001580)='ns/uts\x00') (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000015c0), 0x8) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) getpid() (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000016c0), 0x12) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001740)={&(0x7f0000001700)='./file0\x00', 0x0, 0x18}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000017c0)={0x424c07ef}, 0x8) (async) r2 = syz_open_dev$audion(&(0x7f0000000840), 0x4d81, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001840)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f0000001880)='devices.allow\x00', 0x2, 0x0) 13:51:04 executing program 1: add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000006c0)={'fscrypt:', @desc1}, &(0x7f0000000700)={0x0, "098354fc1781908a39a9b3fb638fa1219c0daa0cab0fafc7a3a01479405fa240f9cfb846130a12210eb369133f3071e229aaa19e945c08ebb4ad300a2741c435", 0x1e}, 0x48, 0xfffffffffffffffc) (async) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x83, 0x4200) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000280)={0xa, 0x4e21, 0x1, @empty, 0x20}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="14afd1c95694a2726c1260c0e211ce504977ecb4345e3945767d226812990559fe160b0e8577ac5c4afafc89c892275673f71b27800439fe3de5016d1ac82b34673d39d5b9065ea1a51a1cc383895e8e2ce48aca060d8b3cf8e6b9e6848f0c166d24768844b034e0a22df9dce54ce4574e5f7770121bcf77d8893ba88b6e0dc9f043aeb424057f59355f57467360d9f48653bb645ef3836f75c9922d3413270b2d350173c44e500f0504a950e32102fbc71c1979baac4a17f5e798a6f8f57d86e045d4ebb2f114d218b56c020cda7dedb7e08729a996889e693c24a85a7dfdc2", 0xe0}], 0x1}, 0x80) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfb02eca103c5a671}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002000000427bd7000fedbdf2502348000200000033a0000000800040007000000"], 0x24}}, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3, 0x7c422}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip6gre0\x00', r3, 0x2f, 0xfe, 0x20, 0xffffffff, 0x23, @mcast2, @private1, 0x40, 0x700, 0x101, 0x2}}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000040)={0x1f, [0x10000003, 0x8, 0x9], [{0x76, 0x5, 0x1, 0x0, 0x1}, {0x5, 0x9, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x1, 0x1, 0x1}, {0xffffffff, 0x481, 0x1, 0x1, 0x0, 0x1}, {0x8, 0xfffffffc, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x1f, 0x0, 0x1, 0x1, 0x1}, {0x7b5, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x10001, 0x2d, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x8, 0x1, 0x1, 0x1}, {0x3, 0xfdbb, 0x1, 0x0, 0x0, 0x1}, {0x80000001, 0xffff, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x100}], 0x7}) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x40031, 0xffffffffffffffff, 0x9c40f000) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000fedbdf25801000013e00005c009cdad518a520dfab00000066f26e94e10a45588e5a7a99d1a54d1b0451455b74275305e5a2316990"], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4048000) (rerun: 64) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000480)={0x2, 0x0, @ioapic={0x1, 0x9, 0x80, 0x8000, 0x0, [{0x7, 0x80, 0x9, '\x00', 0xff}, {0x8, 0x7, 0x20, '\x00', 0x6}, {0x40, 0x6, 0x40, '\x00', 0x1}, {0x81, 0x8, 0x3f, '\x00', 0xfb}, {0x2, 0x93, 0x5, '\x00', 0xe0}, {0x0, 0x1, 0x4, '\x00', 0x7f}, {0x20, 0x3f, 0x9, '\x00', 0x3}, {0x77, 0x71, 0x1f}, {0x2, 0x5, 0x0, '\x00', 0x1}, {0x5, 0x2, 0x8e, '\x00', 0xfb}, {0x4, 0xfd, 0x6, '\x00', 0x1}, {0x1, 0x7f, 0xf9, '\x00', 0x80}, {0xfe, 0x0, 0x9}, {0x8, 0xff, 0x5, '\x00', 0x7}, {0x5, 0x5, 0x7, '\x00', 0xfb}, {0x5, 0x9, 0x95, '\x00', 0xb9}, {0xa4, 0x0, 0x2, '\x00', 0x5}, {0x3f, 0xbe, 0x3, '\x00', 0x6}, {0x7f, 0x4, 0x7f, '\x00', 0x6}, {0x2, 0x1, 0x3, '\x00', 0xff}, {0x10, 0x1, 0x1, '\x00', 0x4}, {0x20, 0x4, 0x4, '\x00', 0x9}, {0x5, 0x4, 0x77, '\x00', 0x8}, {0x1, 0x8, 0x8, '\x00', 0x4}]}}) 13:51:04 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r2, r1) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000002c0)={&(0x7f00000001c0), &(0x7f0000000200)=""/138, 0x8a}) add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000180)="80", 0x1, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r3, r3) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r1, 0xffff) (async) fcntl$addseals(r1, 0x409, 0x7) (async) dup(r0) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) (async) dup2(r2, r1) (async) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000002c0)={&(0x7f00000001c0), &(0x7f0000000200)=""/138, 0x8a}) (async) add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000180)="80", 0x1, 0xfffffffffffffffb) (async) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) keyctl$link(0x8, r3, r3) (async) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r3) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) (async) 13:51:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="5400dfd136cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000037a000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f0866baa100ed660f3881441097b9800000c00f3235004000000f30f00066f3c4c179704a750826660fd8d4b8010000000f01d9b8010000000f01c10f23c2", 0x3f}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:51:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:04 executing program 1: add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000006c0)={'fscrypt:', @desc1}, &(0x7f0000000700)={0x0, "098354fc1781908a39a9b3fb638fa1219c0daa0cab0fafc7a3a01479405fa240f9cfb846130a12210eb369133f3071e229aaa19e945c08ebb4ad300a2741c435", 0x1e}, 0x48, 0xfffffffffffffffc) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x83, 0x4200) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000280)={0xa, 0x4e21, 0x1, @empty, 0x20}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="14afd1c95694a2726c1260c0e211ce504977ecb4345e3945767d226812990559fe160b0e8577ac5c4afafc89c892275673f71b27800439fe3de5016d1ac82b34673d39d5b9065ea1a51a1cc383895e8e2ce48aca060d8b3cf8e6b9e6848f0c166d24768844b034e0a22df9dce54ce4574e5f7770121bcf77d8893ba88b6e0dc9f043aeb424057f59355f57467360d9f48653bb645ef3836f75c9922d3413270b2d350173c44e500f0504a950e32102fbc71c1979baac4a17f5e798a6f8f57d86e045d4ebb2f114d218b56c020cda7dedb7e08729a996889e693c24a85a7dfdc2", 0xe0}], 0x1}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfb02eca103c5a671}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002000000427bd7000fedbdf2502348000200000033a0000000800040007000000"], 0x24}}, 0x4) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3, 0x7c422}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip6gre0\x00', r3, 0x2f, 0xfe, 0x20, 0xffffffff, 0x23, @mcast2, @private1, 0x40, 0x700, 0x101, 0x2}}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000040)={0x1f, [0x10000003, 0x8, 0x9], [{0x76, 0x5, 0x1, 0x0, 0x1}, {0x5, 0x9, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x1, 0x1, 0x1, 0x1}, {0xffffffff, 0x481, 0x1, 0x1, 0x0, 0x1}, {0x8, 0xfffffffc, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x1f, 0x0, 0x1, 0x1, 0x1}, {0x7b5, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x10001, 0x2d, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x8, 0x1, 0x1, 0x1}, {0x3, 0xfdbb, 0x1, 0x0, 0x0, 0x1}, {0x80000001, 0xffff, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x100}], 0x7}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x40031, 0xffffffffffffffff, 0x9c40f000) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000fedbdf25801000013e00005c009cdad518a520dfab00000066f26e94e10a45588e5a7a99d1a54d1b0451455b74275305e5a2316990"], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4048000) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000480)={0x2, 0x0, @ioapic={0x1, 0x9, 0x80, 0x8000, 0x0, [{0x7, 0x80, 0x9, '\x00', 0xff}, {0x8, 0x7, 0x20, '\x00', 0x6}, {0x40, 0x6, 0x40, '\x00', 0x1}, {0x81, 0x8, 0x3f, '\x00', 0xfb}, {0x2, 0x93, 0x5, '\x00', 0xe0}, {0x0, 0x1, 0x4, '\x00', 0x7f}, {0x20, 0x3f, 0x9, '\x00', 0x3}, {0x77, 0x71, 0x1f}, {0x2, 0x5, 0x0, '\x00', 0x1}, {0x5, 0x2, 0x8e, '\x00', 0xfb}, {0x4, 0xfd, 0x6, '\x00', 0x1}, {0x1, 0x7f, 0xf9, '\x00', 0x80}, {0xfe, 0x0, 0x9}, {0x8, 0xff, 0x5, '\x00', 0x7}, {0x5, 0x5, 0x7, '\x00', 0xfb}, {0x5, 0x9, 0x95, '\x00', 0xb9}, {0xa4, 0x0, 0x2, '\x00', 0x5}, {0x3f, 0xbe, 0x3, '\x00', 0x6}, {0x7f, 0x4, 0x7f, '\x00', 0x6}, {0x2, 0x1, 0x3, '\x00', 0xff}, {0x10, 0x1, 0x1, '\x00', 0x4}, {0x20, 0x4, 0x4, '\x00', 0x9}, {0x5, 0x4, 0x77, '\x00', 0x8}, {0x1, 0x8, 0x8, '\x00', 0x4}]}}) 13:51:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:04 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16], 0x0) r0 = syz_usb_connect$cdc_ncm(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "85ebbf8d11"}, {0x5, 0x24, 0x0, 0x27d1}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x3ff, 0x4, 0x1f}, {0x6, 0x24, 0x1a, 0xfff, 0xf}, [@mbim_extended={0x8, 0x24, 0x1c, 0x100, 0x4, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xa8, 0x7, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x7f, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x4, 0x1}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x6, 0x81, 0x0, 0xff, 0x7f}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf4ff}}]}) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x20, 0x21, 0x55, {0x55, 0x22, "6c46f550689fbd85a038bd3a2cc9568675256b557d059e8bf347f83b219bfd2babe74e610ed6225cc925e8bebc2558df3a52b076a9a85108f10ec62203cfbc155a5348fcfe87f048f66aade49cd3b7186afeae"}}, &(0x7f0000000240)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "407425b15c278fb58d5b6e2b6484e0afda3520bc1d3dc02afdd0cf7785dbae16a3eec8216136ce88183ab3f0896000eb9a25c346bd012cf471de107460ef4abd980b4bbb128215641c9718b3571ab72064eba6610a4eb2df2679f6a8ce4e4484967b833228b1ceca8b020737a76d24f35e71a9591e419aeaa7f931c97adeeaf4194289682b5e8b820251d1673ab659bf9a87da74c50b4cbb373a48a4a6f8eef6a8ba5ec02a2abedd998ecaee1861684b075b38c8152025466eba4ba06b381b711dd131c5c2a6d1787fe2e34a59259da05ffa4b7d09ddc7487436"}}, &(0x7f0000000340)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x9, 0xa5, 0xd9f6, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "c52d6e0167a9aeb42f8f34a3c58252f6"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6, 0xf4, 0x97, 0x5, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x26, 0x0, 0x0, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x5, 0x7fff}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x25, 0x10, 0x2, 0x9, "a85d96d8", 'x*g\n'}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x6d, 0x0, 0x80, 0xfffc, 0x8}}}, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x20, 0x18, 0x9b, "f271eded9a19e321be84a2d636e17fa1894d4a48bf507c51379c09469b356d10104b1b83cf8506114de580b00e5995a98647f01454a52c1a67b28b41bce9affd4a28d3a4ce2748fb31503e3083eb070534a2fb27ca563ec2adfddea32131f017c7d84643ae91c79ae837a0ec9664b7d187dca9e2b23312861b9910b3360eaa0c070ed7783548a38c74c0c7e357ec39930f56ef78656b6fc1a97ad9"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xd1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xb0}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x140, 0x28, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "92f6"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000000740)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, &(0x7f0000000780)={0x40, 0x17, 0x6, @random="68d366913ddd"}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "5c19"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xff}}) [ 291.649346][ T7752] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 291.917745][ T14] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 292.117808][ T14] usb 3-1: device descriptor read/64, error 18 13:51:05 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x30719000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x645f, &(0x7f0000000240)={0x0, 0xe11, 0x10, 0x403}, &(0x7f0000ac5000/0x9000)=nil, &(0x7f0000ac9000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) getpid() r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x11, 0xa, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="0100b3422000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1f00}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='macvlan1\x00'}) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r6) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000200)={0x0, 0xfffffffffffff000, 0x4, 0x1, 0x8}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x30719000) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0x645f, &(0x7f0000000240)={0x0, 0xe11, 0x10, 0x403}, &(0x7f0000ac5000/0x9000)=nil, &(0x7f0000ac9000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) (async) getpid() (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x11, 0xa, 0x0) (async) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="0100b3422000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) (async) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1f00}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='macvlan1\x00'}) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r6) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000200)={0x0, 0xfffffffffffff000, 0x4, 0x1, 0x8}) (async) 13:51:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x40}}, 0x0) 13:51:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="5400dfd136cb"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000037a000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f0866baa100ed660f3881441097b9800000c00f3235004000000f30f00066f3c4c179704a750826660fd8d4b8010000000f01d9b8010000000f01c10f23c2", 0x3f}], 0x1, 0x3, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:51:05 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = dup(r2) r5 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x0, 0x1000}) dup2(r4, r3) dup2(r3, r5) sendfile(0xffffffffffffffff, r5, &(0x7f0000000100)=0xe1, 0x285c) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r6 = dup(r0) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r6, r1) epoll_pwait2(r6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x710]}, 0x8) 13:51:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{0x0}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d882, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000700) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='pstore\x00', 0xa4000, &(0x7f0000000340)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/mem_sleep', 0x102, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000180)="05", 0x6}]) accept4$tipc(r3, &(0x7f0000000100)=@id, &(0x7f0000000340)=0x10, 0x141000) socket$inet6(0xa, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000380)=0x101, 0x9a9d) 13:51:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x40}}, 0x0) 13:51:05 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = dup(r2) r5 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x0, 0x1000}) (async) dup2(r4, r3) dup2(r3, r5) (async) sendfile(0xffffffffffffffff, r5, &(0x7f0000000100)=0xe1, 0x285c) (async) ftruncate(r1, 0xffff) (async) fcntl$addseals(r1, 0x409, 0x7) (async) r6 = dup(r0) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r6, r1) (async) epoll_pwait2(r6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x710]}, 0x8) 13:51:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x40}}, 0x0) [ 292.397771][ T14] usb 3-1: new high-speed USB device number 10 using dummy_hcd 13:51:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="5400dfd136cb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000037a000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f0866baa100ed660f3881441097b9800000c00f3235004000000f30f00066f3c4c179704a750826660fd8d4b8010000000f01d9b8010000000f01c10f23c2", 0x3f}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="5400dfd136cb"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000037a000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f0866baa100ed660f3881441097b9800000c00f3235004000000f30f00066f3c4c179704a750826660fd8d4b8010000000f01d9b8010000000f01c10f23c2", 0x3f}], 0x1, 0x3, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 13:51:05 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = dup(r2) r5 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x0, 0x1000}) dup2(r4, r3) dup2(r3, r5) sendfile(0xffffffffffffffff, r5, &(0x7f0000000100)=0xe1, 0x285c) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r6 = dup(r0) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r6, r1) epoll_pwait2(r6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x710]}, 0x8) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r3, 0xffff) (async) fcntl$addseals(r3, 0x409, 0x7) (async) dup(r2) (async) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x0, 0x1000}) (async) dup2(r4, r3) (async) dup2(r3, r5) (async) sendfile(0xffffffffffffffff, r5, &(0x7f0000000100)=0xe1, 0x285c) (async) ftruncate(r1, 0xffff) (async) fcntl$addseals(r1, 0x409, 0x7) (async) dup(r0) (async) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) (async) dup2(r6, r1) (async) epoll_pwait2(r6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x710]}, 0x8) (async) 13:51:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 292.627736][ T14] usb 3-1: device descriptor read/64, error 18 [ 292.652442][ T7790] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 292.757907][ T14] usb usb3-port1: attempt power cycle [ 293.197873][ T14] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 293.417898][ T14] usb 3-1: device descriptor read/8, error -61 [ 293.687899][ T14] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 293.858969][ T14] usb 3-1: device descriptor read/8, error -61 [ 293.978833][ T14] usb usb3-port1: unable to enumerate USB device 13:51:07 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16], 0x0) (async, rerun: 32) r0 = syz_usb_connect$cdc_ncm(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "85ebbf8d11"}, {0x5, 0x24, 0x0, 0x27d1}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x3ff, 0x4, 0x1f}, {0x6, 0x24, 0x1a, 0xfff, 0xf}, [@mbim_extended={0x8, 0x24, 0x1c, 0x100, 0x4, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xa8, 0x7, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x7f, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x4, 0x1}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x6, 0x81, 0x0, 0xff, 0x7f}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf4ff}}]}) (rerun: 32) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x20, 0x21, 0x55, {0x55, 0x22, "6c46f550689fbd85a038bd3a2cc9568675256b557d059e8bf347f83b219bfd2babe74e610ed6225cc925e8bebc2558df3a52b076a9a85108f10ec62203cfbc155a5348fcfe87f048f66aade49cd3b7186afeae"}}, &(0x7f0000000240)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "407425b15c278fb58d5b6e2b6484e0afda3520bc1d3dc02afdd0cf7785dbae16a3eec8216136ce88183ab3f0896000eb9a25c346bd012cf471de107460ef4abd980b4bbb128215641c9718b3571ab72064eba6610a4eb2df2679f6a8ce4e4484967b833228b1ceca8b020737a76d24f35e71a9591e419aeaa7f931c97adeeaf4194289682b5e8b820251d1673ab659bf9a87da74c50b4cbb373a48a4a6f8eef6a8ba5ec02a2abedd998ecaee1861684b075b38c8152025466eba4ba06b381b711dd131c5c2a6d1787fe2e34a59259da05ffa4b7d09ddc7487436"}}, &(0x7f0000000340)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x9, 0xa5, 0xd9f6, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "c52d6e0167a9aeb42f8f34a3c58252f6"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6, 0xf4, 0x97, 0x5, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x26, 0x0, 0x0, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x5, 0x7fff}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x25, 0x10, 0x2, 0x9, "a85d96d8", 'x*g\n'}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x6d, 0x0, 0x80, 0xfffc, 0x8}}}, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x20, 0x18, 0x9b, "f271eded9a19e321be84a2d636e17fa1894d4a48bf507c51379c09469b356d10104b1b83cf8506114de580b00e5995a98647f01454a52c1a67b28b41bce9affd4a28d3a4ce2748fb31503e3083eb070534a2fb27ca563ec2adfddea32131f017c7d84643ae91c79ae837a0ec9664b7d187dca9e2b23312861b9910b3360eaa0c070ed7783548a38c74c0c7e357ec39930f56ef78656b6fc1a97ad9"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xd1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xb0}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x140, 0x28, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "92f6"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000000740)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, &(0x7f0000000780)={0x40, 0x17, 0x6, @random="68d366913ddd"}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "5c19"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xff}}) 13:51:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:07 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) fremovexattr(r0, &(0x7f0000000d00)=@known='security.selinux\x00') dup2(r2, r1) dup2(r2, r0) recvmmsg(r2, &(0x7f0000000d40)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000000140)=""/187, 0xbb}], 0x3}, 0x9}, {{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000900)=[{&(0x7f00000002c0)=""/158, 0x9e}, {&(0x7f0000000380)=""/171, 0xab}, {&(0x7f0000000440)=""/46, 0x2e}, {&(0x7f0000000480)=""/123, 0x7b}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000600)=""/58, 0x3a}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/224, 0xe0}, {&(0x7f0000000840)=""/190, 0xbe}], 0x9, &(0x7f00000009c0)=""/164, 0xa4}, 0xfffffffa}, {{&(0x7f0000000a80)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/55, 0x37}, {&(0x7f0000000b40)=""/95, 0x5f}, {&(0x7f0000000bc0)=""/41, 0x29}, {&(0x7f0000000c00)=""/26, 0x1a}, {&(0x7f0000000c40)=""/45, 0x2d}], 0x5, &(0x7f0000000d00)}, 0xc98a}], 0x3, 0x23, &(0x7f0000000e00)={0x77359400}) 13:51:07 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x200000f, 0x8031, 0xffffffffffffffff, 0x30719000) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x645f, &(0x7f0000000240)={0x0, 0xe11, 0x10, 0x403}, &(0x7f0000ac5000/0x9000)=nil, &(0x7f0000ac9000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) getpid() (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x11, 0xa, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="0100b3422000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1f00}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='macvlan1\x00'}) (async, rerun: 64) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 64) dup(r6) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000200)={0x0, 0xfffffffffffff000, 0x4, 0x1, 0x8}) 13:51:07 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfb02eca103c5a671}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240020002000000427bd7040fedbdf2502348000200000033a0000000800040007000000"], 0x24}}, 0x4) r4 = socket(0x10, 0x803, 0x0) r5 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) r6 = dup2(r5, 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="cc000000", @ANYRES16, @ANYBLOB="000227bd7000fddbdf25160000002c0407800c00030009001f000000000008000200dd2000000c000400010000000000000008000100020000001400058008000100756470000700010069620000040004801c000680080006002b350000040005000400020008000600020000003c000180380004001400010002004e22ac1414400000000000000000200002000a004e2300000054fe880000000000000000000000008001ffffff7f1c00038008000300fffffeff080002000200000008000200060000003730c6518e9a36a347303f8315ab0498b5ffebb0770142a4374d6758af2e442bdb8ac30a2e29db47"], 0xcc}, 0x1, 0x0, 0x0, 0x4001}, 0x30004890) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES8=r0, @ANYRES16=r3, @ANYRESHEX], 0x20}}, 0x40) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000305030000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="0300000022c407001800128008000100677265000c00028008000600ac14140008000500", @ANYRES32=0x0, @ANYBLOB="08000a02", @ANYRES32=r7, @ANYBLOB], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="9500000000000000950000000000000018000000c00f0000000000000100000018410000feffffff000000000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000081001baff1fc00000400009100000000000000008d040200ffffffffb2084f0a01000000000000004858483b444420b5db18000041fb7978ed792a2b9bbaee002f700fb6fc0ea0728a40df132efb1f71b146c4de63993b21a6e98a423e5c037738d08a27451f5a5f37b60a24178aa0331caaa7ab269d19873b81f452df13b8b0ee8b3ebfd7b8f72a9a104e624e41d711f8ce099ef6a7a0ef404a27e5e2a8b89c233f602f4f"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0xd2, &(0x7f0000000300)=""/210, 0x40f00, 0x14, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x0, 0x636, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047458, &(0x7f00000000c0)) 13:51:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{0x0}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d882, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000700) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='pstore\x00', 0xa4000, &(0x7f0000000340)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/mem_sleep', 0x102, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000180)="05", 0x6}]) accept4$tipc(r3, &(0x7f0000000100)=@id, &(0x7f0000000340)=0x10, 0x141000) socket$inet6(0xa, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000380)=0x101, 0x9a9d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) writev(r1, &(0x7f0000000440)=[{0x0}], 0x1) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r2) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d882, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) sendfile(r4, r5, 0x0, 0x80000700) (async) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='pstore\x00', 0xa4000, &(0x7f0000000340)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/mem_sleep', 0x102, 0x0) (async) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000180)="05", 0x6}]) (async) accept4$tipc(r3, &(0x7f0000000100)=@id, &(0x7f0000000340)=0x10, 0x141000) (async) socket$inet6(0xa, 0x0, 0x0) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000380)=0x101, 0x9a9d) (async) 13:51:07 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) (async) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) (async, rerun: 32) fremovexattr(r0, &(0x7f0000000d00)=@known='security.selinux\x00') (async, rerun: 32) dup2(r2, r1) (async) dup2(r2, r0) recvmmsg(r2, &(0x7f0000000d40)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000000140)=""/187, 0xbb}], 0x3}, 0x9}, {{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000900)=[{&(0x7f00000002c0)=""/158, 0x9e}, {&(0x7f0000000380)=""/171, 0xab}, {&(0x7f0000000440)=""/46, 0x2e}, {&(0x7f0000000480)=""/123, 0x7b}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000600)=""/58, 0x3a}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/224, 0xe0}, {&(0x7f0000000840)=""/190, 0xbe}], 0x9, &(0x7f00000009c0)=""/164, 0xa4}, 0xfffffffa}, {{&(0x7f0000000a80)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/55, 0x37}, {&(0x7f0000000b40)=""/95, 0x5f}, {&(0x7f0000000bc0)=""/41, 0x29}, {&(0x7f0000000c00)=""/26, 0x1a}, {&(0x7f0000000c40)=""/45, 0x2d}], 0x5, &(0x7f0000000d00)}, 0xc98a}], 0x3, 0x23, &(0x7f0000000e00)={0x77359400}) 13:51:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 294.746426][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 13:51:07 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) (async) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) (async) fremovexattr(r0, &(0x7f0000000d00)=@known='security.selinux\x00') dup2(r2, r1) (async) dup2(r2, r0) (async) recvmmsg(r2, &(0x7f0000000d40)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000000140)=""/187, 0xbb}], 0x3}, 0x9}, {{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000900)=[{&(0x7f00000002c0)=""/158, 0x9e}, {&(0x7f0000000380)=""/171, 0xab}, {&(0x7f0000000440)=""/46, 0x2e}, {&(0x7f0000000480)=""/123, 0x7b}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000600)=""/58, 0x3a}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/224, 0xe0}, {&(0x7f0000000840)=""/190, 0xbe}], 0x9, &(0x7f00000009c0)=""/164, 0xa4}, 0xfffffffa}, {{&(0x7f0000000a80)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/55, 0x37}, {&(0x7f0000000b40)=""/95, 0x5f}, {&(0x7f0000000bc0)=""/41, 0x29}, {&(0x7f0000000c00)=""/26, 0x1a}, {&(0x7f0000000c40)=""/45, 0x2d}], 0x5, &(0x7f0000000d00)}, 0xc98a}], 0x3, 0x23, &(0x7f0000000e00)={0x77359400}) [ 294.840119][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.868618][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 13:51:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{0x0}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d882, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000700) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='pstore\x00', 0xa4000, &(0x7f0000000340)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/mem_sleep', 0x102, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000180)="05", 0x6}]) accept4$tipc(r3, &(0x7f0000000100)=@id, &(0x7f0000000340)=0x10, 0x141000) socket$inet6(0xa, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000380)=0x101, 0x9a9d) 13:51:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 1) 13:51:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{0x0}], 0x1) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d882, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000700) (async) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='pstore\x00', 0xa4000, &(0x7f0000000340)) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/mem_sleep', 0x102, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000180)="05", 0x6}]) (async) accept4$tipc(r3, &(0x7f0000000100)=@id, &(0x7f0000000340)=0x10, 0x141000) (async) socket$inet6(0xa, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000380)=0x101, 0x9a9d) [ 294.976406][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.020359][ T7884] FAULT_INJECTION: forcing a failure. [ 295.020359][ T7884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.023975][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.091638][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.107691][ T144] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 295.117793][ T7884] CPU: 0 PID: 7884 Comm: syz-executor.4 Not tainted 6.0.0-rc4-syzkaller-00055-g53e99dcff61e #0 [ 295.128180][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 295.138262][ T7884] Call Trace: [ 295.141561][ T7884] [ 295.144511][ T7884] dump_stack_lvl+0xcd/0x134 [ 295.149251][ T7884] should_fail.cold+0x5/0xa [ 295.153799][ T7884] _copy_from_user+0x2a/0x170 [ 295.158587][ T7884] copy_msghdr_from_user+0x89/0x150 [ 295.163886][ T7884] ? __copy_msghdr+0x4a0/0x4a0 [ 295.168689][ T7884] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 295.174713][ T7884] ? find_held_lock+0x2d/0x110 [ 295.179515][ T7884] ___sys_sendmsg+0xdd/0x1b0 [ 295.184143][ T7884] ? do_recvmmsg+0x6e0/0x6e0 [ 295.188771][ T7884] ? __fget_files+0x248/0x440 [ 295.193481][ T7884] ? lock_downgrade+0x6e0/0x6e0 [ 295.198371][ T7884] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 295.205427][ T7884] ? ksys_write+0x20c/0x250 [ 295.209968][ T7884] ? __fget_files+0x26a/0x440 [ 295.214712][ T7884] ? __fget_light+0xe5/0x270 [ 295.219336][ T7884] __sys_sendmsg+0xf3/0x1c0 [ 295.223874][ T7884] ? __sys_sendmsg_sock+0x30/0x30 [ 295.228932][ T7884] ? lock_downgrade+0x6e0/0x6e0 [ 295.233827][ T7884] ? syscall_enter_from_user_mode+0x22/0xb0 [ 295.239917][ T7884] ? syscall_enter_from_user_mode+0x22/0xb0 [ 295.245845][ T7884] ? lockdep_hardirqs_on+0x79/0x100 [ 295.251102][ T7884] do_syscall_64+0x35/0xb0 [ 295.255543][ T7884] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 295.261522][ T7884] RIP: 0033:0x7feb1e289279 [ 295.265964][ T7884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 295.285607][ T7884] RSP: 002b:00007feb1f3ef168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.294050][ T7884] RAX: ffffffffffffffda RBX: 00007feb1e39bf80 RCX: 00007feb1e289279 [ 295.302043][ T7884] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 295.310035][ T7884] RBP: 00007feb1f3ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 295.318028][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.326019][ T7884] R13: 00007feb1e8cfb1f R14: 00007feb1f3ef300 R15: 0000000000022000 [ 295.334038][ T7884] [ 295.345067][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.355807][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.402251][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.424741][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.667954][ T144] usb 3-1: Using ep0 maxpacket: 32 [ 295.887980][ T144] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 168, changing to 11 [ 295.899555][ T144] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.919732][ T144] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 295.930450][ T144] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 296.108102][ T144] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.117203][ T144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.125902][ T144] usb 3-1: Product: syz [ 296.130469][ T144] usb 3-1: Manufacturer: syz [ 296.135182][ T144] usb 3-1: SerialNumber: syz [ 296.387856][ T7856] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 296.395244][ T7856] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 296.660141][ T144] cdc_ncm 3-1:1.0: bind() failure [ 296.687780][ T144] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 296.707806][ T144] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 296.727812][ T144] usbtest: probe of 3-1:1.1 failed with error -71 [ 296.737019][ T144] usb 3-1: USB disconnect, device number 13 13:51:10 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16], 0x0) r0 = syz_usb_connect$cdc_ncm(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "85ebbf8d11"}, {0x5, 0x24, 0x0, 0x27d1}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x3ff, 0x4, 0x1f}, {0x6, 0x24, 0x1a, 0xfff, 0xf}, [@mbim_extended={0x8, 0x24, 0x1c, 0x100, 0x4, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xa8, 0x7, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x7f, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x4, 0x1}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x6, 0x81, 0x0, 0xff, 0x7f}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf4ff}}]}) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x20, 0x21, 0x55, {0x55, 0x22, "6c46f550689fbd85a038bd3a2cc9568675256b557d059e8bf347f83b219bfd2babe74e610ed6225cc925e8bebc2558df3a52b076a9a85108f10ec62203cfbc155a5348fcfe87f048f66aade49cd3b7186afeae"}}, &(0x7f0000000240)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "407425b15c278fb58d5b6e2b6484e0afda3520bc1d3dc02afdd0cf7785dbae16a3eec8216136ce88183ab3f0896000eb9a25c346bd012cf471de107460ef4abd980b4bbb128215641c9718b3571ab72064eba6610a4eb2df2679f6a8ce4e4484967b833228b1ceca8b020737a76d24f35e71a9591e419aeaa7f931c97adeeaf4194289682b5e8b820251d1673ab659bf9a87da74c50b4cbb373a48a4a6f8eef6a8ba5ec02a2abedd998ecaee1861684b075b38c8152025466eba4ba06b381b711dd131c5c2a6d1787fe2e34a59259da05ffa4b7d09ddc7487436"}}, &(0x7f0000000340)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x9, 0xa5, 0xd9f6, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "c52d6e0167a9aeb42f8f34a3c58252f6"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6, 0xf4, 0x97, 0x5, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x26, 0x0, 0x0, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x5, 0x7fff}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x25, 0x10, 0x2, 0x9, "a85d96d8", 'x*g\n'}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x6d, 0x0, 0x80, 0xfffc, 0x8}}}, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x20, 0x18, 0x9b, "f271eded9a19e321be84a2d636e17fa1894d4a48bf507c51379c09469b356d10104b1b83cf8506114de580b00e5995a98647f01454a52c1a67b28b41bce9affd4a28d3a4ce2748fb31503e3083eb070534a2fb27ca563ec2adfddea32131f017c7d84643ae91c79ae837a0ec9664b7d187dca9e2b23312861b9910b3360eaa0c070ed7783548a38c74c0c7e357ec39930f56ef78656b6fc1a97ad9"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xd1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xb0}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x140, 0x28, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "92f6"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000000740)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, &(0x7f0000000780)={0x40, 0x17, 0x6, @random="68d366913ddd"}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "5c19"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xff}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16], 0x0) (async) syz_usb_connect$cdc_ncm(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "85ebbf8d11"}, {0x5, 0x24, 0x0, 0x27d1}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x3ff, 0x4, 0x1f}, {0x6, 0x24, 0x1a, 0xfff, 0xf}, [@mbim_extended={0x8, 0x24, 0x1c, 0x100, 0x4, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xa8, 0x7, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x7f, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x4, 0x1}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x6, 0x81, 0x0, 0xff, 0x7f}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf4ff}}]}) (async) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x20, 0x21, 0x55, {0x55, 0x22, "6c46f550689fbd85a038bd3a2cc9568675256b557d059e8bf347f83b219bfd2babe74e610ed6225cc925e8bebc2558df3a52b076a9a85108f10ec62203cfbc155a5348fcfe87f048f66aade49cd3b7186afeae"}}, &(0x7f0000000240)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "407425b15c278fb58d5b6e2b6484e0afda3520bc1d3dc02afdd0cf7785dbae16a3eec8216136ce88183ab3f0896000eb9a25c346bd012cf471de107460ef4abd980b4bbb128215641c9718b3571ab72064eba6610a4eb2df2679f6a8ce4e4484967b833228b1ceca8b020737a76d24f35e71a9591e419aeaa7f931c97adeeaf4194289682b5e8b820251d1673ab659bf9a87da74c50b4cbb373a48a4a6f8eef6a8ba5ec02a2abedd998ecaee1861684b075b38c8152025466eba4ba06b381b711dd131c5c2a6d1787fe2e34a59259da05ffa4b7d09ddc7487436"}}, &(0x7f0000000340)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x9, 0xa5, 0xd9f6, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "c52d6e0167a9aeb42f8f34a3c58252f6"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6, 0xf4, 0x97, 0x5, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x26, 0x0, 0x0, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x5, 0x7fff}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x25, 0x10, 0x2, 0x9, "a85d96d8", 'x*g\n'}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x6d, 0x0, 0x80, 0xfffc, 0x8}}}, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x20, 0x18, 0x9b, "f271eded9a19e321be84a2d636e17fa1894d4a48bf507c51379c09469b356d10104b1b83cf8506114de580b00e5995a98647f01454a52c1a67b28b41bce9affd4a28d3a4ce2748fb31503e3083eb070534a2fb27ca563ec2adfddea32131f017c7d84643ae91c79ae837a0ec9664b7d187dca9e2b23312861b9910b3360eaa0c070ed7783548a38c74c0c7e357ec39930f56ef78656b6fc1a97ad9"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xd1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xb0}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x140, 0x28, [0xf]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "92f6"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000000740)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, &(0x7f0000000780)={0x40, 0x17, 0x6, @random="68d366913ddd"}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "5c19"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xff}}) (async) 13:51:10 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r2, r1) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000040)={0x3, 0x2, 0xfffffffe}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) 13:51:10 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x800000000000002, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff25) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x10b) r4 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x80000, 0x128) sendfile(0xffffffffffffffff, r4, 0x0, 0x80000001) getpgid(0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x30f}, 0x0, r6}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x20011, r1, 0x0) 13:51:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 2) 13:51:10 executing program 5: unshare(0x40000000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfb02eca103c5a671}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240020002000000427bd7040fedbdf2502348000200000033a0000000800040007000000"], 0x24}}, 0x4) (async) r4 = socket(0x10, 0x803, 0x0) r5 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) (async, rerun: 32) r6 = dup2(r5, 0xffffffffffffffff) (async, rerun: 32) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="cc000000", @ANYRES16, @ANYBLOB="000227bd7000fddbdf25160000002c0407800c00030009001f000000000008000200dd2000000c000400010000000000000008000100020000001400058008000100756470000700010069620000040004801c000680080006002b350000040005000400020008000600020000003c000180380004001400010002004e22ac1414400000000000000000200002000a004e2300000054fe880000000000000000000000008001ffffff7f1c00038008000300fffffeff080002000200000008000200060000003730c6518e9a36a347303f8315ab0498b5ffebb0770142a4374d6758af2e442bdb8ac30a2e29db47"], 0xcc}, 0x1, 0x0, 0x0, 0x4001}, 0x30004890) (async) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES8=r0, @ANYRES16=r3, @ANYRESHEX], 0x20}}, 0x40) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000305030000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="0300000022c407001800128008000100677265000c00028008000600ac14140008000500", @ANYRES32=0x0, @ANYBLOB="08000a02", @ANYRES32=r7, @ANYBLOB], 0x48}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="9500000000000000950000000000000018000000c00f0000000000000100000018410000feffffff000000000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000081001baff1fc00000400009100000000000000008d040200ffffffffb2084f0a01000000000000004858483b444420b5db18000041fb7978ed792a2b9bbaee002f700fb6fc0ea0728a40df132efb1f71b146c4de63993b21a6e98a423e5c037738d08a27451f5a5f37b60a24178aa0331caaa7ab269d19873b81f452df13b8b0ee8b3ebfd7b8f72a9a104e624e41d711f8ce099ef6a7a0ef404a27e5e2a8b89c233f602f4f"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0xd2, &(0x7f0000000300)=""/210, 0x40f00, 0x14, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x0, 0x636, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 64) ioctl$PPPIOCGFLAGS1(r1, 0x80047458, &(0x7f00000000c0)) (rerun: 64) 13:51:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6e) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r7 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = dup(r6) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000080)={r7, 0x0, 0x0, 0x1000}) dup2(r8, r7) bind$packet(r8, &(0x7f0000000240)={0x11, 0xf6, r5, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="08000a0000de7cf82caff8410a8486c27b16129b3f4e99a55f31611d1a11dbe155751ceb7551534cc46e375a02446b06bb8d006d3a652eb263deef70810c83a4cc2a8d152f459937d940eb05f00282488e8fc08cc9ddec24b5599ce94155b909c87a216bb9fc5ad2144a3356c91656f7c7a6c98f3ac5190e810ae2cdd6044728d0f8f2b098226beebe143aee44864292edc3e19b7b515f7714f687", @ANYRES32=r9, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00'], 0x4c}}, 0x0) 13:51:10 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r2, r1) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000040)={0x3, 0x2, 0xfffffffe}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r1, 0xffff) (async) fcntl$addseals(r1, 0x409, 0x7) (async) dup(r0) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) (async) dup2(r2, r1) (async) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000040)={0x3, 0x2, 0xfffffffe}) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) (async) [ 297.199830][ T7900] FAULT_INJECTION: forcing a failure. [ 297.199830][ T7900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.227947][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 297.257112][ T7900] CPU: 1 PID: 7900 Comm: syz-executor.4 Not tainted 6.0.0-rc4-syzkaller-00055-g53e99dcff61e #0 [ 297.267511][ T7900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 297.277595][ T7900] Call Trace: [ 297.280896][ T7900] [ 297.283858][ T7900] dump_stack_lvl+0xcd/0x134 [ 297.288495][ T7900] should_fail.cold+0x5/0xa [ 297.294251][ T7900] _copy_from_user+0x2a/0x170 [ 297.298960][ T7900] iovec_from_user+0x149/0x3a0 [ 297.303731][ T7900] ? __might_fault+0xd1/0x170 [ 297.308534][ T7900] __import_iovec+0x65/0x610 [ 297.313148][ T7900] import_iovec+0x10c/0x150 [ 297.317663][ T7900] copy_msghdr_from_user+0xed/0x150 [ 297.322885][ T7900] ? __copy_msghdr+0x4a0/0x4a0 [ 297.327676][ T7900] ? find_held_lock+0x2d/0x110 [ 297.332469][ T7900] ___sys_sendmsg+0xdd/0x1b0 [ 297.337064][ T7900] ? do_recvmmsg+0x6e0/0x6e0 [ 297.341687][ T7900] ? __fget_files+0x248/0x440 [ 297.346384][ T7900] ? lock_downgrade+0x6e0/0x6e0 [ 297.353247][ T7900] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 297.359243][ T7900] ? ksys_write+0x20c/0x250 [ 297.363806][ T7900] ? __fget_files+0x26a/0x440 [ 297.368686][ T7900] ? __fget_light+0xe5/0x270 [ 297.373282][ T7900] __sys_sendmsg+0xf3/0x1c0 [ 297.377789][ T7900] ? __sys_sendmsg_sock+0x30/0x30 [ 297.382843][ T7900] ? lock_downgrade+0x6e0/0x6e0 [ 297.387723][ T7900] ? syscall_enter_from_user_mode+0x22/0xb0 [ 297.393708][ T7900] ? syscall_enter_from_user_mode+0x22/0xb0 [ 297.399606][ T7900] ? lockdep_hardirqs_on+0x79/0x100 [ 297.404810][ T7900] do_syscall_64+0x35/0xb0 [ 297.409225][ T7900] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 297.415114][ T7900] RIP: 0033:0x7feb1e289279 [ 297.419528][ T7900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 297.439138][ T7900] RSP: 002b:00007feb1f3ef168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.447652][ T7900] RAX: ffffffffffffffda RBX: 00007feb1e39bf80 RCX: 00007feb1e289279 [ 297.455649][ T7900] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 297.463627][ T7900] RBP: 00007feb1f3ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 297.471591][ T7900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.479565][ T7900] R13: 00007feb1e8cfb1f R14: 00007feb1f3ef300 R15: 0000000000022000 [ 297.487541][ T7900] 13:51:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 3) 13:51:10 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x800000000000002, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff25) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302030205b20285d2d7d2d24262b402720ffff20285b200a9d2a5fddd65e94a8f424abeac75665fa7bd6cf1db7ccde4bff67e00cd712705b752cbb93391064243f8337560fa289c229f953de74d93c5b36e618af773a21e75b32741d48fd06206ef2bfbb1bceb214b056917ea38bc72301d46e4991fa2a29ddc7a8fc676063a5308d95c90c1834ec7de3463c9e14b049e294c105500fd818934ca799fbafb1b94c0600f7b0309aa5a9fc273e8142bbcec637ee1d00010000000000004b0758545ac17b3e212601b9cc51fb44f04c01b5119d7649babe490d08e83530a530a6707cd08b128d9a6060b4daf7a1f436fec1142a89f4ada2502141fbbce145d742bd9a8916aded4d86baed446532ff55400ee276c9e1ed8896b00cc104a35ab20000000000e30522c3dae16fbf207242ebb4ba1efccc6b2b00566f1d827961954c8b2567913c11afbeacc997decc8974a3bda68c72fc010000001c849286b5063e47bb101f004895dc20fe34110e10327b7f79f375714cc344796fc1c16bbeb4398474bd5364266dd6b25ab3d8b7a0a722e29b11fe6962d588d3739d3b6a3842e8fe124b4f5a90e02ae08c34f106bfc800002eb4560b75de9609f296efafec50444e2c0535b08e428c2b943c6699b8db32c7105b8acfebce01e68461bc7b463987f189ef71668bc409c0c66a5865e1317e74923a577bc391a4d38f2ad7e2f86cf2c6ee28c1b316add877ae21a14555106ff2a3a666f01f80719575763fd8a6a0daf237b3d6368e857b3cf720007342b6da0b5117f90a3a0b034234c98d3b9ab23520f0c729666ca002c91fda0d5c3116244d3b1e3adb8d931377453a64c4014e683a828e593116e616d6569f1c86aaabb2520f7ec7107b463dba817ec2c65f65b8749e2520f1268e800745d88e4ab8a58ba494ac3d9d503670c9e8814b42e4f4fb780f8d3716d38fa4678bb3900e7fbfd694c84e7e293c38cafa451f340afa7ac872870b94a637696634fd1556e37c02d154d9d6897b58225df7fb05237d7b8aa2bebbf0361e7b2409a023e3edd1748170372e5dff95ff8dfda17851645644e2a0"], 0x10b) r4 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x80000, 0x128) sendfile(0xffffffffffffffff, r4, 0x0, 0x80000001) getpgid(0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x30f}, 0x0, r6}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x20011, r1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) (async) dup(r0) (async) socket$inet6(0xa, 0x800000000000002, 0x800) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff25) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) (async) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x10b) (async) openat(r1, &(0x7f0000000000)='./file0\x00', 0x80000, 0x128) (async) sendfile(0xffffffffffffffff, r4, 0x0, 0x80000001) (async) getpgid(0x0) (async) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x30f}, 0x0, r6}) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}}, 0x1c) (async) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x20011, r1, 0x0) (async) 13:51:10 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r2, r1) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000040)={0x3, 0x2, 0xfffffffe}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r1, 0xffff) (async) fcntl$addseals(r1, 0x409, 0x7) (async) dup(r0) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) (async) dup2(r2, r1) (async) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000040)={0x3, 0x2, 0xfffffffe}) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) (async) 13:51:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6(0xa, 0x80003, 0x6e) (async) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (async) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r7 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) (async) r8 = dup(r6) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000080)={r7, 0x0, 0x0, 0x1000}) (async) dup2(r8, r7) (async) bind$packet(r8, &(0x7f0000000240)={0x11, 0xf6, r5, 0x1, 0x0, 0x6, @dev}, 0x14) (async) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="08000a0000de7cf82caff8410a8486c27b16129b3f4e99a55f31611d1a11dbe155751ceb7551534cc46e375a02446b06bb8d006d3a652eb263deef70810c83a4cc2a8d152f459937d940eb05f00282488e8fc08cc9ddec24b5599ce94155b909c87a216bb9fc5ad2144a3356c91656f7c7a6c98f3ac5190e810ae2cdd6044728d0f8f2b098226beebe143aee44864292edc3e19b7b515f7714f687", @ANYRES32=r9, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00'], 0x4c}}, 0x0) 13:51:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 4) [ 297.647733][ T6927] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 297.837742][ T6927] usb 3-1: device descriptor read/64, error 18 [ 298.107874][ T6927] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 298.307731][ T6927] usb 3-1: device descriptor read/64, error 18 [ 298.427987][ T6927] usb usb3-port1: attempt power cycle [ 298.847701][ T6927] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 299.047871][ T6927] usb 3-1: device descriptor read/8, error -61 [ 299.327727][ T6927] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 299.508015][ T6927] usb 3-1: device descriptor read/8, error -61 [ 299.629169][ T6927] usb usb3-port1: unable to enumerate USB device 13:51:13 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a5d156204f17315953470102040000001b00010000000009040000010e010000090505030000000000"], 0x0) syz_usb_connect$uac1(0x6, 0x98, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x18, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x81, 0x50, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x3f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x2, 0x8, {0x7, 0x25, 0x1, 0x3, 0x20, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x4, 0x94, 0x1, "37dc38", '='}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xb1, 0x4, 0x0, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x3, 0x4, "4dee", "f6ef"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x5, 0x9, {0x7, 0x25, 0x1, 0x2, 0x43, 0x1aa9}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x2, 0x8, 0x8, 0x20, 0x59}, 0x60, &(0x7f0000000100)={0x5, 0xf, 0x60, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x54, 0xf000, 0x1, [0xc000, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "938d5a6ccac37d08c5ab395201ad9760"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0xf2, 0xff00, 0x5, [0xc0, 0xc03f, 0xff00cf, 0x3f00]}, @generic={0x14, 0x10, 0x4, "e0f4e932d97965531096caefa7b5f34d47"}]}, 0x7, [{0x8d, &(0x7f0000000200)=@string={0x8d, 0x3, "643c134bb4ddae6f63e58fb2e61c792e8be89d3ce4875480fc02c7594ad50205e54e31916b6026890b84ac5ff7bcf3c8a2350b3fb20c05e8f3ffa5762727cecb4b1c0faf1878dfc2686978475ced9cdb446a9a9d1968db417b053cab3b62b552b7eb6719d7ffc7663bb3646dc345fe67770c0caea14edb467e8c902de529a3559d77821537c2e04ba97280"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x429}}, {0xd5, &(0x7f0000000300)=@string={0xd5, 0x3, "c67f67c6226d5919b6d6ede252d16b12fdfca38c7f5021225d01df92bf658bc377a7cfe0d06a5f2750893924ff125ba42477535d413641024d3e687e9a7445c37cda98275d303858ba3845797d1998b67f1f9c7fb2d60215ddcbe6aa9ac1c8e279e5b65642edb17840dde89e4ab454f7615d6c09e0cccc845c3d82212baa17010b25c32f101efaef2c1752d63957f86d16ede52399db5fbb5ffe5a8bc8efbf53b4975d56b6debaf895fb4d3abbdc617b1fcd2673a4b032a31a6578e095a0fe2d59e75b94526191361f0194e7e345a2f4b1bca9"}}, {0x55, &(0x7f0000000400)=@string={0x55, 0x3, "d5f7dee597030625b43f5a4d5251b1789387379fcc560c0817f417ce5c918bd1bbfc233055d8d9b7635882446ffde8d2a42d181ec9ce1213b930056b0064ddeefe833f027284c116e2257568a10c49387873b7"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x84c}}]}) 13:51:13 executing program 1: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000040)) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) 13:51:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 5) 13:51:13 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r1 = dup(r0) (async, rerun: 32) r2 = socket$inet6(0xa, 0x800000000000002, 0x800) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff25) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) (async) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302030205b20285d2d7d2d24262b402720ffff20285b200a9d2a5fddd65e94a8f424abeac75665fa7bd6cf1db7ccde4bff67e00cd712705b752cbb93391064243f8337560fa289c229f953de74d93c5b36e618af773a21e75b32741d48fd06206ef2bfbb1bceb214b056917ea38bc72301d46e4991fa2a29ddc7a8fc676063a5308d95c90c1834ec7de3463c9e14b049e294c105500fd818934ca799fbafb1b94c0600f7b0309aa5a9fc273e8142bbcec637ee1d00010000000000004b0758545ac17b3e212601b9cc51fb44f04c01b5119d7649babe490d08e83530a530a6707cd08b128d9a6060b4daf7a1f436fec1142a89f4ada2502141fbbce145d742bd9a8916aded4d86baed446532ff55400ee276c9e1ed8896b00cc104a35ab20000000000e30522c3dae16fbf207242ebb4ba1efccc6b2b00566f1d827961954c8b2567913c11afbeacc997decc8974a3bda68c72fc010000001c849286b5063e47bb101f004895dc20fe34110e10327b7f79f375714cc344796fc1c16bbeb4398474bd5364266dd6b25ab3d8b7a0a722e29b11fe6962d588d3739d3b6a3842e8fe124b4f5a90e02ae08c34f106bfc800002eb4560b75de9609f296efafec50444e2c0535b08e428c2b943c6699b8db32c7105b8acfebce01e68461bc7b463987f189ef71668bc409c0c66a5865e1317e74923a577bc391a4d38f2ad7e2f86cf2c6ee28c1b316add877ae21a14555106ff2a3a666f01f80719575763fd8a6a0daf237b3d6368e857b3cf720007342b6da0b5117f90a3a0b034234c98d3b9ab23520f0c729666ca002c91fda0d5c3116244d3b1e3adb8d931377453a64c4014e683a828e593116e616d6569f1c86aaabb2520f7ec7107b463dba817ec2c65f65b8749e2520f1268e800745d88e4ab8a58ba494ac3d9d503670c9e8814b42e4f4fb780f8d3716d38fa4678bb3900e7fbfd694c84e7e293c38cafa451f340afa7ac872870b94a637696634fd1556e37c02d154d9d6897b58225df7fb05237d7b8aa2bebbf0361e7b2409a023e3edd1748170372e5dff95ff8dfda17851645644e2a0"], 0x10b) r4 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x80000, 0x128) sendfile(0xffffffffffffffff, r4, 0x0, 0x80000001) (async) getpgid(0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c) (async) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x30f}, 0x0, r6}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}}, 0x1c) (async) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x20011, r1, 0x0) 13:51:13 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6(0xa, 0x80003, 0x6e) (async) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (async) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r7 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r7, 0xffff) (async) fcntl$addseals(r7, 0x409, 0x7) (async) r8 = dup(r6) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000080)={r7, 0x0, 0x0, 0x1000}) (async) dup2(r8, r7) (async, rerun: 64) bind$packet(r8, &(0x7f0000000240)={0x11, 0xf6, r5, 0x1, 0x0, 0x6, @dev}, 0x14) (async, rerun: 64) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="08000a0000de7cf82caff8410a8486c27b16129b3f4e99a55f31611d1a11dbe155751ceb7551534cc46e375a02446b06bb8d006d3a652eb263deef70810c83a4cc2a8d152f459937d940eb05f00282488e8fc08cc9ddec24b5599ce94155b909c87a216bb9fc5ad2144a3356c91656f7c7a6c98f3ac5190e810ae2cdd6044728d0f8f2b098226beebe143aee44864292edc3e19b7b515f7714f687", @ANYRES32=r9, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00'], 0x4c}}, 0x0) (rerun: 64) 13:51:13 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) r2 = open(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfb02eca103c5a671}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240020002000000427bd7040fedbdf2502348000200000033a0000000800040007000000"], 0x24}}, 0x4) r4 = socket(0x10, 0x803, 0x0) (async) r5 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) r6 = dup2(r5, 0xffffffffffffffff) (async, rerun: 32) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="cc000000", @ANYRES16, @ANYBLOB="000227bd7000fddbdf25160000002c0407800c00030009001f000000000008000200dd2000000c000400010000000000000008000100020000001400058008000100756470000700010069620000040004801c000680080006002b350000040005000400020008000600020000003c000180380004001400010002004e22ac1414400000000000000000200002000a004e2300000054fe880000000000000000000000008001ffffff7f1c00038008000300fffffeff080002000200000008000200060000003730c6518e9a36a347303f8315ab0498b5ffebb0770142a4374d6758af2e442bdb8ac30a2e29db47"], 0xcc}, 0x1, 0x0, 0x0, 0x4001}, 0x30004890) (rerun: 32) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES8=r0, @ANYRES16=r3, @ANYRESHEX], 0x20}}, 0x40) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000305030000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="0300000022c407001800128008000100677265000c00028008000600ac14140008000500", @ANYRES32=0x0, @ANYBLOB="08000a02", @ANYRES32=r7, @ANYBLOB], 0x48}}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="9500000000000000950000000000000018000000c00f0000000000000100000018410000feffffff000000000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000081001baff1fc00000400009100000000000000008d040200ffffffffb2084f0a01000000000000004858483b444420b5db18000041fb7978ed792a2b9bbaee002f700fb6fc0ea0728a40df132efb1f71b146c4de63993b21a6e98a423e5c037738d08a27451f5a5f37b60a24178aa0331caaa7ab269d19873b81f452df13b8b0ee8b3ebfd7b8f72a9a104e624e41d711f8ce099ef6a7a0ef404a27e5e2a8b89c233f602f4f"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0xd2, &(0x7f0000000300)=""/210, 0x40f00, 0x14, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x0, 0x636, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80) (rerun: 64) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 64) ioctl$PPPIOCGFLAGS1(r1, 0x80047458, &(0x7f00000000c0)) (rerun: 64) 13:51:13 executing program 1: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000040)) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) 13:51:13 executing program 3: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x36}, r3}, 0x14) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000100)=r3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='veth0_to_batadv\x00', 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x8, 0x7, 0x3989, 0x80, {{0x42, 0x4, 0x2, 0x2c, 0x108, 0x66, 0x0, 0xc, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0x9c, [@loopback]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @end, @timestamp={0x44, 0x2c, 0x12, 0x0, 0x1, [0xfffff1da, 0x8, 0x1, 0x7, 0x9, 0x2, 0x3, 0x4, 0x8000, 0x3]}, @timestamp_addr={0x44, 0x44, 0x5c, 0x1, 0x6, [{@remote, 0x7fff}, {@broadcast, 0x2}, {@multicast2}, {@remote, 0x6}, {@empty, 0x6}, {@multicast1, 0x56c}, {@remote, 0xffffffff}, {@multicast1, 0x7}]}, @cipso={0x86, 0x2b, 0x2, [{0x5, 0xb, "f641dea2eefcb762b3"}, {0x1, 0x5, "daf550"}, {0x5, 0xd, "6895753fb30e3837f5a310"}, {0x0, 0x5, 'd@\a'}, {0x2, 0x3, 'f'}]}, @rr={0x7, 0x13, 0xa3, [@multicast2, @multicast2, @empty, @remote]}, @noop, @timestamp_addr={0x44, 0x34, 0x76, 0x1, 0x7, [{@empty}, {@private=0xa010101, 0x200}, {@local, 0x1}, {@private=0xa010102, 0xff}, {@private=0xa010101, 0x101}, {@remote, 0x1}]}]}}}}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'wg0\x00', 0x4000}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/wmi', 0xa2600, 0x13f) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000480)={0x0, 0x1, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) r6 = syz_open_dev$audion(&(0x7f00000004c0), 0x8001, 0x40240) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'ip6gretap0\x00', 0x10}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r6, {0x1f}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$xdp(r7, &(0x7f0000000740)={&(0x7f00000005c0)={0x2c, 0x1, r8, 0x30}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000600)="d8c555a57883e55c2d67721d41750fc8b3d88454a05cdaacf6e448fcd448130864f3336588e959fa4e62a3b8463f9f31df612ba06109331a5894a5cf1631ccbf3dc08415997dd7827140077bd58262ca22818e8c76790e3ec845dc5fcbe51fb9487aaf22f197aaf814067fd7de3af98413f5a9497109c4ecc5cd1997f332efec1e3a5e2d867d704e80f1befcbe63a4042889dcf3513a108e4865b4fe147d931077a5bb46c6a301129e1184626eefad7a11828212ede207daad3eb535e87577c20ec4d6168eb992b9c6a3625ea64d038f0b76f8eb497ea5c28b5b32", 0xdb}], 0x1, 0x0, 0x0, 0x4000000}, 0x4000804) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0x100, 0x7, {{0x35, 0x4, 0x2, 0x1b, 0xd4, 0x64, 0x0, 0xff, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x29}, {[@cipso={0x86, 0x17, 0x0, [{0x5, 0x11, "7a3b2f9ff0f9f2b889af067d5db3bc"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x54, 0x1, 0x4, [{@private=0xa010100, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x4}, {@broadcast, 0x7fff}, {@local, 0x8}]}, @lsrr={0x83, 0x7, 0x4a, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x54, 0x2d, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}, {@multicast1, 0x2}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x9}, {@private=0xa010101, 0x200}, {@loopback, 0xfffff800}, {@multicast2, 0xfffffff8}, {@loopback, 0x3}, {@local, 0x3f}, {@local}]}, @timestamp_addr={0x44, 0x14, 0x4d, 0x1, 0x5, [{@empty, 0x11c00}, {@remote, 0x800}]}]}}}}}) 13:51:13 executing program 1: ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000040)) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000040)) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) (async) 13:51:13 executing program 0: socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)="8e0b7a0be5d1649e736658013a8bbcc1119711b03f8e8752713c0200000000000000f2c0a982e3cf4192670284fc5e2dde8be6d9aca0d221d57217baf8857ca210c726675ae16c34284174f8354e77fa3c6f4fb6a609bfc733dfd92ac34e90a59bd5a584d1f942400d01258e123734facb1288b3a27a096ac83071", 0x7b}, {&(0x7f00000004c0)="971f11ac77a4b064e9f4b67504fa5bc7cb8c00028319bf2729d8bdeb0380554cfbbfb2b7b789d59478d8fa2cd778f844e49f014689d59143b8606c42e7fc883a062c6ae7f6cf4d20afce36b9f39a276539c45c58c946bd4ac566ee3600c5a5b930a518bb2aa2e044337a7788121bc06f55e622657d9a97cfb7bad4403685bf15d87051d00fa774f6ae361c071194fa8fd9bdd402d401a2848f184a3ff2364449e9cd9453b8ada31386dcdec6770a8261ba8f61aae91a2afbf61441583b02af9188eec7d626c7a072a58061504939f0d3ba4ae995f73c7d404b312b24a568acfdb5f28e0d55649280", 0xe8}, {&(0x7f00000003c0)="84185baca91d89aa5210d4f44334ace85b73adad607134fa3ff8b61044364528d60dc03b4fbe5a124d0b98f4a53b71770d87003035efdd32ebb8f05a389b1cb489af990592e5b6f5f5f7cb964047aa642a02f10974acf83cf58408d9b04ff2f64082ff7c37ab8ed81b111b076453116cdf8f79c7f828c1fbde14", 0x7a}], 0x3, 0x2) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private=0xa010102, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) syz_open_dev$sndmidi(&(0x7f0000000200), 0x100000001, 0xb00) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000080)=0xb2087ca) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121e02, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0xfee3, 0x12) sendmmsg$sock(r3, &(0x7f0000002940)=[{{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x1, 0x0, 0x2}}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000440)}, {&(0x7f0000001640)="f4af3cf2fadbe4d94e7ceb3a03097d", 0xf}, {0x0}, {&(0x7f0000001780)="6046701f23e637065555df9ada106a56684d6f767a08e409cc9e84c3db9f1da7d8b8357202fbb9d8", 0x28}, {0x0}, {&(0x7f00000018c0)="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", 0xe81}], 0x6}}], 0x1, 0x4004040) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x0) [ 300.324607][ T7956] FAULT_INJECTION: forcing a failure. [ 300.324607][ T7956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.364321][ T7956] CPU: 1 PID: 7956 Comm: syz-executor.4 Not tainted 6.0.0-rc4-syzkaller-00055-g53e99dcff61e #0 [ 300.374807][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 300.384896][ T7956] Call Trace: [ 300.388197][ T7956] [ 300.391148][ T7956] dump_stack_lvl+0xcd/0x134 [ 300.395786][ T7956] should_fail.cold+0x5/0xa [ 300.400328][ T7956] copyin+0x19/0x120 [ 300.404236][ T7956] _copy_from_iter+0x36e/0x11c0 [ 300.409109][ T7956] ? _copy_mc_to_iter+0x1430/0x1430 [ 300.414311][ T7956] ? memset+0x20/0x40 [ 300.418302][ T7956] ? __virt_addr_valid+0x5d/0x2d0 [ 300.423326][ T7956] ? __phys_addr+0xc4/0x140 [ 300.427845][ T7956] ? __phys_addr_symbol+0x2c/0x70 [ 300.432867][ T7956] ? __check_object_size+0x2de/0x700 [ 300.438197][ T7956] netlink_sendmsg+0x875/0xe10 [ 300.443068][ T7956] ? netlink_unicast+0x7f0/0x7f0 [ 300.448037][ T7956] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 300.453342][ T7956] ? netlink_unicast+0x7f0/0x7f0 [ 300.458380][ T7956] sock_sendmsg+0xcf/0x120 [ 300.462932][ T7956] ____sys_sendmsg+0x6eb/0x810 [ 300.467751][ T7956] ? copy_msghdr_from_user+0xfc/0x150 [ 300.473163][ T7956] ? kernel_sendmsg+0x50/0x50 [ 300.477871][ T7956] ? find_held_lock+0x2d/0x110 [ 300.482635][ T7956] ___sys_sendmsg+0x110/0x1b0 [ 300.487310][ T7956] ? do_recvmmsg+0x6e0/0x6e0 [ 300.491923][ T7956] ? __fget_files+0x248/0x440 [ 300.496620][ T7956] ? lock_downgrade+0x6e0/0x6e0 [ 300.501483][ T7956] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 300.507483][ T7956] ? ksys_write+0x20c/0x250 [ 300.512032][ T7956] ? __fget_files+0x26a/0x440 [ 300.517498][ T7956] ? __fget_light+0xe5/0x270 [ 300.522175][ T7956] __sys_sendmsg+0xf3/0x1c0 [ 300.526713][ T7956] ? __sys_sendmsg_sock+0x30/0x30 [ 300.531763][ T7956] ? lock_downgrade+0x6e0/0x6e0 [ 300.536617][ T7956] ? syscall_enter_from_user_mode+0x22/0xb0 [ 300.542516][ T7956] ? syscall_enter_from_user_mode+0x22/0xb0 [ 300.548434][ T7956] ? lockdep_hardirqs_on+0x79/0x100 [ 300.553637][ T7956] do_syscall_64+0x35/0xb0 [ 300.558066][ T7956] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 300.563958][ T7956] RIP: 0033:0x7feb1e289279 [ 300.568366][ T7956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 300.587974][ T7956] RSP: 002b:00007feb1f3ef168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.596377][ T7956] RAX: ffffffffffffffda RBX: 00007feb1e39bf80 RCX: 00007feb1e289279 [ 300.604357][ T7956] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 300.612336][ T7956] RBP: 00007feb1f3ef1d0 R08: 0000000000000000 R09: 0000000000000000 13:51:13 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x101, 0x7, 0x200000, 0x8001, 0x44, "a74548dd69a5b7623b0d7b0903bbaea265b57e", 0x0, 0x2}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) dup(r1) r2 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000080), 0x501080, 0xf) sendfile(r1, r2, &(0x7f00000000c0)=0x7, 0x1) [ 300.620315][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.628273][ T7956] R13: 00007feb1e8cfb1f R14: 00007feb1f3ef300 R15: 0000000000022000 [ 300.636421][ T7956] 13:51:13 executing program 3: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x36}, r3}, 0x14) (async) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000100)=r3) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='veth0_to_batadv\x00', 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x8, 0x7, 0x3989, 0x80, {{0x42, 0x4, 0x2, 0x2c, 0x108, 0x66, 0x0, 0xc, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0x9c, [@loopback]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @end, @timestamp={0x44, 0x2c, 0x12, 0x0, 0x1, [0xfffff1da, 0x8, 0x1, 0x7, 0x9, 0x2, 0x3, 0x4, 0x8000, 0x3]}, @timestamp_addr={0x44, 0x44, 0x5c, 0x1, 0x6, [{@remote, 0x7fff}, {@broadcast, 0x2}, {@multicast2}, {@remote, 0x6}, {@empty, 0x6}, {@multicast1, 0x56c}, {@remote, 0xffffffff}, {@multicast1, 0x7}]}, @cipso={0x86, 0x2b, 0x2, [{0x5, 0xb, "f641dea2eefcb762b3"}, {0x1, 0x5, "daf550"}, {0x5, 0xd, "6895753fb30e3837f5a310"}, {0x0, 0x5, 'd@\a'}, {0x2, 0x3, 'f'}]}, @rr={0x7, 0x13, 0xa3, [@multicast2, @multicast2, @empty, @remote]}, @noop, @timestamp_addr={0x44, 0x34, 0x76, 0x1, 0x7, [{@empty}, {@private=0xa010101, 0x200}, {@local, 0x1}, {@private=0xa010102, 0xff}, {@private=0xa010101, 0x101}, {@remote, 0x1}]}]}}}}}) (async, rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'wg0\x00', 0x4000}) (async, rerun: 64) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40) (async) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/wmi', 0xa2600, 0x13f) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000480)={0x0, 0x1, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) r6 = syz_open_dev$audion(&(0x7f00000004c0), 0x8001, 0x40240) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'ip6gretap0\x00', 0x10}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r6, {0x1f}}, './file0\x00'}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$xdp(r7, &(0x7f0000000740)={&(0x7f00000005c0)={0x2c, 0x1, r8, 0x30}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000600)="d8c555a57883e55c2d67721d41750fc8b3d88454a05cdaacf6e448fcd448130864f3336588e959fa4e62a3b8463f9f31df612ba06109331a5894a5cf1631ccbf3dc08415997dd7827140077bd58262ca22818e8c76790e3ec845dc5fcbe51fb9487aaf22f197aaf814067fd7de3af98413f5a9497109c4ecc5cd1997f332efec1e3a5e2d867d704e80f1befcbe63a4042889dcf3513a108e4865b4fe147d931077a5bb46c6a301129e1184626eefad7a11828212ede207daad3eb535e87577c20ec4d6168eb992b9c6a3625ea64d038f0b76f8eb497ea5c28b5b32", 0xdb}], 0x1, 0x0, 0x0, 0x4000000}, 0x4000804) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0x100, 0x7, {{0x35, 0x4, 0x2, 0x1b, 0xd4, 0x64, 0x0, 0xff, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x29}, {[@cipso={0x86, 0x17, 0x0, [{0x5, 0x11, "7a3b2f9ff0f9f2b889af067d5db3bc"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x54, 0x1, 0x4, [{@private=0xa010100, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x4}, {@broadcast, 0x7fff}, {@local, 0x8}]}, @lsrr={0x83, 0x7, 0x4a, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x54, 0x2d, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}, {@multicast1, 0x2}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x9}, {@private=0xa010101, 0x200}, {@loopback, 0xfffff800}, {@multicast2, 0xfffffff8}, {@loopback, 0x3}, {@local, 0x3f}, {@local}]}, @timestamp_addr={0x44, 0x14, 0x4d, 0x1, 0x5, [{@empty, 0x11c00}, {@remote, 0x800}]}]}}}}}) [ 300.957967][ T6927] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 301.207883][ T6927] usb 3-1: Using ep0 maxpacket: 32 [ 301.247829][ T6927] usb 3-1: no configurations [ 301.252619][ T6927] usb 3-1: can't read configurations, error -22 [ 301.417741][ T6927] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 301.687817][ T6927] usb 3-1: Using ep0 maxpacket: 32 [ 301.737960][ T6927] usb 3-1: no configurations [ 301.742745][ T6927] usb 3-1: can't read configurations, error -22 [ 301.757840][ T6927] usb usb3-port1: attempt power cycle [ 302.187758][ T6927] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 302.307902][ T6927] usb 3-1: Using ep0 maxpacket: 32 [ 302.347905][ T6927] usb 3-1: no configurations [ 302.352555][ T6927] usb 3-1: can't read configurations, error -22 [ 302.507729][ T6927] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 302.617802][ T6927] usb 3-1: Using ep0 maxpacket: 32 [ 302.657914][ T6927] usb 3-1: no configurations [ 302.662817][ T6927] usb 3-1: can't read configurations, error -22 [ 302.669755][ T6927] usb usb3-port1: unable to enumerate USB device 13:51:16 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a5d156204f17315953470102040000001b00010000000009040000010e010000090505030000000000"], 0x0) syz_usb_connect$uac1(0x6, 0x98, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x18, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x81, 0x50, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x3f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x2, 0x8, {0x7, 0x25, 0x1, 0x3, 0x20, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x4, 0x94, 0x1, "37dc38", '='}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xb1, 0x4, 0x0, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x3, 0x4, "4dee", "f6ef"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x5, 0x9, {0x7, 0x25, 0x1, 0x2, 0x43, 0x1aa9}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x2, 0x8, 0x8, 0x20, 0x59}, 0x60, &(0x7f0000000100)={0x5, 0xf, 0x60, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x54, 0xf000, 0x1, [0xc000, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "938d5a6ccac37d08c5ab395201ad9760"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0xf2, 0xff00, 0x5, [0xc0, 0xc03f, 0xff00cf, 0x3f00]}, @generic={0x14, 0x10, 0x4, "e0f4e932d97965531096caefa7b5f34d47"}]}, 0x7, [{0x8d, &(0x7f0000000200)=@string={0x8d, 0x3, "643c134bb4ddae6f63e58fb2e61c792e8be89d3ce4875480fc02c7594ad50205e54e31916b6026890b84ac5ff7bcf3c8a2350b3fb20c05e8f3ffa5762727cecb4b1c0faf1878dfc2686978475ced9cdb446a9a9d1968db417b053cab3b62b552b7eb6719d7ffc7663bb3646dc345fe67770c0caea14edb467e8c902de529a3559d77821537c2e04ba97280"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x429}}, {0xd5, &(0x7f0000000300)=@string={0xd5, 0x3, "c67f67c6226d5919b6d6ede252d16b12fdfca38c7f5021225d01df92bf658bc377a7cfe0d06a5f2750893924ff125ba42477535d413641024d3e687e9a7445c37cda98275d303858ba3845797d1998b67f1f9c7fb2d60215ddcbe6aa9ac1c8e279e5b65642edb17840dde89e4ab454f7615d6c09e0cccc845c3d82212baa17010b25c32f101efaef2c1752d63957f86d16ede52399db5fbb5ffe5a8bc8efbf53b4975d56b6debaf895fb4d3abbdc617b1fcd2673a4b032a31a6578e095a0fe2d59e75b94526191361f0194e7e345a2f4b1bca9"}}, {0x55, &(0x7f0000000400)=@string={0x55, 0x3, "d5f7dee597030625b43f5a4d5251b1789387379fcc560c0817f417ce5c918bd1bbfc233055d8d9b7635882446ffde8d2a42d181ec9ce1213b930056b0064ddeefe833f027284c116e2257568a10c49387873b7"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x84c}}]}) 13:51:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 6) 13:51:16 executing program 3: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x36}, r3}, 0x14) (async) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000100)=r3) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='veth0_to_batadv\x00', 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x8, 0x7, 0x3989, 0x80, {{0x42, 0x4, 0x2, 0x2c, 0x108, 0x66, 0x0, 0xc, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0x9c, [@loopback]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @end, @timestamp={0x44, 0x2c, 0x12, 0x0, 0x1, [0xfffff1da, 0x8, 0x1, 0x7, 0x9, 0x2, 0x3, 0x4, 0x8000, 0x3]}, @timestamp_addr={0x44, 0x44, 0x5c, 0x1, 0x6, [{@remote, 0x7fff}, {@broadcast, 0x2}, {@multicast2}, {@remote, 0x6}, {@empty, 0x6}, {@multicast1, 0x56c}, {@remote, 0xffffffff}, {@multicast1, 0x7}]}, @cipso={0x86, 0x2b, 0x2, [{0x5, 0xb, "f641dea2eefcb762b3"}, {0x1, 0x5, "daf550"}, {0x5, 0xd, "6895753fb30e3837f5a310"}, {0x0, 0x5, 'd@\a'}, {0x2, 0x3, 'f'}]}, @rr={0x7, 0x13, 0xa3, [@multicast2, @multicast2, @empty, @remote]}, @noop, @timestamp_addr={0x44, 0x34, 0x76, 0x1, 0x7, [{@empty}, {@private=0xa010101, 0x200}, {@local, 0x1}, {@private=0xa010102, 0xff}, {@private=0xa010101, 0x101}, {@remote, 0x1}]}]}}}}}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'wg0\x00', 0x4000}) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40) (async) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/wmi', 0xa2600, 0x13f) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000480)={0x0, 0x1, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) (async) r6 = syz_open_dev$audion(&(0x7f00000004c0), 0x8001, 0x40240) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'ip6gretap0\x00', 0x10}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r6, {0x1f}}, './file0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$xdp(r7, &(0x7f0000000740)={&(0x7f00000005c0)={0x2c, 0x1, r8, 0x30}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000600)="d8c555a57883e55c2d67721d41750fc8b3d88454a05cdaacf6e448fcd448130864f3336588e959fa4e62a3b8463f9f31df612ba06109331a5894a5cf1631ccbf3dc08415997dd7827140077bd58262ca22818e8c76790e3ec845dc5fcbe51fb9487aaf22f197aaf814067fd7de3af98413f5a9497109c4ecc5cd1997f332efec1e3a5e2d867d704e80f1befcbe63a4042889dcf3513a108e4865b4fe147d931077a5bb46c6a301129e1184626eefad7a11828212ede207daad3eb535e87577c20ec4d6168eb992b9c6a3625ea64d038f0b76f8eb497ea5c28b5b32", 0xdb}], 0x1, 0x0, 0x0, 0x4000000}, 0x4000804) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0x100, 0x7, {{0x35, 0x4, 0x2, 0x1b, 0xd4, 0x64, 0x0, 0xff, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x29}, {[@cipso={0x86, 0x17, 0x0, [{0x5, 0x11, "7a3b2f9ff0f9f2b889af067d5db3bc"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x54, 0x1, 0x4, [{@private=0xa010100, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x4}, {@broadcast, 0x7fff}, {@local, 0x8}]}, @lsrr={0x83, 0x7, 0x4a, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x54, 0x2d, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}, {@multicast1, 0x2}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x9}, {@private=0xa010101, 0x200}, {@loopback, 0xfffff800}, {@multicast2, 0xfffffff8}, {@loopback, 0x3}, {@local, 0x3f}, {@local}]}, @timestamp_addr={0x44, 0x14, 0x4d, 0x1, 0x5, [{@empty, 0x11c00}, {@remote, 0x800}]}]}}}}}) 13:51:16 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x101, 0x7, 0x200000, 0x8001, 0x44, "a74548dd69a5b7623b0d7b0903bbaea265b57e", 0x0, 0x2}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) dup(r1) r2 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000080), 0x501080, 0xf) sendfile(r1, r2, &(0x7f00000000c0)=0x7, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x101, 0x7, 0x200000, 0x8001, 0x44, "a74548dd69a5b7623b0d7b0903bbaea265b57e", 0x0, 0x2}) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) dup(r1) (async) openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000080), 0x501080, 0xf) (async) sendfile(r1, r2, &(0x7f00000000c0)=0x7, 0x1) (async) 13:51:16 executing program 0: socket$netlink(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) (async, rerun: 64) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)="8e0b7a0be5d1649e736658013a8bbcc1119711b03f8e8752713c0200000000000000f2c0a982e3cf4192670284fc5e2dde8be6d9aca0d221d57217baf8857ca210c726675ae16c34284174f8354e77fa3c6f4fb6a609bfc733dfd92ac34e90a59bd5a584d1f942400d01258e123734facb1288b3a27a096ac83071", 0x7b}, {&(0x7f00000004c0)="971f11ac77a4b064e9f4b67504fa5bc7cb8c00028319bf2729d8bdeb0380554cfbbfb2b7b789d59478d8fa2cd778f844e49f014689d59143b8606c42e7fc883a062c6ae7f6cf4d20afce36b9f39a276539c45c58c946bd4ac566ee3600c5a5b930a518bb2aa2e044337a7788121bc06f55e622657d9a97cfb7bad4403685bf15d87051d00fa774f6ae361c071194fa8fd9bdd402d401a2848f184a3ff2364449e9cd9453b8ada31386dcdec6770a8261ba8f61aae91a2afbf61441583b02af9188eec7d626c7a072a58061504939f0d3ba4ae995f73c7d404b312b24a568acfdb5f28e0d55649280", 0xe8}, {&(0x7f00000003c0)="84185baca91d89aa5210d4f44334ace85b73adad607134fa3ff8b61044364528d60dc03b4fbe5a124d0b98f4a53b71770d87003035efdd32ebb8f05a389b1cb489af990592e5b6f5f5f7cb964047aa642a02f10974acf83cf58408d9b04ff2f64082ff7c37ab8ed81b111b076453116cdf8f79c7f828c1fbde14", 0x7a}], 0x3, 0x2) (rerun: 64) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 32) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private=0xa010102, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) (async, rerun: 32) syz_open_dev$sndmidi(&(0x7f0000000200), 0x100000001, 0xb00) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000080)=0xb2087ca) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 64) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121e02, 0x0) (rerun: 64) write$cgroup_int(r3, &(0x7f00000001c0)=0xfee3, 0x12) sendmmsg$sock(r3, &(0x7f0000002940)=[{{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x1, 0x0, 0x2}}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000440)}, {&(0x7f0000001640)="f4af3cf2fadbe4d94e7ceb3a03097d", 0xf}, {0x0}, {&(0x7f0000001780)="6046701f23e637065555df9ada106a56684d6f767a08e409cc9e84c3db9f1da7d8b8357202fbb9d8", 0x28}, {0x0}, {&(0x7f00000018c0)="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", 0xe81}], 0x6}}], 0x1, 0x4004040) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x0) 13:51:16 executing program 5: socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)="8e0b7a0be5d1649e736658013a8bbcc1119711b03f8e8752713c0200000000000000f2c0a982e3cf4192670284fc5e2dde8be6d9aca0d221d57217baf8857ca210c726675ae16c34284174f8354e77fa3c6f4fb6a609bfc733dfd92ac34e90a59bd5a584d1f942400d01258e123734facb1288b3a27a096ac83071", 0x7b}, {&(0x7f00000004c0)="971f11ac77a4b064e9f4b67504fa5bc7cb8c00028319bf2729d8bdeb0380554cfbbfb2b7b789d59478d8fa2cd778f844e49f014689d59143b8606c42e7fc883a062c6ae7f6cf4d20afce36b9f39a276539c45c58c946bd4ac566ee3600c5a5b930a518bb2aa2e044337a7788121bc06f55e622657d9a97cfb7bad4403685bf15d87051d00fa774f6ae361c071194fa8fd9bdd402d401a2848f184a3ff2364449e9cd9453b8ada31386dcdec6770a8261ba8f61aae91a2afbf61441583b02af9188eec7d626c7a072a58061504939f0d3ba4ae995f73c7d404b312b24a568acfdb5f28e0d55649280", 0xe8}, {&(0x7f00000003c0)="84185baca91d89aa5210d4f44334ace85b73adad607134fa3ff8b61044364528d60dc03b4fbe5a124d0b98f4a53b71770d87003035efdd32ebb8f05a389b1cb489af990592e5b6f5f5f7cb964047aa642a02f10974acf83cf58408d9b04ff2f64082ff7c37ab8ed81b111b076453116cdf8f79c7f828c1fbde14", 0x7a}], 0x3, 0x2) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private=0xa010102, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) syz_open_dev$sndmidi(&(0x7f0000000200), 0x100000001, 0xb00) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000080)=0xb2087ca) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121e02, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0xfee3, 0x12) sendmmsg$sock(r3, &(0x7f0000002940)=[{{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x1, 0x0, 0x2}}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000440)}, {&(0x7f0000001640)="f4af3cf2fadbe4d94e7ceb3a03097d", 0xf}, {0x0}, {&(0x7f0000001780)="6046701f23e637065555df9ada106a56684d6f767a08e409cc9e84c3db9f1da7d8b8357202fbb9d8", 0x28}, {0x0}, {&(0x7f00000018c0)="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", 0xe81}], 0x6}}], 0x1, 0x4004040) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x0) 13:51:16 executing program 0: socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)="8e0b7a0be5d1649e736658013a8bbcc1119711b03f8e8752713c0200000000000000f2c0a982e3cf4192670284fc5e2dde8be6d9aca0d221d57217baf8857ca210c726675ae16c34284174f8354e77fa3c6f4fb6a609bfc733dfd92ac34e90a59bd5a584d1f942400d01258e123734facb1288b3a27a096ac83071", 0x7b}, {&(0x7f00000004c0)="971f11ac77a4b064e9f4b67504fa5bc7cb8c00028319bf2729d8bdeb0380554cfbbfb2b7b789d59478d8fa2cd778f844e49f014689d59143b8606c42e7fc883a062c6ae7f6cf4d20afce36b9f39a276539c45c58c946bd4ac566ee3600c5a5b930a518bb2aa2e044337a7788121bc06f55e622657d9a97cfb7bad4403685bf15d87051d00fa774f6ae361c071194fa8fd9bdd402d401a2848f184a3ff2364449e9cd9453b8ada31386dcdec6770a8261ba8f61aae91a2afbf61441583b02af9188eec7d626c7a072a58061504939f0d3ba4ae995f73c7d404b312b24a568acfdb5f28e0d55649280", 0xe8}, {&(0x7f00000003c0)="84185baca91d89aa5210d4f44334ace85b73adad607134fa3ff8b61044364528d60dc03b4fbe5a124d0b98f4a53b71770d87003035efdd32ebb8f05a389b1cb489af990592e5b6f5f5f7cb964047aa642a02f10974acf83cf58408d9b04ff2f64082ff7c37ab8ed81b111b076453116cdf8f79c7f828c1fbde14", 0x7a}], 0x3, 0x2) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private=0xa010102, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) syz_open_dev$sndmidi(&(0x7f0000000200), 0x100000001, 0xb00) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000080)=0xb2087ca) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121e02, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0xfee3, 0x12) sendmmsg$sock(r3, &(0x7f0000002940)=[{{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x1, 0x0, 0x2}}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000440)}, {&(0x7f0000001640)="f4af3cf2fadbe4d94e7ceb3a03097d", 0xf}, {0x0}, {&(0x7f0000001780)="6046701f23e637065555df9ada106a56684d6f767a08e409cc9e84c3db9f1da7d8b8357202fbb9d8", 0x28}, {0x0}, {&(0x7f00000018c0)="ceed44dc7a2320d2dd87367375ede20d07afa0efc348d7d8f64b7edd478f7b2aff898a1c1b33619af28e767b0f021fedca7cc590bdf50cac0cfae3587c2659049bd953abb016fc0295d412e0e4bcc4d499e8ca026947396c9fe864fe1f72d9d4d897f108a96c4fbfcf59d97cafb832ee14c2c2a318d2c697d46c809aa70bcf5abbaf81cb452bef0321bcd958ab6c2fd59bbaf8d38b120ebadf1bf95ec5b0fe40916636a8ca9088e1cd7c1d6b8e41ef83c967e4a5282e52ab53931a4861aa53bd44917387bd1199c121274328721588dea8475871aabda3d6a7600da1c71c999dfee284b1df078828e96461d89e694deab734a2f484eeaa9a31dfeadafcaa094b4c1b2ae55a95364bcd22f9eb7ed4ffb1cde94c753da5833d7ebbdbf69fdc2139dcdaa1eedd7ec5659643ea4e8afdeb80fcf35c27f453da65229d682775d85ebaa36ea2fa535351739ded317f9347c1725e7ad78d68e24ffa009d46984013f1c4b53c5f4fe21a4f74f098c79569bd80fc7c70b680bffd0fa5b8cd992aa8639f5468d20d2df613fbdb3b482fc359d3b604bb021fa1ee2c62f659779b7433bbd6853ee8296f4e94f718867e9fbc3a64cda618499ca8aac54a60ce707b04824728c6662182d029c77c95c311b6a1919f974b06ddd2b2f49de2b7102d1e0c653634225aaf61adbd70ecf6eb1a6a0ba2c7dd30cbc056e7c2fb0635c6922291d372f5c2d58178f8f8b35603b071c3272ae591d031f193344d407d1484ac6860e0326c4d96c5a9eecebdbaad94c5ac254bf330d7c6b45a4eadd16efe03cb24c10f8c0cb43c7b4108a575be43ce3315833e3dd1f0d31e4e2d23af28f4b4fa33d8f69a8e905fa25651b188b42c813711bc862320f874562b2397baf346c06f760e25e4e88086068dd2b4209701342f49a92dc7516ad02d63ca2302bf08d61fa0abe9b3d752de0eaed0b7ea2ff8cb6b588030f78f6f6d08eb93b787009600ea7cbf2f1338a63d0a524515f98519b9a7ed2bbdb4353d8828c49aa2ef5f510143ac5ead61f952fa87a818dde4a10374e986c978940cd0dc5383edbfcc2acb11e5792fbca0076f97016820784addd4b2e3fdb0d3c2f6bf2aba26a1274b5fa996cbba24d17ea3d561a5785045e6029f3cc7d5da7569111494ef3754ac7194620ea1677342e5912fb94b66395536fa586265a4c32b5c77c4e8de6fc5f74f0ff022b80e122d48891e0cfd04a8c35afaf616aee6b2acf54c5c7aab1894f734c533e85d2eb199a85cfdd2154508a25d20898aaabd010c1064e573e22e81258e86ba9f9d56bf818b82f4d97228b61e74765df5089e34f3ab2536ccb59c16b206e430961104989422bc45abcd58cead07fcf12fc880e57db010b517f48a1143249f3de652d2958f5d099e0f9556baad9ecb9a99300605316366b5551929974540dbfa7a0f5db9854e1a4ab805c3d181b7e5b04ab1a2b3948a4620b833aa12e6c2aaab442ee880f7fc895ce0ad8a5069a3e022bb4d6c4bc469c9a9b234576dee289e12cc5ad43a10aa8b6bc4f69cf4c49867807c78ac093a20165cef0f3328355c6cc1ea84f77736211f4c4561d768794e52c061e6e038f8be18ba10a03151e9406f7ea27e0ec6e41843e321249ae652b1e25af894837aa4c97f23b22d63f3da105b2355af6ccc8d19c5a160b5ead4f6e3d254edb52095fc537b551328a04c6546692a5729e095ce813c84d922064d9e67326667a8cd8abbb41b309bd7f1f089a04dbc60a5d6a6ca653096bca4c63f32da26d36d30fcff5de0c7d9cb726079bd6ca6a2b93adcefb909b544c403eae0827438a665d2908db115be8853a4997a58814de59bc670d1c7cd30842a0b79bf0c6cdb64533259a5352d391185a4472d40c8f5e26567ab1aadbebbc3305b4d34528f2b12fb52244dcf1d7a67bf47e35cc1ee647966f6a869aa428fad5e5830ab7312301ea5e734cb3a2de049066c03feb3d9f8e98b1c0bb2b69b947a6088f07738ecdfac467759832ff52dd8d258784658e613f0fb6007c55f35f9386e1866b829d568be89f972982904ddae7fcf7ae22305d3f50dfbc74dde8571885317d063a65f3c80d83ddb8c8b1addb630f1b6fe82649b1ac49659663217b1ee45e0e0934da92ad8671ea7e3b72f4aa478eb25ebcdb895c670c4ef7d8bdfd5a14cf3287fee33c99bab586fcf9bde3f81f960199ce767a4cfb86a6b24b06d5b6a56ab73468154737dad1baced81d7834878b51cbce4abaac2b726c7e8023ecb48a7db5ff5cb0c638f126c6ddc7d137311dd5af392742d89a622590caa9ce967336d83186513a69fae2a08a93df3f06248e1086a176d1dbe754d8d672cc7c389c0f691bc6ca294fbb336f868cf1b7f4447aeb7f6de9fd6feac071bb1692eba61f1ce6f4d3ddebf679069a86942e67691e948a1419c15969653438171a9ba485123105637f43076c635dbed34bf0cf74082288569baa416dedffee704c0a5cefeffdbcad708b064be93af4710fd30b13b641ba8d3bba4a9cd7f87d4eb34fc7cd0ab5a63bf1bcfa00d827b9059ebd00635e9c9ec408ec5575e21c58bed3d51d76318a400aeb8041acd0c7786f426d9cb9df642479cfce7cf11d32384c27653b26e3fec3ef44f970b7e17f2b32525c9c91797bb08551c6271ae1ccaef5c26e533573714c73b7507add4ef79b3e7bdc05a72bad706fd71e7618c3a749ad9710a24758c535ac87783498111a7a6329c5900d40f653ebefc359776611ae112158dd74375a2fbec486ecbe9faff2b688187a8222138b2cb0e2b4339cd86121114847523ef41784db4af45b53b3a784cabd69a92588f1455ebcd28605151e6a0ea5aa071a00a19fca1a684c22556576b33b5d2a7d05753112fefc354baf4b60d6f322aeaaa7c8261fd900c685679fa6d1439da2b507ad545e321a3961a7e42de3871428f89009a4fe7ee02d8375fa11878582f8e940a5bff301c9f3592a2d0ec273e8bb9e2d723daeaa512a779f2ca6779a59e57e62b122ac2072cd1eedbe130b0059f6b638be48743502c0d597539bff70525b451972e6422dcab7c8c59e5d8972b1bc5c8664b4d7fc65ade3a5620885b498d6ced427017ac222d0b38376f8f35db25497ceac4348908982789ce88be902800e820cf958e6075f7720b530bd6056aeedc8fa45118dfb5cbf163d5304f0505e6bd05f8ac90bad16dba02c9a2a4146e605b89e94b80f77fc9dc964ab9b6bb6a9ee8205700f89c78a530c94108c199ee17c3763fa590f0ef5754bd635ef9f3e5c413324bbd1e7693275fabd7eaa3275d8afd3ba7b1c9765ae7d87108b301ea2fb1c4b70e6a55f4fdcde2d61e6361bd47562e695ee164af94db33e4d9b2ce1dd979efd48babde7e9472912e4eddff64f67549b14aeb2ef96315af4c7f34cd00b73a883450cb724d9bae4ed3e5627710cf683d595145e6693daab8f4124e0bb162c81207100348354ed72e01be1897db0db7cd592b37bfaeb7a045fdeb5d9459fef3bc058440e196fbb7b5f1782aaea4c37f37fde80a0b950e49e7ecbe3ac89660dda8b496a1c3ff40410566feafa259297a731160c0231303537f62a9fb3ffe14436fc0c8a847b58ef62bf7785ccf4392ae148a1c43486667619f2ff5aa8948421038fc280bb4bc332824dbcf75727d6809b454ab9871cdbc48639a2424957ac2f0e28c4ffc9d979fba392a58a89e5c8ba052cfd10b0cfb78c0f3382e8a97178fee2786bd70115373e996279be6220147c3236c56eda86f8bfdc90b29bbf1383e21c5c38690ce509cf9302e8f5d6d3e4347c389cea0b2605073e6ae74fddbd03f5dfd47b450760308733c5ac4ff76493d1cabe92aeaeded47f55120cc26913c79659ef86b56fac7db888f20df1c0e99f86a5647e90c8432c309112a2b3721b4c978d0cf2b4c2de7418bd641d197d2f3b225a60fffe32189591e7c5c86860aebe69567b681776c45410e8cb7d138311a245ec05a85fc32504eb680f97f36edf7437acfe320aaa4be5eda6df33bccaff4371e9fdd4e40ea6987248cf90c1f7a7764260fac003b53433a764b2c3dc83803db1d7accd7d0f31c607b5183e40e6409fb73c1a9cfc9a784a1a98a3441f023852f5364672b4e6001abc7a7f98594da08c55af66f2a75643c96eba8a1f5cde24fc33b5d6c754f072937756b38e191489cf007ffd2f32394af2d324a0412d5bb22266ec75b2918ff0ade3c57150d931d4fc32cf1379509698260d9249ffdcb8a88b1c316e8e3994f5ddc8ad50e55ac1dc6d4819ea7135b591fe011dcf68da248f11c07d1221512b56a91f97fe890dc4835bcc42db61247186f6088203b741d6218a3b3ee93ee402524e5860c781465922f0de063449b67932d0703a8f9232ddbb0777b78b7ed2b3fb30845c62b2e04630fd2e0d2367e11402aab8d8a8aa8ae78a3f1d8376f6c244f5797bad8f4287cc74d474bde42741f8682138c73c9e0b352f6b70ffedded182f0ee541d97fdecb39669567508d72e00b932acfa2776ef71242117aafa2089b422085f986ccc58a48a43fa6c8ad6912e7a6e471a0c3e17fedd33c42d6d0dd001f0d70206b798ea9ed4a114ef585cc3b6c73f37464f3fc2f946413e69947243e78f57f2ae44e5aef04c9aa77879c79b2e9ec570cb9646bc2eb600d980b6d47c5bcaa93c6bf50f46872884e1a4f85738b15bedece5444e80626865168ae57a000356065b1a8ec61065adc7d42ac5ae9e80701ad75a7ec9423ff8a9964284c511f995737182dd33145e1a428484ba4041b13803ede8797c300f7153578efd219a09b9a4928e91111b3995f39588eb8e6d96991662371aa2c5997ebab07a6643fa670d4389385f200cdab957186f31f8792d78de95334144b8ec0718435449ece5c4993b8b6c9af96e86f77692026b0de5bdf7d97d025c395fe8e23c2ba739f7e5c2f482235f585d24588e947feeca6998484c0b6fa55ad6ab22f1c9e75b520d42c3d173a9b6ee988d6375abf0a56c3bc897b0fe027cbd91b3d3fc70407e4fcec80dc2162c2459af5b35edb670d6aff90db75eadcdecbd126af8b99f71676789e7396f4fb36e361d70556e9b3429f43610a8296398a51a6b7ec8f0c9f932a90f43946e48b8283fc98b1ead30c380b3ba8ab3f7a69130fba767936feacf96a60b6ba85a57abdc717740b35b4da622e0219320ffc2269635e2f73cb3d1328ec7df90cfe4f18729b8610bf89a5cc0f4c41cbd3d477d7e08ca920db7e2211e93ee14b", 0xe81}], 0x6}}], 0x1, 0x4004040) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)="8e0b7a0be5d1649e736658013a8bbcc1119711b03f8e8752713c0200000000000000f2c0a982e3cf4192670284fc5e2dde8be6d9aca0d221d57217baf8857ca210c726675ae16c34284174f8354e77fa3c6f4fb6a609bfc733dfd92ac34e90a59bd5a584d1f942400d01258e123734facb1288b3a27a096ac83071", 0x7b}, {&(0x7f00000004c0)="971f11ac77a4b064e9f4b67504fa5bc7cb8c00028319bf2729d8bdeb0380554cfbbfb2b7b789d59478d8fa2cd778f844e49f014689d59143b8606c42e7fc883a062c6ae7f6cf4d20afce36b9f39a276539c45c58c946bd4ac566ee3600c5a5b930a518bb2aa2e044337a7788121bc06f55e622657d9a97cfb7bad4403685bf15d87051d00fa774f6ae361c071194fa8fd9bdd402d401a2848f184a3ff2364449e9cd9453b8ada31386dcdec6770a8261ba8f61aae91a2afbf61441583b02af9188eec7d626c7a072a58061504939f0d3ba4ae995f73c7d404b312b24a568acfdb5f28e0d55649280", 0xe8}, {&(0x7f00000003c0)="84185baca91d89aa5210d4f44334ace85b73adad607134fa3ff8b61044364528d60dc03b4fbe5a124d0b98f4a53b71770d87003035efdd32ebb8f05a389b1cb489af990592e5b6f5f5f7cb964047aa642a02f10974acf83cf58408d9b04ff2f64082ff7c37ab8ed81b111b076453116cdf8f79c7f828c1fbde14", 0x7a}], 0x3, 0x2) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private=0xa010102, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) (async) syz_open_dev$sndmidi(&(0x7f0000000200), 0x100000001, 0xb00) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000080)=0xb2087ca) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121e02, 0x0) (async) write$cgroup_int(r3, &(0x7f00000001c0)=0xfee3, 0x12) (async) sendmmsg$sock(r3, &(0x7f0000002940)=[{{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x1, 0x0, 0x2}}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000440)}, {&(0x7f0000001640)="f4af3cf2fadbe4d94e7ceb3a03097d", 0xf}, {0x0}, {&(0x7f0000001780)="6046701f23e637065555df9ada106a56684d6f767a08e409cc9e84c3db9f1da7d8b8357202fbb9d8", 0x28}, {0x0}, {&(0x7f00000018c0)="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", 0xe81}], 0x6}}], 0x1, 0x4004040) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x0) (async) 13:51:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 7) 13:51:16 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x101, 0x7, 0x200000, 0x8001, 0x44, "a74548dd69a5b7623b0d7b0903bbaea265b57e", 0x0, 0x2}) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) dup(r1) r2 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000080), 0x501080, 0xf) sendfile(r1, r2, &(0x7f00000000c0)=0x7, 0x1) 13:51:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 8) 13:51:16 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigpending(&(0x7f0000000200), 0x8) pselect6(0x40, &(0x7f0000000000)={0x2, 0x154d669d, 0x400, 0x40b, 0x8, 0x6, 0xec, 0x2400000}, &(0x7f0000000040)={0x2, 0x7, 0x80000000, 0x1, 0x1ff, 0xf8f, 0xc9f, 0x8}, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x2, 0x1}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) 13:51:16 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) [ 303.728300][ T3677] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 303.987898][ T3677] usb 3-1: Using ep0 maxpacket: 32 [ 304.027864][ T3677] usb 3-1: no configurations [ 304.032670][ T3677] usb 3-1: can't read configurations, error -22 [ 304.197711][ T3677] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 304.447695][ T3677] usb 3-1: Using ep0 maxpacket: 32 [ 304.488158][ T3677] usb 3-1: no configurations [ 304.492814][ T3677] usb 3-1: can't read configurations, error -22 [ 304.504559][ T3677] usb usb3-port1: attempt power cycle [ 304.917735][ T3677] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 305.007961][ T3677] usb 3-1: Using ep0 maxpacket: 32 [ 305.047836][ T3677] usb 3-1: no configurations [ 305.052479][ T3677] usb 3-1: can't read configurations, error -22 [ 305.207714][ T3677] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 305.307988][ T3677] usb 3-1: Using ep0 maxpacket: 32 [ 305.348296][ T3677] usb 3-1: no configurations [ 305.353051][ T3677] usb 3-1: can't read configurations, error -22 [ 305.366260][ T3677] usb usb3-port1: unable to enumerate USB device 13:51:19 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a5d156204f17315953470102040000001b00010000000009040000010e010000090505030000000000"], 0x0) syz_usb_connect$uac1(0x6, 0x98, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x18, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x81, 0x50, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x3f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x2, 0x8, {0x7, 0x25, 0x1, 0x3, 0x20, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x4, 0x94, 0x1, "37dc38", '='}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xb1, 0x4, 0x0, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x3, 0x4, "4dee", "f6ef"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x5, 0x9, {0x7, 0x25, 0x1, 0x2, 0x43, 0x1aa9}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x2, 0x8, 0x8, 0x20, 0x59}, 0x60, &(0x7f0000000100)={0x5, 0xf, 0x60, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x54, 0xf000, 0x1, [0xc000, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "938d5a6ccac37d08c5ab395201ad9760"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0xf2, 0xff00, 0x5, [0xc0, 0xc03f, 0xff00cf, 0x3f00]}, @generic={0x14, 0x10, 0x4, "e0f4e932d97965531096caefa7b5f34d47"}]}, 0x7, [{0x8d, &(0x7f0000000200)=@string={0x8d, 0x3, "643c134bb4ddae6f63e58fb2e61c792e8be89d3ce4875480fc02c7594ad50205e54e31916b6026890b84ac5ff7bcf3c8a2350b3fb20c05e8f3ffa5762727cecb4b1c0faf1878dfc2686978475ced9cdb446a9a9d1968db417b053cab3b62b552b7eb6719d7ffc7663bb3646dc345fe67770c0caea14edb467e8c902de529a3559d77821537c2e04ba97280"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x429}}, {0xd5, &(0x7f0000000300)=@string={0xd5, 0x3, "c67f67c6226d5919b6d6ede252d16b12fdfca38c7f5021225d01df92bf658bc377a7cfe0d06a5f2750893924ff125ba42477535d413641024d3e687e9a7445c37cda98275d303858ba3845797d1998b67f1f9c7fb2d60215ddcbe6aa9ac1c8e279e5b65642edb17840dde89e4ab454f7615d6c09e0cccc845c3d82212baa17010b25c32f101efaef2c1752d63957f86d16ede52399db5fbb5ffe5a8bc8efbf53b4975d56b6debaf895fb4d3abbdc617b1fcd2673a4b032a31a6578e095a0fe2d59e75b94526191361f0194e7e345a2f4b1bca9"}}, {0x55, &(0x7f0000000400)=@string={0x55, 0x3, "d5f7dee597030625b43f5a4d5251b1789387379fcc560c0817f417ce5c918bd1bbfc233055d8d9b7635882446ffde8d2a42d181ec9ce1213b930056b0064ddeefe833f027284c116e2257568a10c49387873b7"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x84c}}]}) 13:51:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 9) 13:51:19 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigpending(&(0x7f0000000200), 0x8) pselect6(0x40, &(0x7f0000000000)={0x2, 0x154d669d, 0x400, 0x40b, 0x8, 0x6, 0xec, 0x2400000}, &(0x7f0000000040)={0x2, 0x7, 0x80000000, 0x1, 0x1ff, 0xf8f, 0xc9f, 0x8}, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x2, 0x1}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) rt_sigpending(&(0x7f0000000200), 0x8) (async) pselect6(0x40, &(0x7f0000000000)={0x2, 0x154d669d, 0x400, 0x40b, 0x8, 0x6, 0xec, 0x2400000}, &(0x7f0000000040)={0x2, 0x7, 0x80000000, 0x1, 0x1ff, 0xf8f, 0xc9f, 0x8}, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x2, 0x1}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) (async) 13:51:19 executing program 0: syz_clone(0x42000000, &(0x7f0000001000), 0x0, 0x0, 0x0, &(0x7f0000000000)="000400") 13:51:19 executing program 5: getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000840), &(0x7f00000008c0)=0x68) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000900), 0x80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000940)=[@mss={0x2, 0x4}, @sack_perm], 0x2) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x40, 0x3, 0xc, {0xc, 0x4, "b5111c6143dc8dbfb5af"}}, &(0x7f0000000040)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "1bfe1c0097d846234ce48186c6fbe2a5712072dab0c4176ba625cd2ec2fede4bf7e916b6497c61769e1985de9b1f4f1e59daf2fe5d956393a70e0153b120fc3154d73b0bce62f00b634e9c14d9a455d82c3291b2fc80b4c2116317b90f038a7ea09a0487839be423b3931f12c2040ee8743ad7ce7987d0f2317b827a5f406314d2be6ebd8d509266ce484edf5c4e0096cf5c4a10c4561bd7cd00cafb9b519655c9d910a2a0893f0974d35f314d45f58b5f9cec00a033aa65a61fb94c5db94149d8abb25182d1c4dac8f4462316de8ee8658ab32ff40c9c0dfe74a4fbb3424ec0f2b8"}}, &(0x7f0000000140)={0x0, 0xf, 0xfd, {0x5, 0xf, 0xfd, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x9, 0x2}, @generic={0xbe, 0x10, 0xa, "774d0e3a0586d6e3326ec2b18266f5660abf9ac9c01e28561e32e82639d5d4448c7afd244330af1aa2be7163f4b33d6b0d88a01ca89126652486046a34b09ecebe8d1f60b8a596b668421d7157b71671eecb0156c9dcbb405d48b8c4d38d2cb9007a1feb33f6a04187a3bf491fbcc015ab8ebe63be7bca90aa1829199166531971ff329f3acbb7d7ad88f200f865958a747e00c61dfad1749866c967869a49bb43ed3e6fc2d559c47093f31925a6ebeccd554fb65e857c8fbf0adf"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x3f, 0x5, 0x4}, @generic={0x1f, 0x10, 0x4, "c91761bcfeec0d7767a3b2dc7eb13cc8bd2956232c957dd224461756"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x0, 0x7fff}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x61, 0x0, 0x1, 0x8a, "08a79899", "1c328c04"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe4, 0x1, 0x5, 0x4, 0x3, 0x9, 0x3ff}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x20, 0x18, 0x35, "ff4c2bda2be3039f9cc60eb566be286ab4a92b61d73bc4341ae41588b34869b0bf2e0b6f5cc802ce73c6d8003a12fd2aba6cc67f4c"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000540)={0x40, 0xb, 0x2, "7185"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x19, 0x2, 'Y:'}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x20}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x3}}) 13:51:19 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) (async) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) (async) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) (async) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) (async) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) (async) socket$inet(0x2, 0x3, 0x2) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) (async) 13:51:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 10) 13:51:19 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigpending(&(0x7f0000000200), 0x8) pselect6(0x40, &(0x7f0000000000)={0x2, 0x154d669d, 0x400, 0x40b, 0x8, 0x6, 0xec, 0x2400000}, &(0x7f0000000040)={0x2, 0x7, 0x80000000, 0x1, 0x1ff, 0xf8f, 0xc9f, 0x8}, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x2, 0x1}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) rt_sigpending(&(0x7f0000000200), 0x8) (async) pselect6(0x40, &(0x7f0000000000)={0x2, 0x154d669d, 0x400, 0x40b, 0x8, 0x6, 0xec, 0x2400000}, &(0x7f0000000040)={0x2, 0x7, 0x80000000, 0x1, 0x1ff, 0xf8f, 0xc9f, 0x8}, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0x2, 0x1}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) (async) 13:51:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 11) 13:51:19 executing program 0: syz_clone(0x42000000, &(0x7f0000001000), 0x0, 0x0, 0x0, &(0x7f0000000000)="000400") syz_clone(0x42000000, &(0x7f0000001000), 0x0, 0x0, 0x0, &(0x7f0000000000)="000400") (async) 13:51:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 12) 13:51:19 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff}}, './file0\x00'}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) dup(r1) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000800)={{r1}, "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"}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8010}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x50e0}], 0x3, &(0x7f0000000080)={r2, r3+60000000}, &(0x7f00000000c0)={[0x8000]}, 0x8) pselect6(0x40, &(0x7f0000000100)={0x22370257, 0xffff, 0x6, 0x0, 0x7, 0xfe, 0x10000, 0xff}, &(0x7f0000000140)={0x48f2, 0x3ff, 0x1, 0x0, 0x7fffffff, 0x6, 0x9, 0x100000000}, &(0x7f0000000180)={0x1, 0x80000000, 0x0, 0x4, 0x0, 0x635, 0x40, 0x1000}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x101]}, 0x8}) accept4$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x0, 0x0, @private1}, &(0x7f00000006c0)=0x1c, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) clock_nanosleep(0x6, 0x0, &(0x7f0000000740)={r4, r5+10000000}, &(0x7f0000000780)) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @empty}, &(0x7f00000004c0)=0x1c, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r7 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = accept4(0xffffffffffffffff, &(0x7f0000001800)=@ax25={{0x3, @bcast}, [@rose, @bcast, @default, @remote, @netrom, @null, @default, @netrom]}, &(0x7f0000000580)=0x80, 0x80000) ppoll(&(0x7f00000005c0)=[{0xffffffffffffffff, 0x101}, {0xffffffffffffffff, 0x2026}, {r6, 0x310}, {r8, 0xa006}], 0x4, &(0x7f0000000600), &(0x7f0000000640)={[0x9]}, 0x8) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0)={0x5, 0x27, 0x100000000, 0x3, 0x3, 0x1, 0x800, 0x2}, &(0x7f0000000300)={0x4, 0x2, 0x3ff, 0x1ff, 0x8, 0x1, 0x0, 0x4}, &(0x7f0000000340)={0x1, 0x1, 0x0, 0x8, 0x20, 0x1, 0x8001, 0x8}, &(0x7f00000003c0)={r9, r10+60000000}, &(0x7f0000000440)={&(0x7f0000000400)={[0x7ff8000000000]}, 0x8}) [ 306.857802][ T14] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 307.127900][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 307.178031][ T14] usb 3-1: no configurations [ 307.183044][ T14] usb 3-1: can't read configurations, error -22 [ 307.357694][ T14] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 307.617868][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 307.665977][ T14] usb 3-1: no configurations [ 307.670758][ T14] usb 3-1: can't read configurations, error -22 [ 307.681813][ T14] usb usb3-port1: attempt power cycle [ 308.121632][ T14] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 308.278144][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 308.318749][ T14] usb 3-1: no configurations [ 308.323489][ T14] usb 3-1: can't read configurations, error -22 [ 308.497769][ T14] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 308.597890][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 308.637979][ T14] usb 3-1: no configurations [ 308.642728][ T14] usb 3-1: can't read configurations, error -22 [ 308.661825][ T14] usb usb3-port1: unable to enumerate USB device 13:51:22 executing program 5: getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000840), &(0x7f00000008c0)=0x68) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000900), 0x80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000940)=[@mss={0x2, 0x4}, @sack_perm], 0x2) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x40, 0x3, 0xc, {0xc, 0x4, "b5111c6143dc8dbfb5af"}}, &(0x7f0000000040)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "1bfe1c0097d846234ce48186c6fbe2a5712072dab0c4176ba625cd2ec2fede4bf7e916b6497c61769e1985de9b1f4f1e59daf2fe5d956393a70e0153b120fc3154d73b0bce62f00b634e9c14d9a455d82c3291b2fc80b4c2116317b90f038a7ea09a0487839be423b3931f12c2040ee8743ad7ce7987d0f2317b827a5f406314d2be6ebd8d509266ce484edf5c4e0096cf5c4a10c4561bd7cd00cafb9b519655c9d910a2a0893f0974d35f314d45f58b5f9cec00a033aa65a61fb94c5db94149d8abb25182d1c4dac8f4462316de8ee8658ab32ff40c9c0dfe74a4fbb3424ec0f2b8"}}, &(0x7f0000000140)={0x0, 0xf, 0xfd, {0x5, 0xf, 0xfd, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x9, 0x2}, @generic={0xbe, 0x10, 0xa, "774d0e3a0586d6e3326ec2b18266f5660abf9ac9c01e28561e32e82639d5d4448c7afd244330af1aa2be7163f4b33d6b0d88a01ca89126652486046a34b09ecebe8d1f60b8a596b668421d7157b71671eecb0156c9dcbb405d48b8c4d38d2cb9007a1feb33f6a04187a3bf491fbcc015ab8ebe63be7bca90aa1829199166531971ff329f3acbb7d7ad88f200f865958a747e00c61dfad1749866c967869a49bb43ed3e6fc2d559c47093f31925a6ebeccd554fb65e857c8fbf0adf"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x3f, 0x5, 0x4}, @generic={0x1f, 0x10, 0x4, "c91761bcfeec0d7767a3b2dc7eb13cc8bd2956232c957dd224461756"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x0, 0x7fff}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x61, 0x0, 0x1, 0x8a, "08a79899", "1c328c04"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe4, 0x1, 0x5, 0x4, 0x3, 0x9, 0x3ff}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x20, 0x18, 0x35, "ff4c2bda2be3039f9cc60eb566be286ab4a92b61d73bc4341ae41588b34869b0bf2e0b6f5cc802ce73c6d8003a12fd2aba6cc67f4c"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000540)={0x40, 0xb, 0x2, "7185"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x19, 0x2, 'Y:'}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x20}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x3}}) 13:51:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 13) 13:51:22 executing program 0: syz_clone(0x42000000, &(0x7f0000001000), 0x0, 0x0, 0x0, &(0x7f0000000000)="000400") syz_clone(0x42000000, &(0x7f0000001000), 0x0, 0x0, 0x0, &(0x7f0000000000)="000400") (async) 13:51:22 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff}}, './file0\x00'}) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) dup(r1) (async) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000800)={{r1}, "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"}) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8010}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x50e0}], 0x3, &(0x7f0000000080)={r2, r3+60000000}, &(0x7f00000000c0)={[0x8000]}, 0x8) (async) pselect6(0x40, &(0x7f0000000100)={0x22370257, 0xffff, 0x6, 0x0, 0x7, 0xfe, 0x10000, 0xff}, &(0x7f0000000140)={0x48f2, 0x3ff, 0x1, 0x0, 0x7fffffff, 0x6, 0x9, 0x100000000}, &(0x7f0000000180)={0x1, 0x80000000, 0x0, 0x4, 0x0, 0x635, 0x40, 0x1000}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x101]}, 0x8}) (async) accept4$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x0, 0x0, @private1}, &(0x7f00000006c0)=0x1c, 0x0) (async) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) clock_nanosleep(0x6, 0x0, &(0x7f0000000740)={r4, r5+10000000}, &(0x7f0000000780)) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @empty}, &(0x7f00000004c0)=0x1c, 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r7 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) (async) r8 = accept4(0xffffffffffffffff, &(0x7f0000001800)=@ax25={{0x3, @bcast}, [@rose, @bcast, @default, @remote, @netrom, @null, @default, @netrom]}, &(0x7f0000000580)=0x80, 0x80000) ppoll(&(0x7f00000005c0)=[{0xffffffffffffffff, 0x101}, {0xffffffffffffffff, 0x2026}, {r6, 0x310}, {r8, 0xa006}], 0x4, &(0x7f0000000600), &(0x7f0000000640)={[0x9]}, 0x8) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0)={0x5, 0x27, 0x100000000, 0x3, 0x3, 0x1, 0x800, 0x2}, &(0x7f0000000300)={0x4, 0x2, 0x3ff, 0x1ff, 0x8, 0x1, 0x0, 0x4}, &(0x7f0000000340)={0x1, 0x1, 0x0, 0x8, 0x20, 0x1, 0x8001, 0x8}, &(0x7f00000003c0)={r9, r10+60000000}, &(0x7f0000000440)={&(0x7f0000000400)={[0x7ff8000000000]}, 0x8}) 13:51:22 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) (async) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x81, 0x20, 0x0, 0x68, @tick=0x3f, {0x9, 0x3}, {0x0, 0x9}, @raw8={"be082815b3edc350f73caf55"}}], 0x1c) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) (async) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) (async) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000080)) (async) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) (async) socket$inet(0x2, 0x3, 0x2) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280), 0xc) (async) 13:51:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) sendmsg$can_bcm(r2, &(0x7f0000000040)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRES16=r5, @ANYBLOB="b18300f07f7d690c549fe0304d45ce1376f20f5eba8fdbd5adb3316c7e718e68d8c0c35fef3b91a6509fa920", @ANYRES64=r4, @ANYRES64=r1], 0x80}}, 0x4000000) sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000940)={0x1, 0xb32, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "4210220097b2bb36662d7dd23a59126b470b759d7b9beb929157fbabb8971fdf7268450b731d6d110917f27e538256a669fea5023441347712804650cc7d8236"}}, 0x80}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000240)="196e8c2bdc806cf55403f6aaaec0dfdb93b9ae1d20b745ccc5a22c16c6bc8491e69824d97893f3dd0d92c9", 0x2b}], 0x1) r7 = accept$alg(r0, 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) sendmmsg$alg(r7, &(0x7f0000001f80)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="e11e0484c1102cc0512c0bcab2fa141505174c35a8ebf02d50b908e7eafda1fb38cb5099f9ee61ab3d529e171b833ad124b3929f31", 0x35}, {&(0x7f0000000440)="ab05a80a2f149cb7cb476ba5008f62cde7b0ddc83432d041c0cf9392fe52d5d8f765f60aa450d87a8c5641c1fc6783e05c9bcf4e163216f9e0e9ec908c78ae95646104d60e217fd4d7586f0ebf58307b7076ef34fe22", 0x56}], 0x2}], 0x1, 0x0) 13:51:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 14) 13:51:22 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff}}, './file0\x00'}) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) dup(r1) (async, rerun: 64) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000800)={{r1}, "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"}) (rerun: 64) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8010}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x50e0}], 0x3, &(0x7f0000000080)={r2, r3+60000000}, &(0x7f00000000c0)={[0x8000]}, 0x8) pselect6(0x40, &(0x7f0000000100)={0x22370257, 0xffff, 0x6, 0x0, 0x7, 0xfe, 0x10000, 0xff}, &(0x7f0000000140)={0x48f2, 0x3ff, 0x1, 0x0, 0x7fffffff, 0x6, 0x9, 0x100000000}, &(0x7f0000000180)={0x1, 0x80000000, 0x0, 0x4, 0x0, 0x635, 0x40, 0x1000}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x101]}, 0x8}) (async) accept4$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x0, 0x0, @private1}, &(0x7f00000006c0)=0x1c, 0x0) (async) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) clock_nanosleep(0x6, 0x0, &(0x7f0000000740)={r4, r5+10000000}, &(0x7f0000000780)) (async, rerun: 32) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @empty}, &(0x7f00000004c0)=0x1c, 0x0) (rerun: 32) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r7 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) (async) r8 = accept4(0xffffffffffffffff, &(0x7f0000001800)=@ax25={{0x3, @bcast}, [@rose, @bcast, @default, @remote, @netrom, @null, @default, @netrom]}, &(0x7f0000000580)=0x80, 0x80000) ppoll(&(0x7f00000005c0)=[{0xffffffffffffffff, 0x101}, {0xffffffffffffffff, 0x2026}, {r6, 0x310}, {r8, 0xa006}], 0x4, &(0x7f0000000600), &(0x7f0000000640)={[0x9]}, 0x8) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0)={0x5, 0x27, 0x100000000, 0x3, 0x3, 0x1, 0x800, 0x2}, &(0x7f0000000300)={0x4, 0x2, 0x3ff, 0x1ff, 0x8, 0x1, 0x0, 0x4}, &(0x7f0000000340)={0x1, 0x1, 0x0, 0x8, 0x20, 0x1, 0x8001, 0x8}, &(0x7f00000003c0)={r9, r10+60000000}, &(0x7f0000000440)={&(0x7f0000000400)={[0x7ff8000000000]}, 0x8}) 13:51:22 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) pselect6(0x40, &(0x7f0000000040)={0x0, 0xb5c, 0x7e39401d, 0x4, 0x2, 0x2, 0x3, 0x8000000000000001}, &(0x7f0000000080)={0x8, 0x73c, 0x8, 0xeec, 0x7fffffff, 0x2, 0x1f, 0x98e}, &(0x7f00000000c0)={0x6, 0xc3b, 0x1, 0x8, 0x8, 0x5, 0x7fffffffffffffff, 0x100000000000000}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x400]}, 0x8}) 13:51:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 15) 13:51:22 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) (async) pselect6(0x40, &(0x7f0000000040)={0x0, 0xb5c, 0x7e39401d, 0x4, 0x2, 0x2, 0x3, 0x8000000000000001}, &(0x7f0000000080)={0x8, 0x73c, 0x8, 0xeec, 0x7fffffff, 0x2, 0x1f, 0x98e}, &(0x7f00000000c0)={0x6, 0xc3b, 0x1, 0x8, 0x8, 0x5, 0x7fffffffffffffff, 0x100000000000000}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x400]}, 0x8}) 13:51:22 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) (async) pselect6(0x40, &(0x7f0000000040)={0x0, 0xb5c, 0x7e39401d, 0x4, 0x2, 0x2, 0x3, 0x8000000000000001}, &(0x7f0000000080)={0x8, 0x73c, 0x8, 0xeec, 0x7fffffff, 0x2, 0x1f, 0x98e}, &(0x7f00000000c0)={0x6, 0xc3b, 0x1, 0x8, 0x8, 0x5, 0x7fffffffffffffff, 0x100000000000000}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x400]}, 0x8}) 13:51:23 executing program 5: getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000840), &(0x7f00000008c0)=0x68) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000900), 0x80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000940)=[@mss={0x2, 0x4}, @sack_perm], 0x2) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x40, 0x3, 0xc, {0xc, 0x4, "b5111c6143dc8dbfb5af"}}, &(0x7f0000000040)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "1bfe1c0097d846234ce48186c6fbe2a5712072dab0c4176ba625cd2ec2fede4bf7e916b6497c61769e1985de9b1f4f1e59daf2fe5d956393a70e0153b120fc3154d73b0bce62f00b634e9c14d9a455d82c3291b2fc80b4c2116317b90f038a7ea09a0487839be423b3931f12c2040ee8743ad7ce7987d0f2317b827a5f406314d2be6ebd8d509266ce484edf5c4e0096cf5c4a10c4561bd7cd00cafb9b519655c9d910a2a0893f0974d35f314d45f58b5f9cec00a033aa65a61fb94c5db94149d8abb25182d1c4dac8f4462316de8ee8658ab32ff40c9c0dfe74a4fbb3424ec0f2b8"}}, &(0x7f0000000140)={0x0, 0xf, 0xfd, {0x5, 0xf, 0xfd, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x9, 0x2}, @generic={0xbe, 0x10, 0xa, "774d0e3a0586d6e3326ec2b18266f5660abf9ac9c01e28561e32e82639d5d4448c7afd244330af1aa2be7163f4b33d6b0d88a01ca89126652486046a34b09ecebe8d1f60b8a596b668421d7157b71671eecb0156c9dcbb405d48b8c4d38d2cb9007a1feb33f6a04187a3bf491fbcc015ab8ebe63be7bca90aa1829199166531971ff329f3acbb7d7ad88f200f865958a747e00c61dfad1749866c967869a49bb43ed3e6fc2d559c47093f31925a6ebeccd554fb65e857c8fbf0adf"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x3f, 0x5, 0x4}, @generic={0x1f, 0x10, 0x4, "c91761bcfeec0d7767a3b2dc7eb13cc8bd2956232c957dd224461756"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x0, 0x7fff}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x61, 0x0, 0x1, 0x8a, "08a79899", "1c328c04"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe4, 0x1, 0x5, 0x4, 0x3, 0x9, 0x3ff}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x20, 0x18, 0x35, "ff4c2bda2be3039f9cc60eb566be286ab4a92b61d73bc4341ae41588b34869b0bf2e0b6f5cc802ce73c6d8003a12fd2aba6cc67f4c"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000540)={0x40, 0xb, 0x2, "7185"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x19, 0x2, 'Y:'}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x20}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x3}}) 13:51:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 16) 13:51:23 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b02, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x4, "b14ec86e"}, @global=@item_4={0x3, 0x1, 0xa, "f200"}, @main=@item_012={0x2, 0x0, 0xa, '\x00('}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x40, 0x31, 0x14, {0x14, 0x8, "b1c6cb774867d32dd58b2fb73db54dec54ce"}}, &(0x7f00000000c0)={0x0, 0x3, 0x72, @string={0x72, 0x3, "fa5426e7a8ba17fc63c75c017a81d90102db641a7632a7c59205885754b2ba049abe38a2e635df89317a5413e8611c0520e264176f6e0bf985b156c08ce0cc2b6ee0ee672dfce6bd266fec1e7181fea76e690a45e7b466bb62d1170e720920306fb7147c70510b404996e3eda16a93e9"}}, &(0x7f0000000140)={0x0, 0xf, 0xaf, {0x5, 0xf, 0xaf, 0x1, [@generic={0xaa, 0x10, 0xa, "9042a2c152e7f4b5ce1eec6a829fab7c3ad71eadbab2a6657684bf4d887d529016e3b258dc4118ee3a82d9cbb1fb3fbebc36def7f6f48e7236c10fded31ea3ee4d49028c763db56671587642f0f7a527fd4357561bd5c50d70b3a9a58865e0a14b1d61053ff15657a4373f8c974cf0b1ed4fda0f5b6f96eca17cafa9fb3f54f109a2c3826efb85197cbec89372a9554113c94ab4fe303d8ac2e6553fe05155ff1a7362e289294b"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0x49, 0x5, "85e61b1a", "e6667f77"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0xec, 0x0, 0x11, 0x3ff, 0x8000}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x40, 0xe, 0x7d, "98608801cbfba2500d8125d12b055eadc3ae5cfb3796632bbac0734cc9b6bc2c818606c1116fe0b536463f3de187d901efcef3eb616bdd6d31557ef893557dc62138515fb592510697e3d1453e85e3a006273e89ef164f4a012ac7fc75f1f9452ec65d6fa83039b1b6d8d3e6ac9c35dadc017a5c314dc4b36cdf9e7a51"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x1c00, 0x2, [0xf]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x74}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0xbc}, &(0x7f0000000500)={0x40, 0xb, 0x2, "d42c"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, "2381"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x27}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io$hid(r0, &(0x7f0000001240)={0x24, &(0x7f0000001080)={0x20, 0x21, 0xf7, {0xf7, 0x23, "f7bb3ec089abb7723c6a55177e2eb140026da4d4e43c95897becf72f18edf06f341a35ba7321a826130f4ee10dd53201cf79041bc6de77398e68bca1106d5e5dbcae5fb65169c356f337716ce2ff74c438d22c4eaa6310272ac3a3cd8306ecc8d37c9ae13f12ee523c8e2d33f160c69fc6966634aee847152593aadde2b52b6b9cf79dfb6d301e4d086614c40a5b8d676ac099f4bd7f2c5322f31a04870a4745450a00f4ee9d16bb12291bb7ae3e9749d1afc9119ac524f16b2da4d422f4c564e89f17b02b085442b87c334247952985fc2efdad8b76898d254759741082a024d480e1ac8eeaa775f196ad8a30182895ff2f74dd36"}}, &(0x7f0000001180)={0x0, 0x3, 0x31, @string={0x31, 0x3, "d9c217378f386b5d013b159051497708863b0262fe950b58f22af2c87004a03433f6d20e1e3ae108b081619d33b625"}}, &(0x7f00000011c0)={0x0, 0x22, 0x15, {[@global=@item_4={0x3, 0x1, 0x6, "d90b5180"}, @local=@item_4={0x3, 0x2, 0x7, "fc031a8b"}, @main=@item_4={0x3, 0x0, 0xc, "bce12e8a"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "23c13a8a"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0x5d1}}}}, &(0x7f0000001440)={0x2c, &(0x7f0000001280)={0x0, 0x1, 0x40, "e33e633b0a1d00d2f3b75ed2d6f8c6b6afcd929dbd8e75230545b5a7938d730ea6581c63a0435c5de472f6054abda5cbb5e4c90b467d7f5fe9793e4aaa7cad70"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001380)={0x20, 0x1, 0x4e, "da1e9c49fa036e3d1f36631816de172ddb9bd7899fba04deaa46051a171424b67cd9cccc403ce03611c5206ee3b9e2e9cc7af08b6fc2585730f679189d72c067de5a131d9f6eaeb75a6bf517bb29"}, &(0x7f0000001400)={0x20, 0x3, 0x1, 0x37}}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000b80)={0x2c, &(0x7f0000000900)={0x0, 0x21, 0xdf, {0xdf, 0x31, "9fe874f9ee245b188059de8361bf412a396a688ccb3afa6a260a658f45db550d152642c779267ea4e56e366cad67a8f22cd163db810f150ea6bd70036151393cb2188c35ddbb751f87468d379199ba10e1b2466f3bd8216305cddc719280ddfe9b01000ab66799e122f6f9017928cb896ee024ad9f04b36d9bccd37ca21f65def2d40f08c4457aa7f1cec131dfa511c19cd1915473d1bd3e6e6415555221a8386df214e0d27d5a45e2305fca262f687586088909c171a47271896aa9a274d6422e99420c882704950ce0a29d07d9aad2d057a45bebff92706d8b98fa3b"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000a00)={0x0, 0xf, 0xf3, {0x5, 0xf, 0xf3, 0x3, [@generic={0xe0, 0x10, 0x3, "ab8e1bde11d66f91d60397d98cd6dd95f2fa51e921ff553d7524c01e39d3feffee1bb470bcb335ab3f801752363549ee6dd0854ed2cbf08d97359cba338c8b6070e0b4bbd9d59ec2b1bce2d0a02fa9b8771d641ead576a9d927ff6c4dc04af4142d8123ea2e680203e26528db99c0c3025ef37d603ea97cff06a736a9cb0adb6d005c19ea2283f93a57ee92b2321c0fdef1ac5cf9ca7821c4834ec1e52a5a7634fbb9ab8cfd58965f6933e5b5dad5fac30ca8d29151675e765a0c90b0122778f616f6136eb313ec44d2ef7c8a0ba90f088a00643dd8cb8f6219cbe9d48"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x8, 0x9}]}}, &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x26, 0x0, 0x40, 0x7f, "7985a6ad", "5ed80620"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x0, 0x3f, 0x80, 0x0, 0x1, 0x8}}}, &(0x7f0000000fc0)={0x84, &(0x7f0000000bc0)={0x0, 0x10, 0x7, "7e51262cc941ad"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x73}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000cc0)={0x20, 0x0, 0x8, {0xaa, 0x40, [0xffff]}}, &(0x7f0000000d00)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000d40)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000d80)={0x40, 0xb, 0x2, "b244"}, &(0x7f0000000dc0)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="7085524d09c9"}, &(0x7f0000000e40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000e80)={0x40, 0x19, 0x2, "37f6"}, &(0x7f0000000ec0)={0x40, 0x1a, 0x2, 0x7a3b}, &(0x7f0000000f00)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000f40)={0x40, 0x1e, 0x1, 0x71}, &(0x7f0000000f80)={0x40, 0x21, 0x1, 0x2}}) 13:51:23 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000280), 0xa000, 0x82) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x86}, {0xffffffffffffffff, 0x620}, {0xffffffffffffffff, 0x201}, {0xffffffffffffffff, 0x130}, {0xffffffffffffffff, 0x10020}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x1004}, {r0, 0x6080}], 0x8, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)={[0x7fffffff]}, 0x8) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x9c, 0xfffffffffffffffe, 0x0, 0x1f, 0xb7, 0x4}, &(0x7f0000000100)={0x6, 0x9, 0xffffffff, 0x89fe, 0x80000000, 0x8, 0x19, 0x5}, &(0x7f0000000140)={0x810, 0x2, 0x100000001, 0x8, 0x30ba, 0x4}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x8001]}, 0x8}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x202}, {0xffffffffffffffff, 0xa040}], 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x3]}, 0x8) [ 310.550476][ T3677] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 310.923759][ T3677] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.945787][ T3677] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.973201][ T3677] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 310.998154][ T3677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.027502][ T3677] usb 1-1: config 0 descriptor?? [ 311.526373][ T3677] corsair 0003:1B1C:1B02.0001: item fetching failed at offset 5/9 [ 311.547391][ T3677] corsair 0003:1B1C:1B02.0001: parse failed [ 311.564753][ T3677] corsair: probe of 0003:1B1C:1B02.0001 failed with error -22 [ 312.424378][ T8123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.449750][ T8123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 13:51:25 executing program 3: socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private=0xa010102, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000080)=0xb2087ca) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121e02, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0xfee3, 0x12) 13:51:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 17) 13:51:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) sendmsg$can_bcm(r2, &(0x7f0000000040)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRES16=r5, @ANYBLOB="b18300f07f7d690c549fe0304d45ce1376f20f5eba8fdbd5adb3316c7e718e68d8c0c35fef3b91a6509fa920", @ANYRES64=r4, @ANYRES64=r1], 0x80}}, 0x4000000) sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000940)={0x1, 0xb32, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "4210220097b2bb36662d7dd23a59126b470b759d7b9beb929157fbabb8971fdf7268450b731d6d110917f27e538256a669fea5023441347712804650cc7d8236"}}, 0x80}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000240)="196e8c2bdc806cf55403f6aaaec0dfdb93b9ae1d20b745ccc5a22c16c6bc8491e69824d97893f3dd0d92c9", 0x2b}], 0x1) r7 = accept$alg(r0, 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) sendmmsg$alg(r7, &(0x7f0000001f80)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="e11e0484c1102cc0512c0bcab2fa141505174c35a8ebf02d50b908e7eafda1fb38cb5099f9ee61ab3d529e171b833ad124b3929f31", 0x35}, {&(0x7f0000000440)="ab05a80a2f149cb7cb476ba5008f62cde7b0ddc83432d041c0cf9392fe52d5d8f765f60aa450d87a8c5641c1fc6783e05c9bcf4e163216f9e0e9ec908c78ae95646104d60e217fd4d7586f0ebf58307b7076ef34fe22", 0x56}], 0x2}], 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r2, &(0x7f0000000140), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r5, 0xffff) (async) fcntl$addseals(r5, 0x409, 0x7) (async) sendmsg$can_bcm(r2, &(0x7f0000000040)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRES16=r5, @ANYBLOB="b18300f07f7d690c549fe0304d45ce1376f20f5eba8fdbd5adb3316c7e718e68d8c0c35fef3b91a6509fa920", @ANYRES64=r4, @ANYRES64=r1], 0x80}}, 0x4000000) (async) sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000940)={0x1, 0xb32, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "4210220097b2bb36662d7dd23a59126b470b759d7b9beb929157fbabb8971fdf7268450b731d6d110917f27e538256a669fea5023441347712804650cc7d8236"}}, 0x80}}, 0x0) (async) socket$inet(0x2, 0x3, 0x2) (async) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000240)="196e8c2bdc806cf55403f6aaaec0dfdb93b9ae1d20b745ccc5a22c16c6bc8491e69824d97893f3dd0d92c9", 0x2b}], 0x1) (async) accept$alg(r0, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) (async) dup(r8) (async) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) (async) sendmmsg$alg(r7, &(0x7f0000001f80)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="e11e0484c1102cc0512c0bcab2fa141505174c35a8ebf02d50b908e7eafda1fb38cb5099f9ee61ab3d529e171b833ad124b3929f31", 0x35}, {&(0x7f0000000440)="ab05a80a2f149cb7cb476ba5008f62cde7b0ddc83432d041c0cf9392fe52d5d8f765f60aa450d87a8c5641c1fc6783e05c9bcf4e163216f9e0e9ec908c78ae95646104d60e217fd4d7586f0ebf58307b7076ef34fe22", 0x56}], 0x2}], 0x1, 0x0) (async) 13:51:25 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d882, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000700) socket$inet6(0xa, 0x0, 0x0) 13:51:25 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000280), 0xa000, 0x82) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x86}, {0xffffffffffffffff, 0x620}, {0xffffffffffffffff, 0x201}, {0xffffffffffffffff, 0x130}, {0xffffffffffffffff, 0x10020}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x1004}, {r0, 0x6080}], 0x8, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)={[0x7fffffff]}, 0x8) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x9c, 0xfffffffffffffffe, 0x0, 0x1f, 0xb7, 0x4}, &(0x7f0000000100)={0x6, 0x9, 0xffffffff, 0x89fe, 0x80000000, 0x8, 0x19, 0x5}, &(0x7f0000000140)={0x810, 0x2, 0x100000001, 0x8, 0x30ba, 0x4}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x8001]}, 0x8}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x202}, {0xffffffffffffffff, 0xa040}], 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x3]}, 0x8) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000280), 0xa000, 0x82) (async) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x86}, {0xffffffffffffffff, 0x620}, {0xffffffffffffffff, 0x201}, {0xffffffffffffffff, 0x130}, {0xffffffffffffffff, 0x10020}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x1004}, {r0, 0x6080}], 0x8, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)={[0x7fffffff]}, 0x8) (async) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x9c, 0xfffffffffffffffe, 0x0, 0x1f, 0xb7, 0x4}, &(0x7f0000000100)={0x6, 0x9, 0xffffffff, 0x89fe, 0x80000000, 0x8, 0x19, 0x5}, &(0x7f0000000140)={0x810, 0x2, 0x100000001, 0x8, 0x30ba, 0x4}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x8001]}, 0x8}) (async) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x202}, {0xffffffffffffffff, 0xa040}], 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x3]}, 0x8) (async) 13:51:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 18) 13:51:25 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000280), 0xa000, 0x82) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x86}, {0xffffffffffffffff, 0x620}, {0xffffffffffffffff, 0x201}, {0xffffffffffffffff, 0x130}, {0xffffffffffffffff, 0x10020}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x1004}, {r0, 0x6080}], 0x8, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)={[0x7fffffff]}, 0x8) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x9c, 0xfffffffffffffffe, 0x0, 0x1f, 0xb7, 0x4}, &(0x7f0000000100)={0x6, 0x9, 0xffffffff, 0x89fe, 0x80000000, 0x8, 0x19, 0x5}, &(0x7f0000000140)={0x810, 0x2, 0x100000001, 0x8, 0x30ba, 0x4}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x8001]}, 0x8}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x202}, {0xffffffffffffffff, 0xa040}], 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x3]}, 0x8) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000280), 0xa000, 0x82) (async) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x86}, {0xffffffffffffffff, 0x620}, {0xffffffffffffffff, 0x201}, {0xffffffffffffffff, 0x130}, {0xffffffffffffffff, 0x10020}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x1004}, {r0, 0x6080}], 0x8, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)={[0x7fffffff]}, 0x8) (async) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x9c, 0xfffffffffffffffe, 0x0, 0x1f, 0xb7, 0x4}, &(0x7f0000000100)={0x6, 0x9, 0xffffffff, 0x89fe, 0x80000000, 0x8, 0x19, 0x5}, &(0x7f0000000140)={0x810, 0x2, 0x100000001, 0x8, 0x30ba, 0x4}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x8001]}, 0x8}) (async) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x202}, {0xffffffffffffffff, 0xa040}], 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x3]}, 0x8) (async) 13:51:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) (rerun: 64) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) sendmsg$can_bcm(r2, &(0x7f0000000040)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRES16=r5, @ANYBLOB="b18300f07f7d690c549fe0304d45ce1376f20f5eba8fdbd5adb3316c7e718e68d8c0c35fef3b91a6509fa920", @ANYRES64=r4, @ANYRES64=r1], 0x80}}, 0x4000000) sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000940)={0x1, 0xb32, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "4210220097b2bb36662d7dd23a59126b470b759d7b9beb929157fbabb8971fdf7268450b731d6d110917f27e538256a669fea5023441347712804650cc7d8236"}}, 0x80}}, 0x0) (async, rerun: 64) r6 = socket$inet(0x2, 0x3, 0x2) (rerun: 64) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000240)="196e8c2bdc806cf55403f6aaaec0dfdb93b9ae1d20b745ccc5a22c16c6bc8491e69824d97893f3dd0d92c9", 0x2b}], 0x1) (async) r7 = accept$alg(r0, 0x0, 0x0) (async, rerun: 64) r8 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) (rerun: 64) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) sendmmsg$alg(r7, &(0x7f0000001f80)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="e11e0484c1102cc0512c0bcab2fa141505174c35a8ebf02d50b908e7eafda1fb38cb5099f9ee61ab3d529e171b833ad124b3929f31", 0x35}, {&(0x7f0000000440)="ab05a80a2f149cb7cb476ba5008f62cde7b0ddc83432d041c0cf9392fe52d5d8f765f60aa450d87a8c5641c1fc6783e05c9bcf4e163216f9e0e9ec908c78ae95646104d60e217fd4d7586f0ebf58307b7076ef34fe22", 0x56}], 0x2}], 0x1, 0x0) 13:51:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 19) 13:51:26 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000000)={0x81, 0x2, 0xc, 0x3, 0x1bef070b, 0x8}, &(0x7f0000000040)={0xfffffffffffffff8, 0x80000001, 0xe8a9, 0x400, 0xffffffff, 0x8, 0x100}, &(0x7f0000000080)={0x1, 0x4e, 0xffffffffffffff7a, 0x3cc9, 0x1f, 0x2, 0xfff, 0x8}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x274]}, 0x8}) 13:51:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 20) 13:51:26 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b02, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x4, "b14ec86e"}, @global=@item_4={0x3, 0x1, 0xa, "f200"}, @main=@item_012={0x2, 0x0, 0xa, '\x00('}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x40, 0x31, 0x14, {0x14, 0x8, "b1c6cb774867d32dd58b2fb73db54dec54ce"}}, &(0x7f00000000c0)={0x0, 0x3, 0x72, @string={0x72, 0x3, "fa5426e7a8ba17fc63c75c017a81d90102db641a7632a7c59205885754b2ba049abe38a2e635df89317a5413e8611c0520e264176f6e0bf985b156c08ce0cc2b6ee0ee672dfce6bd266fec1e7181fea76e690a45e7b466bb62d1170e720920306fb7147c70510b404996e3eda16a93e9"}}, &(0x7f0000000140)={0x0, 0xf, 0xaf, {0x5, 0xf, 0xaf, 0x1, [@generic={0xaa, 0x10, 0xa, "9042a2c152e7f4b5ce1eec6a829fab7c3ad71eadbab2a6657684bf4d887d529016e3b258dc4118ee3a82d9cbb1fb3fbebc36def7f6f48e7236c10fded31ea3ee4d49028c763db56671587642f0f7a527fd4357561bd5c50d70b3a9a58865e0a14b1d61053ff15657a4373f8c974cf0b1ed4fda0f5b6f96eca17cafa9fb3f54f109a2c3826efb85197cbec89372a9554113c94ab4fe303d8ac2e6553fe05155ff1a7362e289294b"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0x49, 0x5, "85e61b1a", "e6667f77"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0xec, 0x0, 0x11, 0x3ff, 0x8000}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x40, 0xe, 0x7d, "98608801cbfba2500d8125d12b055eadc3ae5cfb3796632bbac0734cc9b6bc2c818606c1116fe0b536463f3de187d901efcef3eb616bdd6d31557ef893557dc62138515fb592510697e3d1453e85e3a006273e89ef164f4a012ac7fc75f1f9452ec65d6fa83039b1b6d8d3e6ac9c35dadc017a5c314dc4b36cdf9e7a51"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x1c00, 0x2, [0xf]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x74}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0xbc}, &(0x7f0000000500)={0x40, 0xb, 0x2, "d42c"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, "2381"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x27}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io$hid(r0, &(0x7f0000001240)={0x24, &(0x7f0000001080)={0x20, 0x21, 0xf7, {0xf7, 0x23, "f7bb3ec089abb7723c6a55177e2eb140026da4d4e43c95897becf72f18edf06f341a35ba7321a826130f4ee10dd53201cf79041bc6de77398e68bca1106d5e5dbcae5fb65169c356f337716ce2ff74c438d22c4eaa6310272ac3a3cd8306ecc8d37c9ae13f12ee523c8e2d33f160c69fc6966634aee847152593aadde2b52b6b9cf79dfb6d301e4d086614c40a5b8d676ac099f4bd7f2c5322f31a04870a4745450a00f4ee9d16bb12291bb7ae3e9749d1afc9119ac524f16b2da4d422f4c564e89f17b02b085442b87c334247952985fc2efdad8b76898d254759741082a024d480e1ac8eeaa775f196ad8a30182895ff2f74dd36"}}, &(0x7f0000001180)={0x0, 0x3, 0x31, @string={0x31, 0x3, "d9c217378f386b5d013b159051497708863b0262fe950b58f22af2c87004a03433f6d20e1e3ae108b081619d33b625"}}, &(0x7f00000011c0)={0x0, 0x22, 0x15, {[@global=@item_4={0x3, 0x1, 0x6, "d90b5180"}, @local=@item_4={0x3, 0x2, 0x7, "fc031a8b"}, @main=@item_4={0x3, 0x0, 0xc, "bce12e8a"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "23c13a8a"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0x5d1}}}}, &(0x7f0000001440)={0x2c, &(0x7f0000001280)={0x0, 0x1, 0x40, "e33e633b0a1d00d2f3b75ed2d6f8c6b6afcd929dbd8e75230545b5a7938d730ea6581c63a0435c5de472f6054abda5cbb5e4c90b467d7f5fe9793e4aaa7cad70"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001380)={0x20, 0x1, 0x4e, "da1e9c49fa036e3d1f36631816de172ddb9bd7899fba04deaa46051a171424b67cd9cccc403ce03611c5206ee3b9e2e9cc7af08b6fc2585730f679189d72c067de5a131d9f6eaeb75a6bf517bb29"}, &(0x7f0000001400)={0x20, 0x3, 0x1, 0x37}}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000b80)={0x2c, &(0x7f0000000900)={0x0, 0x21, 0xdf, {0xdf, 0x31, "9fe874f9ee245b188059de8361bf412a396a688ccb3afa6a260a658f45db550d152642c779267ea4e56e366cad67a8f22cd163db810f150ea6bd70036151393cb2188c35ddbb751f87468d379199ba10e1b2466f3bd8216305cddc719280ddfe9b01000ab66799e122f6f9017928cb896ee024ad9f04b36d9bccd37ca21f65def2d40f08c4457aa7f1cec131dfa511c19cd1915473d1bd3e6e6415555221a8386df214e0d27d5a45e2305fca262f687586088909c171a47271896aa9a274d6422e99420c882704950ce0a29d07d9aad2d057a45bebff92706d8b98fa3b"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000a00)={0x0, 0xf, 0xf3, {0x5, 0xf, 0xf3, 0x3, [@generic={0xe0, 0x10, 0x3, "ab8e1bde11d66f91d60397d98cd6dd95f2fa51e921ff553d7524c01e39d3feffee1bb470bcb335ab3f801752363549ee6dd0854ed2cbf08d97359cba338c8b6070e0b4bbd9d59ec2b1bce2d0a02fa9b8771d641ead576a9d927ff6c4dc04af4142d8123ea2e680203e26528db99c0c3025ef37d603ea97cff06a736a9cb0adb6d005c19ea2283f93a57ee92b2321c0fdef1ac5cf9ca7821c4834ec1e52a5a7634fbb9ab8cfd58965f6933e5b5dad5fac30ca8d29151675e765a0c90b0122778f616f6136eb313ec44d2ef7c8a0ba90f088a00643dd8cb8f6219cbe9d48"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x8, 0x9}]}}, &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x26, 0x0, 0x40, 0x7f, "7985a6ad", "5ed80620"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x0, 0x3f, 0x80, 0x0, 0x1, 0x8}}}, &(0x7f0000000fc0)={0x84, &(0x7f0000000bc0)={0x0, 0x10, 0x7, "7e51262cc941ad"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x73}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000cc0)={0x20, 0x0, 0x8, {0xaa, 0x40, [0xffff]}}, &(0x7f0000000d00)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000d40)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000d80)={0x40, 0xb, 0x2, "b244"}, &(0x7f0000000dc0)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="7085524d09c9"}, &(0x7f0000000e40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000e80)={0x40, 0x19, 0x2, "37f6"}, &(0x7f0000000ec0)={0x40, 0x1a, 0x2, 0x7a3b}, &(0x7f0000000f00)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000f40)={0x40, 0x1e, 0x1, 0x71}, &(0x7f0000000f80)={0x40, 0x21, 0x1, 0x2}}) syz_usb_connect$hid(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b02, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x4, "b14ec86e"}, @global=@item_4={0x3, 0x1, 0xa, "f200"}, @main=@item_012={0x2, 0x0, 0xa, '\x00('}]}}, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x40, 0x31, 0x14, {0x14, 0x8, "b1c6cb774867d32dd58b2fb73db54dec54ce"}}, &(0x7f00000000c0)={0x0, 0x3, 0x72, @string={0x72, 0x3, "fa5426e7a8ba17fc63c75c017a81d90102db641a7632a7c59205885754b2ba049abe38a2e635df89317a5413e8611c0520e264176f6e0bf985b156c08ce0cc2b6ee0ee672dfce6bd266fec1e7181fea76e690a45e7b466bb62d1170e720920306fb7147c70510b404996e3eda16a93e9"}}, &(0x7f0000000140)={0x0, 0xf, 0xaf, {0x5, 0xf, 0xaf, 0x1, [@generic={0xaa, 0x10, 0xa, "9042a2c152e7f4b5ce1eec6a829fab7c3ad71eadbab2a6657684bf4d887d529016e3b258dc4118ee3a82d9cbb1fb3fbebc36def7f6f48e7236c10fded31ea3ee4d49028c763db56671587642f0f7a527fd4357561bd5c50d70b3a9a58865e0a14b1d61053ff15657a4373f8c974cf0b1ed4fda0f5b6f96eca17cafa9fb3f54f109a2c3826efb85197cbec89372a9554113c94ab4fe303d8ac2e6553fe05155ff1a7362e289294b"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0x49, 0x5, "85e61b1a", "e6667f77"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0xec, 0x0, 0x11, 0x3ff, 0x8000}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x40, 0xe, 0x7d, "98608801cbfba2500d8125d12b055eadc3ae5cfb3796632bbac0734cc9b6bc2c818606c1116fe0b536463f3de187d901efcef3eb616bdd6d31557ef893557dc62138515fb592510697e3d1453e85e3a006273e89ef164f4a012ac7fc75f1f9452ec65d6fa83039b1b6d8d3e6ac9c35dadc017a5c314dc4b36cdf9e7a51"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x1c00, 0x2, [0xf]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x74}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0xbc}, &(0x7f0000000500)={0x40, 0xb, 0x2, "d42c"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, "2381"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x27}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0xff}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000001240)={0x24, &(0x7f0000001080)={0x20, 0x21, 0xf7, {0xf7, 0x23, "f7bb3ec089abb7723c6a55177e2eb140026da4d4e43c95897becf72f18edf06f341a35ba7321a826130f4ee10dd53201cf79041bc6de77398e68bca1106d5e5dbcae5fb65169c356f337716ce2ff74c438d22c4eaa6310272ac3a3cd8306ecc8d37c9ae13f12ee523c8e2d33f160c69fc6966634aee847152593aadde2b52b6b9cf79dfb6d301e4d086614c40a5b8d676ac099f4bd7f2c5322f31a04870a4745450a00f4ee9d16bb12291bb7ae3e9749d1afc9119ac524f16b2da4d422f4c564e89f17b02b085442b87c334247952985fc2efdad8b76898d254759741082a024d480e1ac8eeaa775f196ad8a30182895ff2f74dd36"}}, &(0x7f0000001180)={0x0, 0x3, 0x31, @string={0x31, 0x3, "d9c217378f386b5d013b159051497708863b0262fe950b58f22af2c87004a03433f6d20e1e3ae108b081619d33b625"}}, &(0x7f00000011c0)={0x0, 0x22, 0x15, {[@global=@item_4={0x3, 0x1, 0x6, "d90b5180"}, @local=@item_4={0x3, 0x2, 0x7, "fc031a8b"}, @main=@item_4={0x3, 0x0, 0xc, "bce12e8a"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "23c13a8a"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0x5d1}}}}, &(0x7f0000001440)={0x2c, &(0x7f0000001280)={0x0, 0x1, 0x40, "e33e633b0a1d00d2f3b75ed2d6f8c6b6afcd929dbd8e75230545b5a7938d730ea6581c63a0435c5de472f6054abda5cbb5e4c90b467d7f5fe9793e4aaa7cad70"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001380)={0x20, 0x1, 0x4e, "da1e9c49fa036e3d1f36631816de172ddb9bd7899fba04deaa46051a171424b67cd9cccc403ce03611c5206ee3b9e2e9cc7af08b6fc2585730f679189d72c067de5a131d9f6eaeb75a6bf517bb29"}, &(0x7f0000001400)={0x20, 0x3, 0x1, 0x37}}) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000b80)={0x2c, &(0x7f0000000900)={0x0, 0x21, 0xdf, {0xdf, 0x31, "9fe874f9ee245b188059de8361bf412a396a688ccb3afa6a260a658f45db550d152642c779267ea4e56e366cad67a8f22cd163db810f150ea6bd70036151393cb2188c35ddbb751f87468d379199ba10e1b2466f3bd8216305cddc719280ddfe9b01000ab66799e122f6f9017928cb896ee024ad9f04b36d9bccd37ca21f65def2d40f08c4457aa7f1cec131dfa511c19cd1915473d1bd3e6e6415555221a8386df214e0d27d5a45e2305fca262f687586088909c171a47271896aa9a274d6422e99420c882704950ce0a29d07d9aad2d057a45bebff92706d8b98fa3b"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000a00)={0x0, 0xf, 0xf3, {0x5, 0xf, 0xf3, 0x3, [@generic={0xe0, 0x10, 0x3, "ab8e1bde11d66f91d60397d98cd6dd95f2fa51e921ff553d7524c01e39d3feffee1bb470bcb335ab3f801752363549ee6dd0854ed2cbf08d97359cba338c8b6070e0b4bbd9d59ec2b1bce2d0a02fa9b8771d641ead576a9d927ff6c4dc04af4142d8123ea2e680203e26528db99c0c3025ef37d603ea97cff06a736a9cb0adb6d005c19ea2283f93a57ee92b2321c0fdef1ac5cf9ca7821c4834ec1e52a5a7634fbb9ab8cfd58965f6933e5b5dad5fac30ca8d29151675e765a0c90b0122778f616f6136eb313ec44d2ef7c8a0ba90f088a00643dd8cb8f6219cbe9d48"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x8, 0x9}]}}, &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x26, 0x0, 0x40, 0x7f, "7985a6ad", "5ed80620"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x0, 0x3f, 0x80, 0x0, 0x1, 0x8}}}, &(0x7f0000000fc0)={0x84, &(0x7f0000000bc0)={0x0, 0x10, 0x7, "7e51262cc941ad"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x73}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000cc0)={0x20, 0x0, 0x8, {0xaa, 0x40, [0xffff]}}, &(0x7f0000000d00)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000d40)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000d80)={0x40, 0xb, 0x2, "b244"}, &(0x7f0000000dc0)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="7085524d09c9"}, &(0x7f0000000e40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000e80)={0x40, 0x19, 0x2, "37f6"}, &(0x7f0000000ec0)={0x40, 0x1a, 0x2, 0x7a3b}, &(0x7f0000000f00)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000f40)={0x40, 0x1e, 0x1, 0x71}, &(0x7f0000000f80)={0x40, 0x21, 0x1, 0x2}}) (async) [ 313.470549][ T22] usb 1-1: USB disconnect, device number 27 13:51:26 executing program 3: socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private=0xa010102, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000080)=0xb2087ca) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121e02, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0xfee3, 0x12) socket$netlink(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r2, 0x0, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private=0xa010102, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000080)=0xb2087ca) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121e02, 0x0) (async) write$cgroup_int(r3, &(0x7f00000001c0)=0xfee3, 0x12) (async) 13:51:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff) fcntl$addseals(r2, 0x409, 0x7) r3 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x0, 0x1000}) dup2(r4, r3) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r4) r5 = dup(r1) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r5, r2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001801}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@acquire={0x19c, 0x17, 0x2, 0x70bd2b, 0x25dfdbfd, {{@in=@loopback, 0x4d6, 0x32}, @in=@multicast2, {@in=@local, @in=@loopback, 0x4e24, 0x200, 0x4e22, 0x0, 0x2, 0x20, 0x80, 0x8}, {{@in6=@empty, @in=@rand_addr=0x64010102, 0x4e22, 0x7f, 0x4e22, 0x7ff, 0x2, 0x80, 0x100, 0x0, 0x0, r6}, {0x186, 0x5, 0xdb1c, 0xffffffff, 0x59, 0x6, 0x9, 0x5}, {0x7, 0x7, 0x16d, 0x4}, 0x8000, 0x6e6bb3, 0x1, 0x0, 0x2}, 0x7, 0x0, 0xffffffff, 0x70bd2b}, [@address_filter={0x28, 0x1a, {@in6=@private1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xa, 0x5, 0x1}}, @tfcpad={0x8, 0x16, 0x400}, @lastused={0xc, 0xf, 0xa0000000}, @lifetime_val={0x24, 0x9, {0x8, 0x1, 0x6, 0x8}}, @lastused={0xc, 0xf, 0x6}, @replay_thresh={0x8, 0xb, 0x7fff}]}, 0x19c}, 0x1, 0x0, 0x0, 0x2000c884}, 0x40844) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@updpolicy={0xb8, 0x13, 0x4849115aec5b9ed5, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x180}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 13:51:26 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x81, 0x2, 0xc, 0x3, 0x1bef070b, 0x8}, &(0x7f0000000040)={0xfffffffffffffff8, 0x80000001, 0xe8a9, 0x400, 0xffffffff, 0x8, 0x100}, &(0x7f0000000080)={0x1, 0x4e, 0xffffffffffffff7a, 0x3cc9, 0x1f, 0x2, 0xfff, 0x8}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x274]}, 0x8}) 13:51:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) (fail_nth: 21) 13:51:26 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d882, 0x0) (async, rerun: 32) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (rerun: 32) sendfile(r3, r4, 0x0, 0x80000700) (async) socket$inet6(0xa, 0x0, 0x0) [ 313.661352][ T8181] FAULT_INJECTION: forcing a failure. [ 313.661352][ T8181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.681407][ T8181] CPU: 1 PID: 8181 Comm: syz-executor.4 Not tainted 6.0.0-rc4-syzkaller-00055-g53e99dcff61e #0 [ 313.691782][ T8181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 313.701855][ T8181] Call Trace: [ 313.705137][ T8181] [ 313.708081][ T8181] dump_stack_lvl+0xcd/0x134 [ 313.712683][ T8181] should_fail.cold+0x5/0xa [ 313.717236][ T8181] _copy_to_user+0x2a/0x140 [ 313.721747][ T8181] simple_read_from_buffer+0xcc/0x160 [ 313.727123][ T8181] proc_fail_nth_read+0x187/0x220 [ 313.732175][ T8181] ? proc_fault_inject_read+0x220/0x220 [ 313.737788][ T8181] ? security_file_permission+0xab/0xd0 [ 313.743420][ T8181] vfs_read+0x257/0x930 [ 313.747599][ T8181] ? proc_fault_inject_read+0x220/0x220 [ 313.753159][ T8181] ? kernel_read+0x1c0/0x1c0 [ 313.757774][ T8181] ? __fget_files+0x26a/0x440 [ 313.762585][ T8181] ksys_read+0x127/0x250 [ 313.766857][ T8181] ? vfs_write+0xdd0/0xdd0 [ 313.771269][ T8181] ? syscall_enter_from_user_mode+0x22/0xb0 [ 313.777166][ T8181] do_syscall_64+0x35/0xb0 [ 313.781607][ T8181] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 313.787496][ T8181] RIP: 0033:0x7feb1e23be2c [ 313.791919][ T8181] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 313.811545][ T8181] RSP: 002b:00007feb1f3ef160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 313.819997][ T8181] RAX: ffffffffffffffda RBX: 00007feb1e39bf80 RCX: 00007feb1e23be2c [ 313.828013][ T8181] RDX: 000000000000000f RSI: 00007feb1f3ef1e0 RDI: 0000000000000005 [ 313.836011][ T8181] RBP: 00007feb1f3ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 313.844011][ T8181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 313.851988][ T8181] R13: 00007feb1e8cfb1f R14: 00007feb1f3ef300 R15: 0000000000022000 13:51:26 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000000)={0x81, 0x2, 0xc, 0x3, 0x1bef070b, 0x8}, &(0x7f0000000040)={0xfffffffffffffff8, 0x80000001, 0xe8a9, 0x400, 0xffffffff, 0x8, 0x100}, &(0x7f0000000080)={0x1, 0x4e, 0xffffffffffffff7a, 0x3cc9, 0x1f, 0x2, 0xfff, 0x8}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x274]}, 0x8}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x81, 0x2, 0xc, 0x3, 0x1bef070b, 0x8}, &(0x7f0000000040)={0xfffffffffffffff8, 0x80000001, 0xe8a9, 0x400, 0xffffffff, 0x8, 0x100}, &(0x7f0000000080)={0x1, 0x4e, 0xffffffffffffff7a, 0x3cc9, 0x1f, 0x2, 0xfff, 0x8}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x274]}, 0x8}) (async) 13:51:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff) fcntl$addseals(r2, 0x409, 0x7) r3 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x0, 0x1000}) dup2(r4, r3) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r4) r5 = dup(r1) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r5, r2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001801}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@acquire={0x19c, 0x17, 0x2, 0x70bd2b, 0x25dfdbfd, {{@in=@loopback, 0x4d6, 0x32}, @in=@multicast2, {@in=@local, @in=@loopback, 0x4e24, 0x200, 0x4e22, 0x0, 0x2, 0x20, 0x80, 0x8}, {{@in6=@empty, @in=@rand_addr=0x64010102, 0x4e22, 0x7f, 0x4e22, 0x7ff, 0x2, 0x80, 0x100, 0x0, 0x0, r6}, {0x186, 0x5, 0xdb1c, 0xffffffff, 0x59, 0x6, 0x9, 0x5}, {0x7, 0x7, 0x16d, 0x4}, 0x8000, 0x6e6bb3, 0x1, 0x0, 0x2}, 0x7, 0x0, 0xffffffff, 0x70bd2b}, [@address_filter={0x28, 0x1a, {@in6=@private1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xa, 0x5, 0x1}}, @tfcpad={0x8, 0x16, 0x400}, @lastused={0xc, 0xf, 0xa0000000}, @lifetime_val={0x24, 0x9, {0x8, 0x1, 0x6, 0x8}}, @lastused={0xc, 0xf, 0x6}, @replay_thresh={0x8, 0xb, 0x7fff}]}, 0x19c}, 0x1, 0x0, 0x0, 0x2000c884}, 0x40844) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@updpolicy={0xb8, 0x13, 0x4849115aec5b9ed5, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x180}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff) (async) fcntl$addseals(r2, 0x409, 0x7) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r3, 0xffff) (async) fcntl$addseals(r3, 0x409, 0x7) (async) dup(0xffffffffffffffff) (async) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x0, 0x1000}) (async) dup2(r4, r3) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r4) (async) dup(r1) (async) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) (async) dup2(r5, r2) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001801}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@acquire={0x19c, 0x17, 0x2, 0x70bd2b, 0x25dfdbfd, {{@in=@loopback, 0x4d6, 0x32}, @in=@multicast2, {@in=@local, @in=@loopback, 0x4e24, 0x200, 0x4e22, 0x0, 0x2, 0x20, 0x80, 0x8}, {{@in6=@empty, @in=@rand_addr=0x64010102, 0x4e22, 0x7f, 0x4e22, 0x7ff, 0x2, 0x80, 0x100, 0x0, 0x0, r6}, {0x186, 0x5, 0xdb1c, 0xffffffff, 0x59, 0x6, 0x9, 0x5}, {0x7, 0x7, 0x16d, 0x4}, 0x8000, 0x6e6bb3, 0x1, 0x0, 0x2}, 0x7, 0x0, 0xffffffff, 0x70bd2b}, [@address_filter={0x28, 0x1a, {@in6=@private1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xa, 0x5, 0x1}}, @tfcpad={0x8, 0x16, 0x400}, @lastused={0xc, 0xf, 0xa0000000}, @lifetime_val={0x24, 0x9, {0x8, 0x1, 0x6, 0x8}}, @lastused={0xc, 0xf, 0x6}, @replay_thresh={0x8, 0xb, 0x7fff}]}, 0x19c}, 0x1, 0x0, 0x0, 0x2000c884}, 0x40844) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@updpolicy={0xb8, 0x13, 0x4849115aec5b9ed5, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x180}}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) (async) [ 313.859969][ T8181] 13:51:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:27 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000180)={0x100, 0x5, 0x8000000000000001, 0x1ff, 0x8001, 0x5, 0x0, 0xbfffffffffff04ef}, &(0x7f0000000040)={0x0, 0x2, 0x3, 0x7, 0x0, 0x3, 0x1, 0x6}, &(0x7f0000000080)={0x8, 0x2, 0x5, 0x4f27, 0x4, 0x9, 0x7, 0x9}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1844], 0x73c) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x8000, 0x1000}) r4 = dup2(r2, r1) dup2(r3, r3) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r6 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = dup(r5) dup2(r7, r6) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x14c0}, {r4, 0x40}, {r7, 0x8080}, {r8, 0x200}], 0x4, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x80000001]}, 0x8) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1200}, {0xffffffffffffffff, 0x9f}, {r2, 0x10}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) 13:51:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff) fcntl$addseals(r2, 0x409, 0x7) r3 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x0, 0x1000}) dup2(r4, r3) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r4) r5 = dup(r1) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r5, r2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001801}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@acquire={0x19c, 0x17, 0x2, 0x70bd2b, 0x25dfdbfd, {{@in=@loopback, 0x4d6, 0x32}, @in=@multicast2, {@in=@local, @in=@loopback, 0x4e24, 0x200, 0x4e22, 0x0, 0x2, 0x20, 0x80, 0x8}, {{@in6=@empty, @in=@rand_addr=0x64010102, 0x4e22, 0x7f, 0x4e22, 0x7ff, 0x2, 0x80, 0x100, 0x0, 0x0, r6}, {0x186, 0x5, 0xdb1c, 0xffffffff, 0x59, 0x6, 0x9, 0x5}, {0x7, 0x7, 0x16d, 0x4}, 0x8000, 0x6e6bb3, 0x1, 0x0, 0x2}, 0x7, 0x0, 0xffffffff, 0x70bd2b}, [@address_filter={0x28, 0x1a, {@in6=@private1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xa, 0x5, 0x1}}, @tfcpad={0x8, 0x16, 0x400}, @lastused={0xc, 0xf, 0xa0000000}, @lifetime_val={0x24, 0x9, {0x8, 0x1, 0x6, 0x8}}, @lastused={0xc, 0xf, 0x6}, @replay_thresh={0x8, 0xb, 0x7fff}]}, 0x19c}, 0x1, 0x0, 0x0, 0x2000c884}, 0x40844) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@updpolicy={0xb8, 0x13, 0x4849115aec5b9ed5, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x180}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff) (async) fcntl$addseals(r2, 0x409, 0x7) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r3, 0xffff) (async) fcntl$addseals(r3, 0x409, 0x7) (async) dup(0xffffffffffffffff) (async) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x0, 0x1000}) (async) dup2(r4, r3) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r4) (async) dup(r1) (async) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) (async) dup2(r5, r2) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001801}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@acquire={0x19c, 0x17, 0x2, 0x70bd2b, 0x25dfdbfd, {{@in=@loopback, 0x4d6, 0x32}, @in=@multicast2, {@in=@local, @in=@loopback, 0x4e24, 0x200, 0x4e22, 0x0, 0x2, 0x20, 0x80, 0x8}, {{@in6=@empty, @in=@rand_addr=0x64010102, 0x4e22, 0x7f, 0x4e22, 0x7ff, 0x2, 0x80, 0x100, 0x0, 0x0, r6}, {0x186, 0x5, 0xdb1c, 0xffffffff, 0x59, 0x6, 0x9, 0x5}, {0x7, 0x7, 0x16d, 0x4}, 0x8000, 0x6e6bb3, 0x1, 0x0, 0x2}, 0x7, 0x0, 0xffffffff, 0x70bd2b}, [@address_filter={0x28, 0x1a, {@in6=@private1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xa, 0x5, 0x1}}, @tfcpad={0x8, 0x16, 0x400}, @lastused={0xc, 0xf, 0xa0000000}, @lifetime_val={0x24, 0x9, {0x8, 0x1, 0x6, 0x8}}, @lastused={0xc, 0xf, 0x6}, @replay_thresh={0x8, 0xb, 0x7fff}]}, 0x19c}, 0x1, 0x0, 0x0, 0x2000c884}, 0x40844) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@updpolicy={0xb8, 0x13, 0x4849115aec5b9ed5, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x180}}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) (async) [ 314.117914][ T22] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 314.487821][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.503707][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.522615][ T22] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 314.534911][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.559580][ T22] usb 1-1: config 0 descriptor?? [ 315.038688][ T22] corsair 0003:1B1C:1B02.0002: item fetching failed at offset 5/9 [ 315.046851][ T22] corsair 0003:1B1C:1B02.0002: parse failed [ 315.053586][ T22] corsair: probe of 0003:1B1C:1B02.0002 failed with error -22 13:51:29 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b02, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x4, "b14ec86e"}, @global=@item_4={0x3, 0x1, 0xa, "f200"}, @main=@item_012={0x2, 0x0, 0xa, '\x00('}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x40, 0x31, 0x14, {0x14, 0x8, "b1c6cb774867d32dd58b2fb73db54dec54ce"}}, &(0x7f00000000c0)={0x0, 0x3, 0x72, @string={0x72, 0x3, "fa5426e7a8ba17fc63c75c017a81d90102db641a7632a7c59205885754b2ba049abe38a2e635df89317a5413e8611c0520e264176f6e0bf985b156c08ce0cc2b6ee0ee672dfce6bd266fec1e7181fea76e690a45e7b466bb62d1170e720920306fb7147c70510b404996e3eda16a93e9"}}, &(0x7f0000000140)={0x0, 0xf, 0xaf, {0x5, 0xf, 0xaf, 0x1, [@generic={0xaa, 0x10, 0xa, "9042a2c152e7f4b5ce1eec6a829fab7c3ad71eadbab2a6657684bf4d887d529016e3b258dc4118ee3a82d9cbb1fb3fbebc36def7f6f48e7236c10fded31ea3ee4d49028c763db56671587642f0f7a527fd4357561bd5c50d70b3a9a58865e0a14b1d61053ff15657a4373f8c974cf0b1ed4fda0f5b6f96eca17cafa9fb3f54f109a2c3826efb85197cbec89372a9554113c94ab4fe303d8ac2e6553fe05155ff1a7362e289294b"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0x49, 0x5, "85e61b1a", "e6667f77"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0xec, 0x0, 0x11, 0x3ff, 0x8000}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x40, 0xe, 0x7d, "98608801cbfba2500d8125d12b055eadc3ae5cfb3796632bbac0734cc9b6bc2c818606c1116fe0b536463f3de187d901efcef3eb616bdd6d31557ef893557dc62138515fb592510697e3d1453e85e3a006273e89ef164f4a012ac7fc75f1f9452ec65d6fa83039b1b6d8d3e6ac9c35dadc017a5c314dc4b36cdf9e7a51"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x1c00, 0x2, [0xf]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x74}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0xbc}, &(0x7f0000000500)={0x40, 0xb, 0x2, "d42c"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, "2381"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x27}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io$hid(r0, &(0x7f0000001240)={0x24, &(0x7f0000001080)={0x20, 0x21, 0xf7, {0xf7, 0x23, "f7bb3ec089abb7723c6a55177e2eb140026da4d4e43c95897becf72f18edf06f341a35ba7321a826130f4ee10dd53201cf79041bc6de77398e68bca1106d5e5dbcae5fb65169c356f337716ce2ff74c438d22c4eaa6310272ac3a3cd8306ecc8d37c9ae13f12ee523c8e2d33f160c69fc6966634aee847152593aadde2b52b6b9cf79dfb6d301e4d086614c40a5b8d676ac099f4bd7f2c5322f31a04870a4745450a00f4ee9d16bb12291bb7ae3e9749d1afc9119ac524f16b2da4d422f4c564e89f17b02b085442b87c334247952985fc2efdad8b76898d254759741082a024d480e1ac8eeaa775f196ad8a30182895ff2f74dd36"}}, &(0x7f0000001180)={0x0, 0x3, 0x31, @string={0x31, 0x3, "d9c217378f386b5d013b159051497708863b0262fe950b58f22af2c87004a03433f6d20e1e3ae108b081619d33b625"}}, &(0x7f00000011c0)={0x0, 0x22, 0x15, {[@global=@item_4={0x3, 0x1, 0x6, "d90b5180"}, @local=@item_4={0x3, 0x2, 0x7, "fc031a8b"}, @main=@item_4={0x3, 0x0, 0xc, "bce12e8a"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "23c13a8a"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0x5d1}}}}, &(0x7f0000001440)={0x2c, &(0x7f0000001280)={0x0, 0x1, 0x40, "e33e633b0a1d00d2f3b75ed2d6f8c6b6afcd929dbd8e75230545b5a7938d730ea6581c63a0435c5de472f6054abda5cbb5e4c90b467d7f5fe9793e4aaa7cad70"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001380)={0x20, 0x1, 0x4e, "da1e9c49fa036e3d1f36631816de172ddb9bd7899fba04deaa46051a171424b67cd9cccc403ce03611c5206ee3b9e2e9cc7af08b6fc2585730f679189d72c067de5a131d9f6eaeb75a6bf517bb29"}, &(0x7f0000001400)={0x20, 0x3, 0x1, 0x37}}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000b80)={0x2c, &(0x7f0000000900)={0x0, 0x21, 0xdf, {0xdf, 0x31, "9fe874f9ee245b188059de8361bf412a396a688ccb3afa6a260a658f45db550d152642c779267ea4e56e366cad67a8f22cd163db810f150ea6bd70036151393cb2188c35ddbb751f87468d379199ba10e1b2466f3bd8216305cddc719280ddfe9b01000ab66799e122f6f9017928cb896ee024ad9f04b36d9bccd37ca21f65def2d40f08c4457aa7f1cec131dfa511c19cd1915473d1bd3e6e6415555221a8386df214e0d27d5a45e2305fca262f687586088909c171a47271896aa9a274d6422e99420c882704950ce0a29d07d9aad2d057a45bebff92706d8b98fa3b"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000a00)={0x0, 0xf, 0xf3, {0x5, 0xf, 0xf3, 0x3, [@generic={0xe0, 0x10, 0x3, "ab8e1bde11d66f91d60397d98cd6dd95f2fa51e921ff553d7524c01e39d3feffee1bb470bcb335ab3f801752363549ee6dd0854ed2cbf08d97359cba338c8b6070e0b4bbd9d59ec2b1bce2d0a02fa9b8771d641ead576a9d927ff6c4dc04af4142d8123ea2e680203e26528db99c0c3025ef37d603ea97cff06a736a9cb0adb6d005c19ea2283f93a57ee92b2321c0fdef1ac5cf9ca7821c4834ec1e52a5a7634fbb9ab8cfd58965f6933e5b5dad5fac30ca8d29151675e765a0c90b0122778f616f6136eb313ec44d2ef7c8a0ba90f088a00643dd8cb8f6219cbe9d48"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x8, 0x9}]}}, &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x26, 0x0, 0x40, 0x7f, "7985a6ad", "5ed80620"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x0, 0x3f, 0x80, 0x0, 0x1, 0x8}}}, &(0x7f0000000fc0)={0x84, &(0x7f0000000bc0)={0x0, 0x10, 0x7, "7e51262cc941ad"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x73}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000cc0)={0x20, 0x0, 0x8, {0xaa, 0x40, [0xffff]}}, &(0x7f0000000d00)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000d40)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000d80)={0x40, 0xb, 0x2, "b244"}, &(0x7f0000000dc0)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="7085524d09c9"}, &(0x7f0000000e40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000e80)={0x40, 0x19, 0x2, "37f6"}, &(0x7f0000000ec0)={0x40, 0x1a, 0x2, 0x7a3b}, &(0x7f0000000f00)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000f40)={0x40, 0x1e, 0x1, 0x71}, &(0x7f0000000f80)={0x40, 0x21, 0x1, 0x2}}) syz_usb_connect$hid(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b02, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x4, "b14ec86e"}, @global=@item_4={0x3, 0x1, 0xa, "f200"}, @main=@item_012={0x2, 0x0, 0xa, '\x00('}]}}, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x40, 0x31, 0x14, {0x14, 0x8, "b1c6cb774867d32dd58b2fb73db54dec54ce"}}, &(0x7f00000000c0)={0x0, 0x3, 0x72, @string={0x72, 0x3, "fa5426e7a8ba17fc63c75c017a81d90102db641a7632a7c59205885754b2ba049abe38a2e635df89317a5413e8611c0520e264176f6e0bf985b156c08ce0cc2b6ee0ee672dfce6bd266fec1e7181fea76e690a45e7b466bb62d1170e720920306fb7147c70510b404996e3eda16a93e9"}}, &(0x7f0000000140)={0x0, 0xf, 0xaf, {0x5, 0xf, 0xaf, 0x1, [@generic={0xaa, 0x10, 0xa, "9042a2c152e7f4b5ce1eec6a829fab7c3ad71eadbab2a6657684bf4d887d529016e3b258dc4118ee3a82d9cbb1fb3fbebc36def7f6f48e7236c10fded31ea3ee4d49028c763db56671587642f0f7a527fd4357561bd5c50d70b3a9a58865e0a14b1d61053ff15657a4373f8c974cf0b1ed4fda0f5b6f96eca17cafa9fb3f54f109a2c3826efb85197cbec89372a9554113c94ab4fe303d8ac2e6553fe05155ff1a7362e289294b"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0x49, 0x5, "85e61b1a", "e6667f77"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0xec, 0x0, 0x11, 0x3ff, 0x8000}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x40, 0xe, 0x7d, "98608801cbfba2500d8125d12b055eadc3ae5cfb3796632bbac0734cc9b6bc2c818606c1116fe0b536463f3de187d901efcef3eb616bdd6d31557ef893557dc62138515fb592510697e3d1453e85e3a006273e89ef164f4a012ac7fc75f1f9452ec65d6fa83039b1b6d8d3e6ac9c35dadc017a5c314dc4b36cdf9e7a51"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x1c00, 0x2, [0xf]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x74}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0xbc}, &(0x7f0000000500)={0x40, 0xb, 0x2, "d42c"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, "2381"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x27}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0xff}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000001240)={0x24, &(0x7f0000001080)={0x20, 0x21, 0xf7, {0xf7, 0x23, "f7bb3ec089abb7723c6a55177e2eb140026da4d4e43c95897becf72f18edf06f341a35ba7321a826130f4ee10dd53201cf79041bc6de77398e68bca1106d5e5dbcae5fb65169c356f337716ce2ff74c438d22c4eaa6310272ac3a3cd8306ecc8d37c9ae13f12ee523c8e2d33f160c69fc6966634aee847152593aadde2b52b6b9cf79dfb6d301e4d086614c40a5b8d676ac099f4bd7f2c5322f31a04870a4745450a00f4ee9d16bb12291bb7ae3e9749d1afc9119ac524f16b2da4d422f4c564e89f17b02b085442b87c334247952985fc2efdad8b76898d254759741082a024d480e1ac8eeaa775f196ad8a30182895ff2f74dd36"}}, &(0x7f0000001180)={0x0, 0x3, 0x31, @string={0x31, 0x3, "d9c217378f386b5d013b159051497708863b0262fe950b58f22af2c87004a03433f6d20e1e3ae108b081619d33b625"}}, &(0x7f00000011c0)={0x0, 0x22, 0x15, {[@global=@item_4={0x3, 0x1, 0x6, "d90b5180"}, @local=@item_4={0x3, 0x2, 0x7, "fc031a8b"}, @main=@item_4={0x3, 0x0, 0xc, "bce12e8a"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "23c13a8a"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0x5d1}}}}, &(0x7f0000001440)={0x2c, &(0x7f0000001280)={0x0, 0x1, 0x40, "e33e633b0a1d00d2f3b75ed2d6f8c6b6afcd929dbd8e75230545b5a7938d730ea6581c63a0435c5de472f6054abda5cbb5e4c90b467d7f5fe9793e4aaa7cad70"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001380)={0x20, 0x1, 0x4e, "da1e9c49fa036e3d1f36631816de172ddb9bd7899fba04deaa46051a171424b67cd9cccc403ce03611c5206ee3b9e2e9cc7af08b6fc2585730f679189d72c067de5a131d9f6eaeb75a6bf517bb29"}, &(0x7f0000001400)={0x20, 0x3, 0x1, 0x37}}) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000b80)={0x2c, &(0x7f0000000900)={0x0, 0x21, 0xdf, {0xdf, 0x31, "9fe874f9ee245b188059de8361bf412a396a688ccb3afa6a260a658f45db550d152642c779267ea4e56e366cad67a8f22cd163db810f150ea6bd70036151393cb2188c35ddbb751f87468d379199ba10e1b2466f3bd8216305cddc719280ddfe9b01000ab66799e122f6f9017928cb896ee024ad9f04b36d9bccd37ca21f65def2d40f08c4457aa7f1cec131dfa511c19cd1915473d1bd3e6e6415555221a8386df214e0d27d5a45e2305fca262f687586088909c171a47271896aa9a274d6422e99420c882704950ce0a29d07d9aad2d057a45bebff92706d8b98fa3b"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000a00)={0x0, 0xf, 0xf3, {0x5, 0xf, 0xf3, 0x3, [@generic={0xe0, 0x10, 0x3, "ab8e1bde11d66f91d60397d98cd6dd95f2fa51e921ff553d7524c01e39d3feffee1bb470bcb335ab3f801752363549ee6dd0854ed2cbf08d97359cba338c8b6070e0b4bbd9d59ec2b1bce2d0a02fa9b8771d641ead576a9d927ff6c4dc04af4142d8123ea2e680203e26528db99c0c3025ef37d603ea97cff06a736a9cb0adb6d005c19ea2283f93a57ee92b2321c0fdef1ac5cf9ca7821c4834ec1e52a5a7634fbb9ab8cfd58965f6933e5b5dad5fac30ca8d29151675e765a0c90b0122778f616f6136eb313ec44d2ef7c8a0ba90f088a00643dd8cb8f6219cbe9d48"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x8, 0x9}]}}, &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x26, 0x0, 0x40, 0x7f, "7985a6ad", "5ed80620"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x0, 0x3f, 0x80, 0x0, 0x1, 0x8}}}, &(0x7f0000000fc0)={0x84, &(0x7f0000000bc0)={0x0, 0x10, 0x7, "7e51262cc941ad"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x73}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000cc0)={0x20, 0x0, 0x8, {0xaa, 0x40, [0xffff]}}, &(0x7f0000000d00)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000d40)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000d80)={0x40, 0xb, 0x2, "b244"}, &(0x7f0000000dc0)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="7085524d09c9"}, &(0x7f0000000e40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000e80)={0x40, 0x19, 0x2, "37f6"}, &(0x7f0000000ec0)={0x40, 0x1a, 0x2, 0x7a3b}, &(0x7f0000000f00)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000f40)={0x40, 0x1e, 0x1, 0x71}, &(0x7f0000000f80)={0x40, 0x21, 0x1, 0x2}}) (async) 13:51:29 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d882, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000700) socket$inet6(0xa, 0x0, 0x0) 13:51:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:29 executing program 3: socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private=0xa010102, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000080)=0xb2087ca) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121e02, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0xfee3, 0x12) socket$netlink(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r2, 0x0, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private=0xa010102, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xafe}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000080)=0xb2087ca) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121e02, 0x0) (async) write$cgroup_int(r3, &(0x7f00000001c0)=0xfee3, 0x12) (async) 13:51:29 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) process_vm_writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d882, 0x0) (async) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000700) (async) socket$inet6(0xa, 0x0, 0x0) 13:51:29 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000180)={0x100, 0x5, 0x8000000000000001, 0x1ff, 0x8001, 0x5, 0x0, 0xbfffffffffff04ef}, &(0x7f0000000040)={0x0, 0x2, 0x3, 0x7, 0x0, 0x3, 0x1, 0x6}, &(0x7f0000000080)={0x8, 0x2, 0x5, 0x4f27, 0x4, 0x9, 0x7, 0x9}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1844], 0x73c) fcntl$addseals(r1, 0x409, 0x7) (async) r2 = dup(r0) (async, rerun: 32) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x8000, 0x1000}) (rerun: 32) r4 = dup2(r2, r1) dup2(r3, r3) (async, rerun: 32) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async, rerun: 32) r6 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r6, 0xffff) (async, rerun: 64) fcntl$addseals(r6, 0x409, 0x7) (async, rerun: 64) r7 = dup(r5) dup2(r7, r6) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x14c0}, {r4, 0x40}, {r7, 0x8080}, {r8, 0x200}], 0x4, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x80000001]}, 0x8) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1200}, {0xffffffffffffffff, 0x9f}, {r2, 0x10}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) [ 315.958346][ T8220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.967726][ T8220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.976787][ T8220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.987353][ T8220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.001294][ T6926] usb 1-1: USB disconnect, device number 28 13:51:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:29 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000180)={0x100, 0x5, 0x8000000000000001, 0x1ff, 0x8001, 0x5, 0x0, 0xbfffffffffff04ef}, &(0x7f0000000040)={0x0, 0x2, 0x3, 0x7, 0x0, 0x3, 0x1, 0x6}, &(0x7f0000000080)={0x8, 0x2, 0x5, 0x4f27, 0x4, 0x9, 0x7, 0x9}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) (async, rerun: 64) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1844], 0x73c) (async, rerun: 64) fcntl$addseals(r1, 0x409, 0x7) (async, rerun: 32) r2 = dup(r0) (rerun: 32) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x8000, 0x1000}) (async) r4 = dup2(r2, r1) dup2(r3, r3) (async) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r6 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r6, 0xffff) (async) fcntl$addseals(r6, 0x409, 0x7) (async) r7 = dup(r5) dup2(r7, r6) (async, rerun: 64) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 64) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x14c0}, {r4, 0x40}, {r7, 0x8080}, {r8, 0x200}], 0x4, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x80000001]}, 0x8) (async) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1200}, {0xffffffffffffffff, 0x9f}, {r2, 0x10}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) 13:51:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:29 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) gettid() 13:51:29 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d882, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000700) socket$inet6(0xa, 0x0, 0x0) 13:51:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 316.487901][ T6926] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 316.857789][ T6926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.875697][ T6926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.904907][ T6926] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 316.910655][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.920643][ T6926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.926504][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.941938][ T6926] usb 1-1: config 0 descriptor?? [ 317.438996][ T6926] corsair 0003:1B1C:1B02.0003: item fetching failed at offset 5/9 [ 317.452727][ T6926] corsair 0003:1B1C:1B02.0003: parse failed [ 317.460680][ T6926] corsair: probe of 0003:1B1C:1B02.0003 failed with error -22 [ 318.342574][ T8274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.351491][ T8274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.363920][ T8274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.374352][ T8274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 13:51:31 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d882, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000700) socket$inet6(0xa, 0x0, 0x0) 13:51:31 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) gettid() pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) gettid() (async) 13:51:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:31 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d882, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000700) socket$inet6(0xa, 0x0, 0x0) 13:51:31 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d882, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000700) socket$inet6(0xa, 0x0, 0x0) [ 318.389196][ T144] usb 1-1: USB disconnect, device number 29 13:51:31 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) gettid() 13:51:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:31 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000000c0)=""/34) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0xfffffffffffffffb, 0x222641) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, 0x0) r5 = syz_open_dev$evdev(0x0, 0x2, 0x4040) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f00000000c0)=""/34) memfd_secret(0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000200)=[0x8000, 0x7fff]) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r1, 0x0, 0x0) 13:51:31 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r2, r1) dup2(r1, r3) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0xc}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x4224}, {0xffffffffffffffff, 0x5}, {0xffffffffffffffff, 0xe53056ee13039ccd}, {0xffffffffffffffff, 0x200}, {r3, 0x44}], 0xa, &(0x7f0000000440)={r4, r5+60000000}, &(0x7f0000000480)={[0xd2d1]}, 0x8) syz_io_uring_complete(0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xa000, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ppoll(&(0x7f0000000240), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0xa9b, 0x80) ppoll(&(0x7f0000000040)=[{r6, 0x40a0}, {0xffffffffffffffff, 0x10}, {}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x1000}, {r7, 0x1}], 0x6, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x7]}, 0x8) 13:51:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:31 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r2, r1) dup2(r1, r3) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0xc}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x4224}, {0xffffffffffffffff, 0x5}, {0xffffffffffffffff, 0xe53056ee13039ccd}, {0xffffffffffffffff, 0x200}, {r3, 0x44}], 0xa, &(0x7f0000000440)={r4, r5+60000000}, &(0x7f0000000480)={[0xd2d1]}, 0x8) syz_io_uring_complete(0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xa000, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ppoll(&(0x7f0000000240), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0xa9b, 0x80) ppoll(&(0x7f0000000040)=[{r6, 0x40a0}, {0xffffffffffffffff, 0x10}, {}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x1000}, {r7, 0x1}], 0x6, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x7]}, 0x8) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r1, 0xffff) (async) fcntl$addseals(r1, 0x409, 0x7) (async) dup(r0) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) (async) dup2(r2, r1) (async) dup2(r1, r3) (async) clock_gettime(0x0, &(0x7f0000000400)) (async) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0xc}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x4224}, {0xffffffffffffffff, 0x5}, {0xffffffffffffffff, 0xe53056ee13039ccd}, {0xffffffffffffffff, 0x200}, {r3, 0x44}], 0xa, &(0x7f0000000440)={r4, r5+60000000}, &(0x7f0000000480)={[0xd2d1]}, 0x8) (async) syz_io_uring_complete(0x0) (async) openat$vfio(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xa000, 0x0) (async) fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async) ppoll(&(0x7f0000000240), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x8) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0xa9b, 0x80) (async) ppoll(&(0x7f0000000040)=[{r6, 0x40a0}, {0xffffffffffffffff, 0x10}, {}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x1000}, {r7, 0x1}], 0x6, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x7]}, 0x8) (async) 13:51:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:32 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x5, 0x0) (async, rerun: 64) r2 = socket$inet6(0xa, 0x803, 0x6) (rerun: 64) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000000c0)=""/34) (async, rerun: 32) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = syz_open_dev$evdev(0x0, 0xfffffffffffffffb, 0x222641) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, 0x0) (async) r5 = syz_open_dev$evdev(0x0, 0x2, 0x4040) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f00000000c0)=""/34) memfd_secret(0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40) (async) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000200)=[0x8000, 0x7fff]) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) (async, rerun: 32) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) (rerun: 32) write(r1, 0x0, 0x0) 13:51:32 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r2, r1) dup2(r1, r3) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0xc}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x4224}, {0xffffffffffffffff, 0x5}, {0xffffffffffffffff, 0xe53056ee13039ccd}, {0xffffffffffffffff, 0x200}, {r3, 0x44}], 0xa, &(0x7f0000000440)={r4, r5+60000000}, &(0x7f0000000480)={[0xd2d1]}, 0x8) syz_io_uring_complete(0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xa000, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ppoll(&(0x7f0000000240), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0xa9b, 0x80) ppoll(&(0x7f0000000040)=[{r6, 0x40a0}, {0xffffffffffffffff, 0x10}, {}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x1000}, {r7, 0x1}], 0x6, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x7]}, 0x8) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r1, 0xffff) (async) fcntl$addseals(r1, 0x409, 0x7) (async) dup(r0) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) (async) dup2(r2, r1) (async) dup2(r1, r3) (async) clock_gettime(0x0, &(0x7f0000000400)) (async) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0xc}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x4224}, {0xffffffffffffffff, 0x5}, {0xffffffffffffffff, 0xe53056ee13039ccd}, {0xffffffffffffffff, 0x200}, {r3, 0x44}], 0xa, &(0x7f0000000440)={r4, r5+60000000}, &(0x7f0000000480)={[0xd2d1]}, 0x8) (async) syz_io_uring_complete(0x0) (async) openat$vfio(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xa000, 0x0) (async) fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async) ppoll(&(0x7f0000000240), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x8) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0xa9b, 0x80) (async) ppoll(&(0x7f0000000040)=[{r6, 0x40a0}, {0xffffffffffffffff, 0x10}, {}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x1000}, {r7, 0x1}], 0x6, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x7]}, 0x8) (async) 13:51:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x7, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:32 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000000c0)=""/34) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0xfffffffffffffffb, 0x222641) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, 0x0) r5 = syz_open_dev$evdev(0x0, 0x2, 0x4040) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f00000000c0)=""/34) memfd_secret(0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000200)=[0x8000, 0x7fff]) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r1, 0x0, 0x0) 13:51:32 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d882, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000700) socket$inet6(0xa, 0x0, 0x0) 13:51:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:32 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x4, 0x101000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000040)=[{r0, 0x4000}, {r1, 0x80}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x5]}, 0x8) 13:51:32 executing program 3: unshare(0x40040000) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, @win={{0x0, 0x1, 0x6}, 0x0, 0x3, &(0x7f00000003c0)={{0x1f, 0x7ef, 0x7fff}}, 0x2, 0x0, 0x7e}}}) unshare(0x20010080) clock_getres(0x0, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000480)={0x0, @win={{0x7, 0x0, 0x8, 0x10000}, 0x9, 0x5, &(0x7f0000000080)={{0x0, 0x7, 0x5, 0x5}, &(0x7f0000000040)={{0x5d80bbe9, 0x5, 0x0, 0xff}, &(0x7f0000000000)={{0x0, 0x0, 0x4, 0xffff8000}}}}, 0x3, &(0x7f0000000280)="a0f9f5a86ed42412a471bb53fe8b4bc552e394d5dcb5f407f3155c4b9221a78b951fdb6f72efac29657acfc2d35b433372bdf931ec871c53eb03acf8c0699e6ae987f166814604fc33fd5d2c106e2775c80a81b5f6c141424de0ebde08fa4fcb73f6d15aabdf4947ad3053c0952960dd415d4869c56f1acaf5c250afb8a0c33c317de7e5c524a1fef5ce0b78ca11832b766e08c2a15c17eaeb192c6f579689886c573b4699eebf575624c31c94530add2875eb414e90b35a31ae673ff67a4432bdcd", 0x40}}) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) dup2(r1, 0xffffffffffffffff) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = dup(r2) r5 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x0, 0x1000}) dup2(r4, r3) dup2(r3, r5) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x400}, {r0, 0x400}, {0xffffffffffffffff, 0x4000}, {r1, 0x3004}, {r5, 0x1030}], 0x5, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000380)={[0x7ff]}, 0x8) 13:51:32 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000005c0)=""/106) syz_usb_connect(0x6, 0x6d7, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0x95, 0xe9, 0xe7, 0x8, 0x19d2, 0x1533, 0xf9f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c5, 0x3, 0x33, 0x40, 0x90, 0x3f, [{{0x9, 0x4, 0xaa, 0x6, 0xf, 0xff, 0xff, 0xff, 0x0, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "8e26c54b"}, {0x5, 0x24, 0x0, 0xf800}, {0xd, 0x24, 0xf, 0x1, 0xffffffe1, 0x401, 0x5, 0x4}, {0x6}, [@mbim={0xc, 0x24, 0x1b, 0x1ff, 0xff, 0xfe, 0xa0, 0x800, 0x6}, @country_functional={0x6, 0x24, 0x7, 0x1f, 0x3ff}]}, @uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x3, 0x2b, 0x0, "bc8615c4e323e417a3"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x2, 0x8, "fee59fe1"}]}], [{{0x9, 0x5, 0x5, 0x14, 0x400, 0xff, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1}, @generic={0x75, 0x22, "2f054ad565362cc280433f8429644059308a8a80e2049b9e613035ea84a9be1af59bc3b5d167203a9a4966034e64f2be2d1e672cede8a6254b82a570b17855702cd6e809aa553346e1d14acd23230ea06fb0d1dc747b463f1eb5466911238030b77243c2347f8dd118b330c92b25f3cfeec3ba"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x1, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1f, 0xc29b}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x3f, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0xfffb}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x60c9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0xe5, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x2966}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x73, 0x7}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x0, 0x2, 0x8, [@generic={0xb9, 0x11, "b53612d136c778f5fea60e90b99ca1ab42ab0868ba6d41395f2097631e43e652384481fc55f72810bf22240614982f2802dd3e47350e0f59647f772a15af12f4e7f6495860a610a6c8cf551fa8b8a910189cc6836987da844dde6d0402c02fd53486d1f3223d5bb74b5c0b73d1e14d9c7b63fd076d63c1a903cf7ef14c0934130291e065ba595b06ab41bbd0876b77dc6d3609a4d667e3eb30be2a0c14747986640d0d07849e129380668a34c0fe06fee2921da2e291dc"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xfff9}]}}, {{0x9, 0x5, 0x3, 0xf, 0x200, 0x9, 0x7, 0xb7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1f}]}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0xf, 0x6, 0x3f}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x3, 0x7f, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf7, 0xc03f}, @generic={0x57, 0x21, "9ddbb73c9b4b0053b8e9d3447b2945bcf50bee8428a546cf261cd88c1759c9d0c8b8ffc0ffc3e9f85d6d261057f78b84835564220f9f1a24c97429004fe7280bb337b542970b60528c15b4834a81f197cf371dc9dd"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x3, 0x8, 0x2}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x81, 0x7, 0x80, [@generic={0x7c, 0x9, "fbd0bcb5ba6f5d7ec56244df04e211b1635d0357a3017f0a74f26f5ae7ca0b1621fbe5938ec537b6b112835b64e83d2438cde3fdedbaa399e05f1f252e61d59f1278e759ad68ad9dab60f6af08301cf9151a2a7d360c794e80f142bd68ce5a2a395ec8439966eb34e6590a7484c3803d742722885d3f3e796b85"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x7, 0x6f, 0x81}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0xec, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1d4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x5}]}}, {{0x9, 0x5, 0xe, 0x8, 0x8, 0x2, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1ff}, @generic={0x6, 0x10, "40b39ffc"}]}}, {{0x9, 0x5, 0x7, 0x1b, 0x3ff, 0x4, 0x5, 0xc0}}]}}, {{0x9, 0x4, 0x3, 0x0, 0x7, 0xe2, 0x7f, 0x3, 0x9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 't'}, {0x5, 0x24, 0x0, 0x269}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0xfff, 0x7}}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, 'Jq'}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0x7f, 0x80}}], [{{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x9, 0x3}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x81, 0x0, 0x28}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x80, 0x3, 0x1, [@generic={0x9f, 0x21, "3986819657f4b0ee0fa4dbe19a0f820d99af991aa0f8315432d4aefd9e16798ddb8d3a478e75de059cc1c80a192bc2a66a697c2ca01a0936d4ce3d66c56a50cc83dffecc61514066a1d0c1ac9b869b4cbfc89d9ddafce52964763cff99e141a4293364a6183ae70bc4ac36de611ddd93a2b830b857f835775b1826e37b7677aaac5ab42a53c48b60fccc47bf6509a4745c6233659ce6184ddba3ac08dd"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x1f, 0x1, 0x3}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x8, 0x1, 0x4, [@generic={0x8b, 0xa, "356b9ef09ad9b29c1e0d2a7f73d2e99c0c37b1f844921a4d3e1c387d62ccea56ff0b4b4354aaf04966ece205bbd2a16d7e2b4e8e006a60e340b403114d26c12793e004d8bdcb46a103f535a6002dcfea304e68006ca93f49da69081de17c99b16c294a5eb3cf9799e0c3d3037cd02ccab5daf9de2f0fdb2efba055a846a513b06ede94f2ad629f761d"}, @uac_iso={0x7, 0x25, 0x1, 0x426b73f13d59d20, 0x91, 0xda32}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xff, 0x10, 0x0, [@generic={0x36, 0x6, "bbaf9b39d7a7c3cb8415e9ce3362b7fe50a30c32e9d418f558e4063b3369882291806e7beadd7d1a0806e007863c9ac3327ba0ee"}, @generic={0xb6, 0x10, "b913f6a7cf0aea26b4e3a3f4da1630ebcfb8123c40a60da5fd7a946d37b615471b626110002b66e26c47ce5b4d02ec2079721af2d053ca6788d6d0e874be3f904ee94b521c2ab50d1e654c01016e8f557870268d728567c9e151968c0290f0590c732e27aa671218e90ec0505e821d4e411c91736a69215d873f1ad4f0e851166aeb66c3138060c566d0dfe9affa84283f23327b78448bc80397a8724d04eddc970d71770fe4eb1de6456bc959bddfa607154004"}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x0, 0x7, 0x1f, 0x6}}]}}, {{0x9, 0x4, 0x77, 0x5, 0x5, 0xdb, 0xf2, 0x32, 0x81, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "e59c5047"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x5, 0x6, 0xff}, {0x6, 0x24, 0x1a, 0x4, 0x14}, [@obex={0x5, 0x24, 0x15, 0x21}, @dmm={0x7, 0x24, 0x14, 0x9ed, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xfceb, 0x8, 0x3, 0x6, 0x2, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x68, 0x1000}, @acm={0x4, 0x24, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x88, 0x81, 0x9}]}], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x3, 0xfc, 0x5f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3f}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0xfa, 0x0, 0xe9}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x20, 0x1, 0x5}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0xb6, 0x1f, 0xff}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x9, 0x0, 0x0, [@generic={0x62, 0x4, "ea33e8ea1c6b8bb25c94fa6d967721be7e3c5829ac0b85d16674358278fbbae1c979bf33f93081269ce878d6a0bb193c09dccf3b33df08200926f5a886518a5299b6766076bcbbfef12300938f6d09a73f30f5ee06418a95773a27120ef60388"}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x5, 0x0, 0xf8, 0x40, 0x1}, 0x4b, &(0x7f00000000c0)={0x5, 0xf, 0x4b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x18, 0x5, 0x9, 0x47b, 0x8b}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x2, 0x7ff}, @generic={0x31, 0x10, 0xb, "c01e5fbbf51ab4143af3956cacb6c9c23b192955e9ed1560fbc25a81bbcf539aa89e4c82cb89da310be3cb8f9982"}]}, 0x3, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x419}}]}) 13:51:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:32 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) (async) r1 = socket$kcm(0x29, 0x5, 0x0) (async) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000000c0)=""/34) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0xfffffffffffffffb, 0x222641) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, 0x0) (async) r5 = syz_open_dev$evdev(0x0, 0x2, 0x4040) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f00000000c0)=""/34) memfd_secret(0x0) (async) syz_open_dev$evdev(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000200)=[0x8000, 0x7fff]) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r1, 0x0, 0x0) 13:51:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xa, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:32 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x190, 0x8, 0x140, 0xa0, 0x8, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) 13:51:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 319.918867][ T144] usb 1-1: new high-speed USB device number 30 using dummy_hcd 13:51:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:33 executing program 3: unshare(0x40040000) (async) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, @win={{0x0, 0x1, 0x6}, 0x0, 0x3, &(0x7f00000003c0)={{0x1f, 0x7ef, 0x7fff}}, 0x2, 0x0, 0x7e}}}) (async, rerun: 32) unshare(0x20010080) (rerun: 32) clock_getres(0x0, &(0x7f0000000100)) (async) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000480)={0x0, @win={{0x7, 0x0, 0x8, 0x10000}, 0x9, 0x5, &(0x7f0000000080)={{0x0, 0x7, 0x5, 0x5}, &(0x7f0000000040)={{0x5d80bbe9, 0x5, 0x0, 0xff}, &(0x7f0000000000)={{0x0, 0x0, 0x4, 0xffff8000}}}}, 0x3, &(0x7f0000000280)="a0f9f5a86ed42412a471bb53fe8b4bc552e394d5dcb5f407f3155c4b9221a78b951fdb6f72efac29657acfc2d35b433372bdf931ec871c53eb03acf8c0699e6ae987f166814604fc33fd5d2c106e2775c80a81b5f6c141424de0ebde08fa4fcb73f6d15aabdf4947ad3053c0952960dd415d4869c56f1acaf5c250afb8a0c33c317de7e5c524a1fef5ce0b78ca11832b766e08c2a15c17eaeb192c6f579689886c573b4699eebf575624c31c94530add2875eb414e90b35a31ae673ff67a4432bdcd", 0x40}}) (async, rerun: 64) ftruncate(0xffffffffffffffff, 0xffff) (rerun: 64) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) dup2(r1, 0xffffffffffffffff) (async) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r3 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r3, 0xffff) (async) fcntl$addseals(r3, 0x409, 0x7) (async) r4 = dup(r2) r5 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x0, 0x1000}) (async) dup2(r4, r3) dup2(r3, r5) (async) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x400}, {r0, 0x400}, {0xffffffffffffffff, 0x4000}, {r1, 0x3004}, {r5, 0x1030}], 0x5, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000380)={[0x7ff]}, 0x8) [ 320.086020][ T8376] WARNING: fbcon: Driver 'vkmsdrmfb' missed to adjust virtual screen size (320x160 vs. 400x8) [ 320.117745][ T144] usb 1-1: device descriptor read/64, error 18 13:51:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 320.388681][ T144] usb 1-1: new high-speed USB device number 31 using dummy_hcd 13:51:33 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x4, 0x101000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000040)=[{r0, 0x4000}, {r1, 0x80}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x5]}, 0x8) 13:51:33 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x190, 0x8, 0x140, 0xa0, 0x8, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) [ 320.496117][ T8384] WARNING: fbcon: Driver 'vkmsdrmfb' missed to adjust virtual screen size (320x160 vs. 400x8) [ 320.587814][ T144] usb 1-1: device descriptor read/64, error 18 [ 320.710650][ T144] usb usb1-port1: attempt power cycle [ 321.117734][ T144] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 321.297783][ T144] usb 1-1: device descriptor read/8, error -61 [ 321.567808][ T144] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 321.737890][ T144] usb 1-1: device descriptor read/8, error -61 [ 321.864056][ T144] usb usb1-port1: unable to enumerate USB device 13:51:35 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000005c0)=""/106) (async) syz_usb_connect(0x6, 0x6d7, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0x95, 0xe9, 0xe7, 0x8, 0x19d2, 0x1533, 0xf9f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c5, 0x3, 0x33, 0x40, 0x90, 0x3f, [{{0x9, 0x4, 0xaa, 0x6, 0xf, 0xff, 0xff, 0xff, 0x0, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "8e26c54b"}, {0x5, 0x24, 0x0, 0xf800}, {0xd, 0x24, 0xf, 0x1, 0xffffffe1, 0x401, 0x5, 0x4}, {0x6}, [@mbim={0xc, 0x24, 0x1b, 0x1ff, 0xff, 0xfe, 0xa0, 0x800, 0x6}, @country_functional={0x6, 0x24, 0x7, 0x1f, 0x3ff}]}, @uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x3, 0x2b, 0x0, "bc8615c4e323e417a3"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x2, 0x8, "fee59fe1"}]}], [{{0x9, 0x5, 0x5, 0x14, 0x400, 0xff, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1}, @generic={0x75, 0x22, "2f054ad565362cc280433f8429644059308a8a80e2049b9e613035ea84a9be1af59bc3b5d167203a9a4966034e64f2be2d1e672cede8a6254b82a570b17855702cd6e809aa553346e1d14acd23230ea06fb0d1dc747b463f1eb5466911238030b77243c2347f8dd118b330c92b25f3cfeec3ba"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x1, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1f, 0xc29b}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x3f, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0xfffb}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x60c9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0xe5, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x2966}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x73, 0x7}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x0, 0x2, 0x8, [@generic={0xb9, 0x11, "b53612d136c778f5fea60e90b99ca1ab42ab0868ba6d41395f2097631e43e652384481fc55f72810bf22240614982f2802dd3e47350e0f59647f772a15af12f4e7f6495860a610a6c8cf551fa8b8a910189cc6836987da844dde6d0402c02fd53486d1f3223d5bb74b5c0b73d1e14d9c7b63fd076d63c1a903cf7ef14c0934130291e065ba595b06ab41bbd0876b77dc6d3609a4d667e3eb30be2a0c14747986640d0d07849e129380668a34c0fe06fee2921da2e291dc"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xfff9}]}}, {{0x9, 0x5, 0x3, 0xf, 0x200, 0x9, 0x7, 0xb7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1f}]}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0xf, 0x6, 0x3f}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x3, 0x7f, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf7, 0xc03f}, @generic={0x57, 0x21, "9ddbb73c9b4b0053b8e9d3447b2945bcf50bee8428a546cf261cd88c1759c9d0c8b8ffc0ffc3e9f85d6d261057f78b84835564220f9f1a24c97429004fe7280bb337b542970b60528c15b4834a81f197cf371dc9dd"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x3, 0x8, 0x2}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x81, 0x7, 0x80, [@generic={0x7c, 0x9, "fbd0bcb5ba6f5d7ec56244df04e211b1635d0357a3017f0a74f26f5ae7ca0b1621fbe5938ec537b6b112835b64e83d2438cde3fdedbaa399e05f1f252e61d59f1278e759ad68ad9dab60f6af08301cf9151a2a7d360c794e80f142bd68ce5a2a395ec8439966eb34e6590a7484c3803d742722885d3f3e796b85"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x7, 0x6f, 0x81}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0xec, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1d4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x5}]}}, {{0x9, 0x5, 0xe, 0x8, 0x8, 0x2, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1ff}, @generic={0x6, 0x10, "40b39ffc"}]}}, {{0x9, 0x5, 0x7, 0x1b, 0x3ff, 0x4, 0x5, 0xc0}}]}}, {{0x9, 0x4, 0x3, 0x0, 0x7, 0xe2, 0x7f, 0x3, 0x9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 't'}, {0x5, 0x24, 0x0, 0x269}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0xfff, 0x7}}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, 'Jq'}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0x7f, 0x80}}], [{{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x9, 0x3}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x81, 0x0, 0x28}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x80, 0x3, 0x1, [@generic={0x9f, 0x21, "3986819657f4b0ee0fa4dbe19a0f820d99af991aa0f8315432d4aefd9e16798ddb8d3a478e75de059cc1c80a192bc2a66a697c2ca01a0936d4ce3d66c56a50cc83dffecc61514066a1d0c1ac9b869b4cbfc89d9ddafce52964763cff99e141a4293364a6183ae70bc4ac36de611ddd93a2b830b857f835775b1826e37b7677aaac5ab42a53c48b60fccc47bf6509a4745c6233659ce6184ddba3ac08dd"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x1f, 0x1, 0x3}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x8, 0x1, 0x4, [@generic={0x8b, 0xa, "356b9ef09ad9b29c1e0d2a7f73d2e99c0c37b1f844921a4d3e1c387d62ccea56ff0b4b4354aaf04966ece205bbd2a16d7e2b4e8e006a60e340b403114d26c12793e004d8bdcb46a103f535a6002dcfea304e68006ca93f49da69081de17c99b16c294a5eb3cf9799e0c3d3037cd02ccab5daf9de2f0fdb2efba055a846a513b06ede94f2ad629f761d"}, @uac_iso={0x7, 0x25, 0x1, 0x426b73f13d59d20, 0x91, 0xda32}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xff, 0x10, 0x0, [@generic={0x36, 0x6, "bbaf9b39d7a7c3cb8415e9ce3362b7fe50a30c32e9d418f558e4063b3369882291806e7beadd7d1a0806e007863c9ac3327ba0ee"}, @generic={0xb6, 0x10, "b913f6a7cf0aea26b4e3a3f4da1630ebcfb8123c40a60da5fd7a946d37b615471b626110002b66e26c47ce5b4d02ec2079721af2d053ca6788d6d0e874be3f904ee94b521c2ab50d1e654c01016e8f557870268d728567c9e151968c0290f0590c732e27aa671218e90ec0505e821d4e411c91736a69215d873f1ad4f0e851166aeb66c3138060c566d0dfe9affa84283f23327b78448bc80397a8724d04eddc970d71770fe4eb1de6456bc959bddfa607154004"}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x0, 0x7, 0x1f, 0x6}}]}}, {{0x9, 0x4, 0x77, 0x5, 0x5, 0xdb, 0xf2, 0x32, 0x81, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "e59c5047"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x5, 0x6, 0xff}, {0x6, 0x24, 0x1a, 0x4, 0x14}, [@obex={0x5, 0x24, 0x15, 0x21}, @dmm={0x7, 0x24, 0x14, 0x9ed, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xfceb, 0x8, 0x3, 0x6, 0x2, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x68, 0x1000}, @acm={0x4, 0x24, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x88, 0x81, 0x9}]}], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x3, 0xfc, 0x5f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3f}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0xfa, 0x0, 0xe9}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x20, 0x1, 0x5}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0xb6, 0x1f, 0xff}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x9, 0x0, 0x0, [@generic={0x62, 0x4, "ea33e8ea1c6b8bb25c94fa6d967721be7e3c5829ac0b85d16674358278fbbae1c979bf33f93081269ce878d6a0bb193c09dccf3b33df08200926f5a886518a5299b6766076bcbbfef12300938f6d09a73f30f5ee06418a95773a27120ef60388"}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x5, 0x0, 0xf8, 0x40, 0x1}, 0x4b, &(0x7f00000000c0)={0x5, 0xf, 0x4b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x18, 0x5, 0x9, 0x47b, 0x8b}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x2, 0x7ff}, @generic={0x31, 0x10, 0xb, "c01e5fbbf51ab4143af3956cacb6c9c23b192955e9ed1560fbc25a81bbcf539aa89e4c82cb89da310be3cb8f9982"}]}, 0x3, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x419}}]}) 13:51:35 executing program 3: unshare(0x40040000) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, @win={{0x0, 0x1, 0x6}, 0x0, 0x3, &(0x7f00000003c0)={{0x1f, 0x7ef, 0x7fff}}, 0x2, 0x0, 0x7e}}}) unshare(0x20010080) clock_getres(0x0, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000480)={0x0, @win={{0x7, 0x0, 0x8, 0x10000}, 0x9, 0x5, &(0x7f0000000080)={{0x0, 0x7, 0x5, 0x5}, &(0x7f0000000040)={{0x5d80bbe9, 0x5, 0x0, 0xff}, &(0x7f0000000000)={{0x0, 0x0, 0x4, 0xffff8000}}}}, 0x3, &(0x7f0000000280)="a0f9f5a86ed42412a471bb53fe8b4bc552e394d5dcb5f407f3155c4b9221a78b951fdb6f72efac29657acfc2d35b433372bdf931ec871c53eb03acf8c0699e6ae987f166814604fc33fd5d2c106e2775c80a81b5f6c141424de0ebde08fa4fcb73f6d15aabdf4947ad3053c0952960dd415d4869c56f1acaf5c250afb8a0c33c317de7e5c524a1fef5ce0b78ca11832b766e08c2a15c17eaeb192c6f579689886c573b4699eebf575624c31c94530add2875eb414e90b35a31ae673ff67a4432bdcd", 0x40}}) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) dup2(r1, 0xffffffffffffffff) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = dup(r2) r5 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x0, 0x1000}) dup2(r4, r3) dup2(r3, r5) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x400}, {r0, 0x400}, {0xffffffffffffffff, 0x4000}, {r1, 0x3004}, {r5, 0x1030}], 0x5, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000380)={[0x7ff]}, 0x8) unshare(0x40040000) (async) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, @win={{0x0, 0x1, 0x6}, 0x0, 0x3, &(0x7f00000003c0)={{0x1f, 0x7ef, 0x7fff}}, 0x2, 0x0, 0x7e}}}) (async) unshare(0x20010080) (async) clock_getres(0x0, &(0x7f0000000100)) (async) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000480)={0x0, @win={{0x7, 0x0, 0x8, 0x10000}, 0x9, 0x5, &(0x7f0000000080)={{0x0, 0x7, 0x5, 0x5}, &(0x7f0000000040)={{0x5d80bbe9, 0x5, 0x0, 0xff}, &(0x7f0000000000)={{0x0, 0x0, 0x4, 0xffff8000}}}}, 0x3, &(0x7f0000000280)="a0f9f5a86ed42412a471bb53fe8b4bc552e394d5dcb5f407f3155c4b9221a78b951fdb6f72efac29657acfc2d35b433372bdf931ec871c53eb03acf8c0699e6ae987f166814604fc33fd5d2c106e2775c80a81b5f6c141424de0ebde08fa4fcb73f6d15aabdf4947ad3053c0952960dd415d4869c56f1acaf5c250afb8a0c33c317de7e5c524a1fef5ce0b78ca11832b766e08c2a15c17eaeb192c6f579689886c573b4699eebf575624c31c94530add2875eb414e90b35a31ae673ff67a4432bdcd", 0x40}}) (async) ftruncate(0xffffffffffffffff, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) (async) dup(0xffffffffffffffff) (async) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) (async) dup2(r1, 0xffffffffffffffff) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r3, 0xffff) (async) fcntl$addseals(r3, 0x409, 0x7) (async) dup(r2) (async) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x0, 0x1000}) (async) dup2(r4, r3) (async) dup2(r3, r5) (async) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x400}, {r0, 0x400}, {0xffffffffffffffff, 0x4000}, {r1, 0x3004}, {r5, 0x1030}], 0x5, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000380)={[0x7ff]}, 0x8) (async) 13:51:35 executing program 2: unshare(0x40040000) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, @win={{0x0, 0x1, 0x6}, 0x0, 0x3, &(0x7f00000003c0)={{0x1f, 0x7ef, 0x7fff}}, 0x2, 0x0, 0x7e}}}) unshare(0x20010080) clock_getres(0x0, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000480)={0x0, @win={{0x7, 0x0, 0x8, 0x10000}, 0x9, 0x5, &(0x7f0000000080)={{0x0, 0x7, 0x5, 0x5}, &(0x7f0000000040)={{0x5d80bbe9, 0x5, 0x0, 0xff}, &(0x7f0000000000)={{0x0, 0x0, 0x4, 0xffff8000}}}}, 0x3, &(0x7f0000000280)="a0f9f5a86ed42412a471bb53fe8b4bc552e394d5dcb5f407f3155c4b9221a78b951fdb6f72efac29657acfc2d35b433372bdf931ec871c53eb03acf8c0699e6ae987f166814604fc33fd5d2c106e2775c80a81b5f6c141424de0ebde08fa4fcb73f6d15aabdf4947ad3053c0952960dd415d4869c56f1acaf5c250afb8a0c33c317de7e5c524a1fef5ce0b78ca11832b766e08c2a15c17eaeb192c6f579689886c573b4699eebf575624c31c94530add2875eb414e90b35a31ae673ff67a4432bdcd", 0x40}}) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) dup2(r1, 0xffffffffffffffff) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = dup(r2) r5 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x0, 0x1000}) dup2(r4, r3) dup2(r3, r5) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x400}, {r0, 0x400}, {0xffffffffffffffff, 0x4000}, {r1, 0x3004}, {r5, 0x1030}], 0x5, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000380)={[0x7ff]}, 0x8) 13:51:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:35 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x190, 0x8, 0x140, 0xa0, 0x8, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6}) 13:51:35 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x4, 0x101000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000040)=[{r0, 0x4000}, {r1, 0x80}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x5]}, 0x8) 13:51:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x60, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:35 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000ff00) [ 322.687548][ T8399] WARNING: fbcon: Driver 'vkmsdrmfb' missed to adjust virtual screen size (320x160 vs. 400x8) 13:51:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:36 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000ff00) (rerun: 64) 13:51:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x295, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:36 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000ff00) [ 323.158670][ T6774] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 323.395548][ T6774] usb 1-1: device descriptor read/64, error 18 [ 323.691608][ T6774] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 323.917806][ T6774] usb 1-1: device descriptor read/64, error 18 [ 324.056246][ T6774] usb usb1-port1: attempt power cycle [ 324.531841][ T6774] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 324.729118][ T6774] usb 1-1: device descriptor read/8, error -61 [ 325.007848][ T6774] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 325.228063][ T6774] usb 1-1: device descriptor read/8, error -61 [ 325.349047][ T6774] usb usb1-port1: unable to enumerate USB device 13:51:38 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000005c0)=""/106) (async) syz_usb_connect(0x6, 0x6d7, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0x95, 0xe9, 0xe7, 0x8, 0x19d2, 0x1533, 0xf9f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c5, 0x3, 0x33, 0x40, 0x90, 0x3f, [{{0x9, 0x4, 0xaa, 0x6, 0xf, 0xff, 0xff, 0xff, 0x0, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "8e26c54b"}, {0x5, 0x24, 0x0, 0xf800}, {0xd, 0x24, 0xf, 0x1, 0xffffffe1, 0x401, 0x5, 0x4}, {0x6}, [@mbim={0xc, 0x24, 0x1b, 0x1ff, 0xff, 0xfe, 0xa0, 0x800, 0x6}, @country_functional={0x6, 0x24, 0x7, 0x1f, 0x3ff}]}, @uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x3, 0x2b, 0x0, "bc8615c4e323e417a3"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x2, 0x8, "fee59fe1"}]}], [{{0x9, 0x5, 0x5, 0x14, 0x400, 0xff, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1}, @generic={0x75, 0x22, "2f054ad565362cc280433f8429644059308a8a80e2049b9e613035ea84a9be1af59bc3b5d167203a9a4966034e64f2be2d1e672cede8a6254b82a570b17855702cd6e809aa553346e1d14acd23230ea06fb0d1dc747b463f1eb5466911238030b77243c2347f8dd118b330c92b25f3cfeec3ba"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x1, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1f, 0xc29b}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x3f, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0xfffb}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x60c9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0xe5, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x2966}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x73, 0x7}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x0, 0x2, 0x8, [@generic={0xb9, 0x11, "b53612d136c778f5fea60e90b99ca1ab42ab0868ba6d41395f2097631e43e652384481fc55f72810bf22240614982f2802dd3e47350e0f59647f772a15af12f4e7f6495860a610a6c8cf551fa8b8a910189cc6836987da844dde6d0402c02fd53486d1f3223d5bb74b5c0b73d1e14d9c7b63fd076d63c1a903cf7ef14c0934130291e065ba595b06ab41bbd0876b77dc6d3609a4d667e3eb30be2a0c14747986640d0d07849e129380668a34c0fe06fee2921da2e291dc"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xfff9}]}}, {{0x9, 0x5, 0x3, 0xf, 0x200, 0x9, 0x7, 0xb7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1f}]}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0xf, 0x6, 0x3f}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x3, 0x7f, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf7, 0xc03f}, @generic={0x57, 0x21, "9ddbb73c9b4b0053b8e9d3447b2945bcf50bee8428a546cf261cd88c1759c9d0c8b8ffc0ffc3e9f85d6d261057f78b84835564220f9f1a24c97429004fe7280bb337b542970b60528c15b4834a81f197cf371dc9dd"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x3, 0x8, 0x2}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x81, 0x7, 0x80, [@generic={0x7c, 0x9, "fbd0bcb5ba6f5d7ec56244df04e211b1635d0357a3017f0a74f26f5ae7ca0b1621fbe5938ec537b6b112835b64e83d2438cde3fdedbaa399e05f1f252e61d59f1278e759ad68ad9dab60f6af08301cf9151a2a7d360c794e80f142bd68ce5a2a395ec8439966eb34e6590a7484c3803d742722885d3f3e796b85"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x7, 0x6f, 0x81}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0xec, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1d4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x5}]}}, {{0x9, 0x5, 0xe, 0x8, 0x8, 0x2, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1ff}, @generic={0x6, 0x10, "40b39ffc"}]}}, {{0x9, 0x5, 0x7, 0x1b, 0x3ff, 0x4, 0x5, 0xc0}}]}}, {{0x9, 0x4, 0x3, 0x0, 0x7, 0xe2, 0x7f, 0x3, 0x9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 't'}, {0x5, 0x24, 0x0, 0x269}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0xfff, 0x7}}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, 'Jq'}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0x7f, 0x80}}], [{{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x9, 0x3}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x81, 0x0, 0x28}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x80, 0x3, 0x1, [@generic={0x9f, 0x21, "3986819657f4b0ee0fa4dbe19a0f820d99af991aa0f8315432d4aefd9e16798ddb8d3a478e75de059cc1c80a192bc2a66a697c2ca01a0936d4ce3d66c56a50cc83dffecc61514066a1d0c1ac9b869b4cbfc89d9ddafce52964763cff99e141a4293364a6183ae70bc4ac36de611ddd93a2b830b857f835775b1826e37b7677aaac5ab42a53c48b60fccc47bf6509a4745c6233659ce6184ddba3ac08dd"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x1f, 0x1, 0x3}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x8, 0x1, 0x4, [@generic={0x8b, 0xa, "356b9ef09ad9b29c1e0d2a7f73d2e99c0c37b1f844921a4d3e1c387d62ccea56ff0b4b4354aaf04966ece205bbd2a16d7e2b4e8e006a60e340b403114d26c12793e004d8bdcb46a103f535a6002dcfea304e68006ca93f49da69081de17c99b16c294a5eb3cf9799e0c3d3037cd02ccab5daf9de2f0fdb2efba055a846a513b06ede94f2ad629f761d"}, @uac_iso={0x7, 0x25, 0x1, 0x426b73f13d59d20, 0x91, 0xda32}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xff, 0x10, 0x0, [@generic={0x36, 0x6, "bbaf9b39d7a7c3cb8415e9ce3362b7fe50a30c32e9d418f558e4063b3369882291806e7beadd7d1a0806e007863c9ac3327ba0ee"}, @generic={0xb6, 0x10, "b913f6a7cf0aea26b4e3a3f4da1630ebcfb8123c40a60da5fd7a946d37b615471b626110002b66e26c47ce5b4d02ec2079721af2d053ca6788d6d0e874be3f904ee94b521c2ab50d1e654c01016e8f557870268d728567c9e151968c0290f0590c732e27aa671218e90ec0505e821d4e411c91736a69215d873f1ad4f0e851166aeb66c3138060c566d0dfe9affa84283f23327b78448bc80397a8724d04eddc970d71770fe4eb1de6456bc959bddfa607154004"}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x0, 0x7, 0x1f, 0x6}}]}}, {{0x9, 0x4, 0x77, 0x5, 0x5, 0xdb, 0xf2, 0x32, 0x81, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "e59c5047"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x5, 0x6, 0xff}, {0x6, 0x24, 0x1a, 0x4, 0x14}, [@obex={0x5, 0x24, 0x15, 0x21}, @dmm={0x7, 0x24, 0x14, 0x9ed, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xfceb, 0x8, 0x3, 0x6, 0x2, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x68, 0x1000}, @acm={0x4, 0x24, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x88, 0x81, 0x9}]}], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x3, 0xfc, 0x5f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3f}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0xfa, 0x0, 0xe9}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x20, 0x1, 0x5}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0xb6, 0x1f, 0xff}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x9, 0x0, 0x0, [@generic={0x62, 0x4, "ea33e8ea1c6b8bb25c94fa6d967721be7e3c5829ac0b85d16674358278fbbae1c979bf33f93081269ce878d6a0bb193c09dccf3b33df08200926f5a886518a5299b6766076bcbbfef12300938f6d09a73f30f5ee06418a95773a27120ef60388"}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x5, 0x0, 0xf8, 0x40, 0x1}, 0x4b, &(0x7f00000000c0)={0x5, 0xf, 0x4b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x18, 0x5, 0x9, 0x47b, 0x8b}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x2, 0x7ff}, @generic={0x31, 0x10, 0xb, "c01e5fbbf51ab4143af3956cacb6c9c23b192955e9ed1560fbc25a81bbcf539aa89e4c82cb89da310be3cb8f9982"}]}, 0x3, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x419}}]}) 13:51:39 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000ff00) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) (async) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000ff00) (async) 13:51:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:39 executing program 2: unshare(0x40000200) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xd6d, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00645a50e9c53a8b2449740000000000000017ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) io_submit(0x0, 0x874b, &(0x7f0000000780)=[&(0x7f0000000440)={0x0, 0x20011000, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0x200000c1}]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="bb0938f77f440aa33cf0439f51dcf8fdba3eaa6b3937fea4f6224853e767d315e97e8b59b11b01054cfc8746c7df00e4e6f9ab6e0b426b1c0b4a818959206bfc6bbf6735555fbf7f9828a8af9adb5c777d213f946a09205f8a7b61", 0x5b, 0x40, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x54}}, 0x0) unshare(0x40000000) bind(r4, &(0x7f00000001c0)=@generic={0x26, "5c24836058f4dc6debe2abc7f9d3b08c34a372534e64cee7d57ee4064f21fd87c97c371982ca7b8682a973467bff4ace2a353517853e0b717a81cf7273be114a8e8731e3f4a741e1dbf7c5d2a26d301337c47be7cebbe30ccd989603041fd984bc57bb2e12d9d8e2e1f67f4e14b6cfa9abc342b3b276c4ab7e7cf08e03be"}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x78b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0x0, 0x0, 0x80000000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x401}}, {0x4}}]}]}, 0x7c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0xae) 13:51:39 executing program 1: r0 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) r1 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000380)=""/226, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff03a}, {0x0}], 0x2, 0x0) process_vm_writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/80, 0x50}], 0x1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/91, 0x5b}], 0x2, 0x0) tgkill(r0, r1, 0x8) process_vm_writev(r0, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000380)=""/226, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff03a}, {0x0}], 0x2, 0x0) wait4(r0, &(0x7f0000000040), 0x1, &(0x7f0000000080)) r2 = syz_io_uring_setup(0x1590, &(0x7f00000004c0)={0x0, 0x4679, 0x8, 0x1, 0x26d}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000580)) readv(r2, &(0x7f0000000880)=[{&(0x7f0000000600)=""/110, 0x6e}, {&(0x7f0000000680)=""/211, 0xd3}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/11, 0xb}, {&(0x7f00000007c0)=""/116, 0x74}, {&(0x7f0000000840)=""/32, 0x20}], 0x6) syz_io_uring_submit(r3, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) pselect6(0xfffffd1f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000140)) 13:51:39 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x9, &(0x7f0000001080)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r2}}, 0xfffffffd) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r1, 0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x12345, {0x0, r2}}, 0xfffff800) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000001080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) splice(0xffffffffffffffff, &(0x7f0000001240)=0x5, 0xffffffffffffffff, &(0x7f0000001280)=0x7ff, 0x2, 0x2) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000012c0)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x10000, 0x0, 0x40, 0x0, 0x1}, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0xd}, 0xfffffffffffffff3) gettid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8000002b) 13:51:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5d6, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="470f07460f01c3da67dbb800000080ba000000000f300f231b66b805010f00d0f326410f30c461260fc7be7100000052003e2665650f01cf0ff22520000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x400, 0x4], 0x0, 0x116fd4}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 326.217685][ T6774] usb 1-1: new high-speed USB device number 38 using dummy_hcd 13:51:39 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) (async) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x9, &(0x7f0000001080)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r2}}, 0xfffffffd) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r1, 0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x12345, {0x0, r2}}, 0xfffff800) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000001080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async) splice(0xffffffffffffffff, &(0x7f0000001240)=0x5, 0xffffffffffffffff, &(0x7f0000001280)=0x7ff, 0x2, 0x2) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) (async) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000012c0)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x10000, 0x0, 0x40, 0x0, 0x1}, 0x0) (async) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0xd}, 0xfffffffffffffff3) gettid() (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (rerun: 32) sendfile(r3, r6, 0x0, 0x8000002b) 13:51:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="470f07460f01c3da67dbb800000080ba000000000f300f231b66b805010f00d0f326410f30c461260fc7be7100000052003e2665650f01cf0ff22520000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x400, 0x4], 0x0, 0x116fd4}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:51:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 326.427843][ T6774] usb 1-1: device descriptor read/64, error 18 [ 326.715792][ T6774] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 326.917843][ T6774] usb 1-1: device descriptor read/64, error 18 [ 327.048332][ T6774] usb usb1-port1: attempt power cycle [ 327.497889][ T6774] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 327.697889][ T6774] usb 1-1: device descriptor read/8, error -61 [ 327.967849][ T6774] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 328.147883][ T6774] usb 1-1: device descriptor read/8, error -61 [ 328.267846][ T6774] usb usb1-port1: unable to enumerate USB device 13:51:41 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) (async, rerun: 32) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) (rerun: 32) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x9, &(0x7f0000001080)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r2}}, 0xfffffffd) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r1, 0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x12345, {0x0, r2}}, 0xfffff800) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000001080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async) splice(0xffffffffffffffff, &(0x7f0000001240)=0x5, 0xffffffffffffffff, &(0x7f0000001280)=0x7ff, 0x2, 0x2) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x2) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f00000012c0)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x10000, 0x0, 0x40, 0x0, 0x1}, 0x0) (async, rerun: 64) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0xd}, 0xfffffffffffffff3) (async) gettid() (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8000002b) 13:51:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="470f07460f01c3da67dbb800000080ba000000000f300f231b66b805010f00d0f326410f30c461260fc7be7100000052003e2665650f01cf0ff22520000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x400, 0x4], 0x0, 0x116fd4}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="470f07460f01c3da67dbb800000080ba000000000f300f231b66b805010f00d0f326410f30c461260fc7be7100000052003e2665650f01cf0ff22520000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x400, 0x4], 0x0, 0x116fd4}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 13:51:41 executing program 1: r0 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) r1 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000380)=""/226, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff03a}, {0x0}], 0x2, 0x0) process_vm_writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/80, 0x50}], 0x1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/91, 0x5b}], 0x2, 0x0) tgkill(r0, r1, 0x8) process_vm_writev(r0, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000380)=""/226, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff03a}, {0x0}], 0x2, 0x0) wait4(r0, &(0x7f0000000040), 0x1, &(0x7f0000000080)) r2 = syz_io_uring_setup(0x1590, &(0x7f00000004c0)={0x0, 0x4679, 0x8, 0x1, 0x26d}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000580)) readv(r2, &(0x7f0000000880)=[{&(0x7f0000000600)=""/110, 0x6e}, {&(0x7f0000000680)=""/211, 0xd3}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/11, 0xb}, {&(0x7f00000007c0)=""/116, 0x74}, {&(0x7f0000000840)=""/32, 0x20}], 0x6) syz_io_uring_submit(r3, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) pselect6(0xfffffd1f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000140)) syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) (async) syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) (async) process_vm_writev(r1, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000380)=""/226, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff03a}, {0x0}], 0x2, 0x0) (async) process_vm_writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/80, 0x50}], 0x1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/91, 0x5b}], 0x2, 0x0) (async) tgkill(r0, r1, 0x8) (async) process_vm_writev(r0, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000380)=""/226, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff03a}, {0x0}], 0x2, 0x0) (async) wait4(r0, &(0x7f0000000040), 0x1, &(0x7f0000000080)) (async) syz_io_uring_setup(0x1590, &(0x7f00000004c0)={0x0, 0x4679, 0x8, 0x1, 0x26d}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) (async) readv(r2, &(0x7f0000000880)=[{&(0x7f0000000600)=""/110, 0x6e}, {&(0x7f0000000680)=""/211, 0xd3}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/11, 0xb}, {&(0x7f00000007c0)=""/116, 0x74}, {&(0x7f0000000840)=""/32, 0x20}], 0x6) (async) syz_io_uring_submit(r3, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) (async) pselect6(0xfffffd1f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000140)) (async) 13:51:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:41 executing program 0: unshare(0x40000200) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xd6d, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00645a50e9c53a8b2449740000000000000017ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) io_submit(0x0, 0x874b, &(0x7f0000000780)=[&(0x7f0000000440)={0x0, 0x20011000, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0x200000c1}]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="bb0938f77f440aa33cf0439f51dcf8fdba3eaa6b3937fea4f6224853e767d315e97e8b59b11b01054cfc8746c7df00e4e6f9ab6e0b426b1c0b4a818959206bfc6bbf6735555fbf7f9828a8af9adb5c777d213f946a09205f8a7b61", 0x5b, 0x40, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x54}}, 0x0) unshare(0x40000000) bind(r4, &(0x7f00000001c0)=@generic={0x26, "5c24836058f4dc6debe2abc7f9d3b08c34a372534e64cee7d57ee4064f21fd87c97c371982ca7b8682a973467bff4ace2a353517853e0b717a81cf7273be114a8e8731e3f4a741e1dbf7c5d2a26d301337c47be7cebbe30ccd989603041fd984bc57bb2e12d9d8e2e1f67f4e14b6cfa9abc342b3b276c4ab7e7cf08e03be"}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x78b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0x0, 0x0, 0x80000000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x401}}, {0x4}}]}]}, 0x7c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0xae) 13:51:41 executing program 2: unshare(0x40000200) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xd6d, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00645a50e9c53a8b2449740000000000000017ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) io_submit(0x0, 0x874b, &(0x7f0000000780)=[&(0x7f0000000440)={0x0, 0x20011000, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0x200000c1}]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="bb0938f77f440aa33cf0439f51dcf8fdba3eaa6b3937fea4f6224853e767d315e97e8b59b11b01054cfc8746c7df00e4e6f9ab6e0b426b1c0b4a818959206bfc6bbf6735555fbf7f9828a8af9adb5c777d213f946a09205f8a7b61", 0x5b, 0x40, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x54}}, 0x0) unshare(0x40000000) bind(r4, &(0x7f00000001c0)=@generic={0x26, "5c24836058f4dc6debe2abc7f9d3b08c34a372534e64cee7d57ee4064f21fd87c97c371982ca7b8682a973467bff4ace2a353517853e0b717a81cf7273be114a8e8731e3f4a741e1dbf7c5d2a26d301337c47be7cebbe30ccd989603041fd984bc57bb2e12d9d8e2e1f67f4e14b6cfa9abc342b3b276c4ab7e7cf08e03be"}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x78b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0x0, 0x0, 0x80000000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x401}}, {0x4}}]}]}, 0x7c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0xae) unshare(0x40000200) (async) unshare(0x40000000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xd6d, 0x4) (async) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00645a50e9c53a8b2449740000000000000017ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) socket(0x10, 0x3, 0x0) (async) io_submit(0x0, 0x874b, &(0x7f0000000780)=[&(0x7f0000000440)={0x0, 0x20011000, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0x200000c1}]) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="bb0938f77f440aa33cf0439f51dcf8fdba3eaa6b3937fea4f6224853e767d315e97e8b59b11b01054cfc8746c7df00e4e6f9ab6e0b426b1c0b4a818959206bfc6bbf6735555fbf7f9828a8af9adb5c777d213f946a09205f8a7b61", 0x5b, 0x40, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x54}}, 0x0) (async) unshare(0x40000000) (async) bind(r4, &(0x7f00000001c0)=@generic={0x26, "5c24836058f4dc6debe2abc7f9d3b08c34a372534e64cee7d57ee4064f21fd87c97c371982ca7b8682a973467bff4ace2a353517853e0b717a81cf7273be114a8e8731e3f4a741e1dbf7c5d2a26d301337c47be7cebbe30ccd989603041fd984bc57bb2e12d9d8e2e1f67f4e14b6cfa9abc342b3b276c4ab7e7cf08e03be"}, 0x80) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x78b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0x0, 0x0, 0x80000000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x401}}, {0x4}}]}]}, 0x7c}}, 0x0) (async) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0xae) (async) 13:51:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:41 executing program 3: unshare(0x40000200) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xd6d, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00645a50e9c53a8b2449740000000000000017ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) io_submit(0x0, 0x874b, &(0x7f0000000780)=[&(0x7f0000000440)={0x0, 0x20011000, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0x200000c1}]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="bb0938f77f440aa33cf0439f51dcf8fdba3eaa6b3937fea4f6224853e767d315e97e8b59b11b01054cfc8746c7df00e4e6f9ab6e0b426b1c0b4a818959206bfc6bbf6735555fbf7f9828a8af9adb5c777d213f946a09205f8a7b61", 0x5b, 0x40, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x54}}, 0x0) unshare(0x40000000) bind(r4, &(0x7f00000001c0)=@generic={0x26, "5c24836058f4dc6debe2abc7f9d3b08c34a372534e64cee7d57ee4064f21fd87c97c371982ca7b8682a973467bff4ace2a353517853e0b717a81cf7273be114a8e8731e3f4a741e1dbf7c5d2a26d301337c47be7cebbe30ccd989603041fd984bc57bb2e12d9d8e2e1f67f4e14b6cfa9abc342b3b276c4ab7e7cf08e03be"}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x78b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0x0, 0x0, 0x80000000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x401}}, {0x4}}]}]}, 0x7c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0xae) 13:51:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xa00, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xb8d, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:42 executing program 1: r0 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) r1 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000380)=""/226, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff03a}, {0x0}], 0x2, 0x0) (async, rerun: 32) process_vm_writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/80, 0x50}], 0x1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/91, 0x5b}], 0x2, 0x0) (async, rerun: 32) tgkill(r0, r1, 0x8) (async) process_vm_writev(r0, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000380)=""/226, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff03a}, {0x0}], 0x2, 0x0) (async) wait4(r0, &(0x7f0000000040), 0x1, &(0x7f0000000080)) r2 = syz_io_uring_setup(0x1590, &(0x7f00000004c0)={0x0, 0x4679, 0x8, 0x1, 0x26d}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000580)) readv(r2, &(0x7f0000000880)=[{&(0x7f0000000600)=""/110, 0x6e}, {&(0x7f0000000680)=""/211, 0xd3}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/11, 0xb}, {&(0x7f00000007c0)=""/116, 0x74}, {&(0x7f0000000840)=""/32, 0x20}], 0x6) (async) syz_io_uring_submit(r3, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) (async) pselect6(0xfffffd1f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) (async, rerun: 32) r4 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000140)) 13:51:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000180000000001c80600000000060015000300000008008c00ac1414bbd8418e8ab74d61095e45f5cd7af6d566d31d4081d10d9fb7ebbd7cd04175854fe27c743ef2b201997baa139b4c7f7e107e41ea1aac4c3e159c722fcf814eeaafa6bac36ce971d9270e15df13697b84be7099f8215ce34ecc2a66380000000000f9ffffffffffffff0000000000000000000000000000000000000be1df"], 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfb02eca103c5a671}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002000000427bd7000fedbdf2502348000200000033a0000000800040007000000"], 0x24}}, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3, 0x7c422}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_newaddr={0x50, 0x14, 0x200, 0x70bd29, 0x25dfdbfb, {0x2, 0x80, 0x20, 0xfd, r4}, [@IFA_LABEL={0x14, 0x3, 'batadv_slave_0\x00'}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_LABEL={0x14, 0x3, 'pimreg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x44881}, 0x48800) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getrule={0x14, 0x22, 0x20, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20000880) 13:51:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc00, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:42 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x1000000000000, 0x10000}) r4 = dup2(r2, r1) dup2(r1, r3) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r6 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r6, 0xffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r0, &(0x7f0000000140)={r2, r1, 0x7f}) fcntl$addseals(r6, 0x409, 0x7) r7 = dup(r5) r8 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000080)={r4, 0x0, 0x0, 0x1000}) r9 = dup2(r7, r6) dup2(r6, r8) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x8}, 0x10) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x4142}, {r9, 0x100}, {r6, 0x680}, {0xffffffffffffffff, 0x4c}, {r10, 0x3044}], 0x6, &(0x7f0000000180)={0x77359400}, &(0x7f00000000c0)={[0x6b84]}, 0x8) 13:51:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000180000000001c80600000000060015000300000008008c00ac1414bbd8418e8ab74d61095e45f5cd7af6d566d31d4081d10d9fb7ebbd7cd04175854fe27c743ef2b201997baa139b4c7f7e107e41ea1aac4c3e159c722fcf814eeaafa6bac36ce971d9270e15df13697b84be7099f8215ce34ecc2a66380000000000f9ffffffffffffff0000000000000000000000000000000000000be1df"], 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfb02eca103c5a671}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002000000427bd7000fedbdf2502348000200000033a0000000800040007000000"], 0x24}}, 0x4) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3, 0x7c422}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_newaddr={0x50, 0x14, 0x200, 0x70bd29, 0x25dfdbfb, {0x2, 0x80, 0x20, 0xfd, r4}, [@IFA_LABEL={0x14, 0x3, 'batadv_slave_0\x00'}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_LABEL={0x14, 0x3, 'pimreg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x44881}, 0x48800) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getrule={0x14, 0x22, 0x20, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20000880) 13:51:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe00, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 329.603011][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 13:51:42 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) unshare(0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x2a000400) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000280)=[{0x28, 0x0, 0x0, 0xfefff034}, {0x80000006}]}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x24000810, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = socket(0x10, 0x80000000000802, 0x0) write(r3, &(0x7f0000000500)="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", 0xfc) sendto$packet(r3, 0x0, 0x0, 0x4000041, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 13:51:45 executing program 2: unshare(0x40000200) (async) unshare(0x40000000) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xd6d, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) (async) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00645a50e9c53a8b2449740000000000000017ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) r3 = socket(0x10, 0x3, 0x0) (async) io_submit(0x0, 0x874b, &(0x7f0000000780)=[&(0x7f0000000440)={0x0, 0x20011000, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0x200000c1}]) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="bb0938f77f440aa33cf0439f51dcf8fdba3eaa6b3937fea4f6224853e767d315e97e8b59b11b01054cfc8746c7df00e4e6f9ab6e0b426b1c0b4a818959206bfc6bbf6735555fbf7f9828a8af9adb5c777d213f946a09205f8a7b61", 0x5b, 0x40, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x54}}, 0x0) (async) unshare(0x40000000) bind(r4, &(0x7f00000001c0)=@generic={0x26, "5c24836058f4dc6debe2abc7f9d3b08c34a372534e64cee7d57ee4064f21fd87c97c371982ca7b8682a973467bff4ace2a353517853e0b717a81cf7273be114a8e8731e3f4a741e1dbf7c5d2a26d301337c47be7cebbe30ccd989603041fd984bc57bb2e12d9d8e2e1f67f4e14b6cfa9abc342b3b276c4ab7e7cf08e03be"}, 0x80) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x78b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0x0, 0x0, 0x80000000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x401}}, {0x4}}]}]}, 0x7c}}, 0x0) (async) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0xae) 13:51:45 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x0) (async) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) (async) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) (async) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x1000000000000, 0x10000}) r4 = dup2(r2, r1) (async) dup2(r1, r3) (async) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async, rerun: 32) r6 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (rerun: 32) ftruncate(r6, 0xffff) (async, rerun: 64) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r0, &(0x7f0000000140)={r2, r1, 0x7f}) (async, rerun: 64) fcntl$addseals(r6, 0x409, 0x7) (async) r7 = dup(r5) r8 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000080)={r4, 0x0, 0x0, 0x1000}) r9 = dup2(r7, r6) (async) dup2(r6, r8) (async) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x8}, 0x10) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x4142}, {r9, 0x100}, {r6, 0x680}, {0xffffffffffffffff, 0x4c}, {r10, 0x3044}], 0x6, &(0x7f0000000180)={0x77359400}, &(0x7f00000000c0)={[0x6b84]}, 0x8) 13:51:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000180000000001c80600000000060015000300000008008c00ac1414bbd8418e8ab74d61095e45f5cd7af6d566d31d4081d10d9fb7ebbd7cd04175854fe27c743ef2b201997baa139b4c7f7e107e41ea1aac4c3e159c722fcf814eeaafa6bac36ce971d9270e15df13697b84be7099f8215ce34ecc2a66380000000000f9ffffffffffffff0000000000000000000000000000000000000be1df"], 0x2c}}, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfb02eca103c5a671}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002000000427bd7000fedbdf2502348000200000033a0000000800040007000000"], 0x24}}, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3, 0x7c422}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_newaddr={0x50, 0x14, 0x200, 0x70bd29, 0x25dfdbfb, {0x2, 0x80, 0x20, 0xfd, r4}, [@IFA_LABEL={0x14, 0x3, 'batadv_slave_0\x00'}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_LABEL={0x14, 0x3, 'pimreg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x44881}, 0x48800) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getrule={0x14, 0x22, 0x20, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20000880) (rerun: 64) 13:51:45 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x640100ff}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="186b000000c72f781ea65700ddd558c2da6eab00000000008da79a02000021660000030000000000000000000000407c0000010000001800000002000000000000001f0000001f217231a7dd5baa5bfe6cd9dbe384"], 0x0, 0x2, 0xb, &(0x7f0000001600)=""/11, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x3af, 0x9}, 0x10, 0xffffffffffffffff}, 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r5, 0x0, &(0x7f00000000c0)='./file0\x00', 0x18, 0x4200, 0x23456, {0x0, r6}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x7, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x5002}, 0x1, {0x0, r6}}, 0x5) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 13:51:45 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) (async) unshare(0x80) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') (rerun: 64) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) (async) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x2a000400) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000280)=[{0x28, 0x0, 0x0, 0xfefff034}, {0x80000006}]}, 0x10) (async, rerun: 32) sendto$inet6(r0, 0x0, 0x0, 0x24000810, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) r3 = socket(0x10, 0x80000000000802, 0x0) write(r3, &(0x7f0000000500)="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", 0xfc) (async) sendto$packet(r3, 0x0, 0x0, 0x4000041, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 13:51:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5865, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:45 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) (async, rerun: 32) fcntl$addseals(r1, 0x409, 0x7) (async, rerun: 32) r2 = dup(r0) (async, rerun: 32) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x1000000000000, 0x10000}) (rerun: 32) r4 = dup2(r2, r1) (async, rerun: 64) dup2(r1, r3) (async, rerun: 64) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r6 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r6, 0xffff) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r0, &(0x7f0000000140)={r2, r1, 0x7f}) fcntl$addseals(r6, 0x409, 0x7) (async) r7 = dup(r5) r8 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000080)={r4, 0x0, 0x0, 0x1000}) r9 = dup2(r7, r6) (async, rerun: 32) dup2(r6, r8) (async, rerun: 32) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x8}, 0x10) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x4142}, {r9, 0x100}, {r6, 0x680}, {0xffffffffffffffff, 0x4c}, {r10, 0x3044}], 0x6, &(0x7f0000000180)={0x77359400}, &(0x7f00000000c0)={[0x6b84]}, 0x8) 13:51:45 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) unshare(0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x2a000400) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000280)=[{0x28, 0x0, 0x0, 0xfefff034}, {0x80000006}]}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x24000810, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = socket(0x10, 0x80000000000802, 0x0) write(r3, &(0x7f0000000500)="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", 0xfc) sendto$packet(r3, 0x0, 0x0, 0x4000041, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 13:51:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:46 executing program 1: pselect6(0x2f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x9, 0x1, 0x0, 0x6, 0x8, 0x3, 0x9}, &(0x7f0000000040)={0x0, 0x8000000000000001, 0x3, 0x0, 0x1, 0x5, 0xfffffffffffffffa}, &(0x7f0000000080)={0x6, 0x1, 0x4000000, 0x400, 0x63e, 0x7fffffffffffffff, 0x100000001, 0x3f}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 13:51:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6558, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:50 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) unshare(0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x2a000400) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000280)=[{0x28, 0x0, 0x0, 0xfefff034}, {0x80000006}]}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x24000810, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = socket(0x10, 0x80000000000802, 0x0) write(r3, &(0x7f0000000500)="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", 0xfc) sendto$packet(r3, 0x0, 0x0, 0x4000041, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 13:51:50 executing program 1: pselect6(0x2f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f0000000000)={0x8, 0x9, 0x1, 0x0, 0x6, 0x8, 0x3, 0x9}, &(0x7f0000000040)={0x0, 0x8000000000000001, 0x3, 0x0, 0x1, 0x5, 0xfffffffffffffffa}, &(0x7f0000000080)={0x6, 0x1, 0x4000000, 0x400, 0x63e, 0x7fffffffffffffff, 0x100000001, 0x3f}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) (rerun: 64) 13:51:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8100, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:50 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x640100ff}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="186b000000c72f781ea65700ddd558c2da6eab00000000008da79a02000021660000030000000000000000000000407c0000010000001800000002000000000000001f0000001f217231a7dd5baa5bfe6cd9dbe384"], 0x0, 0x2, 0xb, &(0x7f0000001600)=""/11, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x3af, 0x9}, 0x10, 0xffffffffffffffff}, 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r5, 0x0, &(0x7f00000000c0)='./file0\x00', 0x18, 0x4200, 0x23456, {0x0, r6}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x7, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x5002}, 0x1, {0x0, r6}}, 0x5) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async) socket$inet(0x2, 0x5, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x640100ff}}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r4) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="186b000000c72f781ea65700ddd558c2da6eab00000000008da79a02000021660000030000000000000000000000407c0000010000001800000002000000000000001f0000001f217231a7dd5baa5bfe6cd9dbe384"], 0x0, 0x2, 0xb, &(0x7f0000001600)=""/11, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x3af, 0x9}, 0x10, 0xffffffffffffffff}, 0x80) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r5, 0x0, &(0x7f00000000c0)='./file0\x00', 0x18, 0x4200, 0x23456, {0x0, r6}}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x7, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x5002}, 0x1, {0x0, r6}}, 0x5) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r7) (async) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) (async) 13:51:50 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x640100ff}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="186b000000c72f781ea65700ddd558c2da6eab00000000008da79a02000021660000030000000000000000000000407c0000010000001800000002000000000000001f0000001f217231a7dd5baa5bfe6cd9dbe384"], 0x0, 0x2, 0xb, &(0x7f0000001600)=""/11, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x3af, 0x9}, 0x10, 0xffffffffffffffff}, 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r5, 0x0, &(0x7f00000000c0)='./file0\x00', 0x18, 0x4200, 0x23456, {0x0, r6}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x7, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x5002}, 0x1, {0x0, r6}}, 0x5) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 13:51:50 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) unshare(0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x2a000400) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000280)=[{0x28, 0x0, 0x0, 0xfefff034}, {0x80000006}]}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x24000810, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = socket(0x10, 0x80000000000802, 0x0) write(r3, &(0x7f0000000500)="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", 0xfc) sendto$packet(r3, 0x0, 0x0, 0x4000041, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) unshare(0x6c060000) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x10, 0xffffffffffffffff, 0x0) (async) unshare(0x0) (async) unshare(0x80) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') (async) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) (async) socket$packet(0x11, 0x3, 0x300) (async) unshare(0x2a000400) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000280)=[{0x28, 0x0, 0x0, 0xfefff034}, {0x80000006}]}, 0x10) (async) sendto$inet6(r0, 0x0, 0x0, 0x24000810, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) socket(0x10, 0x80000000000802, 0x0) (async) write(r3, &(0x7f0000000500)="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", 0xfc) (async) sendto$packet(r3, 0x0, 0x0, 0x4000041, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) (async) 13:51:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8d0b, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:50 executing program 1: pselect6(0x2f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x8, 0x9, 0x1, 0x0, 0x6, 0x8, 0x3, 0x9}, &(0x7f0000000040)={0x0, 0x8000000000000001, 0x3, 0x0, 0x1, 0x5, 0xfffffffffffffffa}, &(0x7f0000000080)={0x6, 0x1, 0x4000000, 0x400, 0x63e, 0x7fffffffffffffff, 0x100000001, 0x3f}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 13:51:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9502, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:50 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="8f8ef6056bac4233c04c6ee3fd7a1890caa0e031c2feea5cbe0e5080ff033e69e0bbd2871a62972e90b406aaee5f72e5e251dc20dcd9edc68ca385d59c03c426f837d6", 0x43}, {&(0x7f00000000c0)="788a47919d9a7a19611bbe67682311da2cfdb3cebb24fbacb9da465b4bce460e89277cc875634fc18d1e9e9ba87217cfca12e09228988676398d126888b4a57dbaaa82560099af94b5084aafafc35b64973f10a25221d650b6000a179d760f8046", 0x61}, {&(0x7f0000000140)="ad2e1071460492f8eade26cc1fc55d0c5b1a9ec0d9f339bc040eafb276eeff766e083ca1ea0a648cde291060220aea15a3f3e7b2f36ab5af06414ff0d9ccd3aa70ae2470e38934a3b9f06c489e09abaf061a45a426602cea551053922c774092baf5f0e7bda8d8c3cd1de6cdafd4de41936508b2f43c5a474b4bfaed9ae338ca5e2e41f63ad3d44971b5ccfd43e8b6aaf1b0bf6c30bfe81d5e08e45a2a2edc2b1ce78af59ea7a90ffd13d8935819c0b70694c6f56980", 0xb6}, {&(0x7f0000000200)="b6d4fcdda853bf7a32a64261cd36b1eee2b154ff6bbfc40a9d8d4fe062bf3eb703e1d39cfa34c540053811e57399c75b1605f40828db6b4468c1785059ec7744659bd83aec96bd18e125e4906ddeb0926089a7a485fadfb57fb0b33b96ebdb446bd014fdce8822ed3ebc9fd6e57665b3871a02bd13975104bb9718bffaa18d75193437da23e2614a649f42501ba4f537fa7a23b081d6b83ddb5f2c48c4b0bf1e0d150b6fd1ef867cde08d9494a17832d9781040b", 0xb4}, {&(0x7f00000002c0)="c52ed350c8eb93c5348fdb653a99a7ee94edabc8a276", 0x16}, {&(0x7f0000000300)="63365c321dd2f8", 0x7}], 0x6, 0x9, 0x10001) 13:51:50 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="8f8ef6056bac4233c04c6ee3fd7a1890caa0e031c2feea5cbe0e5080ff033e69e0bbd2871a62972e90b406aaee5f72e5e251dc20dcd9edc68ca385d59c03c426f837d6", 0x43}, {&(0x7f00000000c0)="788a47919d9a7a19611bbe67682311da2cfdb3cebb24fbacb9da465b4bce460e89277cc875634fc18d1e9e9ba87217cfca12e09228988676398d126888b4a57dbaaa82560099af94b5084aafafc35b64973f10a25221d650b6000a179d760f8046", 0x61}, {&(0x7f0000000140)="ad2e1071460492f8eade26cc1fc55d0c5b1a9ec0d9f339bc040eafb276eeff766e083ca1ea0a648cde291060220aea15a3f3e7b2f36ab5af06414ff0d9ccd3aa70ae2470e38934a3b9f06c489e09abaf061a45a426602cea551053922c774092baf5f0e7bda8d8c3cd1de6cdafd4de41936508b2f43c5a474b4bfaed9ae338ca5e2e41f63ad3d44971b5ccfd43e8b6aaf1b0bf6c30bfe81d5e08e45a2a2edc2b1ce78af59ea7a90ffd13d8935819c0b70694c6f56980", 0xb6}, {&(0x7f0000000200)="b6d4fcdda853bf7a32a64261cd36b1eee2b154ff6bbfc40a9d8d4fe062bf3eb703e1d39cfa34c540053811e57399c75b1605f40828db6b4468c1785059ec7744659bd83aec96bd18e125e4906ddeb0926089a7a485fadfb57fb0b33b96ebdb446bd014fdce8822ed3ebc9fd6e57665b3871a02bd13975104bb9718bffaa18d75193437da23e2614a649f42501ba4f537fa7a23b081d6b83ddb5f2c48c4b0bf1e0d150b6fd1ef867cde08d9494a17832d9781040b", 0xb4}, {&(0x7f00000002c0)="c52ed350c8eb93c5348fdb653a99a7ee94edabc8a276", 0x16}, {&(0x7f0000000300)="63365c321dd2f8", 0x7}], 0x6, 0x9, 0x10001) 13:51:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd605, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:51 executing program 3: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x640100ff}}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="186b000000c72f781ea65700ddd558c2da6eab00000000008da79a02000021660000030000000000000000000000407c0000010000001800000002000000000000001f0000001f217231a7dd5baa5bfe6cd9dbe384"], 0x0, 0x2, 0xb, &(0x7f0000001600)=""/11, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x3af, 0x9}, 0x10, 0xffffffffffffffff}, 0x80) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r5, 0x0, &(0x7f00000000c0)='./file0\x00', 0x18, 0x4200, 0x23456, {0x0, r6}}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x7, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x5002}, 0x1, {0x0, r6}}, 0x5) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 13:51:51 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="8f8ef6056bac4233c04c6ee3fd7a1890caa0e031c2feea5cbe0e5080ff033e69e0bbd2871a62972e90b406aaee5f72e5e251dc20dcd9edc68ca385d59c03c426f837d6", 0x43}, {&(0x7f00000000c0)="788a47919d9a7a19611bbe67682311da2cfdb3cebb24fbacb9da465b4bce460e89277cc875634fc18d1e9e9ba87217cfca12e09228988676398d126888b4a57dbaaa82560099af94b5084aafafc35b64973f10a25221d650b6000a179d760f8046", 0x61}, {&(0x7f0000000140)="ad2e1071460492f8eade26cc1fc55d0c5b1a9ec0d9f339bc040eafb276eeff766e083ca1ea0a648cde291060220aea15a3f3e7b2f36ab5af06414ff0d9ccd3aa70ae2470e38934a3b9f06c489e09abaf061a45a426602cea551053922c774092baf5f0e7bda8d8c3cd1de6cdafd4de41936508b2f43c5a474b4bfaed9ae338ca5e2e41f63ad3d44971b5ccfd43e8b6aaf1b0bf6c30bfe81d5e08e45a2a2edc2b1ce78af59ea7a90ffd13d8935819c0b70694c6f56980", 0xb6}, {&(0x7f0000000200)="b6d4fcdda853bf7a32a64261cd36b1eee2b154ff6bbfc40a9d8d4fe062bf3eb703e1d39cfa34c540053811e57399c75b1605f40828db6b4468c1785059ec7744659bd83aec96bd18e125e4906ddeb0926089a7a485fadfb57fb0b33b96ebdb446bd014fdce8822ed3ebc9fd6e57665b3871a02bd13975104bb9718bffaa18d75193437da23e2614a649f42501ba4f537fa7a23b081d6b83ddb5f2c48c4b0bf1e0d150b6fd1ef867cde08d9494a17832d9781040b", 0xb4}, {&(0x7f00000002c0)="c52ed350c8eb93c5348fdb653a99a7ee94edabc8a276", 0x16}, {&(0x7f0000000300)="63365c321dd2f8", 0x7}], 0x6, 0x9, 0x10001) 13:51:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:51 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) getrlimit(0x2, &(0x7f00000000c0)) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x3}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xbb8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000480)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040002000000000008001b0000009b9a294e20620b160346c7cfdd9699819824533daf4401042fc03f0f75c6566a4a523b9339ae803a86e446c1137621afc1ed71fae9ccf249db2f83fd5fa4625b0bd2d6b4539ca1b129f3e191c08c395dd6cb143eb06a0b93b83c0df8807673cdccc55ef4953384f736a814fe78f7f7607936c5d7b4eccef09b3e14bbd1815ef8b67d76a5aefa8f91149e6002000000e061876a231f52ad880000000000000488e7e4f1a1d69a00000000000000000000000000001bf90ea16385a53d00"/214], 0x28}}, 0x0) 13:51:51 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) 13:51:52 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) getrlimit(0x2, &(0x7f00000000c0)) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x3}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xbb8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000480)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040002000000000008001b0000009b9a294e20620b160346c7cfdd9699819824533daf4401042fc03f0f75c6566a4a523b9339ae803a86e446c1137621afc1ed71fae9ccf249db2f83fd5fa4625b0bd2d6b4539ca1b129f3e191c08c395dd6cb143eb06a0b93b83c0df8807673cdccc55ef4953384f736a814fe78f7f7607936c5d7b4eccef09b3e14bbd1815ef8b67d76a5aefa8f91149e6002000000e061876a231f52ad880000000000000488e7e4f1a1d69a00000000000000000000000000001bf90ea16385a53d00"/214], 0x28}}, 0x0) 13:51:52 executing program 3: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:51:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfeff, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:52 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x4) r5 = dup(r3) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000080)={r4, 0x0, 0x0, 0x1000}) r6 = dup2(r5, r4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f00000003c0)={0x0, 0x6}) sendfile(r6, r5, &(0x7f0000000100)=0xffff, 0x8000000000000001) dup2(r2, r1) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000000)=""/65, &(0x7f0000000080)=0x41) socket$nl_rdma(0x10, 0x3, 0x14) r7 = creat(&(0x7f0000000400)='./file0/file0\x00', 0x102) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1412, 0x2, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x8080) 13:51:52 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r1, 0xffff) (async) fcntl$addseals(r1, 0x409, 0x7) (async) dup(r0) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) (async) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) (async) dup3(0xffffffffffffffff, r3, 0x80000) (async) dup2(r2, r1) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) (async) ftruncate(r5, 0xffff) (async) fcntl$addseals(r5, 0x409, 0x7) (async) dup(r4) (async) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) (async) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) 13:51:52 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) (async) r5 = socket$inet6(0xa, 0x3, 0xff) getrlimit(0x2, &(0x7f00000000c0)) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x3}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xbb8) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000480)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040002000000000008001b0000009b9a294e20620b160346c7cfdd9699819824533daf4401042fc03f0f75c6566a4a523b9339ae803a86e446c1137621afc1ed71fae9ccf249db2f83fd5fa4625b0bd2d6b4539ca1b129f3e191c08c395dd6cb143eb06a0b93b83c0df8807673cdccc55ef4953384f736a814fe78f7f7607936c5d7b4eccef09b3e14bbd1815ef8b67d76a5aefa8f91149e6002000000e061876a231f52ad880000000000000488e7e4f1a1d69a00000000000000000000000000001bf90ea16385a53d00"/214], 0x28}}, 0x0) 13:51:52 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) (async) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) (async) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x4) (async) r5 = dup(r3) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000080)={r4, 0x0, 0x0, 0x1000}) (async) r6 = dup2(r5, r4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f00000003c0)={0x0, 0x6}) (async) sendfile(r6, r5, &(0x7f0000000100)=0xffff, 0x8000000000000001) dup2(r2, r1) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000000)=""/65, &(0x7f0000000080)=0x41) (async) socket$nl_rdma(0x10, 0x3, 0x14) r7 = creat(&(0x7f0000000400)='./file0/file0\x00', 0x102) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1412, 0x2, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x8080) 13:51:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xff0f, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:52 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) (async) fcntl$addseals(r1, 0x409, 0x7) (async) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) (async) dup3(0xffffffffffffffff, r3, 0x80000) (async) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) (async) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) (async) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) 13:51:52 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) getrlimit(0x2, &(0x7f00000000c0)) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x3}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xbb8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000480)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040002000000000008001b0000009b9a294e20620b160346c7cfdd9699819824533daf4401042fc03f0f75c6566a4a523b9339ae803a86e446c1137621afc1ed71fae9ccf249db2f83fd5fa4625b0bd2d6b4539ca1b129f3e191c08c395dd6cb143eb06a0b93b83c0df8807673cdccc55ef4953384f736a814fe78f7f7607936c5d7b4eccef09b3e14bbd1815ef8b67d76a5aefa8f91149e6002000000e061876a231f52ad880000000000000488e7e4f1a1d69a00000000000000000000000000001bf90ea16385a53d00"/214], 0x28}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x9}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) (async) socket$inet6(0xa, 0x3, 0xff) (async) getrlimit(0x2, &(0x7f00000000c0)) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x3}, 0x1c) (async) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xbb8) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000480)) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040002000000000008001b0000009b9a294e20620b160346c7cfdd9699819824533daf4401042fc03f0f75c6566a4a523b9339ae803a86e446c1137621afc1ed71fae9ccf249db2f83fd5fa4625b0bd2d6b4539ca1b129f3e191c08c395dd6cb143eb06a0b93b83c0df8807673cdccc55ef4953384f736a814fe78f7f7607936c5d7b4eccef09b3e14bbd1815ef8b67d76a5aefa8f91149e6002000000e061876a231f52ad880000000000000488e7e4f1a1d69a00000000000000000000000000001bf90ea16385a53d00"/214], 0x28}}, 0x0) (async) [ 339.580728][ T8683] xt_recent: Unsupported userspace flags (000000fc) 13:51:52 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x4) r5 = dup(r3) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000080)={r4, 0x0, 0x0, 0x1000}) r6 = dup2(r5, r4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f00000003c0)={0x0, 0x6}) sendfile(r6, r5, &(0x7f0000000100)=0xffff, 0x8000000000000001) dup2(r2, r1) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000000)=""/65, &(0x7f0000000080)=0x41) socket$nl_rdma(0x10, 0x3, 0x14) r7 = creat(&(0x7f0000000400)='./file0/file0\x00', 0x102) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1412, 0x2, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x8080) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r1, 0xffff) (async) fcntl$addseals(r1, 0x409, 0x7) (async) dup(r0) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r4, 0xffff) (async) fcntl$addseals(r4, 0x409, 0x4) (async) dup(r3) (async) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000080)={r4, 0x0, 0x0, 0x1000}) (async) dup2(r5, r4) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f00000003c0)={0x0, 0x6}) (async) sendfile(r6, r5, &(0x7f0000000100)=0xffff, 0x8000000000000001) (async) dup2(r2, r1) (async) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000000)=""/65, &(0x7f0000000080)=0x41) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) creat(&(0x7f0000000400)='./file0/file0\x00', 0x102) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1412, 0x2, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x8080) (async) 13:51:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffe, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 339.949700][ T6774] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 339.966741][ T8723] udevd[8723]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 340.207665][ T6774] usb 4-1: Using ep0 maxpacket: 8 [ 340.327767][ T6774] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.338669][ T6774] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 340.348451][ T6774] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 340.360115][ T6774] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 13:51:53 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) [ 340.371783][ T6774] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 340.390719][ T6774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.438007][ T8683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 340.458936][ T6774] hub 4-1:1.0: bad descriptor, ignoring hub [ 340.472836][ T6774] hub: probe of 4-1:1.0 failed with error -5 [ 340.487340][ T6774] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 340.493937][ T6774] cdc_wdm 4-1:1.0: Unknown control protocol [ 341.079045][ T8673] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 341.327923][ T8673] usb 4-1: Using ep0 maxpacket: 8 [ 341.479111][ T8683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 13:51:59 executing program 3: unshare(0x6c060000) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) (async, rerun: 64) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async, rerun: 64) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) (async) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) (async) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) (async) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:51:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x34000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:59 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={r0, r1+10000000}, 0x0) 13:51:59 executing program 2: unshare(0x6c060000) pipe(0x0) timer_create(0xe, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="24000001180003041dfffd946f6105000a08000a1f05fe060c10", 0x1a}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x1, 'vlan1\x00', {}, 0x1ff}) pipe2(&(0x7f0000000280), 0x80) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000030000000000000000000000400"/40], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000380)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000400)="587af6dd1dadd47d35b223f47f8de8e91fd3f3f2d10cd71bc91212eb0a6184c67888e48d17a97aa5b76e261a24a5433c836a8352b985affa4a7826c50ef8feecf2c349547342e8391da65c94", 0x4c}, {&(0x7f0000000d00), 0x57}, {&(0x7f00000011c0)="30fa13ab4901afa6d350af3f7f9472d40729a13be9eda07e1792a6518a9e4a3167ae7718ca8e0806316bb3725d7345627251fd3d167992e4397abd9cae860dc412f4435f9ff71ae2dd04d6d236447f25522e5025ea137800d749131686ebfe4957de994bba653de6ae9da1aa65ba3973e0c1e4bd8d34d9c9eaa19599623a87f01f95e2c80fcc820949e6fe0da857d99bdfc4a4cafdb7005ca613ba76fb83521b48885b0b9a5094f3ea9d201fefca84bea9b3d27b077b0eb3d70a2851a67a4549bc6d922a", 0xc4}, {&(0x7f0000000700)="1fd18729f90dd4943fcfe49bf85bb24e7e334d89451383b19eadb036aa6d5946a8423356c7e8c4e7a2f62a210e3f77779cc0b7d9db174bf18ce33b0f26a14a2d661e9de5868a91358dd70f69b224d676b81fa0c47296208e3aa9713e2438ba4f3494a01af13ccd3839d5fb2aef8afa77e2cde8b9fe5d1f00d832f19116", 0x7d}, {&(0x7f00000012c0)="5ae96f41a8ecfcd4bf2807c979c671395e07bad494268b6fd9741c4dd6f511c5a543632091c8ca56d9a7c717e171d9079ae4dce438b260c1a21bbf44e33071e73673072038f4ee1d7b37a43922a2d6f5230b8dbca3d647f54775ad7d3b2526602cce122bb9ace3c218100e1401677c6179a6487230c9c568b3de8b7707020567b1658a98e289ea1b5d6341b62ce7d74e6d75a79da9a34bebfdac1916fc9be832dd4ed988bafd960a108ca8ccfc0c1ece11ce7bcce1e14bb8c48ec2b752d8d5d09470e8bc78abc971afca2a2a68d8183eeec2444c816c07a71ec3f7c9843cfcdd36f870e6da1f93ca8a265c81a189", 0xee}, {&(0x7f0000000580)="3c80d8dec385ca47d5fb3ea6cf5cdc8830e0d83842f6218b2a77c3f409904391572b7c6932fd0ff21b015b27ff86d1673a77160d23a683fb4d0edc53ad49958c443b27ca1f093a69dfaeef812dc8155ef54e0f47b0e0d238269010de5156e4250ec72461fa5cf76872c7c0099b0b6505b6edcee046bf045cd471e0c56ab5c0c95a56497c5284efd6e6240a96526f3314c56327a33acfab0de9cb1533336fd37ee096937337fe207ad0b2d5066dd24db1631a466f4fc8619e57a683827141c325db1c85d495f347c2ee88264a1f8153d60932f1320ad87e24e503a9461e8fba", 0xdf}], 0x6}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000600)='B', 0x20000601}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000bf00000000000000fbffffffc2abc0ff0000000018250000", @ANYRES32, @ANYBLOB="00000000400000008510000002000000851000000800000018480000f8ffefff00000000000000000264090003000000441710ad6c16ec0004000000185100000300002300000000000000009500b5915530effb04210000000000008badf4bbea8f4bed1fee6be8d44781320df8c858e990be4cfdc6e3dbe39a28109856ff2bf51230a52c9a8628f6bcb340f3c0b9add9b85cefa0269abb6b2a6ec9e85074d912759630a78fe09a17f2b99c6f361ac97d0b7e085233100d49f1713c16002a58925bd79872c27dc8dccf32f2346ae12e99e98a693fda65e248d6f8"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x23}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x8000, 0x80000001}, 0x10}, 0x80) socket$packet(0x11, 0x0, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x107640, 0x0) 13:51:59 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r0 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) dup2(r0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000200)={'dummy0\x00', {0x2, 0x0, @local}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000018c0)}, 0x0) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) syz_io_uring_setup(0x7b, &(0x7f0000000100)={0x0, 0x2c4e, 0x1, 0x1, 0x265, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x183, &(0x7f0000000580), &(0x7f0000ffd000/0x1000)=nil, &(0x7f000014d000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x102}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0) dup2(r3, r2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x7f, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) 13:51:59 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) [ 345.971687][ T6927] usb 4-1: USB disconnect, device number 21 13:51:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x40000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:59 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) 13:51:59 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) 13:51:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x80000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:51:59 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) 13:51:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x100000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:01 executing program 3: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) unshare(0x6c060000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) socket(0x11, 0x0, 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(r2, 0x409, 0x7) (async) dup(r1) (async) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) (async) dup2(r3, r2) (async) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_disconnect(r4) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) (async) 13:52:01 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) 13:52:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x400300, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:01 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r0 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) dup2(r0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000200)={'dummy0\x00', {0x2, 0x0, @local}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000018c0)}, 0x0) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) syz_io_uring_setup(0x7b, &(0x7f0000000100)={0x0, 0x2c4e, 0x1, 0x1, 0x265, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x183, &(0x7f0000000580), &(0x7f0000ffd000/0x1000)=nil, &(0x7f000014d000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x102}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0) dup2(r3, r2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x7f, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) (async) dup(0xffffffffffffffff) (async) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) (async) dup2(r0, 0xffffffffffffffff) (async) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000200)={'dummy0\x00', {0x2, 0x0, @local}}) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000018c0)}, 0x0) (async) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(r2, 0x409, 0x7) (async) dup(r1) (async) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) (async) syz_io_uring_setup(0x7b, &(0x7f0000000100)={0x0, 0x2c4e, 0x1, 0x1, 0x265, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x183, &(0x7f0000000580), &(0x7f0000ffd000/0x1000)=nil, &(0x7f000014d000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000040)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x102}, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0) (async) dup2(r3, r2) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x7f, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) (async) 13:52:01 executing program 2: unshare(0x6c060000) (async, rerun: 64) pipe(0x0) (async, rerun: 64) timer_create(0xe, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="24000001180003041dfffd946f6105000a08000a1f05fe060c10", 0x1a}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x1, 'vlan1\x00', {}, 0x1ff}) pipe2(&(0x7f0000000280), 0x80) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000030000000000000000000000400"/40], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000380)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000400)="587af6dd1dadd47d35b223f47f8de8e91fd3f3f2d10cd71bc91212eb0a6184c67888e48d17a97aa5b76e261a24a5433c836a8352b985affa4a7826c50ef8feecf2c349547342e8391da65c94", 0x4c}, {&(0x7f0000000d00), 0x57}, {&(0x7f00000011c0)="30fa13ab4901afa6d350af3f7f9472d40729a13be9eda07e1792a6518a9e4a3167ae7718ca8e0806316bb3725d7345627251fd3d167992e4397abd9cae860dc412f4435f9ff71ae2dd04d6d236447f25522e5025ea137800d749131686ebfe4957de994bba653de6ae9da1aa65ba3973e0c1e4bd8d34d9c9eaa19599623a87f01f95e2c80fcc820949e6fe0da857d99bdfc4a4cafdb7005ca613ba76fb83521b48885b0b9a5094f3ea9d201fefca84bea9b3d27b077b0eb3d70a2851a67a4549bc6d922a", 0xc4}, {&(0x7f0000000700)="1fd18729f90dd4943fcfe49bf85bb24e7e334d89451383b19eadb036aa6d5946a8423356c7e8c4e7a2f62a210e3f77779cc0b7d9db174bf18ce33b0f26a14a2d661e9de5868a91358dd70f69b224d676b81fa0c47296208e3aa9713e2438ba4f3494a01af13ccd3839d5fb2aef8afa77e2cde8b9fe5d1f00d832f19116", 0x7d}, {&(0x7f00000012c0)="5ae96f41a8ecfcd4bf2807c979c671395e07bad494268b6fd9741c4dd6f511c5a543632091c8ca56d9a7c717e171d9079ae4dce438b260c1a21bbf44e33071e73673072038f4ee1d7b37a43922a2d6f5230b8dbca3d647f54775ad7d3b2526602cce122bb9ace3c218100e1401677c6179a6487230c9c568b3de8b7707020567b1658a98e289ea1b5d6341b62ce7d74e6d75a79da9a34bebfdac1916fc9be832dd4ed988bafd960a108ca8ccfc0c1ece11ce7bcce1e14bb8c48ec2b752d8d5d09470e8bc78abc971afca2a2a68d8183eeec2444c816c07a71ec3f7c9843cfcdd36f870e6da1f93ca8a265c81a189", 0xee}, {&(0x7f0000000580)="3c80d8dec385ca47d5fb3ea6cf5cdc8830e0d83842f6218b2a77c3f409904391572b7c6932fd0ff21b015b27ff86d1673a77160d23a683fb4d0edc53ad49958c443b27ca1f093a69dfaeef812dc8155ef54e0f47b0e0d238269010de5156e4250ec72461fa5cf76872c7c0099b0b6505b6edcee046bf045cd471e0c56ab5c0c95a56497c5284efd6e6240a96526f3314c56327a33acfab0de9cb1533336fd37ee096937337fe207ad0b2d5066dd24db1631a466f4fc8619e57a683827141c325db1c85d495f347c2ee88264a1f8153d60932f1320ad87e24e503a9461e8fba", 0xdf}], 0x6}, 0x0) (async, rerun: 64) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000600)='B', 0x20000601}], 0x1, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000bf00000000000000fbffffffc2abc0ff0000000018250000", @ANYRES32, @ANYBLOB="00000000400000008510000002000000851000000800000018480000f8ffefff00000000000000000264090003000000441710ad6c16ec0004000000185100000300002300000000000000009500b5915530effb04210000000000008badf4bbea8f4bed1fee6be8d44781320df8c858e990be4cfdc6e3dbe39a28109856ff2bf51230a52c9a8628f6bcb340f3c0b9add9b85cefa0269abb6b2a6ec9e85074d912759630a78fe09a17f2b99c6f361ac97d0b7e085233100d49f1713c16002a58925bd79872c27dc8dccf32f2346ae12e99e98a693fda65e248d6f8"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x23}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x8000, 0x80000001}, 0x10}, 0x80) socket$packet(0x11, 0x0, 0x300) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) (async, rerun: 64) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x107640, 0x0) 13:52:01 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={r0, r1+10000000}, 0x0) clock_gettime(0x0, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={r0, r1+10000000}, 0x0) (async) 13:52:01 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) 13:52:01 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={r0, r1+10000000}, 0x0) 13:52:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:01 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) [ 348.449385][ T8783] xt_recent: Unsupported userspace flags (000000fc) 13:52:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:01 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) dup(r4) [ 348.767410][ T6926] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 349.007710][ T6926] usb 4-1: Using ep0 maxpacket: 8 [ 349.127819][ T6926] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.138451][ T6926] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 349.147989][ T6926] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 349.159644][ T6926] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 349.171018][ T6926] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 349.180412][ T6926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.218382][ T8783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 349.240390][ T6926] hub 4-1:1.0: bad descriptor, ignoring hub [ 349.247886][ T6926] hub: probe of 4-1:1.0 failed with error -5 [ 349.258308][ T6926] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 349.264521][ T6926] cdc_wdm 4-1:1.0: Unknown control protocol [ 349.887538][ T8779] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 350.186021][ T8779] usb 4-1: Using ep0 maxpacket: 8 [ 350.308400][ T8783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 13:52:03 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) dup(r4) 13:52:03 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) 13:52:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 350.734879][ T8562] usb 4-1: USB disconnect, device number 22 13:52:04 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r4, 0xffff) 13:52:04 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) (async) r0 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) dup2(r0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000200)={'dummy0\x00', {0x2, 0x0, @local}}) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000018c0)}, 0x0) (async) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) (async) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) (async, rerun: 64) syz_io_uring_setup(0x7b, &(0x7f0000000100)={0x0, 0x2c4e, 0x1, 0x1, 0x265, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) (async, rerun: 64) syz_io_uring_setup(0x183, &(0x7f0000000580), &(0x7f0000ffd000/0x1000)=nil, &(0x7f000014d000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x102}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0) dup2(r3, r2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x7f, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) 13:52:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:04 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) statx(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x100, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0xee00, r2}, 0xc) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) statx(r4, &(0x7f0000000200)='./file1\x00', 0x0, 0x100, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0xee00, r5}, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r7 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000380)=""/226, 0xe2}], 0x3, &(0x7f0000000180)=[{&(0x7f0000000480)=""/227, 0xe3}, {0x0}, {&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000140)=""/3, 0x3}], 0x4, 0x0) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) dup(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000000280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "285c4d007ecdfb"}) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000001580)={{r10, 0x7, 0x0, 0x8, 0x6, 0xe263, 0x4, 0x78, 0xfff, 0x9, 0x9, 0x10000, 0x80, 0x7ff, 0x6}}) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x3, 0xffffffffffffffff, r2, 0xee00, r5, 0x126, 0xffff}, 0x0, 0x0, 0x100000001, 0x7ff, 0x4, 0x4, 0x0, 0x8, 0x7f, 0x1, r6, r7}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) 13:52:04 executing program 3: fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r0 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) dup2(r0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000200)={'dummy0\x00', {0x2, 0x0, @local}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000018c0)}, 0x0) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) syz_io_uring_setup(0x7b, &(0x7f0000000100)={0x0, 0x2c4e, 0x1, 0x1, 0x265, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x183, &(0x7f0000000580), &(0x7f0000ffd000/0x1000)=nil, &(0x7f000014d000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x102}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0) dup2(r3, r2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x7f, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) 13:52:04 executing program 2: unshare(0x6c060000) pipe(0x0) timer_create(0xe, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) (async, rerun: 32) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) (async, rerun: 32) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="24000001180003041dfffd946f6105000a08000a1f05fe060c10", 0x1a}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x1, 'vlan1\x00', {}, 0x1ff}) (async) pipe2(&(0x7f0000000280), 0x80) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x400) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000030000000000000000000000400"/40], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000380)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000400)="587af6dd1dadd47d35b223f47f8de8e91fd3f3f2d10cd71bc91212eb0a6184c67888e48d17a97aa5b76e261a24a5433c836a8352b985affa4a7826c50ef8feecf2c349547342e8391da65c94", 0x4c}, {&(0x7f0000000d00), 0x57}, {&(0x7f00000011c0)="30fa13ab4901afa6d350af3f7f9472d40729a13be9eda07e1792a6518a9e4a3167ae7718ca8e0806316bb3725d7345627251fd3d167992e4397abd9cae860dc412f4435f9ff71ae2dd04d6d236447f25522e5025ea137800d749131686ebfe4957de994bba653de6ae9da1aa65ba3973e0c1e4bd8d34d9c9eaa19599623a87f01f95e2c80fcc820949e6fe0da857d99bdfc4a4cafdb7005ca613ba76fb83521b48885b0b9a5094f3ea9d201fefca84bea9b3d27b077b0eb3d70a2851a67a4549bc6d922a", 0xc4}, {&(0x7f0000000700)="1fd18729f90dd4943fcfe49bf85bb24e7e334d89451383b19eadb036aa6d5946a8423356c7e8c4e7a2f62a210e3f77779cc0b7d9db174bf18ce33b0f26a14a2d661e9de5868a91358dd70f69b224d676b81fa0c47296208e3aa9713e2438ba4f3494a01af13ccd3839d5fb2aef8afa77e2cde8b9fe5d1f00d832f19116", 0x7d}, {&(0x7f00000012c0)="5ae96f41a8ecfcd4bf2807c979c671395e07bad494268b6fd9741c4dd6f511c5a543632091c8ca56d9a7c717e171d9079ae4dce438b260c1a21bbf44e33071e73673072038f4ee1d7b37a43922a2d6f5230b8dbca3d647f54775ad7d3b2526602cce122bb9ace3c218100e1401677c6179a6487230c9c568b3de8b7707020567b1658a98e289ea1b5d6341b62ce7d74e6d75a79da9a34bebfdac1916fc9be832dd4ed988bafd960a108ca8ccfc0c1ece11ce7bcce1e14bb8c48ec2b752d8d5d09470e8bc78abc971afca2a2a68d8183eeec2444c816c07a71ec3f7c9843cfcdd36f870e6da1f93ca8a265c81a189", 0xee}, {&(0x7f0000000580)="3c80d8dec385ca47d5fb3ea6cf5cdc8830e0d83842f6218b2a77c3f409904391572b7c6932fd0ff21b015b27ff86d1673a77160d23a683fb4d0edc53ad49958c443b27ca1f093a69dfaeef812dc8155ef54e0f47b0e0d238269010de5156e4250ec72461fa5cf76872c7c0099b0b6505b6edcee046bf045cd471e0c56ab5c0c95a56497c5284efd6e6240a96526f3314c56327a33acfab0de9cb1533336fd37ee096937337fe207ad0b2d5066dd24db1631a466f4fc8619e57a683827141c325db1c85d495f347c2ee88264a1f8153d60932f1320ad87e24e503a9461e8fba", 0xdf}], 0x6}, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000600)='B', 0x20000601}], 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000bf00000000000000fbffffffc2abc0ff0000000018250000", @ANYRES32, @ANYBLOB="00000000400000008510000002000000851000000800000018480000f8ffefff00000000000000000264090003000000441710ad6c16ec0004000000185100000300002300000000000000009500b5915530effb04210000000000008badf4bbea8f4bed1fee6be8d44781320df8c858e990be4cfdc6e3dbe39a28109856ff2bf51230a52c9a8628f6bcb340f3c0b9add9b85cefa0269abb6b2a6ec9e85074d912759630a78fe09a17f2b99c6f361ac97d0b7e085233100d49f1713c16002a58925bd79872c27dc8dccf32f2346ae12e99e98a693fda65e248d6f8"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x23}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x8000, 0x80000001}, 0x10}, 0x80) (async) socket$packet(0x11, 0x0, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x107640, 0x0) 13:52:04 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) 13:52:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:05 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) statx(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x100, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0xee00, r2}, 0xc) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) statx(r4, &(0x7f0000000200)='./file1\x00', 0x0, 0x100, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0xee00, r5}, 0xc) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) (async) r7 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000380)=""/226, 0xe2}], 0x3, &(0x7f0000000180)=[{&(0x7f0000000480)=""/227, 0xe3}, {0x0}, {&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000140)=""/3, 0x3}], 0x4, 0x0) (async) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) dup(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000000280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "285c4d007ecdfb"}) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000001580)={{r10, 0x7, 0x0, 0x8, 0x6, 0xe263, 0x4, 0x78, 0xfff, 0x9, 0x9, 0x10000, 0x80, 0x7ff, 0x6}}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x3, 0xffffffffffffffff, r2, 0xee00, r5, 0x126, 0xffff}, 0x0, 0x0, 0x100000001, 0x7ff, 0x4, 0x4, 0x0, 0x8, 0x7f, 0x1, r6, r7}) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) 13:52:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:05 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) 13:52:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6000000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:05 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) statx(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x100, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0xee00, r2}, 0xc) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) statx(r4, &(0x7f0000000200)='./file1\x00', 0x0, 0x100, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0xee00, r5}, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r7 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000380)=""/226, 0xe2}], 0x3, &(0x7f0000000180)=[{&(0x7f0000000480)=""/227, 0xe3}, {0x0}, {&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000140)=""/3, 0x3}], 0x4, 0x0) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) dup(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000000280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "285c4d007ecdfb"}) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000001580)={{r10, 0x7, 0x0, 0x8, 0x6, 0xe263, 0x4, 0x78, 0xfff, 0x9, 0x9, 0x10000, 0x80, 0x7ff, 0x6}}) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x3, 0xffffffffffffffff, r2, 0xee00, r5, 0x126, 0xffff}, 0x0, 0x0, 0x100000001, 0x7ff, 0x4, 0x4, 0x0, 0x8, 0x7f, 0x1, r6, r7}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) statx(r1, &(0x7f0000000200)='./file1\x00', 0x0, 0x100, &(0x7f0000000380)) (async) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0xee00, r2}, 0xc) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r3) (async) statx(r4, &(0x7f0000000200)='./file1\x00', 0x0, 0x100, &(0x7f0000000380)) (async) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0xee00, r5}, 0xc) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) (async) syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) (async) process_vm_writev(r7, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000380)=""/226, 0xe2}], 0x3, &(0x7f0000000180)=[{&(0x7f0000000480)=""/227, 0xe3}, {0x0}, {&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000140)=""/3, 0x3}], 0x4, 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) dup(r8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000000280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "285c4d007ecdfb"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000001580)={{r10, 0x7, 0x0, 0x8, 0x6, 0xe263, 0x4, 0x78, 0xfff, 0x9, 0x9, 0x10000, 0x80, 0x7ff, 0x6}}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x3, 0xffffffffffffffff, r2, 0xee00, r5, 0x126, 0xffff}, 0x0, 0x0, 0x100000001, 0x7ff, 0x4, 0x4, 0x0, 0x8, 0x7f, 0x1, r6, r7}) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) (async) 13:52:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x64, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x22) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000052ffe7fdffffff0010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) 13:52:07 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) 13:52:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x7000000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:07 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) 13:52:07 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000000)={0x1, 0x7fffffff, 0x1, 0xf7, 0x400, 0x2, 0xaf, 0xffffffffffff7fff}, &(0x7f0000000040)={0x6, 0xcb0, 0xffffffffffffffff, 0xc7b, 0x81, 0x20, 0x5, 0x4}, &(0x7f0000000080)={0x9, 0x8000, 0x10001, 0xa6, 0x7f, 0x8000000000000000, 0xff, 0x6}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) 13:52:07 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:52:07 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x1, 0x7fffffff, 0x1, 0xf7, 0x400, 0x2, 0xaf, 0xffffffffffff7fff}, &(0x7f0000000040)={0x6, 0xcb0, 0xffffffffffffffff, 0xc7b, 0x81, 0x20, 0x5, 0x4}, &(0x7f0000000080)={0x9, 0x8000, 0x10001, 0xa6, 0x7f, 0x8000000000000000, 0xff, 0x6}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) 13:52:08 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) 13:52:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8000000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:08 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) [ 354.928561][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 354.940107][ T8891] xt_recent: Unsupported userspace flags (000000fc) [ 354.964417][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:52:08 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x1, 0x7fffffff, 0x1, 0xf7, 0x400, 0x2, 0xaf, 0xffffffffffff7fff}, &(0x7f0000000040)={0x6, 0xcb0, 0xffffffffffffffff, 0xc7b, 0x81, 0x20, 0x5, 0x4}, &(0x7f0000000080)={0x9, 0x8000, 0x10001, 0xa6, 0x7f, 0x8000000000000000, 0xff, 0x6}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) 13:52:08 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:08 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x6, 0x8, 0xcc3, 0x96, 0x8000000000000001, 0x8698, 0x5}, &(0x7f0000000040)={0xf8, 0xffffffff80000001, 0xffff, 0xa52, 0xfffffffffffffffb, 0x4, 0x9, 0x5}, &(0x7f0000000080)={0x5, 0x29, 0x3, 0xffffffffffffffe1, 0x1, 0xb58b, 0x8000000000000000, 0x7828af68}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x7ff]}, 0x8}) 13:52:08 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) 13:52:08 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) dup(r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x2) 13:52:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x64, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) (async) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x22) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000052ffe7fdffffff0010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) 13:52:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 355.268054][ T6926] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 355.310223][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 355.350833][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 355.507710][ T6926] usb 3-1: Using ep0 maxpacket: 8 [ 355.627872][ T6926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.638167][ T6926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 355.647204][ T6926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 355.658800][ T6926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 355.670359][ T6926] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 355.679705][ T6926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.708031][ T8891] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 355.730909][ T6926] hub 3-1:1.0: bad descriptor, ignoring hub [ 355.736955][ T6926] hub: probe of 3-1:1.0 failed with error -5 [ 355.745846][ T6926] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 355.752232][ T6926] cdc_wdm 3-1:1.0: Unknown control protocol [ 356.408739][ T8888] usb 3-1: reset high-speed USB device number 30 using dummy_hcd [ 356.647737][ T8888] usb 3-1: Using ep0 maxpacket: 8 [ 356.750508][ T8891] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.099813][ T22] usb 3-1: USB disconnect, device number 30 13:52:14 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:52:14 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) 13:52:14 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x6, 0x8, 0xcc3, 0x96, 0x8000000000000001, 0x8698, 0x5}, &(0x7f0000000040)={0xf8, 0xffffffff80000001, 0xffff, 0xa52, 0xfffffffffffffffb, 0x4, 0x9, 0x5}, &(0x7f0000000080)={0x5, 0x29, 0x3, 0xffffffffffffffe1, 0x1, 0xb58b, 0x8000000000000000, 0x7828af68}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x7ff]}, 0x8}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x8, 0x6, 0x8, 0xcc3, 0x96, 0x8000000000000001, 0x8698, 0x5}, &(0x7f0000000040)={0xf8, 0xffffffff80000001, 0xffff, 0xa52, 0xfffffffffffffffb, 0x4, 0x9, 0x5}, &(0x7f0000000080)={0x5, 0x29, 0x3, 0xffffffffffffffe1, 0x1, 0xb58b, 0x8000000000000000, 0x7828af68}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x7ff]}, 0x8}) (async) 13:52:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xa000000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:14 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) dup(r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x2) 13:52:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x64, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x22) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000052ffe7fdffffff0010", @ANYRES32=r5, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) 13:52:14 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) dup(r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x2) 13:52:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc000000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:14 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x6, 0x8, 0xcc3, 0x96, 0x8000000000000001, 0x8698, 0x5}, &(0x7f0000000040)={0xf8, 0xffffffff80000001, 0xffff, 0xa52, 0xfffffffffffffffb, 0x4, 0x9, 0x5}, &(0x7f0000000080)={0x5, 0x29, 0x3, 0xffffffffffffffe1, 0x1, 0xb58b, 0x8000000000000000, 0x7828af68}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x7ff]}, 0x8}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x8, 0x6, 0x8, 0xcc3, 0x96, 0x8000000000000001, 0x8698, 0x5}, &(0x7f0000000040)={0xf8, 0xffffffff80000001, 0xffff, 0xa52, 0xfffffffffffffffb, 0x4, 0x9, 0x5}, &(0x7f0000000080)={0x5, 0x29, 0x3, 0xffffffffffffffe1, 0x1, 0xb58b, 0x8000000000000000, 0x7828af68}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x7ff]}, 0x8}) (async) 13:52:14 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) [ 361.317819][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:52:14 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) dup(r0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xaa2d6000) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1c, r2, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0xffffffffffffff50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES8=r0, @ANYRESDEC, @ANYBLOB="53d776dad746f9000096c44e7e07000000000000000d4d7675c9045fda5233ec2095471237344dba352dbe1579160d6967da00a2145935862a49ea3c593f8138acd11a487237d335baeb9aca574433a253c9cf0877e20e186a00309b0593230bc5d5ee7a61575852707dfe76d5fc06d46ec8111a83482464b4387c0bd734961d295d42652bbbbf92e19a67ffa3c46a19dd50b0ba00bb2345107c0d84056c8a112eaaff3fff8ec0e8a60255259dfcc3a72d1a4f3c4c56803b4f450de73617a8c6ba1d3b90bb1d4ef9be9c0d2093d4a7ad371fb4", @ANYRES32=r5, @ANYBLOB="f22d5bbf1301a5185e"], 0x80}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r6, &(0x7f0000000040)={0x11, 0xf8, r7, 0x1, 0x0, 0x6, @random="24de9fdb1720"}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', r5, 0x29, 0x1, 0xab, 0x0, 0x0, @mcast2, @mcast2, 0x20, 0x10, 0x6, 0x2a8c24a8}}) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c000000bd7000fbdbdf2500", @ANYRES32=0x0, @ANYBLOB="40010000800200001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYRESHEX=r0, @ANYBLOB="6f7143008641d4779ccf2949229513eae138acf16b41d2511154eaba327d8d61baed22dce66de899fd09d10f14fcf7b50a34898938126324b8875f4da9f6dbc802a68e3f0fe17f2cd174414614b2812c616ff8d44e22581920fc6c516a4f79ee7d615c2fd566e36c02c8f6911d15bcafac1784c8ab4a8ae462c53e0f28c7eee4dd4339fb11c8541b88be13d4448565e7cce6c57f857cf47e18c7ff8cfdf41b7ac2584ae0a1286ff7c9951b3262b56b4aa6946cdd7d73e19ec98a0e7bea", @ANYBLOB="224a2000000037b4a268ac4ce23e765c49a8897000000000000000e3a49e00e185b6f36ef287463f90b9a5"], 0x4c}}, 0x8000) [ 361.406201][ T8943] xt_recent: Unsupported userspace flags (000000fc) 13:52:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe000000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 361.757872][ T8562] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 362.027777][ T8562] usb 3-1: Using ep0 maxpacket: 8 [ 362.167974][ T8562] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.178222][ T8562] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 362.187215][ T8562] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 362.198946][ T8562] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 362.210460][ T8562] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 362.219790][ T8562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.248061][ T8943] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 362.268680][ T8562] hub 3-1:1.0: bad descriptor, ignoring hub [ 362.274635][ T8562] hub: probe of 3-1:1.0 failed with error -5 [ 362.282339][ T8562] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 362.288669][ T8562] cdc_wdm 3-1:1.0: Unknown control protocol [ 363.081558][ T8936] usb 3-1: reset high-speed USB device number 31 using dummy_hcd [ 363.327722][ T8936] usb 3-1: Using ep0 maxpacket: 8 [ 363.438292][ T8943] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.797986][ T6927] usb 3-1: USB disconnect, device number 31 13:52:21 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:52:21 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x2) 13:52:21 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) 13:52:21 executing program 1: pselect6(0x12, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = dup(r3) dup2(r5, r4) dup2(r4, 0xffffffffffffffff) ppoll(&(0x7f0000000080)=[{r0, 0x8008}, {r1, 0x1030}, {r2, 0x248b}, {r4, 0x8000}, {0xffffffffffffffff, 0x20}], 0x5, &(0x7f00000000c0), &(0x7f0000000100)={[0x1]}, 0x8) 13:52:21 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (rerun: 64) dup(r0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xaa2d6000) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1c, r2, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0xffffffffffffff50) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES8=r0, @ANYRESDEC, @ANYBLOB="53d776dad746f9000096c44e7e07000000000000000d4d7675c9045fda5233ec2095471237344dba352dbe1579160d6967da00a2145935862a49ea3c593f8138acd11a487237d335baeb9aca574433a253c9cf0877e20e186a00309b0593230bc5d5ee7a61575852707dfe76d5fc06d46ec8111a83482464b4387c0bd734961d295d42652bbbbf92e19a67ffa3c46a19dd50b0ba00bb2345107c0d84056c8a112eaaff3fff8ec0e8a60255259dfcc3a72d1a4f3c4c56803b4f450de73617a8c6ba1d3b90bb1d4ef9be9c0d2093d4a7ad371fb4", @ANYRES32=r5, @ANYBLOB="f22d5bbf1301a5185e"], 0x80}}, 0x0) (rerun: 32) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r6, &(0x7f0000000040)={0x11, 0xf8, r7, 0x1, 0x0, 0x6, @random="24de9fdb1720"}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', r5, 0x29, 0x1, 0xab, 0x0, 0x0, @mcast2, @mcast2, 0x20, 0x10, 0x6, 0x2a8c24a8}}) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async, rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c000000bd7000fbdbdf2500", @ANYRES32=0x0, @ANYBLOB="40010000800200001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYRESHEX=r0, @ANYBLOB="6f7143008641d4779ccf2949229513eae138acf16b41d2511154eaba327d8d61baed22dce66de899fd09d10f14fcf7b50a34898938126324b8875f4da9f6dbc802a68e3f0fe17f2cd174414614b2812c616ff8d44e22581920fc6c516a4f79ee7d615c2fd566e36c02c8f6911d15bcafac1784c8ab4a8ae462c53e0f28c7eee4dd4339fb11c8541b88be13d4448565e7cce6c57f857cf47e18c7ff8cfdf41b7ac2584ae0a1286ff7c9951b3262b56b4aa6946cdd7d73e19ec98a0e7bea", @ANYBLOB="224a2000000037b4a268ac4ce23e765c49a8897000000000000000e3a49e00e185b6f36ef287463f90b9a5"], 0x4c}}, 0x8000) (rerun: 64) 13:52:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:21 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) 13:52:21 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x2) 13:52:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x10000000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:21 executing program 1: pselect6(0x12, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x1) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) (async) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r4 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r4, 0xffff) (async) fcntl$addseals(r4, 0x409, 0x7) (async) r5 = dup(r3) dup2(r5, r4) (async) dup2(r4, 0xffffffffffffffff) (async) ppoll(&(0x7f0000000080)=[{r0, 0x8008}, {r1, 0x1030}, {r2, 0x248b}, {r4, 0x8000}, {0xffffffffffffffff, 0x20}], 0x5, &(0x7f00000000c0), &(0x7f0000000100)={[0x1]}, 0x8) 13:52:21 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) dup(r0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xaa2d6000) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1c, r2, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0xffffffffffffff50) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket(0x1, 0x803, 0x0) (rerun: 32) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES8=r0, @ANYRESDEC, @ANYBLOB="53d776dad746f9000096c44e7e07000000000000000d4d7675c9045fda5233ec2095471237344dba352dbe1579160d6967da00a2145935862a49ea3c593f8138acd11a487237d335baeb9aca574433a253c9cf0877e20e186a00309b0593230bc5d5ee7a61575852707dfe76d5fc06d46ec8111a83482464b4387c0bd734961d295d42652bbbbf92e19a67ffa3c46a19dd50b0ba00bb2345107c0d84056c8a112eaaff3fff8ec0e8a60255259dfcc3a72d1a4f3c4c56803b4f450de73617a8c6ba1d3b90bb1d4ef9be9c0d2093d4a7ad371fb4", @ANYRES32=r5, @ANYBLOB="f22d5bbf1301a5185e"], 0x80}}, 0x0) (async, rerun: 64) r6 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(r6, &(0x7f0000000040)={0x11, 0xf8, r7, 0x1, 0x0, 0x6, @random="24de9fdb1720"}, 0x14) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', r5, 0x29, 0x1, 0xab, 0x0, 0x0, @mcast2, @mcast2, 0x20, 0x10, 0x6, 0x2a8c24a8}}) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c000000bd7000fbdbdf2500", @ANYRES32=0x0, @ANYBLOB="40010000800200001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYRESHEX=r0, @ANYBLOB="6f7143008641d4779ccf2949229513eae138acf16b41d2511154eaba327d8d61baed22dce66de899fd09d10f14fcf7b50a34898938126324b8875f4da9f6dbc802a68e3f0fe17f2cd174414614b2812c616ff8d44e22581920fc6c516a4f79ee7d615c2fd566e36c02c8f6911d15bcafac1784c8ab4a8ae462c53e0f28c7eee4dd4339fb11c8541b88be13d4448565e7cce6c57f857cf47e18c7ff8cfdf41b7ac2584ae0a1286ff7c9951b3262b56b4aa6946cdd7d73e19ec98a0e7bea", @ANYBLOB="224a2000000037b4a268ac4ce23e765c49a8897000000000000000e3a49e00e185b6f36ef287463f90b9a5"], 0x4c}}, 0x8000) 13:52:21 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x2) [ 368.043543][ T8974] xt_recent: Unsupported userspace flags (000000fc) [ 368.407806][ T22] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 368.657704][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 368.777784][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.788184][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 368.797113][ T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 368.808890][ T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 368.821166][ T22] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 368.830540][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.857981][ T8982] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 368.883443][ T22] hub 3-1:1.0: bad descriptor, ignoring hub [ 368.889537][ T22] hub: probe of 3-1:1.0 failed with error -5 [ 368.903913][ T22] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 368.909983][ T22] cdc_wdm 3-1:1.0: Unknown control protocol [ 369.518194][ T8967] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 369.767786][ T8967] usb 3-1: Using ep0 maxpacket: 8 [ 369.888436][ T8974] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 370.227988][ T3677] usb 3-1: USB disconnect, device number 32 13:52:23 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) 13:52:23 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) dup(r4) 13:52:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x60000000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:23 executing program 1: pselect6(0x12, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x1) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 64) r2 = socket$kcm(0x29, 0x2, 0x0) (async) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r4 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r4, 0xffff) (async, rerun: 32) fcntl$addseals(r4, 0x409, 0x7) (rerun: 32) r5 = dup(r3) dup2(r5, r4) (async, rerun: 64) dup2(r4, 0xffffffffffffffff) (async, rerun: 64) ppoll(&(0x7f0000000080)=[{r0, 0x8008}, {r1, 0x1030}, {r2, 0x248b}, {r4, 0x8000}, {0xffffffffffffffff, 0x20}], 0x5, &(0x7f00000000c0), &(0x7f0000000100)={[0x1]}, 0x8) 13:52:23 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:23 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffffffffffff, 0x40480) dup2(r1, r0) 13:52:23 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x65580000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:23 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) 13:52:24 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:24 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) rt_sigpending(&(0x7f0000000180), 0x8) pselect6(0x40, &(0x7f0000000000)={0xaad, 0x3, 0x8, 0x5, 0x75f, 0x5, 0x3, 0x6}, &(0x7f0000000040)={0x100000001, 0x1ff, 0x8000000000000001, 0x1000, 0x8, 0xfffffffffffffe00, 0x1, 0x69c}, &(0x7f0000000080)={0x7fff, 0x4, 0x8, 0x1, 0x9, 0x1, 0x3f7, 0x200}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xffffffffffffffff]}, 0x8}) [ 370.895512][ T9005] xt_recent: Unsupported userspace flags (000000fc) 13:52:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x81000000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 371.107756][ T8562] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 371.197859][ T3676] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 371.298391][ T8562] usb 1-1: device descriptor read/64, error 18 [ 371.467761][ T3676] usb 3-1: Using ep0 maxpacket: 8 [ 371.578033][ T8562] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 371.597963][ T3676] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.613975][ T3676] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 371.629026][ T3676] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 371.647819][ T3676] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 371.659564][ T3676] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 371.669210][ T3676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.708805][ T9005] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 371.728775][ T3676] hub 3-1:1.0: bad descriptor, ignoring hub [ 371.734769][ T3676] hub: probe of 3-1:1.0 failed with error -5 [ 371.745305][ T3676] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 371.751831][ T3676] cdc_wdm 3-1:1.0: Unknown control protocol [ 371.788107][ T8562] usb 1-1: device descriptor read/64, error 18 [ 371.909123][ T8562] usb usb1-port1: attempt power cycle [ 372.337980][ T8562] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 372.537856][ T8562] usb 1-1: device descriptor read/8, error -61 [ 372.817786][ T8562] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 372.987910][ T8562] usb 1-1: device descriptor read/8, error -61 [ 373.108447][ T8562] usb usb1-port1: unable to enumerate USB device 13:52:29 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) rt_sigpending(&(0x7f0000000180), 0x8) (async) pselect6(0x40, &(0x7f0000000000)={0xaad, 0x3, 0x8, 0x5, 0x75f, 0x5, 0x3, 0x6}, &(0x7f0000000040)={0x100000001, 0x1ff, 0x8000000000000001, 0x1000, 0x8, 0xfffffffffffffe00, 0x1, 0x69c}, &(0x7f0000000080)={0x7fff, 0x4, 0x8, 0x1, 0x9, 0x1, 0x3f7, 0x200}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xffffffffffffffff]}, 0x8}) 13:52:29 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) ftruncate(r4, 0xffff) 13:52:29 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x88a8ffff, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:29 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) 13:52:29 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) (async) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffffffffffff, 0x40480) dup2(r1, r0) [ 376.090523][ T3677] usb 3-1: USB disconnect, device number 33 [ 376.097251][ T9002] cdc_wdm 3-1:1.0: Error autopm - -16 13:52:29 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:29 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) rt_sigpending(&(0x7f0000000180), 0x8) pselect6(0x40, &(0x7f0000000000)={0xaad, 0x3, 0x8, 0x5, 0x75f, 0x5, 0x3, 0x6}, &(0x7f0000000040)={0x100000001, 0x1ff, 0x8000000000000001, 0x1000, 0x8, 0xfffffffffffffe00, 0x1, 0x69c}, &(0x7f0000000080)={0x7fff, 0x4, 0x8, 0x1, 0x9, 0x1, 0x3f7, 0x200}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xffffffffffffffff]}, 0x8}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) rt_sigpending(&(0x7f0000000180), 0x8) (async) pselect6(0x40, &(0x7f0000000000)={0xaad, 0x3, 0x8, 0x5, 0x75f, 0x5, 0x3, 0x6}, &(0x7f0000000040)={0x100000001, 0x1ff, 0x8000000000000001, 0x1000, 0x8, 0xfffffffffffffe00, 0x1, 0x69c}, &(0x7f0000000080)={0x7fff, 0x4, 0x8, 0x1, 0x9, 0x1, 0x3f7, 0x200}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xffffffffffffffff]}, 0x8}) (async) 13:52:29 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=s', 0x5) 13:52:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8d0b0000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:29 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:29 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) [ 376.286289][ T9041] xt_recent: Unsupported userspace flags (000000fc) 13:52:29 executing program 1: msgrcv(0x0, 0x0, 0x0, 0xd633e86ba6c887e2, 0x0) msgsnd(0x0, &(0x7f0000000280)={0x6822edcdf6a9dd56}, 0x8, 0x0) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x183, &(0x7f0000000580), &(0x7f0000ffd000/0x1000)=nil, &(0x7f000014d000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x102}, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r5, 0x0, &(0x7f00000000c0)='./file0\x00', 0x18, 0x4200, 0x23456, {0x0, r6}}, 0x6) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, {0xc204}, 0x0, {0x0, r6}}, 0xffffab9e) 13:52:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x95020000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:29 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = dup(r0) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:52:29 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) dup2(r2, r1) [ 376.407816][ T6927] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 376.607754][ T6927] usb 1-1: device descriptor read/64, error 18 [ 376.617746][ T3676] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 376.867738][ T3676] usb 3-1: Using ep0 maxpacket: 8 [ 376.877997][ T6927] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 377.037759][ T3676] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.048114][ T3676] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 377.057015][ T3676] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 377.067824][ T6927] usb 1-1: device descriptor read/64, error 18 [ 377.068344][ T3676] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 377.085519][ T3676] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 377.094738][ T3676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.128157][ T9041] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 377.158722][ T3676] hub 3-1:1.0: bad descriptor, ignoring hub [ 377.164695][ T3676] hub: probe of 3-1:1.0 failed with error -5 [ 377.190070][ T6927] usb usb1-port1: attempt power cycle [ 377.190438][ T3676] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 377.207640][ T3676] cdc_wdm 3-1:1.0: Unknown control protocol [ 377.597734][ T6927] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 377.787921][ T6927] usb 1-1: device descriptor read/8, error -61 [ 378.057770][ T6927] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 378.228005][ T6927] usb 1-1: device descriptor read/8, error -61 [ 378.347994][ T6927] usb usb1-port1: unable to enumerate USB device [ 378.350305][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.360701][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 13:52:34 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) 13:52:34 executing program 1: msgrcv(0x0, 0x0, 0x0, 0xd633e86ba6c887e2, 0x0) msgsnd(0x0, &(0x7f0000000280)={0x6822edcdf6a9dd56}, 0x8, 0x0) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x183, &(0x7f0000000580), &(0x7f0000ffd000/0x1000)=nil, &(0x7f000014d000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x102}, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r5, 0x0, &(0x7f00000000c0)='./file0\x00', 0x18, 0x4200, 0x23456, {0x0, r6}}, 0x6) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, {0xc204}, 0x0, {0x0, r6}}, 0xffffab9e) 13:52:34 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = dup(r0) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:52:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:34 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) dup3(0xffffffffffffffff, r3, 0x80000) 13:52:34 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffffffffffff, 0x40480) dup2(r1, r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffffffffffff, 0x40480) (async) dup2(r1, r0) (async) [ 381.529752][ T9034] cdc_wdm 3-1:1.0: Error autopm - -16 [ 381.529984][ T3677] usb 3-1: USB disconnect, device number 34 13:52:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd6050000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:34 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = dup(r0) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:52:34 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:34 executing program 1: msgrcv(0x0, 0x0, 0x0, 0xd633e86ba6c887e2, 0x0) msgsnd(0x0, &(0x7f0000000280)={0x6822edcdf6a9dd56}, 0x8, 0x0) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x183, &(0x7f0000000580), &(0x7f0000ffd000/0x1000)=nil, &(0x7f000014d000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x102}, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r5, 0x0, &(0x7f00000000c0)='./file0\x00', 0x18, 0x4200, 0x23456, {0x0, r6}}, 0x6) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, {0xc204}, 0x0, {0x0, r6}}, 0xffffab9e) msgrcv(0x0, 0x0, 0x0, 0xd633e86ba6c887e2, 0x0) (async) msgsnd(0x0, &(0x7f0000000280)={0x6822edcdf6a9dd56}, 0x8, 0x0) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) syz_io_uring_setup(0x183, &(0x7f0000000580), &(0x7f0000ffd000/0x1000)=nil, &(0x7f000014d000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000040)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x102}, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (async) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r5, 0x0, &(0x7f00000000c0)='./file0\x00', 0x18, 0x4200, 0x23456, {0x0, r6}}, 0x6) (async) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, {0xc204}, 0x0, {0x0, r6}}, 0xffffab9e) (async) 13:52:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:34 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) dup(r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x2) [ 381.736059][ T9074] xt_recent: Unsupported userspace flags (000000fc) [ 381.847991][ T3684] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 382.047823][ T3684] usb 1-1: device descriptor read/64, error 18 [ 382.059790][ T8561] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 382.317685][ T8561] usb 3-1: Using ep0 maxpacket: 8 [ 382.324214][ T3684] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 382.437752][ T8561] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.457639][ T8561] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 382.477662][ T8561] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 382.497684][ T8561] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 382.509133][ T8561] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 382.518248][ T8561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.535587][ T3684] usb 1-1: device descriptor read/64, error 18 [ 382.548850][ T9074] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 382.568567][ T8561] hub 3-1:1.0: bad descriptor, ignoring hub [ 382.574530][ T8561] hub: probe of 3-1:1.0 failed with error -5 [ 382.585350][ T8561] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 382.591498][ T8561] cdc_wdm 3-1:1.0: Unknown control protocol [ 382.658831][ T3684] usb usb1-port1: attempt power cycle [ 383.077695][ T3684] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 383.277977][ T3684] usb 1-1: device descriptor read/8, error -61 [ 383.578000][ T3684] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 383.757892][ T3684] usb 1-1: device descriptor read/8, error -61 [ 383.878153][ T3684] usb usb1-port1: unable to enumerate USB device 13:52:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfeff0000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:40 executing program 5: r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = dup(0xffffffffffffffff) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:52:40 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) dup(r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x2) 13:52:40 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000000001c056ee3e045c7b4b1500"]) ppoll(&(0x7f0000000040)=[{r0, 0x2040}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={[0x4]}, 0x8) 13:52:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x60000000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:40 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) [ 386.979527][ T9069] cdc_wdm 3-1:1.0: Error autopm - -16 [ 386.989050][ T3677] usb 3-1: USB disconnect, device number 35 13:52:40 executing program 5: r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = dup(0xffffffffffffffff) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:52:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xff0f0000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:40 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) dup(r0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x2) 13:52:40 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000000001c056ee3e045c7b4b1500"]) (async) ppoll(&(0x7f0000000040)=[{r0, 0x2040}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={[0x4]}, 0x8) 13:52:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001fff001300"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x68}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c8000001800000000000000000000001c00"/28], 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 13:52:40 executing program 5: r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = dup(0xffffffffffffffff) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:52:40 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x2) 13:52:40 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000000001c056ee3e045c7b4b1500"]) ppoll(&(0x7f0000000040)=[{r0, 0x2040}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={[0x4]}, 0x8) [ 387.182097][ T9106] xt_recent: Unsupported userspace flags (000000fc) 13:52:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffa888, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 387.228798][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:52:40 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:40 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x2) [ 387.310105][ T9113] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 387.445761][ T9126] batman_adv: batadv1: Adding interface: macvlan2 [ 387.457869][ T9126] batman_adv: batadv1: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.484397][ T9126] batman_adv: batadv1: Interface activated: macvlan2 [ 387.627973][ T3677] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 387.867722][ T3677] usb 3-1: Using ep0 maxpacket: 8 [ 387.987810][ T3677] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.003217][ T3677] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 388.024550][ T3677] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 388.045735][ T3677] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 388.067346][ T3677] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 388.076940][ T3677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.118061][ T9106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 388.138935][ T3677] hub 3-1:1.0: bad descriptor, ignoring hub [ 388.144903][ T3677] hub: probe of 3-1:1.0 failed with error -5 [ 388.159169][ T3677] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 388.165199][ T3677] cdc_wdm 3-1:1.0: Unknown control protocol [ 388.422160][ T9106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.449508][ T9106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.494868][ T3684] usb 3-1: USB disconnect, device number 36 13:52:42 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:52:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001fff001300"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x68}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c8000001800000000000000000000001c00"/28], 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001fff001300"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x68}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x2, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c8000001800000000000000000000001c00"/28], 0x1c}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) (async) 13:52:42 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:42 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000000)={0x1, 0x8, 0x3f, 0x1, 0x4, 0x9}, &(0x7f0000000040)={0x7fffffffffffffff, 0x0, 0x4, 0x1, 0x2, 0xf51, 0x9, 0x4}, &(0x7f0000000080)={0x8000000000000001, 0x7, 0x4, 0x3, 0x3, 0x3f, 0x5, 0x1}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xab7]}, 0x8}) 13:52:42 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x2) 13:52:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:42 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x1, 0x8, 0x3f, 0x1, 0x4, 0x9}, &(0x7f0000000040)={0x7fffffffffffffff, 0x0, 0x4, 0x1, 0x2, 0xf51, 0x9, 0x4}, &(0x7f0000000080)={0x8000000000000001, 0x7, 0x4, 0x3, 0x3, 0x3f, 0x5, 0x1}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xab7]}, 0x8}) 13:52:42 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:42 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) [ 389.078104][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:52:42 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:42 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000000)={0x1, 0x8, 0x3f, 0x1, 0x4, 0x9}, &(0x7f0000000040)={0x7fffffffffffffff, 0x0, 0x4, 0x1, 0x2, 0xf51, 0x9, 0x4}, &(0x7f0000000080)={0x8000000000000001, 0x7, 0x4, 0x3, 0x3, 0x3f, 0x5, 0x1}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xab7]}, 0x8}) [ 389.165203][ T9139] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 389.202463][ T9147] xt_recent: Unsupported userspace flags (000000fc) [ 389.283951][ T9133] batman_adv: batadv2: Adding interface: macvlan3 [ 389.301860][ T9133] batman_adv: batadv2: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.351848][ T9133] batman_adv: batadv2: Interface activated: macvlan3 [ 389.547720][ T8562] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 389.787762][ T8562] usb 3-1: Using ep0 maxpacket: 8 [ 389.907761][ T8562] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.917980][ T8562] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 389.926882][ T8562] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 389.939502][ T8562] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 389.951192][ T8562] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 389.960625][ T8562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.988225][ T9152] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 390.008734][ T8562] hub 3-1:1.0: bad descriptor, ignoring hub [ 390.014697][ T8562] hub: probe of 3-1:1.0 failed with error -5 [ 390.037874][ T8562] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 390.043826][ T8562] cdc_wdm 3-1:1.0: Unknown control protocol [ 390.268802][ T9147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.277382][ T9147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.341985][ T6] usb 3-1: USB disconnect, device number 37 13:52:43 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:52:43 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(0x0, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:43 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:43 executing program 1: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0x5, 0x100000000}) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r2, r1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) io_submit(0x0, 0x2, &(0x7f0000000600)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000400)="70b3005cc12dbfe68da0d6f14171e18f26ee1711c184b8cc72808bdd811abc5f273f9f2347274ad60bbc4f69a8eb112842f22eb781802a79e0b2ef534e6ceb44c47c1b2ebd0c9cfc46b3d319c0077fbec7616e3eecf7fff527c63be9b6d5102b13d243ad737b99fda084ac7c800db258e84b509f1a149db6496f6fcd7bbeeb1266ca43bf1b5aab104ae2d278e090f90ec4b42c18e717ee8660b79ad6d33aa1ab089c2ca75fa01cbc9da8c38d84a817b9a9ce0a4b97b1abbc16af5e28a3e0dced6dd7485736ef352c78f905234926173e1ced736c883d55e3a858c22e8e635e18f76db7f84ca2a66dcf37f042063759b6fd", 0xf1, 0xd4, 0x0, 0x2, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f0000000540)="90734136e209df8971c22ce09de6709300168fe19508bf02c951a53e3f55c0da7aef", 0x22, 0x3, 0x0, 0x1, r3}]) 13:52:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001fff001300"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x68}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c8000001800000000000000000000001c00"/28], 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001fff001300"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x68}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x2, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c8000001800000000000000000000001c00"/28], 0x1c}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) (async) 13:52:44 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:44 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(0x0, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:44 executing program 1: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0x5, 0x100000000}) (async) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) (async) fcntl$addseals(r1, 0x409, 0x7) (async) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) (async) dup2(r2, r1) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) io_submit(0x0, 0x2, &(0x7f0000000600)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000400)="70b3005cc12dbfe68da0d6f14171e18f26ee1711c184b8cc72808bdd811abc5f273f9f2347274ad60bbc4f69a8eb112842f22eb781802a79e0b2ef534e6ceb44c47c1b2ebd0c9cfc46b3d319c0077fbec7616e3eecf7fff527c63be9b6d5102b13d243ad737b99fda084ac7c800db258e84b509f1a149db6496f6fcd7bbeeb1266ca43bf1b5aab104ae2d278e090f90ec4b42c18e717ee8660b79ad6d33aa1ab089c2ca75fa01cbc9da8c38d84a817b9a9ce0a4b97b1abbc16af5e28a3e0dced6dd7485736ef352c78f905234926173e1ced736c883d55e3a858c22e8e635e18f76db7f84ca2a66dcf37f042063759b6fd", 0xf1, 0xd4, 0x0, 0x2, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f0000000540)="90734136e209df8971c22ce09de6709300168fe19508bf02c951a53e3f55c0da7aef", 0x22, 0x3, 0x0, 0x1, r3}]) [ 390.921911][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:52:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 390.980011][ T9166] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:52:44 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:44 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(0x0, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) [ 391.020804][ T9177] xt_recent: Unsupported userspace flags (000000fc) [ 391.148080][ T9169] batman_adv: batadv3: Adding interface: macvlan4 [ 391.172345][ T9169] batman_adv: batadv3: The MTU of interface macvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.199738][ T9169] batman_adv: batadv3: Interface activated: macvlan4 [ 391.368021][ T3677] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 391.627802][ T3677] usb 3-1: Using ep0 maxpacket: 8 [ 391.757767][ T3677] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.768027][ T3677] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 391.777104][ T3677] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 391.788873][ T3677] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 391.800457][ T3677] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 391.810049][ T3677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.859401][ T9177] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 391.888746][ T3677] hub 3-1:1.0: bad descriptor, ignoring hub [ 391.894713][ T3677] hub: probe of 3-1:1.0 failed with error -5 [ 391.908486][ T3677] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 391.914549][ T3677] cdc_wdm 3-1:1.0: Unknown control protocol [ 392.149018][ T9177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.157914][ T9177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.224908][ T3677] usb 3-1: USB disconnect, device number 38 13:52:45 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:45 executing program 1: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0x5, 0x100000000}) (async) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) (async) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r2, r1) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) io_submit(0x0, 0x2, &(0x7f0000000600)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000400)="70b3005cc12dbfe68da0d6f14171e18f26ee1711c184b8cc72808bdd811abc5f273f9f2347274ad60bbc4f69a8eb112842f22eb781802a79e0b2ef534e6ceb44c47c1b2ebd0c9cfc46b3d319c0077fbec7616e3eecf7fff527c63be9b6d5102b13d243ad737b99fda084ac7c800db258e84b509f1a149db6496f6fcd7bbeeb1266ca43bf1b5aab104ae2d278e090f90ec4b42c18e717ee8660b79ad6d33aa1ab089c2ca75fa01cbc9da8c38d84a817b9a9ce0a4b97b1abbc16af5e28a3e0dced6dd7485736ef352c78f905234926173e1ced736c883d55e3a858c22e8e635e18f76db7f84ca2a66dcf37f042063759b6fd", 0xf1, 0xd4, 0x0, 0x2, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f0000000540)="90734136e209df8971c22ce09de6709300168fe19508bf02c951a53e3f55c0da7aef", 0x22, 0x3, 0x0, 0x1, r3}]) 13:52:45 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x0) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:45 executing program 0: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:52:45 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:52:45 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x5, 0x7, 0x80, 0xfffffffffffffffb, 0xf6f, 0x3, 0xffff}, &(0x7f0000000200)={0x9, 0x7, 0x0, 0x6, 0x1, 0x4, 0x3}, &(0x7f0000000280)={0x9, 0x0, 0x1f, 0x2, 0x100, 0x1, 0x4, 0x2}, &(0x7f0000000480)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) pselect6(0x40, &(0x7f0000000340)={0xff, 0x10000, 0x2, 0xfffffffffffffffd, 0x8499, 0x7fffffff, 0x10000, 0x4}, &(0x7f0000000380)={0x8786, 0x5ff6, 0x1, 0x8, 0x1ff, 0x0, 0x7b, 0x7}, &(0x7f00000003c0)={0x4, 0x0, 0xc5, 0x6, 0xffffffffffffffff, 0x80, 0x1ff, 0x5}, &(0x7f0000000400), &(0x7f00000004c0)={&(0x7f0000000440), 0x8}) pselect6(0x40, &(0x7f0000000000)={0x366a89dc, 0x7b4, 0x9, 0x0, 0x100000003, 0x5, 0x40, 0xf80000000000}, &(0x7f0000000040)={0xffff, 0x0, 0xb9, 0x8001, 0xff, 0x100, 0x7, 0xffffffffffffffc9}, &(0x7f0000000180)={0xc16, 0x19518648000000, 0x4, 0x8, 0xffffffffffffffb6, 0xfffffffffffffffc, 0x101, 0x80}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x800000001]}, 0x8}) 13:52:45 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = dup(r0) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:52:45 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x0) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0xc, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:46 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = dup(r0) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:52:46 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x0) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:46 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) pselect6(0x40, &(0x7f0000000080)={0x0, 0x5, 0x7, 0x80, 0xfffffffffffffffb, 0xf6f, 0x3, 0xffff}, &(0x7f0000000200)={0x9, 0x7, 0x0, 0x6, 0x1, 0x4, 0x3}, &(0x7f0000000280)={0x9, 0x0, 0x1f, 0x2, 0x100, 0x1, 0x4, 0x2}, &(0x7f0000000480)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) (async) pselect6(0x40, &(0x7f0000000340)={0xff, 0x10000, 0x2, 0xfffffffffffffffd, 0x8499, 0x7fffffff, 0x10000, 0x4}, &(0x7f0000000380)={0x8786, 0x5ff6, 0x1, 0x8, 0x1ff, 0x0, 0x7b, 0x7}, &(0x7f00000003c0)={0x4, 0x0, 0xc5, 0x6, 0xffffffffffffffff, 0x80, 0x1ff, 0x5}, &(0x7f0000000400), &(0x7f00000004c0)={&(0x7f0000000440), 0x8}) (async) pselect6(0x40, &(0x7f0000000000)={0x366a89dc, 0x7b4, 0x9, 0x0, 0x100000003, 0x5, 0x40, 0xf80000000000}, &(0x7f0000000040)={0xffff, 0x0, 0xb9, 0x8001, 0xff, 0x100, 0x7, 0xffffffffffffffc9}, &(0x7f0000000180)={0xc16, 0x19518648000000, 0x4, 0x8, 0xffffffffffffffb6, 0xfffffffffffffffc, 0x101, 0x80}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x800000001]}, 0x8}) 13:52:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0xf, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 392.915542][ T9209] xt_recent: Unsupported userspace flags (000000fc) [ 392.929382][ T9211] xt_recent: Unsupported userspace flags (000000fc) 13:52:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x10, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:46 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) pselect6(0x40, &(0x7f0000000080)={0x0, 0x5, 0x7, 0x80, 0xfffffffffffffffb, 0xf6f, 0x3, 0xffff}, &(0x7f0000000200)={0x9, 0x7, 0x0, 0x6, 0x1, 0x4, 0x3}, &(0x7f0000000280)={0x9, 0x0, 0x1f, 0x2, 0x100, 0x1, 0x4, 0x2}, &(0x7f0000000480)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) pselect6(0x40, &(0x7f0000000340)={0xff, 0x10000, 0x2, 0xfffffffffffffffd, 0x8499, 0x7fffffff, 0x10000, 0x4}, &(0x7f0000000380)={0x8786, 0x5ff6, 0x1, 0x8, 0x1ff, 0x0, 0x7b, 0x7}, &(0x7f00000003c0)={0x4, 0x0, 0xc5, 0x6, 0xffffffffffffffff, 0x80, 0x1ff, 0x5}, &(0x7f0000000400), &(0x7f00000004c0)={&(0x7f0000000440), 0x8}) pselect6(0x40, &(0x7f0000000000)={0x366a89dc, 0x7b4, 0x9, 0x0, 0x100000003, 0x5, 0x40, 0xf80000000000}, &(0x7f0000000040)={0xffff, 0x0, 0xb9, 0x8001, 0xff, 0x100, 0x7, 0xffffffffffffffc9}, &(0x7f0000000180)={0xc16, 0x19518648000000, 0x4, 0x8, 0xffffffffffffffb6, 0xfffffffffffffffc, 0x101, 0x80}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x800000001]}, 0x8}) [ 393.257821][ T8562] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 393.457748][ T6] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 393.497834][ T8562] usb 1-1: Using ep0 maxpacket: 8 [ 393.617984][ T8562] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.637674][ T8562] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 393.646615][ T8562] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 393.660406][ T6] usb 3-1: device descriptor read/64, error 18 [ 393.666983][ T8562] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 393.678658][ T8562] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 393.688192][ T8562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.738562][ T9209] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 393.758704][ T8562] hub 1-1:1.0: bad descriptor, ignoring hub [ 393.764702][ T8562] hub: probe of 1-1:1.0 failed with error -5 [ 393.778717][ T8562] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 393.784683][ T8562] cdc_wdm 1-1:1.0: Unknown control protocol [ 393.927708][ T6] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 394.077226][ T9209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.090496][ T9209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.117806][ T6] usb 3-1: device descriptor read/64, error 18 [ 394.130683][ T6926] usb 1-1: USB disconnect, device number 54 [ 394.238660][ T6] usb usb3-port1: attempt power cycle 13:52:47 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = dup(r0) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) [ 394.647833][ T6] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 394.827932][ T6] usb 3-1: device descriptor read/8, error -61 [ 395.107750][ T6] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 395.287849][ T6] usb 3-1: device descriptor read/8, error -61 [ 395.408927][ T6] usb usb3-port1: unable to enumerate USB device 13:52:48 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:52:48 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0xc0, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:48 executing program 0: unshare(0x6c060000) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba90000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfb02eca103c5a671}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002000000427bd7000fedbdf2502348000200000033a0000000800040007000000"], 0x24}}, 0x4) r5 = socket(0x10, 0x80000, 0x0) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3, 0x7c422}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x94, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba0000808100000036005404b0e0301a4ce875ece3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b081cf3f6db1c00010000000000000049740000000008000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="780400002c00450d000000000400120000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000080000000a00010062617369630000004804020044040400040402000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c0001000000000000000000000000000000000000000000040200000000000006"], 0x478}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) 13:52:48 executing program 1: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f0000000040)={0xd23, 0x400, 0x9, 0xb3, 0x7, 0x8, 0x6, 0x2}, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x3f, 0x3912, 0x785f, 0x80000000, 0x4}, &(0x7f00000000c0)={0x6, 0x409, 0x4cc, 0x7, 0x7fcc, 0x3, 0xf3c, 0x1}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x2]}, 0x8}) 13:52:48 executing program 3: r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = dup(0xffffffffffffffff) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:52:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0xec0, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:49 executing program 3: r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = dup(0xffffffffffffffff) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:52:49 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:49 executing program 1: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) (async, rerun: 64) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f0000000040)={0xd23, 0x400, 0x9, 0xb3, 0x7, 0x8, 0x6, 0x2}, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x3f, 0x3912, 0x785f, 0x80000000, 0x4}, &(0x7f00000000c0)={0x6, 0x409, 0x4cc, 0x7, 0x7fcc, 0x3, 0xf3c, 0x1}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x2]}, 0x8}) 13:52:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x33fe0, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:49 executing program 3: r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = dup(0xffffffffffffffff) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) [ 395.989737][ T9256] xt_recent: Unsupported userspace flags (000000fc) [ 396.547743][ T6926] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 396.748623][ T6926] usb 3-1: device descriptor read/64, error 18 [ 397.017760][ T6926] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 397.207798][ T6926] usb 3-1: device descriptor read/64, error 18 [ 397.328766][ T6926] usb usb3-port1: attempt power cycle [ 397.737754][ T6926] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 397.917809][ T6926] usb 3-1: device descriptor read/8, error -61 [ 398.187868][ T6926] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 398.368118][ T6926] usb 3-1: device descriptor read/8, error -61 [ 398.487875][ T6926] usb usb3-port1: unable to enumerate USB device 13:52:52 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:52:52 executing program 1: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f0000000040)={0xd23, 0x400, 0x9, 0xb3, 0x7, 0x8, 0x6, 0x2}, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x3f, 0x3912, 0x785f, 0x80000000, 0x4}, &(0x7f00000000c0)={0x6, 0x409, 0x4cc, 0x7, 0x7fcc, 0x3, 0xf3c, 0x1}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x2]}, 0x8}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) (async) pselect6(0x40, &(0x7f0000000040)={0xd23, 0x400, 0x9, 0xb3, 0x7, 0x8, 0x6, 0x2}, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x3f, 0x3912, 0x785f, 0x80000000, 0x4}, &(0x7f00000000c0)={0x6, 0x409, 0x4cc, 0x7, 0x7fcc, 0x3, 0xf3c, 0x1}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x2]}, 0x8}) (async) 13:52:52 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x7ffff000, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:52 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:52 executing program 0: unshare(0x6c060000) (async) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba90000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x11, 0x800000003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfb02eca103c5a671}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002000000427bd7000fedbdf2502348000200000033a0000000800040007000000"], 0x24}}, 0x4) (async) r5 = socket(0x10, 0x80000, 0x0) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3, 0x7c422}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x94, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) (async) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba0000808100000036005404b0e0301a4ce875ece3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b081cf3f6db1c00010000000000000049740000000008000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="780400002c00450d000000000400120000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000080000000a00010062617369630000004804020044040400040402000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c0001000000000000000000000000000000000000000000040200000000000006"], 0x478}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) 13:52:52 executing program 1: prctl$PR_SET_ENDIAN(0x14, 0x2) prctl$PR_SET_ENDIAN(0x14, 0x1) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x80c}], 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x20]}, 0x8) prctl$PR_SET_ENDIAN(0x14, 0x1) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) dup(r0) ppoll(&(0x7f00000000c0)=[{r0, 0xc413}, {0xffffffffffffffff, 0x9008}, {0xffffffffffffffff, 0xa}], 0x3, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x9]}, 0x8) prctl$PR_SET_ENDIAN(0x14, 0x2) 13:52:52 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0xfffffdef, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:52 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0x0) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) [ 399.056884][ T9278] nfsd: failed to allocate reply cache 13:52:52 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) [ 399.129418][ T9287] xt_recent: Unsupported userspace flags (000000fc) 13:52:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x2, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 399.717780][ T3677] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 399.941024][ T3677] usb 3-1: device descriptor read/64, error 18 [ 400.217751][ T3677] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 400.417872][ T3677] usb 3-1: device descriptor read/64, error 18 [ 400.538655][ T3677] usb usb3-port1: attempt power cycle [ 400.978064][ T3677] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 401.187887][ T3677] usb 3-1: device descriptor read/8, error -61 [ 401.468052][ T3677] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 401.687977][ T3677] usb 3-1: device descriptor read/8, error -61 [ 401.808787][ T3677] usb usb3-port1: unable to enumerate USB device 13:52:55 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:52:55 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0x0) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:55 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(0x0, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x3, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:55 executing program 0: unshare(0x6c060000) (async) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba90000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfb02eca103c5a671}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002000000427bd7000fedbdf2502348000200000033a0000000800040007000000"], 0x24}}, 0x4) (async) r5 = socket(0x10, 0x80000, 0x0) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x3, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3, 0x7c422}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x94, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) (async) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba0000808100000036005404b0e0301a4ce875ece3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b081cf3f6db1c00010000000000000049740000000008000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="780400002c00450d000000000400120000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000080000000a00010062617369630000004804020044040400040402000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c0001000000000000000000000000000000000000000000040200000000000006"], 0x478}}, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) 13:52:55 executing program 1: prctl$PR_SET_ENDIAN(0x14, 0x2) prctl$PR_SET_ENDIAN(0x14, 0x1) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) (async) prctl$PR_SET_ENDIAN(0x14, 0x0) (async) prctl$PR_SET_ENDIAN(0x14, 0x2) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x80c}], 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x20]}, 0x8) (async) prctl$PR_SET_ENDIAN(0x14, 0x1) (async) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) dup(r0) ppoll(&(0x7f00000000c0)=[{r0, 0xc413}, {0xffffffffffffffff, 0x9008}, {0xffffffffffffffff, 0xa}], 0x3, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x9]}, 0x8) (async) prctl$PR_SET_ENDIAN(0x14, 0x2) 13:52:55 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0x0) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x8, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:52:55 executing program 1: prctl$PR_SET_ENDIAN(0x14, 0x2) (async) prctl$PR_SET_ENDIAN(0x14, 0x1) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) (async) prctl$PR_SET_ENDIAN(0x14, 0x0) (async) prctl$PR_SET_ENDIAN(0x14, 0x2) (async) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x80c}], 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x20]}, 0x8) (async) prctl$PR_SET_ENDIAN(0x14, 0x1) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) dup(r0) (async) ppoll(&(0x7f00000000c0)=[{r0, 0xc413}, {0xffffffffffffffff, 0x9008}, {0xffffffffffffffff, 0xa}], 0x3, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x9]}, 0x8) prctl$PR_SET_ENDIAN(0x14, 0x2) 13:52:55 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(0x0, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:55 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:52:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0xa, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 402.547815][ T6926] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 402.817880][ T6926] usb 3-1: Using ep0 maxpacket: 8 [ 402.947886][ T6926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.962743][ T6926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 402.979952][ T6926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 402.998781][ T6926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 403.021646][ T6926] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 403.037675][ T6926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.088361][ T9324] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 403.108689][ T6926] hub 3-1:1.0: bad descriptor, ignoring hub [ 403.114651][ T6926] hub: probe of 3-1:1.0 failed with error -5 [ 403.132320][ T6926] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 403.145104][ T6926] cdc_wdm 3-1:1.0: Unknown control protocol [ 403.748916][ T9314] usb 3-1: reset high-speed USB device number 51 using dummy_hcd [ 403.998311][ T9314] usb 3-1: Using ep0 maxpacket: 8 [ 404.098123][ T9317] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 404.439455][ T8562] usb 3-1: USB disconnect, device number 51 13:53:01 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:01 executing program 1: syz_emit_ethernet(0x2c6, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0xa4, &(0x7f0000000080)={@multicast, @random="7e2182fb0f41", @void, {@x25={0x805, {0x1, 0x1, 0xfb, "623919161d56ec871ac2e7831d81989c2d118b1e08e0086a8b8a25d4d03772d86e026e816fdea1d0ec03708009e2a2a0509672580c1e091b7ef67b1182cb4b7cc44e77a4e73b352713040767755a60e9b446f8a1ef9eb66508ae5631d97fb0577ded33759fc5e280f90eaac8c9cb5e70631f02170e4927a11f4aef133561c1d66b2180934e4924d98594108d5b286f73844472"}}}}, &(0x7f0000000140)={0x1, 0x4, [0xd71, 0x414, 0xdc8, 0xe5a]}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@remote, @broadcast, @void, {@can={0xc, {{0x4, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "0e5943f6c59f81ad"}}}}, &(0x7f0000000040)={0x0, 0x1, [0xdaa, 0xea1, 0x14, 0x1a0]}) syz_emit_ethernet(0x108, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @random="d226dd8c0453", @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@ipv4={0x800, @icmp={{0x26, 0x4, 0x3, 0x4, 0xf6, 0x65, 0x0, 0x1e, 0x1, 0x0, @private=0xa010101, @local, {[@generic={0xc7, 0x8, "0376ad5003a5"}, @end, @ssrr={0x89, 0x1b, 0x22, [@dev={0xac, 0x14, 0x14, 0x2a}, @empty, @multicast2, @rand_addr=0x64010102, @rand_addr=0x64010100, @rand_addr=0x64010102]}, @cipso={0x86, 0x5f, 0x0, [{0x1, 0x5, "bb0e76"}, {0x1, 0x10, "7fa2a74c0c9a303970174620f67a"}, {0x5, 0x9, "1392f901324407"}, {0x7, 0x8, "0d8218227d6b"}, {0x7, 0x8, "f537b15c3a42"}, {0x2, 0xb, "1e7649efefbf1b0ecb"}, {0x7, 0x10, "17a5dd0e734993dfa0acea316a09"}, {0x7, 0x10, "4d266d5c18ca92349123cdf65472"}]}, @noop]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x3, 0x0, {0x14, 0x4, 0x1, 0x8, 0x40, 0x67, 0x4, 0x3d, 0x8, 0x400, @empty, @dev={0xac, 0x14, 0x14, 0x42}, {[@cipso={0x86, 0xd, 0x0, [{0x1, 0x7, "f7e46c0822"}]}, @timestamp_prespec={0x44, 0x2c, 0xf8, 0x3, 0xa, [{@remote, 0x800}, {@remote, 0xffff}, {@remote, 0x9}, {@empty, 0x401}, {@multicast2, 0x13}]}]}}, "7fb86304b74e"}}}}}, &(0x7f0000000180)={0x1, 0x1, [0x80, 0x1da, 0x1c0, 0xae7]}) 13:53:01 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(0x0, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:01 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0xf, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:01 executing program 0: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:01 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x14, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:01 executing program 1: syz_emit_ethernet(0x2c6, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0xa4, &(0x7f0000000080)={@multicast, @random="7e2182fb0f41", @void, {@x25={0x805, {0x1, 0x1, 0xfb, "623919161d56ec871ac2e7831d81989c2d118b1e08e0086a8b8a25d4d03772d86e026e816fdea1d0ec03708009e2a2a0509672580c1e091b7ef67b1182cb4b7cc44e77a4e73b352713040767755a60e9b446f8a1ef9eb66508ae5631d97fb0577ded33759fc5e280f90eaac8c9cb5e70631f02170e4927a11f4aef133561c1d66b2180934e4924d98594108d5b286f73844472"}}}}, &(0x7f0000000140)={0x1, 0x4, [0xd71, 0x414, 0xdc8, 0xe5a]}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@remote, @broadcast, @void, {@can={0xc, {{0x4, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "0e5943f6c59f81ad"}}}}, &(0x7f0000000040)={0x0, 0x1, [0xdaa, 0xea1, 0x14, 0x1a0]}) syz_emit_ethernet(0x108, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @random="d226dd8c0453", @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@ipv4={0x800, @icmp={{0x26, 0x4, 0x3, 0x4, 0xf6, 0x65, 0x0, 0x1e, 0x1, 0x0, @private=0xa010101, @local, {[@generic={0xc7, 0x8, "0376ad5003a5"}, @end, @ssrr={0x89, 0x1b, 0x22, [@dev={0xac, 0x14, 0x14, 0x2a}, @empty, @multicast2, @rand_addr=0x64010102, @rand_addr=0x64010100, @rand_addr=0x64010102]}, @cipso={0x86, 0x5f, 0x0, [{0x1, 0x5, "bb0e76"}, {0x1, 0x10, "7fa2a74c0c9a303970174620f67a"}, {0x5, 0x9, "1392f901324407"}, {0x7, 0x8, "0d8218227d6b"}, {0x7, 0x8, "f537b15c3a42"}, {0x2, 0xb, "1e7649efefbf1b0ecb"}, {0x7, 0x10, "17a5dd0e734993dfa0acea316a09"}, {0x7, 0x10, "4d266d5c18ca92349123cdf65472"}]}, @noop]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x3, 0x0, {0x14, 0x4, 0x1, 0x8, 0x40, 0x67, 0x4, 0x3d, 0x8, 0x400, @empty, @dev={0xac, 0x14, 0x14, 0x42}, {[@cipso={0x86, 0xd, 0x0, [{0x1, 0x7, "f7e46c0822"}]}, @timestamp_prespec={0x44, 0x2c, 0xf8, 0x3, 0xa, [{@remote, 0x800}, {@remote, 0xffff}, {@remote, 0x9}, {@empty, 0x401}, {@multicast2, 0x13}]}]}}, "7fb86304b74e"}}}}}, &(0x7f0000000180)={0x1, 0x1, [0x80, 0x1da, 0x1c0, 0xae7]}) syz_emit_ethernet(0x2c6, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0xa4, &(0x7f0000000080)={@multicast, @random="7e2182fb0f41", @void, {@x25={0x805, {0x1, 0x1, 0xfb, "623919161d56ec871ac2e7831d81989c2d118b1e08e0086a8b8a25d4d03772d86e026e816fdea1d0ec03708009e2a2a0509672580c1e091b7ef67b1182cb4b7cc44e77a4e73b352713040767755a60e9b446f8a1ef9eb66508ae5631d97fb0577ded33759fc5e280f90eaac8c9cb5e70631f02170e4927a11f4aef133561c1d66b2180934e4924d98594108d5b286f73844472"}}}}, &(0x7f0000000140)={0x1, 0x4, [0xd71, 0x414, 0xdc8, 0xe5a]}) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@remote, @broadcast, @void, {@can={0xc, {{0x4, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "0e5943f6c59f81ad"}}}}, &(0x7f0000000040)={0x0, 0x1, [0xdaa, 0xea1, 0x14, 0x1a0]}) (async) syz_emit_ethernet(0x108, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @random="d226dd8c0453", @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@ipv4={0x800, @icmp={{0x26, 0x4, 0x3, 0x4, 0xf6, 0x65, 0x0, 0x1e, 0x1, 0x0, @private=0xa010101, @local, {[@generic={0xc7, 0x8, "0376ad5003a5"}, @end, @ssrr={0x89, 0x1b, 0x22, [@dev={0xac, 0x14, 0x14, 0x2a}, @empty, @multicast2, @rand_addr=0x64010102, @rand_addr=0x64010100, @rand_addr=0x64010102]}, @cipso={0x86, 0x5f, 0x0, [{0x1, 0x5, "bb0e76"}, {0x1, 0x10, "7fa2a74c0c9a303970174620f67a"}, {0x5, 0x9, "1392f901324407"}, {0x7, 0x8, "0d8218227d6b"}, {0x7, 0x8, "f537b15c3a42"}, {0x2, 0xb, "1e7649efefbf1b0ecb"}, {0x7, 0x10, "17a5dd0e734993dfa0acea316a09"}, {0x7, 0x10, "4d266d5c18ca92349123cdf65472"}]}, @noop]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x3, 0x0, {0x14, 0x4, 0x1, 0x8, 0x40, 0x67, 0x4, 0x3d, 0x8, 0x400, @empty, @dev={0xac, 0x14, 0x14, 0x42}, {[@cipso={0x86, 0xd, 0x0, [{0x1, 0x7, "f7e46c0822"}]}, @timestamp_prespec={0x44, 0x2c, 0xf8, 0x3, 0xa, [{@remote, 0x800}, {@remote, 0xffff}, {@remote, 0x9}, {@empty, 0x401}, {@multicast2, 0x13}]}]}}, "7fb86304b74e"}}}}}, &(0x7f0000000180)={0x1, 0x1, [0x80, 0x1da, 0x1c0, 0xae7]}) (async) 13:53:01 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x0) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) [ 408.756200][ T9348] xt_recent: Unsupported userspace flags (000000fc) [ 408.758009][ T9347] xt_recent: Unsupported userspace flags (000000fc) 13:53:01 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x0) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x7b, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 409.118262][ T8562] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 409.357700][ T8562] usb 3-1: Using ep0 maxpacket: 8 [ 409.377977][ T6] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 409.477922][ T8562] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.488079][ T8562] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 409.496950][ T8562] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 409.510248][ T8562] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 409.521876][ T8562] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 409.531310][ T8562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.557945][ T9348] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 409.577806][ T6] usb 1-1: device descriptor read/64, error 18 [ 409.584878][ T8562] hub 3-1:1.0: bad descriptor, ignoring hub [ 409.591248][ T8562] hub: probe of 3-1:1.0 failed with error -5 [ 409.598923][ T8562] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 409.606019][ T8562] cdc_wdm 3-1:1.0: Unknown control protocol [ 409.847799][ T6] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 410.047893][ T6] usb 1-1: device descriptor read/64, error 18 [ 410.168835][ T6] usb usb1-port1: attempt power cycle [ 410.188786][ T9346] usb 3-1: reset high-speed USB device number 52 using dummy_hcd [ 410.437682][ T9346] usb 3-1: Using ep0 maxpacket: 8 [ 410.538834][ T9348] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 410.578006][ T6] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 410.777939][ T6] usb 1-1: device descriptor read/8, error -61 [ 410.877956][ T6926] usb 3-1: USB disconnect, device number 52 [ 411.047748][ T6] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 411.218867][ T6] usb 1-1: device descriptor read/8, error -61 [ 411.337897][ T6] usb usb1-port1: unable to enumerate USB device 13:53:08 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) dup(r1) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:08 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x0) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:08 executing program 1: syz_emit_ethernet(0x2c6, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0xa4, &(0x7f0000000080)={@multicast, @random="7e2182fb0f41", @void, {@x25={0x805, {0x1, 0x1, 0xfb, "623919161d56ec871ac2e7831d81989c2d118b1e08e0086a8b8a25d4d03772d86e026e816fdea1d0ec03708009e2a2a0509672580c1e091b7ef67b1182cb4b7cc44e77a4e73b352713040767755a60e9b446f8a1ef9eb66508ae5631d97fb0577ded33759fc5e280f90eaac8c9cb5e70631f02170e4927a11f4aef133561c1d66b2180934e4924d98594108d5b286f73844472"}}}}, &(0x7f0000000140)={0x1, 0x4, [0xd71, 0x414, 0xdc8, 0xe5a]}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@remote, @broadcast, @void, {@can={0xc, {{0x4, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "0e5943f6c59f81ad"}}}}, &(0x7f0000000040)={0x0, 0x1, [0xdaa, 0xea1, 0x14, 0x1a0]}) syz_emit_ethernet(0x108, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @random="d226dd8c0453", @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@ipv4={0x800, @icmp={{0x26, 0x4, 0x3, 0x4, 0xf6, 0x65, 0x0, 0x1e, 0x1, 0x0, @private=0xa010101, @local, {[@generic={0xc7, 0x8, "0376ad5003a5"}, @end, @ssrr={0x89, 0x1b, 0x22, [@dev={0xac, 0x14, 0x14, 0x2a}, @empty, @multicast2, @rand_addr=0x64010102, @rand_addr=0x64010100, @rand_addr=0x64010102]}, @cipso={0x86, 0x5f, 0x0, [{0x1, 0x5, "bb0e76"}, {0x1, 0x10, "7fa2a74c0c9a303970174620f67a"}, {0x5, 0x9, "1392f901324407"}, {0x7, 0x8, "0d8218227d6b"}, {0x7, 0x8, "f537b15c3a42"}, {0x2, 0xb, "1e7649efefbf1b0ecb"}, {0x7, 0x10, "17a5dd0e734993dfa0acea316a09"}, {0x7, 0x10, "4d266d5c18ca92349123cdf65472"}]}, @noop]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x3, 0x0, {0x14, 0x4, 0x1, 0x8, 0x40, 0x67, 0x4, 0x3d, 0x8, 0x400, @empty, @dev={0xac, 0x14, 0x14, 0x42}, {[@cipso={0x86, 0xd, 0x0, [{0x1, 0x7, "f7e46c0822"}]}, @timestamp_prespec={0x44, 0x2c, 0xf8, 0x3, 0xa, [{@remote, 0x800}, {@remote, 0xffff}, {@remote, 0x9}, {@empty, 0x401}, {@multicast2, 0x13}]}]}}, "7fb86304b74e"}}}}}, &(0x7f0000000180)={0x1, 0x1, [0x80, 0x1da, 0x1c0, 0xae7]}) 13:53:08 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x0) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x502, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:08 executing program 0: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x10000, 0x7, 0x0, 0x8], 0x9, &(0x7f0000000500)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x440) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x7f, @remote, 0xe8}}}, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x3491, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x6}, @in={0x2, 0x4e20, @loopback}], 0x2c) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvfrom$l2tp(r2, &(0x7f00000000c0)=""/15, 0xf, 0x40, &(0x7f0000000100), 0x10) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = dup(r3) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000080)={r4, 0x0, 0x0, 0x1000}) dup2(r5, r4) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) 13:53:08 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x0) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x505, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:08 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x0) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x440) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x7f, @remote, 0xe8}}}, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x3491, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x6}, @in={0x2, 0x4e20, @loopback}], 0x2c) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvfrom$l2tp(r2, &(0x7f00000000c0)=""/15, 0xf, 0x40, &(0x7f0000000100), 0x10) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) (async) r5 = dup(r3) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000080)={r4, 0x0, 0x0, 0x1000}) (async) dup2(r5, r4) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) [ 415.170140][ T9382] xt_recent: Unsupported userspace flags (000000fc) [ 415.193458][ T9388] xt_recent: Unsupported userspace flags (000000fc) 13:53:08 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = dup(0xffffffffffffffff) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) [ 415.537769][ T8562] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 415.707674][ T8561] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 415.807708][ T8562] usb 3-1: Using ep0 maxpacket: 8 [ 415.917805][ T8561] usb 1-1: device descriptor read/64, error 18 [ 415.967942][ T8562] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.978964][ T8562] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 415.993999][ T8562] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 416.005187][ T8562] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 416.016584][ T8562] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 416.025726][ T8562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.048112][ T9388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 416.068999][ T8562] hub 3-1:1.0: bad descriptor, ignoring hub [ 416.075218][ T8562] hub: probe of 3-1:1.0 failed with error -5 [ 416.085251][ T8562] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 416.091883][ T8562] cdc_wdm 3-1:1.0: Unknown control protocol [ 416.207858][ T8561] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 416.417861][ T8561] usb 1-1: device descriptor read/64, error 18 [ 416.538008][ T8561] usb usb1-port1: attempt power cycle [ 416.721058][ T9381] usb 3-1: reset high-speed USB device number 53 using dummy_hcd [ 416.957742][ T8561] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 416.967810][ T9381] usb 3-1: Using ep0 maxpacket: 8 [ 417.068229][ T9388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 417.147955][ T8561] usb 1-1: device descriptor read/8, error -61 [ 417.407878][ T3677] usb 3-1: USB disconnect, device number 53 [ 417.427687][ T8561] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 417.618162][ T8561] usb 1-1: device descriptor read/8, error -61 [ 417.738433][ T8561] usb usb1-port1: unable to enumerate USB device 13:53:14 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x506, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:14 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x440) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x7f, @remote, 0xe8}}}, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x3491, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x6}, @in={0x2, 0x4e20, @loopback}], 0x2c) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvfrom$l2tp(r2, &(0x7f00000000c0)=""/15, 0xf, 0x40, &(0x7f0000000100), 0x10) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = dup(r3) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000080)={r4, 0x0, 0x0, 0x1000}) dup2(r5, r4) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x440) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x7f, @remote, 0xe8}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x3491, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x6}, @in={0x2, 0x4e20, @loopback}], 0x2c) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) recvfrom$l2tp(r2, &(0x7f00000000c0)=""/15, 0xf, 0x40, &(0x7f0000000100), 0x10) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r4, 0xffff) (async) fcntl$addseals(r4, 0x409, 0x7) (async) dup(r3) (async) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000080)={r4, 0x0, 0x0, 0x1000}) (async) dup2(r5, r4) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) (async) 13:53:14 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:14 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = dup(0xffffffffffffffff) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:53:14 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x0) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x508, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:14 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = dup(0xffffffffffffffff) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:53:14 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) dup2(r1, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x79, 0x1, 0x18, @local, @private0, 0x7, 0x8, 0x74ba, 0x101}}) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@newneigh={0x24, 0x1c, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, r2, 0x1, 0xc, 0x3}, [@NDA_SRC_VNI={0x8, 0xb, 0x61}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4000014) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4e921}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) 13:53:14 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) io_getevents(r0, 0x9, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)) 13:53:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x509, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 421.691753][ T9421] xt_recent: Unsupported userspace flags (000000fc) [ 421.763875][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 421.861444][ T9423] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.891632][ T9423] bridge2: port 1(bridge_slave_1) entered blocking state [ 421.910984][ T9423] bridge2: port 1(bridge_slave_1) entered disabled state [ 422.047724][ T3676] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 422.307716][ T3676] usb 3-1: Using ep0 maxpacket: 8 [ 422.427949][ T3676] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.438266][ T3676] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 422.447239][ T3676] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 422.458795][ T3676] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 422.470431][ T3676] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 422.480193][ T3676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.507958][ T9421] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 422.528854][ T3676] hub 3-1:1.0: bad descriptor, ignoring hub [ 422.534895][ T3676] hub: probe of 3-1:1.0 failed with error -5 [ 422.543207][ T3676] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 422.549384][ T3676] cdc_wdm 3-1:1.0: Unknown control protocol [ 423.169094][ T9418] usb 3-1: reset high-speed USB device number 54 using dummy_hcd [ 423.407860][ T9418] usb 3-1: Using ep0 maxpacket: 8 [ 423.509005][ T9421] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 13:53:21 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:21 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x50a, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:21 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) dup(r0) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:53:21 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) io_setup(0x3, &(0x7f0000000000)=0x0) io_getevents(r0, 0x9, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)) 13:53:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) dup2(r1, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x79, 0x1, 0x18, @local, @private0, 0x7, 0x8, 0x74ba, 0x101}}) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@newneigh={0x24, 0x1c, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, r2, 0x1, 0xc, 0x3}, [@NDA_SRC_VNI={0x8, 0xb, 0x61}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4000014) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4e921}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ftruncate(0xffffffffffffffff, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) (async) dup(0xffffffffffffffff) (async) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) (async) dup2(r1, 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x79, 0x1, 0x18, @local, @private0, 0x7, 0x8, 0x74ba, 0x101}}) (async) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@newneigh={0x24, 0x1c, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, r2, 0x1, 0xc, 0x3}, [@NDA_SRC_VNI={0x8, 0xb, 0x61}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4000014) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4e921}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) (async) [ 428.049649][ T3677] usb 3-1: USB disconnect, device number 54 13:53:21 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0x0) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:21 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) dup(r0) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) [ 428.095715][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:53:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x50b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:21 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) io_getevents(r0, 0x9, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) io_setup(0x3, &(0x7f0000000000)) (async) io_getevents(r0, 0x9, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)) (async) 13:53:21 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) dup(r0) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:53:21 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0x0) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) [ 428.195723][ T9446] bridge2: port 1(bridge_slave_1) entered disabled state [ 428.215338][ T9455] xt_recent: Unsupported userspace flags (000000fc) [ 428.256959][ T9446] bridge3: port 1(bridge_slave_1) entered blocking state [ 428.310037][ T9446] bridge3: port 1(bridge_slave_1) entered disabled state [ 428.537712][ T3677] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 428.787755][ T3677] usb 3-1: Using ep0 maxpacket: 8 [ 428.917935][ T3677] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.934521][ T3677] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 428.944314][ T3677] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 428.956027][ T3677] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 428.967541][ T3677] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 428.976642][ T3677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.008754][ T9455] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 429.028706][ T3677] hub 3-1:1.0: bad descriptor, ignoring hub [ 429.034674][ T3677] hub: probe of 3-1:1.0 failed with error -5 [ 429.043448][ T3677] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 429.049507][ T3677] cdc_wdm 3-1:1.0: Unknown control protocol [ 429.678503][ T9451] usb 3-1: reset high-speed USB device number 55 using dummy_hcd [ 429.917811][ T9451] usb 3-1: Using ep0 maxpacket: 8 [ 430.018344][ T9455] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 13:53:27 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:27 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0x0) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:27 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:27 executing program 1: pselect6(0xfffffffffffffd8b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 13:53:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x50f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) (async) r1 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) (async) dup2(r1, 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x79, 0x1, 0x18, @local, @private0, 0x7, 0x8, 0x74ba, 0x101}}) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@newneigh={0x24, 0x1c, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, r2, 0x1, 0xc, 0x3}, [@NDA_SRC_VNI={0x8, 0xb, 0x61}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4000014) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4e921}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) 13:53:27 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) [ 434.469474][ T3684] usb 3-1: USB disconnect, device number 55 13:53:27 executing program 1: pselect6(0xfffffffffffffd8b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) pselect6(0xfffffffffffffd8b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) (async) 13:53:27 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x510, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 434.539111][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:53:27 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:27 executing program 1: pselect6(0xfffffffffffffd8b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) [ 434.638988][ T9501] xt_recent: Unsupported userspace flags (000000fc) [ 434.957819][ T6] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 435.197729][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 435.338459][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.348702][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 435.358715][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 435.370225][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 435.381804][ T6] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 435.391213][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.417988][ T9501] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 435.448720][ T6] hub 3-1:1.0: bad descriptor, ignoring hub [ 435.454680][ T6] hub: probe of 3-1:1.0 failed with error -5 [ 435.463012][ T6] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 435.469333][ T6] cdc_wdm 3-1:1.0: Unknown control protocol [ 436.088063][ T9495] usb 3-1: reset high-speed USB device number 56 using dummy_hcd [ 436.327740][ T9495] usb 3-1: Using ep0 maxpacket: 8 [ 436.428134][ T9501] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 439.790047][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.796396][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 13:53:34 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:34 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:34 executing program 0: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x511, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:34 executing program 1: r0 = io_uring_setup(0x6d33, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12, &(0x7f0000000500), 0x0) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) 13:53:34 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) [ 440.904654][ T3677] usb 3-1: USB disconnect, device number 56 13:53:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x538, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:34 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x0) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:34 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:34 executing program 1: r0 = io_uring_setup(0x6d33, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12, &(0x7f0000000500), 0x0) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) [ 441.015640][ T9523] xt_recent: Unsupported userspace flags (000000fc) 13:53:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x53c, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:34 executing program 1: r0 = io_uring_setup(0x6d33, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12, &(0x7f0000000500), 0x0) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) [ 441.060045][ T9532] xt_recent: Unsupported userspace flags (000000fc) [ 441.338695][ T3677] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 441.427695][ T3676] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 441.577704][ T3677] usb 1-1: Using ep0 maxpacket: 8 [ 441.677739][ T3676] usb 3-1: Using ep0 maxpacket: 8 [ 441.717801][ T3677] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.728066][ T3677] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 441.737057][ T3677] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 441.748374][ T3677] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 441.759675][ T3677] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 441.768868][ T3677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.798202][ T9534] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 441.805526][ T3676] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.816634][ T3676] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 441.825991][ T3676] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 441.828838][ T3677] hub 1-1:1.0: bad descriptor, ignoring hub [ 441.838367][ T3676] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 441.853438][ T3677] hub: probe of 1-1:1.0 failed with error -5 [ 441.854599][ T3676] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 441.870778][ T3676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.872858][ T3677] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 441.885888][ T3677] cdc_wdm 1-1:1.0: Unknown control protocol [ 441.898009][ T9532] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 441.918867][ T3676] hub 3-1:1.0: bad descriptor, ignoring hub [ 441.924821][ T3676] hub: probe of 3-1:1.0 failed with error -5 [ 441.940658][ T3676] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 441.946703][ T3676] cdc_wdm 3-1:1.0: Unknown control protocol [ 442.308043][ T6926] usb 3-1: USB disconnect, device number 57 [ 442.508342][ T9519] usb 1-1: reset high-speed USB device number 63 using dummy_hcd [ 442.747783][ T9519] usb 1-1: Using ep0 maxpacket: 8 [ 442.848042][ T9523] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 443.929477][ T9525] cdc_wdm 1-1:1.0: Error autopm - -16 [ 443.937720][ T3684] usb 1-1: USB disconnect, device number 63 13:53:37 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:37 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) [ 444.128725][ T9548] xt_recent: Unsupported userspace flags (000000fc) 13:53:37 executing program 0: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:37 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x0) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:37 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r2, r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r2, 0x14, 0x1, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) 13:53:37 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:37 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) (async, rerun: 32) fcntl$addseals(r1, 0x409, 0x7) (async, rerun: 32) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r2, r1) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r2, 0x14, 0x1, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) (async, rerun: 64) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (rerun: 64) 13:53:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:37 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:37 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x0) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) [ 444.559583][ T6926] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 444.577971][ T9559] xt_recent: Unsupported userspace flags (000000fc) 13:53:37 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = dup(0xffffffffffffffff) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) [ 444.817735][ T6926] usb 3-1: Using ep0 maxpacket: 8 [ 444.908220][ T6927] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 444.947812][ T6926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.967764][ T6926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 444.976799][ T6926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 445.027624][ T6926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 445.057691][ T6926] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 445.066777][ T6926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.108000][ T9548] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 445.138829][ T6926] hub 3-1:1.0: bad descriptor, ignoring hub [ 445.144801][ T6926] hub: probe of 3-1:1.0 failed with error -5 [ 445.167729][ T6927] usb 1-1: Using ep0 maxpacket: 8 [ 445.177823][ T6926] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 445.183783][ T6926] cdc_wdm 3-1:1.0: Unknown control protocol [ 445.287916][ T6927] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.307638][ T6927] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 445.316558][ T6927] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 445.347632][ T6927] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 445.377639][ T6927] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 445.386728][ T6927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.487960][ T9559] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 445.499055][ T6927] hub 1-1:1.0: bad descriptor, ignoring hub [ 445.505020][ T6927] hub: probe of 1-1:1.0 failed with error -5 [ 445.788231][ T9547] usb 3-1: reset high-speed USB device number 58 using dummy_hcd [ 446.030542][ T9547] usb 3-1: Using ep0 maxpacket: 8 [ 446.138175][ T9548] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 446.179299][ T6927] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 446.185377][ T6927] cdc_wdm 1-1:1.0: Unknown control protocol [ 446.445433][ T6927] usb 1-1: reset high-speed USB device number 64 using dummy_hcd [ 446.717822][ T6927] usb 1-1: Using ep0 maxpacket: 8 [ 446.838221][ T9559] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 447.221368][ T6926] usb 3-1: USB disconnect, device number 58 [ 447.227364][ T9558] cdc_wdm 3-1:1.0: Error autopm - -16 [ 447.367988][ T3676] usb 1-1: USB disconnect, device number 64 13:53:40 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x3, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:40 executing program 0: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:40 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r2, r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r2, 0x14, 0x1, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r1, 0xffff) (async) fcntl$addseals(r1, 0x409, 0x7) (async) dup(r0) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) (async) dup2(r2, r1) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r2, 0x14, 0x1, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) 13:53:40 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = dup(0xffffffffffffffff) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:53:40 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ftruncate(0xffffffffffffffff, 0xffff) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:40 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:40 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = dup(0xffffffffffffffff) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:53:41 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) 13:53:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x5, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:41 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x2) 13:53:41 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) dup(r0) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) [ 447.932028][ T9595] xt_recent: Unsupported userspace flags (000000fc) 13:53:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 448.277893][ T3676] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 448.285624][ T8561] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 448.527984][ T3676] usb 1-1: Using ep0 maxpacket: 8 [ 448.533198][ T8561] usb 3-1: Using ep0 maxpacket: 8 [ 448.647803][ T3676] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.658301][ T8561] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.668687][ T3676] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 448.678550][ T8561] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 448.687506][ T8561] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 448.698909][ T3676] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 448.710162][ T8561] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 448.721429][ T3676] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 448.732656][ T8561] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 448.741888][ T3676] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 448.751175][ T8561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.759312][ T3676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.788150][ T9600] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 448.798183][ T9595] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 448.808970][ T8561] hub 3-1:1.0: bad descriptor, ignoring hub [ 448.819399][ T3676] hub 1-1:1.0: bad descriptor, ignoring hub [ 448.828153][ T8561] hub: probe of 3-1:1.0 failed with error -5 [ 448.834817][ T3676] hub: probe of 1-1:1.0 failed with error -5 [ 448.858741][ T3676] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 448.865620][ T8561] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 448.871926][ T8561] cdc_wdm 3-1:1.0: Unknown control protocol [ 448.878361][ T3676] cdc_wdm 1-1:1.0: Unknown control protocol [ 449.199326][ T6926] usb 3-1: USB disconnect, device number 59 [ 449.809667][ T9588] usb 1-1: reset high-speed USB device number 65 using dummy_hcd [ 450.067822][ T9588] usb 1-1: Using ep0 maxpacket: 8 [ 450.168062][ T9595] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 450.418392][ T6927] usb 1-1: USB disconnect, device number 65 [ 450.787759][ T6926] usb 3-1: new high-speed USB device number 60 using dummy_hcd 13:53:44 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x2) 13:53:44 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) dup(r0) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:53:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x7, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:44 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) 13:53:44 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ftruncate(0xffffffffffffffff, 0xffff) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:44 executing program 0: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:44 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x2) 13:53:44 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) dup(r0) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:53:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x8, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:44 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) [ 451.020464][ T9622] xt_recent: Unsupported userspace flags (000000fc) [ 451.020998][ T9624] xt_recent: Unsupported userspace flags (000000fc) 13:53:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x9, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:44 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:44 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) 13:53:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0xa, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:44 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) [ 451.358033][ T3676] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 451.527690][ T6926] usb 3-1: device descriptor read/64, error -71 [ 451.597790][ T3676] usb 1-1: Using ep0 maxpacket: 8 [ 451.718359][ T3676] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.734360][ T3676] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 451.755244][ T3676] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 13:53:44 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) clock_gettime(0x0, &(0x7f0000000000)) (async) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) (async) [ 451.779610][ T3676] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 451.826948][ T3676] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 451.827666][ T6926] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 451.855180][ T3676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.888251][ T9624] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 451.908777][ T3676] hub 1-1:1.0: bad descriptor, ignoring hub [ 451.914758][ T3676] hub: probe of 1-1:1.0 failed with error -5 [ 451.932427][ T3676] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 451.946641][ T3676] cdc_wdm 1-1:1.0: Unknown control protocol [ 452.107661][ T6926] usb 3-1: Using ep0 maxpacket: 8 [ 452.247769][ T6926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.267643][ T6926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 452.276558][ T6926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 452.307628][ T6926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 452.318904][ T6926] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 452.328020][ T6926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.358072][ T9622] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 452.379023][ T6926] hub 3-1:1.0: bad descriptor, ignoring hub [ 452.384982][ T6926] hub: probe of 3-1:1.0 failed with error -5 [ 452.598297][ T9621] usb 1-1: reset high-speed USB device number 66 using dummy_hcd [ 452.837788][ T9621] usb 1-1: Using ep0 maxpacket: 8 [ 452.938229][ T9624] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 452.979948][ T6926] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 452.986180][ T6926] cdc_wdm 3-1:1.0: Unknown control protocol [ 453.209493][ T6926] usb 3-1: reset high-speed USB device number 61 using dummy_hcd [ 453.447774][ T6926] usb 3-1: Using ep0 maxpacket: 8 [ 453.548165][ T9622] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 454.019473][ T9614] cdc_wdm 1-1:1.0: Error autopm - -16 [ 454.025299][ T6927] usb 1-1: USB disconnect, device number 66 [ 454.157867][ T6774] usb 3-1: USB disconnect, device number 61 13:53:47 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ftruncate(0xffffffffffffffff, 0xffff) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0xc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:47 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:47 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000240)='y\x105%\xfa,\xc8\xeck\xd1\xe2=\x0e~F\xcds', 0x0) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) r4 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) r5 = dup2(r2, r4) r6 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000040), 0x521000, 0x26) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000140)={0x2, 0x2, 0xffff}) r8 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = dup(r7) ioctl$UDMABUF_CREATE(r9, 0x40187542, &(0x7f0000000080)={r8, 0x0, 0x0, 0x1000}) dup2(r9, r8) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x4090}, {r0, 0x100}, {}, {0xffffffffffffffff, 0x4000}, {r4, 0x1000}, {r6, 0x3000}, {0xffffffffffffffff, 0x2}, {r9, 0x2800}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x800]}, 0x8) 13:53:47 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)) 13:53:47 executing program 0: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0xe, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:47 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)) 13:53:47 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:47 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) [ 454.675710][ T9658] xt_recent: Unsupported userspace flags (000000fc) [ 454.703398][ T9659] xt_recent: Unsupported userspace flags (000000fc) 13:53:47 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)) 13:53:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0xf, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 454.958649][ T6927] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 455.007892][ T3684] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 455.197712][ T6927] usb 3-1: Using ep0 maxpacket: 8 [ 455.257936][ T3684] usb 1-1: Using ep0 maxpacket: 8 [ 455.318693][ T6927] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.334784][ T6927] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 455.355419][ T6927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 455.377757][ T3684] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.390758][ T6927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 455.405670][ T3684] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 455.415027][ T6927] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 455.424565][ T3684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 455.436124][ T6927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.445397][ T3684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 455.475336][ T3684] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 455.487931][ T9658] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 455.498042][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.509586][ T6927] hub 3-1:1.0: bad descriptor, ignoring hub [ 455.517100][ T6927] hub: probe of 3-1:1.0 failed with error -5 [ 455.534543][ T9659] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 455.542352][ T6927] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 455.550164][ T3684] hub 1-1:1.0: bad descriptor, ignoring hub [ 455.557359][ T3684] hub: probe of 1-1:1.0 failed with error -5 [ 455.571133][ T6927] cdc_wdm 3-1:1.0: Unknown control protocol [ 455.590644][ T3684] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 455.603563][ T3684] cdc_wdm 1-1:1.0: Unknown control protocol [ 455.958412][ T6927] usb 1-1: USB disconnect, device number 67 [ 456.138239][ T9655] usb 3-1: reset high-speed USB device number 62 using dummy_hcd [ 456.397685][ T9655] usb 3-1: Using ep0 maxpacket: 8 [ 456.500753][ T9658] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 457.570306][ T9657] cdc_wdm 3-1:1.0: Error autopm - -16 [ 457.570539][ T6774] usb 3-1: USB disconnect, device number 62 13:53:51 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:51 executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = dup(0xffffffffffffffff) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) 13:53:51 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x10, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0xa, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:51 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x0, 0x0) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r2 = memfd_create(&(0x7f0000000240)='y\x105%\xfa,\xc8\xeck\xd1\xe2=\x0e~F\xcds', 0x0) ftruncate(r2, 0xffff) (async) fcntl$addseals(r2, 0x409, 0x7) (async) r3 = dup(r1) r4 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) (async) r5 = dup2(r2, r4) r6 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000040), 0x521000, 0x26) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000140)={0x2, 0x2, 0xffff}) (async) r8 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r8, 0xffff) (async) fcntl$addseals(r8, 0x409, 0x7) (async) r9 = dup(r7) ioctl$UDMABUF_CREATE(r9, 0x40187542, &(0x7f0000000080)={r8, 0x0, 0x0, 0x1000}) dup2(r9, r8) (async) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x4090}, {r0, 0x100}, {}, {0xffffffffffffffff, 0x4000}, {r4, 0x1000}, {r6, 0x3000}, {0xffffffffffffffff, 0x2}, {r9, 0x2800}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x800]}, 0x8) 13:53:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x60, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:51 executing program 0: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ftruncate(0xffffffffffffffff, 0xffff) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:51 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:51 executing program 5: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ftruncate(0xffffffffffffffff, 0xffff) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) [ 458.232205][ T9688] xt_recent: Unsupported userspace flags (000000fc) 13:53:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0xf0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:51 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) [ 458.350468][ T9694] xt_recent: Unsupported userspace flags (000000fc) [ 458.382654][ T9699] xt_recent: Unsupported userspace flags (000000fc) [ 458.597844][ T8561] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 458.677686][ T6926] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 458.707822][ T6927] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 458.857734][ T8561] usb 3-1: Using ep0 maxpacket: 8 [ 458.917920][ T6926] usb 1-1: Using ep0 maxpacket: 8 [ 458.947874][ T6927] usb 6-1: Using ep0 maxpacket: 8 [ 458.998348][ T8561] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.014259][ T8561] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 459.031678][ T8561] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 459.037761][ T6926] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.050785][ T8561] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 459.064172][ T6926] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 459.064220][ T6926] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 459.064258][ T6926] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 459.064305][ T6926] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 459.064406][ T6926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.067911][ T6927] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.136162][ T8561] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 459.145692][ T9694] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 459.165545][ T8561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.178697][ T6926] hub 1-1:1.0: bad descriptor, ignoring hub [ 459.184722][ T6926] hub: probe of 1-1:1.0 failed with error -5 [ 459.191816][ T6927] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 459.204171][ T6927] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 459.208022][ T9688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 459.216634][ T6926] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 459.229302][ T6926] cdc_wdm 1-1:1.0: Unknown control protocol [ 459.235354][ T6927] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 459.249326][ T8561] hub 3-1:1.0: bad descriptor, ignoring hub [ 459.255318][ T8561] hub: probe of 3-1:1.0 failed with error -5 [ 459.264924][ T6927] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 459.282100][ T8561] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 459.286472][ T6927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.302592][ T8561] cdc_wdm 3-1:1.0: Unknown control protocol [ 459.318162][ T9702] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 459.339716][ T6927] hub 6-1:1.0: bad descriptor, ignoring hub [ 459.348111][ T6927] hub: probe of 6-1:1.0 failed with error -5 [ 459.364306][ T6927] cdc_wdm 6-1:1.0: cdc-wdm2: USB WDM device [ 459.370586][ T6927] cdc_wdm 6-1:1.0: Unknown control protocol [ 459.637937][ T6927] usb 3-1: USB disconnect, device number 63 [ 459.780119][ T8561] usb 6-1: USB disconnect, device number 9 [ 460.048225][ T9685] usb 1-1: reset high-speed USB device number 68 using dummy_hcd [ 460.297794][ T9685] usb 1-1: Using ep0 maxpacket: 8 [ 460.398154][ T9694] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 460.758142][ T3676] usb 1-1: USB disconnect, device number 68 [ 460.787767][ T6927] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 460.817737][ T8561] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 461.027687][ T6927] usb 3-1: Using ep0 maxpacket: 8 [ 461.077795][ T8561] usb 6-1: Using ep0 maxpacket: 8 13:53:54 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x295, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:54 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:54 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000240)='y\x105%\xfa,\xc8\xeck\xd1\xe2=\x0e~F\xcds', 0x0) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = dup(r1) r4 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) dup2(r3, r2) r5 = dup2(r2, r4) r6 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000040), 0x521000, 0x26) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000140)={0x2, 0x2, 0xffff}) r8 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = dup(r7) ioctl$UDMABUF_CREATE(r9, 0x40187542, &(0x7f0000000080)={r8, 0x0, 0x0, 0x1000}) dup2(r9, r8) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x4090}, {r0, 0x100}, {}, {0xffffffffffffffff, 0x4000}, {r4, 0x1000}, {r6, 0x3000}, {0xffffffffffffffff, 0x2}, {r9, 0x2800}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x800]}, 0x8) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x0, 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000240)='y\x105%\xfa,\xc8\xeck\xd1\xe2=\x0e~F\xcds', 0x0) (async) ftruncate(r2, 0xffff) (async) fcntl$addseals(r2, 0x409, 0x7) (async) dup(r1) (async) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1000}) (async) dup2(r3, r2) (async) dup2(r2, r4) (async) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000040), 0x521000, 0x26) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000140)={0x2, 0x2, 0xffff}) (async) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (async) ftruncate(r8, 0xffff) (async) fcntl$addseals(r8, 0x409, 0x7) (async) dup(r7) (async) ioctl$UDMABUF_CREATE(r9, 0x40187542, &(0x7f0000000080)={r8, 0x0, 0x0, 0x1000}) (async) dup2(r9, r8) (async) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x4090}, {r0, 0x100}, {}, {0xffffffffffffffff, 0x4000}, {r4, 0x1000}, {r6, 0x3000}, {0xffffffffffffffff, 0x2}, {r9, 0x2800}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x800]}, 0x8) (async) 13:53:54 executing program 0: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:54 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 461.227768][ T6927] usb 3-1: unable to read config index 0 descriptor/all [ 461.228026][ T8561] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.241199][ T6927] usb 3-1: can't read configurations, error -71 [ 461.287253][ T8561] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 461.312928][ T9717] xt_recent: Unsupported userspace flags (000000fc) 13:53:54 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000000)={0xb974, 0x6, 0x1e, 0x6d, 0x8, 0x20, 0xce60, 0x80}, &(0x7f0000000040)={0x2, 0x30, 0x401, 0x100, 0x9, 0x10001, 0xae8, 0x1}, &(0x7f0000000080)={0x5, 0x3, 0x1, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xba5c]}, 0x8}) 13:53:54 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x2) [ 461.333234][ T8561] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 461.356207][ T9720] xt_recent: Unsupported userspace flags (000000fc) [ 461.377736][ T8561] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 461.414170][ T8561] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 13:53:54 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) 13:53:54 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000000)={0xb974, 0x6, 0x1e, 0x6d, 0x8, 0x20, 0xce60, 0x80}, &(0x7f0000000040)={0x2, 0x30, 0x401, 0x100, 0x9, 0x10001, 0xae8, 0x1}, &(0x7f0000000080)={0x5, 0x3, 0x1, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xba5c]}, 0x8}) 13:53:54 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x2) [ 461.440625][ T8561] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.528076][ T8561] usb 6-1: can't set config #1, error -71 [ 461.545034][ T8561] usb 6-1: USB disconnect, device number 10 [ 461.657764][ T3677] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 461.767690][ T6927] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 461.897870][ T3677] usb 1-1: Using ep0 maxpacket: 8 [ 462.007699][ T6927] usb 3-1: Using ep0 maxpacket: 8 [ 462.017956][ T3677] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.048019][ T3677] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 462.056932][ T3677] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 462.068599][ T3677] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 462.080223][ T3677] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 462.090117][ T3677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.127968][ T6927] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.128138][ T9717] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 462.147658][ T6927] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 462.156584][ T6927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 462.168807][ T3677] hub 1-1:1.0: bad descriptor, ignoring hub [ 462.174718][ T3677] hub: probe of 1-1:1.0 failed with error -5 [ 462.200800][ T3677] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 462.206747][ T3677] cdc_wdm 1-1:1.0: Unknown control protocol [ 462.212745][ T6927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 462.225503][ T6927] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 462.234705][ T6927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.268021][ T9720] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 462.288795][ T6927] hub 3-1:1.0: bad descriptor, ignoring hub [ 462.294746][ T6927] hub: probe of 3-1:1.0 failed with error -5 [ 462.321154][ T6927] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 462.327102][ T6927] cdc_wdm 3-1:1.0: Unknown control protocol [ 462.667990][ T6927] usb 3-1: USB disconnect, device number 65 [ 462.888842][ T9712] usb 1-1: reset high-speed USB device number 69 using dummy_hcd [ 463.127756][ T9712] usb 1-1: Using ep0 maxpacket: 8 [ 463.248161][ T9717] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 463.488089][ T8562] usb 1-1: USB disconnect, device number 69 [ 463.837853][ T6927] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 464.087694][ T6927] usb 3-1: Using ep0 maxpacket: 8 [ 464.207838][ T6927] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.227986][ T6927] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 464.239603][ T6927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 13:53:57 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:53:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x500, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:57 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000000)={0xb974, 0x6, 0x1e, 0x6d, 0x8, 0x20, 0xce60, 0x80}, &(0x7f0000000040)={0x2, 0x30, 0x401, 0x100, 0x9, 0x10001, 0xae8, 0x1}, &(0x7f0000000080)={0x5, 0x3, 0x1, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xba5c]}, 0x8}) 13:53:57 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x2) 13:53:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = dup(0xffffffffffffffff) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) dup2(r1, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x79, 0x1, 0x18, @local, @private0, 0x7, 0x8, 0x74ba, 0x101}}) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@newneigh={0x24, 0x1c, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, r2, 0x1, 0xc, 0x3}, [@NDA_SRC_VNI={0x8, 0xb, 0x61}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4000014) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4e921}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) 13:53:57 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) (fail_nth: 1) [ 464.250949][ T6927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 464.262696][ T6927] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 464.272173][ T6927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:53:57 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) 13:53:57 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) pselect6(0x55, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) [ 464.318890][ T6927] usb 3-1: can't set config #1, error -71 [ 464.351131][ T9744] ERROR: Out of memory at tomoyo_realpath_from_path. [ 464.360430][ T6927] usb 3-1: USB disconnect, device number 66 13:53:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x5d6, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:53:57 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) (fail_nth: 2) [ 464.401669][ T9746] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 13:53:57 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) 13:53:57 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) (async) pselect6(0x55, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) [ 464.450117][ T9750] xt_recent: Unsupported userspace flags (000000fc) [ 464.515392][ T9756] ERROR: Out of memory at tomoyo_realpath_from_path. [ 464.547252][ T9741] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.595827][ T9741] bridge1: port 1(bridge_slave_1) entered blocking state [ 464.610132][ T9741] bridge1: port 1(bridge_slave_1) entered disabled state [ 464.877768][ T6927] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 465.137767][ T6927] usb 3-1: Using ep0 maxpacket: 8 [ 465.267837][ T6927] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.278229][ T6927] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 465.287258][ T6927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 465.299215][ T6927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 465.310756][ T6927] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 465.320222][ T6927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.358447][ T9755] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 465.378850][ T6927] hub 3-1:1.0: bad descriptor, ignoring hub [ 465.384831][ T6927] hub: probe of 3-1:1.0 failed with error -5 [ 465.395134][ T6927] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 465.401540][ T6927] cdc_wdm 3-1:1.0: Unknown control protocol [ 466.138210][ T9745] usb 3-1: reset high-speed USB device number 67 using dummy_hcd [ 466.387768][ T9745] usb 3-1: Using ep0 maxpacket: 8 [ 466.495644][ T9750] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 466.848131][ T6926] usb 3-1: USB disconnect, device number 67 13:54:04 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:54:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x600, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:54:04 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) (fail_nth: 3) 13:54:04 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) pselect6(0x55, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) 13:54:04 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) 13:54:04 executing program 5: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:54:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x700, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:54:04 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)) 13:54:04 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r2, r1) dup2(r1, r3) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = dup(r4) r7 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) dup2(r6, r5) dup2(r5, r7) ppoll(&(0x7f0000002a80)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0xa412}, {0xffffffffffffffff, 0x5289}, {0xffffffffffffffff, 0x400}, {r3, 0x4400}, {r5, 0x112}], 0x7, &(0x7f0000002ac0)={0x77359400}, &(0x7f0000002b00), 0x8) futex_waitv(&(0x7f0000001ec0)=[{0xd7cb, &(0x7f0000000000)=0xebfb}, {0xfffffffffffffff9, &(0x7f0000000040)=0x7f, 0x2}, {0x2000000000000000, &(0x7f0000000080)=0x8}, {0x7fff, &(0x7f00000000c0)=0x20, 0x82}, {0x8000000000000001, &(0x7f0000000100)=0x5a, 0x82}, {0x1, &(0x7f0000000140)=0xfffffffffffffffd, 0x82}, {0x200, &(0x7f0000000180)=0x80, 0x82}, {0x4, &(0x7f0000000200)=0x3, 0x82}, {0x8, &(0x7f0000000240)=0x7, 0x2}, {0x80000001, &(0x7f0000000280)=0x2, 0x82}, {0x2, &(0x7f00000002c0)=0x1c000000, 0x82}, {0x8, &(0x7f0000000300)=0x1f, 0x82}, {0xffff, &(0x7f0000000340)=0xff, 0x2}, {0x8, &(0x7f0000000380)=0x6a8ca3f6, 0x2}, {0x8, &(0x7f00000003c0)=0x1, 0x2}, {0x0, &(0x7f0000000400)=0xc7, 0x82}, {0x0, &(0x7f0000000440)=0x6, 0x82}, {0x3, &(0x7f0000000480)=0x1, 0x2}, {0x800, &(0x7f00000004c0), 0x2}, {0x5, &(0x7f0000000500)=0xb5, 0x82}, {0x8, &(0x7f0000000540)=0x7, 0x82}, {0x1, &(0x7f0000000580)=0x6, 0x2}, {0x5, &(0x7f00000005c0)=0x8, 0x2}, {0x6, &(0x7f0000000600), 0x82}, {0x81, &(0x7f0000000640)=0x9, 0x82}, {0x4, &(0x7f0000000680)=0x345, 0x82}, {0x81, &(0x7f00000006c0)=0x8, 0x2}, {0x8000000000000000, &(0x7f0000000700)=0xdda, 0x82}, {0x7, &(0x7f0000000740)=0x1ff, 0x2}, {0xb5, &(0x7f0000000780)=0xb8a, 0x82}, {0x400, &(0x7f00000007c0)=0x100000001, 0x2}, {0x4, &(0x7f0000000800)=0x1000, 0x82}, {0x5, &(0x7f0000000840)=0xa4, 0x82}, {0xad2, &(0x7f0000000880)=0x8, 0x2}, {0x8, &(0x7f00000008c0)=0x6, 0x2}, {0x78, &(0x7f0000000900)=0x1, 0x82}, {0x8, &(0x7f0000000940)=0x40, 0x82}, {0x80, &(0x7f0000000980)=0x4000000000, 0x82}, {0x9, &(0x7f00000009c0)=0x8000000000000001, 0x82}, {0x7, &(0x7f0000000a00)=0xfffffffffffffffb}, {0x4, &(0x7f0000000a40), 0x2}, {0x400, &(0x7f0000000a80)=0x52, 0x2}, {0x9, &(0x7f0000000ac0)=0x6, 0x82}, {0x8000000000000001, &(0x7f0000000b00)=0x9, 0x82}, {0x66, &(0x7f0000000b40)=0x100000001, 0x82}, {0x3, &(0x7f0000000b80)=0xe, 0x2}, {0x10001, &(0x7f0000000bc0), 0x82}, {0x7, &(0x7f0000000c00)=0x9, 0x2}, {0x1, &(0x7f0000000c40)=0x1, 0x2}, {0x3, &(0x7f0000000c80)=0x88fd, 0x2}, {0x4, &(0x7f0000000cc0)=0x4, 0x82}, {0xfffffffffffff801, &(0x7f0000000d00)=0x7, 0x2}, {0x2, &(0x7f0000000d40)=0x2, 0x2}, {0x86, &(0x7f0000000d80)=0x100000001, 0x2}, {0x2, &(0x7f0000000dc0)=0x4474, 0x2}, {0x2, &(0x7f0000000e00)=0x9, 0x2}, {0x3ff, &(0x7f0000000e40)=0x3c7, 0x80}, {0x8000000000000000, &(0x7f0000000e80)=0x1, 0x2}, {0x0, &(0x7f0000000ec0)=0x2}, {0x6, &(0x7f0000000f00)=0x200, 0x2}, {0x100000000, &(0x7f0000000f40)=0x81, 0x2}, {0xff, &(0x7f0000000f80)=0x109, 0x2}, {0x6, &(0x7f0000000fc0)=0x800, 0x2}, {0x401, &(0x7f0000001000)=0x401, 0x82}, {0x10000, &(0x7f0000001040)=0x8, 0x2}, {0x6, &(0x7f0000001080)=0x6, 0x82}, {0xc4, &(0x7f00000010c0)=0xffffffff, 0x80}, {0x3, &(0x7f0000001100)=0xa01, 0x82}, {0x6, &(0x7f0000001140)=0x2f2c, 0x2}, {0x800, &(0x7f0000001180)=0x9, 0x82}, {0x800, &(0x7f00000011c0)=0x9, 0x82}, {0x7, &(0x7f0000001200)}, {0x6, &(0x7f0000001240)=0x7, 0x82}, {0x2, &(0x7f0000001280)=0x9, 0x82}, {0x6, &(0x7f00000012c0)=0xc8, 0x82}, {0x6, &(0x7f0000001300)=0x7, 0x82}, {0x10000, &(0x7f0000001340)=0x7, 0x82}, {0x3, &(0x7f0000001380)=0x8000000000000000, 0x2}, {0x5, &(0x7f00000013c0)=0x1}, {0x5, &(0x7f0000001400)=0x7f, 0x2}, {0x8001, &(0x7f0000001440)=0x8, 0x2}, {0x4, &(0x7f0000001480)=0x2, 0x2}, {0x2, &(0x7f00000014c0)=0x800, 0x2}, {0x5, &(0x7f0000001500)=0x100000000, 0x2}, {0x4a55, &(0x7f0000001540)=0x6, 0x82}, {0xc8, &(0x7f0000001580)=0x5, 0x82}, {0x7ff, &(0x7f00000015c0)=0x80000001, 0x2}, {0x1, &(0x7f0000001600)=0x7, 0x82}, {0x9, &(0x7f0000001640)=0xac, 0x82}, {0x3, &(0x7f0000001680)=0xe, 0x2}, {0xffffffffffffff01, &(0x7f00000016c0)=0x9, 0x2}, {0x4, &(0x7f0000001700)=0x2, 0x82}, {0x7, &(0x7f0000001740)=0x4, 0x2}, {0x7, &(0x7f0000001780)=0x4, 0x2}, {0x56896ed2, &(0x7f00000017c0)=0x5f, 0x2}, {0x4, &(0x7f0000001800)=0x91, 0x2}, {0x3ff, &(0x7f0000001840)=0x7, 0x82}, {0x1, &(0x7f0000001880)=0x9, 0x82}, {0x5, &(0x7f00000018c0), 0x2}, {0x9, &(0x7f0000001900)=0x7, 0x82}, {0x2be, &(0x7f0000001940)=0x7fffffffffffffff, 0x82}, {0x3, &(0x7f0000001980)=0x200, 0x2}, {0x4, &(0x7f00000019c0)=0x4, 0x82}, {0x5, &(0x7f0000001a00), 0x82}, {0x9, &(0x7f0000001a40)=0x4, 0x2}, {0x796, &(0x7f0000001a80)=0x3, 0x82}, {0x2, &(0x7f0000001ac0)=0x4, 0x80}, {0x81, &(0x7f0000001b00)=0x6, 0x2}, {0x7, &(0x7f0000001b40)=0x5, 0x82}, {0xf4fd, &(0x7f0000001b80)=0x8000, 0x82}, {0x8, &(0x7f0000001bc0)=0x2, 0x2}, {0x2, &(0x7f0000001c00)=0x4, 0x2}, {0x1, &(0x7f0000001c40), 0x82}, {0x9, &(0x7f0000001c80)=0x3ff, 0x2}, {0x401, &(0x7f0000001cc0)=0x6, 0x82}, {0x6, &(0x7f0000001d00)=0x2, 0x2}, {0x8, &(0x7f0000001d40)=0x2}, {0x4, &(0x7f0000001d80)=0xffffffffffffffff, 0x2}, {0xfe, &(0x7f0000001dc0), 0x82}, {0x28be3bd, &(0x7f0000001e00)=0x1, 0x2}, {0x5, &(0x7f0000001e40)=0x7fffffff, 0x2}, {0x5, &(0x7f0000001e80)=0x4, 0x82}], 0x7a, 0x0, &(0x7f0000002a40)={0x0, 0x989680}, 0x0) [ 471.190003][ T9772] FAULT_INJECTION: forcing a failure. [ 471.190003][ T9772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.253209][ T9777] xt_recent: Unsupported userspace flags (000000fc) [ 471.261008][ T9772] CPU: 1 PID: 9772 Comm: syz-executor.0 Not tainted 6.0.0-rc4-syzkaller-00055-g53e99dcff61e #0 [ 471.263166][ T9779] xt_recent: Unsupported userspace flags (000000fc) [ 471.271373][ T9772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 471.271394][ T9772] Call Trace: [ 471.271404][ T9772] [ 471.271414][ T9772] dump_stack_lvl+0xcd/0x134 [ 471.271453][ T9772] should_fail.cold+0x5/0xa [ 471.271491][ T9772] _copy_from_user+0x2a/0x170 [ 471.271525][ T9772] dma_buf_ioctl+0x5f3/0x840 [ 471.271620][ T9772] ? dma_buf_poll_add_cb+0x280/0x280 [ 471.271647][ T9772] ? __fget_files+0x26a/0x440 [ 471.271680][ T9772] ? bpf_lsm_file_ioctl+0x5/0x10 [ 471.271707][ T9772] ? dma_buf_poll_add_cb+0x280/0x280 [ 471.271733][ T9772] __x64_sys_ioctl+0x193/0x200 [ 471.337947][ T9772] do_syscall_64+0x35/0xb0 [ 471.342409][ T9772] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 471.348344][ T9772] RIP: 0033:0x7f387ca89279 [ 471.352793][ T9772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 471.372423][ T9772] RSP: 002b:00007f387dbee168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.380857][ T9772] RAX: ffffffffffffffda RBX: 00007f387cb9bf80 RCX: 00007f387ca89279 [ 471.388840][ T9772] RDX: 0000000020000140 RSI: 0000000040086200 RDI: 0000000000000006 13:54:04 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) (async) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) (async) dup2(r2, r1) dup2(r1, r3) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r5, 0xffff) (async) fcntl$addseals(r5, 0x409, 0x7) (async) r6 = dup(r4) r7 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) dup2(r6, r5) (async, rerun: 64) dup2(r5, r7) (rerun: 64) ppoll(&(0x7f0000002a80)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0xa412}, {0xffffffffffffffff, 0x5289}, {0xffffffffffffffff, 0x400}, {r3, 0x4400}, {r5, 0x112}], 0x7, &(0x7f0000002ac0)={0x77359400}, &(0x7f0000002b00), 0x8) (async) futex_waitv(&(0x7f0000001ec0)=[{0xd7cb, &(0x7f0000000000)=0xebfb}, {0xfffffffffffffff9, &(0x7f0000000040)=0x7f, 0x2}, {0x2000000000000000, &(0x7f0000000080)=0x8}, {0x7fff, &(0x7f00000000c0)=0x20, 0x82}, {0x8000000000000001, &(0x7f0000000100)=0x5a, 0x82}, {0x1, &(0x7f0000000140)=0xfffffffffffffffd, 0x82}, {0x200, &(0x7f0000000180)=0x80, 0x82}, {0x4, &(0x7f0000000200)=0x3, 0x82}, {0x8, &(0x7f0000000240)=0x7, 0x2}, {0x80000001, &(0x7f0000000280)=0x2, 0x82}, {0x2, &(0x7f00000002c0)=0x1c000000, 0x82}, {0x8, &(0x7f0000000300)=0x1f, 0x82}, {0xffff, &(0x7f0000000340)=0xff, 0x2}, {0x8, &(0x7f0000000380)=0x6a8ca3f6, 0x2}, {0x8, &(0x7f00000003c0)=0x1, 0x2}, {0x0, &(0x7f0000000400)=0xc7, 0x82}, {0x0, &(0x7f0000000440)=0x6, 0x82}, {0x3, &(0x7f0000000480)=0x1, 0x2}, {0x800, &(0x7f00000004c0), 0x2}, {0x5, &(0x7f0000000500)=0xb5, 0x82}, {0x8, &(0x7f0000000540)=0x7, 0x82}, {0x1, &(0x7f0000000580)=0x6, 0x2}, {0x5, &(0x7f00000005c0)=0x8, 0x2}, {0x6, &(0x7f0000000600), 0x82}, {0x81, &(0x7f0000000640)=0x9, 0x82}, {0x4, &(0x7f0000000680)=0x345, 0x82}, {0x81, &(0x7f00000006c0)=0x8, 0x2}, {0x8000000000000000, &(0x7f0000000700)=0xdda, 0x82}, {0x7, &(0x7f0000000740)=0x1ff, 0x2}, {0xb5, &(0x7f0000000780)=0xb8a, 0x82}, {0x400, &(0x7f00000007c0)=0x100000001, 0x2}, {0x4, &(0x7f0000000800)=0x1000, 0x82}, {0x5, &(0x7f0000000840)=0xa4, 0x82}, {0xad2, &(0x7f0000000880)=0x8, 0x2}, {0x8, &(0x7f00000008c0)=0x6, 0x2}, {0x78, &(0x7f0000000900)=0x1, 0x82}, {0x8, &(0x7f0000000940)=0x40, 0x82}, {0x80, &(0x7f0000000980)=0x4000000000, 0x82}, {0x9, &(0x7f00000009c0)=0x8000000000000001, 0x82}, {0x7, &(0x7f0000000a00)=0xfffffffffffffffb}, {0x4, &(0x7f0000000a40), 0x2}, {0x400, &(0x7f0000000a80)=0x52, 0x2}, {0x9, &(0x7f0000000ac0)=0x6, 0x82}, {0x8000000000000001, &(0x7f0000000b00)=0x9, 0x82}, {0x66, &(0x7f0000000b40)=0x100000001, 0x82}, {0x3, &(0x7f0000000b80)=0xe, 0x2}, {0x10001, &(0x7f0000000bc0), 0x82}, {0x7, &(0x7f0000000c00)=0x9, 0x2}, {0x1, &(0x7f0000000c40)=0x1, 0x2}, {0x3, &(0x7f0000000c80)=0x88fd, 0x2}, {0x4, &(0x7f0000000cc0)=0x4, 0x82}, {0xfffffffffffff801, &(0x7f0000000d00)=0x7, 0x2}, {0x2, &(0x7f0000000d40)=0x2, 0x2}, {0x86, &(0x7f0000000d80)=0x100000001, 0x2}, {0x2, &(0x7f0000000dc0)=0x4474, 0x2}, {0x2, &(0x7f0000000e00)=0x9, 0x2}, {0x3ff, &(0x7f0000000e40)=0x3c7, 0x80}, {0x8000000000000000, &(0x7f0000000e80)=0x1, 0x2}, {0x0, &(0x7f0000000ec0)=0x2}, {0x6, &(0x7f0000000f00)=0x200, 0x2}, {0x100000000, &(0x7f0000000f40)=0x81, 0x2}, {0xff, &(0x7f0000000f80)=0x109, 0x2}, {0x6, &(0x7f0000000fc0)=0x800, 0x2}, {0x401, &(0x7f0000001000)=0x401, 0x82}, {0x10000, &(0x7f0000001040)=0x8, 0x2}, {0x6, &(0x7f0000001080)=0x6, 0x82}, {0xc4, &(0x7f00000010c0)=0xffffffff, 0x80}, {0x3, &(0x7f0000001100)=0xa01, 0x82}, {0x6, &(0x7f0000001140)=0x2f2c, 0x2}, {0x800, &(0x7f0000001180)=0x9, 0x82}, {0x800, &(0x7f00000011c0)=0x9, 0x82}, {0x7, &(0x7f0000001200)}, {0x6, &(0x7f0000001240)=0x7, 0x82}, {0x2, &(0x7f0000001280)=0x9, 0x82}, {0x6, &(0x7f00000012c0)=0xc8, 0x82}, {0x6, &(0x7f0000001300)=0x7, 0x82}, {0x10000, &(0x7f0000001340)=0x7, 0x82}, {0x3, &(0x7f0000001380)=0x8000000000000000, 0x2}, {0x5, &(0x7f00000013c0)=0x1}, {0x5, &(0x7f0000001400)=0x7f, 0x2}, {0x8001, &(0x7f0000001440)=0x8, 0x2}, {0x4, &(0x7f0000001480)=0x2, 0x2}, {0x2, &(0x7f00000014c0)=0x800, 0x2}, {0x5, &(0x7f0000001500)=0x100000000, 0x2}, {0x4a55, &(0x7f0000001540)=0x6, 0x82}, {0xc8, &(0x7f0000001580)=0x5, 0x82}, {0x7ff, &(0x7f00000015c0)=0x80000001, 0x2}, {0x1, &(0x7f0000001600)=0x7, 0x82}, {0x9, &(0x7f0000001640)=0xac, 0x82}, {0x3, &(0x7f0000001680)=0xe, 0x2}, {0xffffffffffffff01, &(0x7f00000016c0)=0x9, 0x2}, {0x4, &(0x7f0000001700)=0x2, 0x82}, {0x7, &(0x7f0000001740)=0x4, 0x2}, {0x7, &(0x7f0000001780)=0x4, 0x2}, {0x56896ed2, &(0x7f00000017c0)=0x5f, 0x2}, {0x4, &(0x7f0000001800)=0x91, 0x2}, {0x3ff, &(0x7f0000001840)=0x7, 0x82}, {0x1, &(0x7f0000001880)=0x9, 0x82}, {0x5, &(0x7f00000018c0), 0x2}, {0x9, &(0x7f0000001900)=0x7, 0x82}, {0x2be, &(0x7f0000001940)=0x7fffffffffffffff, 0x82}, {0x3, &(0x7f0000001980)=0x200, 0x2}, {0x4, &(0x7f00000019c0)=0x4, 0x82}, {0x5, &(0x7f0000001a00), 0x82}, {0x9, &(0x7f0000001a40)=0x4, 0x2}, {0x796, &(0x7f0000001a80)=0x3, 0x82}, {0x2, &(0x7f0000001ac0)=0x4, 0x80}, {0x81, &(0x7f0000001b00)=0x6, 0x2}, {0x7, &(0x7f0000001b40)=0x5, 0x82}, {0xf4fd, &(0x7f0000001b80)=0x8000, 0x82}, {0x8, &(0x7f0000001bc0)=0x2, 0x2}, {0x2, &(0x7f0000001c00)=0x4, 0x2}, {0x1, &(0x7f0000001c40), 0x82}, {0x9, &(0x7f0000001c80)=0x3ff, 0x2}, {0x401, &(0x7f0000001cc0)=0x6, 0x82}, {0x6, &(0x7f0000001d00)=0x2, 0x2}, {0x8, &(0x7f0000001d40)=0x2}, {0x4, &(0x7f0000001d80)=0xffffffffffffffff, 0x2}, {0xfe, &(0x7f0000001dc0), 0x82}, {0x28be3bd, &(0x7f0000001e00)=0x1, 0x2}, {0x5, &(0x7f0000001e40)=0x7fffffff, 0x2}, {0x5, &(0x7f0000001e80)=0x4, 0x82}], 0x7a, 0x0, &(0x7f0000002a40)={0x0, 0x989680}, 0x0) 13:54:04 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)) [ 471.396820][ T9772] RBP: 00007f387dbee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 471.404803][ T9772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.412785][ T9772] R13: 00007f387d0cfb1f R14: 00007f387dbee300 R15: 0000000000022000 [ 471.420785][ T9772] 13:54:04 executing program 1: pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async, rerun: 64) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) (rerun: 64) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) (async) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) dup2(r2, r1) (async) dup2(r1, r3) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r5 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r5, 0xffff) (async) fcntl$addseals(r5, 0x409, 0x7) (async, rerun: 32) r6 = dup(r4) (rerun: 32) r7 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000080)={r5, 0x0, 0x0, 0x1000}) (async) dup2(r6, r5) dup2(r5, r7) (async) ppoll(&(0x7f0000002a80)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0xa412}, {0xffffffffffffffff, 0x5289}, {0xffffffffffffffff, 0x400}, {r3, 0x4400}, {r5, 0x112}], 0x7, &(0x7f0000002ac0)={0x77359400}, &(0x7f0000002b00), 0x8) (async) futex_waitv(&(0x7f0000001ec0)=[{0xd7cb, &(0x7f0000000000)=0xebfb}, {0xfffffffffffffff9, &(0x7f0000000040)=0x7f, 0x2}, {0x2000000000000000, &(0x7f0000000080)=0x8}, {0x7fff, &(0x7f00000000c0)=0x20, 0x82}, {0x8000000000000001, &(0x7f0000000100)=0x5a, 0x82}, {0x1, &(0x7f0000000140)=0xfffffffffffffffd, 0x82}, {0x200, &(0x7f0000000180)=0x80, 0x82}, {0x4, &(0x7f0000000200)=0x3, 0x82}, {0x8, &(0x7f0000000240)=0x7, 0x2}, {0x80000001, &(0x7f0000000280)=0x2, 0x82}, {0x2, &(0x7f00000002c0)=0x1c000000, 0x82}, {0x8, &(0x7f0000000300)=0x1f, 0x82}, {0xffff, &(0x7f0000000340)=0xff, 0x2}, {0x8, &(0x7f0000000380)=0x6a8ca3f6, 0x2}, {0x8, &(0x7f00000003c0)=0x1, 0x2}, {0x0, &(0x7f0000000400)=0xc7, 0x82}, {0x0, &(0x7f0000000440)=0x6, 0x82}, {0x3, &(0x7f0000000480)=0x1, 0x2}, {0x800, &(0x7f00000004c0), 0x2}, {0x5, &(0x7f0000000500)=0xb5, 0x82}, {0x8, &(0x7f0000000540)=0x7, 0x82}, {0x1, &(0x7f0000000580)=0x6, 0x2}, {0x5, &(0x7f00000005c0)=0x8, 0x2}, {0x6, &(0x7f0000000600), 0x82}, {0x81, &(0x7f0000000640)=0x9, 0x82}, {0x4, &(0x7f0000000680)=0x345, 0x82}, {0x81, &(0x7f00000006c0)=0x8, 0x2}, {0x8000000000000000, &(0x7f0000000700)=0xdda, 0x82}, {0x7, &(0x7f0000000740)=0x1ff, 0x2}, {0xb5, &(0x7f0000000780)=0xb8a, 0x82}, {0x400, &(0x7f00000007c0)=0x100000001, 0x2}, {0x4, &(0x7f0000000800)=0x1000, 0x82}, {0x5, &(0x7f0000000840)=0xa4, 0x82}, {0xad2, &(0x7f0000000880)=0x8, 0x2}, {0x8, &(0x7f00000008c0)=0x6, 0x2}, {0x78, &(0x7f0000000900)=0x1, 0x82}, {0x8, &(0x7f0000000940)=0x40, 0x82}, {0x80, &(0x7f0000000980)=0x4000000000, 0x82}, {0x9, &(0x7f00000009c0)=0x8000000000000001, 0x82}, {0x7, &(0x7f0000000a00)=0xfffffffffffffffb}, {0x4, &(0x7f0000000a40), 0x2}, {0x400, &(0x7f0000000a80)=0x52, 0x2}, {0x9, &(0x7f0000000ac0)=0x6, 0x82}, {0x8000000000000001, &(0x7f0000000b00)=0x9, 0x82}, {0x66, &(0x7f0000000b40)=0x100000001, 0x82}, {0x3, &(0x7f0000000b80)=0xe, 0x2}, {0x10001, &(0x7f0000000bc0), 0x82}, {0x7, &(0x7f0000000c00)=0x9, 0x2}, {0x1, &(0x7f0000000c40)=0x1, 0x2}, {0x3, &(0x7f0000000c80)=0x88fd, 0x2}, {0x4, &(0x7f0000000cc0)=0x4, 0x82}, {0xfffffffffffff801, &(0x7f0000000d00)=0x7, 0x2}, {0x2, &(0x7f0000000d40)=0x2, 0x2}, {0x86, &(0x7f0000000d80)=0x100000001, 0x2}, {0x2, &(0x7f0000000dc0)=0x4474, 0x2}, {0x2, &(0x7f0000000e00)=0x9, 0x2}, {0x3ff, &(0x7f0000000e40)=0x3c7, 0x80}, {0x8000000000000000, &(0x7f0000000e80)=0x1, 0x2}, {0x0, &(0x7f0000000ec0)=0x2}, {0x6, &(0x7f0000000f00)=0x200, 0x2}, {0x100000000, &(0x7f0000000f40)=0x81, 0x2}, {0xff, &(0x7f0000000f80)=0x109, 0x2}, {0x6, &(0x7f0000000fc0)=0x800, 0x2}, {0x401, &(0x7f0000001000)=0x401, 0x82}, {0x10000, &(0x7f0000001040)=0x8, 0x2}, {0x6, &(0x7f0000001080)=0x6, 0x82}, {0xc4, &(0x7f00000010c0)=0xffffffff, 0x80}, {0x3, &(0x7f0000001100)=0xa01, 0x82}, {0x6, &(0x7f0000001140)=0x2f2c, 0x2}, {0x800, &(0x7f0000001180)=0x9, 0x82}, {0x800, &(0x7f00000011c0)=0x9, 0x82}, {0x7, &(0x7f0000001200)}, {0x6, &(0x7f0000001240)=0x7, 0x82}, {0x2, &(0x7f0000001280)=0x9, 0x82}, {0x6, &(0x7f00000012c0)=0xc8, 0x82}, {0x6, &(0x7f0000001300)=0x7, 0x82}, {0x10000, &(0x7f0000001340)=0x7, 0x82}, {0x3, &(0x7f0000001380)=0x8000000000000000, 0x2}, {0x5, &(0x7f00000013c0)=0x1}, {0x5, &(0x7f0000001400)=0x7f, 0x2}, {0x8001, &(0x7f0000001440)=0x8, 0x2}, {0x4, &(0x7f0000001480)=0x2, 0x2}, {0x2, &(0x7f00000014c0)=0x800, 0x2}, {0x5, &(0x7f0000001500)=0x100000000, 0x2}, {0x4a55, &(0x7f0000001540)=0x6, 0x82}, {0xc8, &(0x7f0000001580)=0x5, 0x82}, {0x7ff, &(0x7f00000015c0)=0x80000001, 0x2}, {0x1, &(0x7f0000001600)=0x7, 0x82}, {0x9, &(0x7f0000001640)=0xac, 0x82}, {0x3, &(0x7f0000001680)=0xe, 0x2}, {0xffffffffffffff01, &(0x7f00000016c0)=0x9, 0x2}, {0x4, &(0x7f0000001700)=0x2, 0x82}, {0x7, &(0x7f0000001740)=0x4, 0x2}, {0x7, &(0x7f0000001780)=0x4, 0x2}, {0x56896ed2, &(0x7f00000017c0)=0x5f, 0x2}, {0x4, &(0x7f0000001800)=0x91, 0x2}, {0x3ff, &(0x7f0000001840)=0x7, 0x82}, {0x1, &(0x7f0000001880)=0x9, 0x82}, {0x5, &(0x7f00000018c0), 0x2}, {0x9, &(0x7f0000001900)=0x7, 0x82}, {0x2be, &(0x7f0000001940)=0x7fffffffffffffff, 0x82}, {0x3, &(0x7f0000001980)=0x200, 0x2}, {0x4, &(0x7f00000019c0)=0x4, 0x82}, {0x5, &(0x7f0000001a00), 0x82}, {0x9, &(0x7f0000001a40)=0x4, 0x2}, {0x796, &(0x7f0000001a80)=0x3, 0x82}, {0x2, &(0x7f0000001ac0)=0x4, 0x80}, {0x81, &(0x7f0000001b00)=0x6, 0x2}, {0x7, &(0x7f0000001b40)=0x5, 0x82}, {0xf4fd, &(0x7f0000001b80)=0x8000, 0x82}, {0x8, &(0x7f0000001bc0)=0x2, 0x2}, {0x2, &(0x7f0000001c00)=0x4, 0x2}, {0x1, &(0x7f0000001c40), 0x82}, {0x9, &(0x7f0000001c80)=0x3ff, 0x2}, {0x401, &(0x7f0000001cc0)=0x6, 0x82}, {0x6, &(0x7f0000001d00)=0x2, 0x2}, {0x8, &(0x7f0000001d40)=0x2}, {0x4, &(0x7f0000001d80)=0xffffffffffffffff, 0x2}, {0xfe, &(0x7f0000001dc0), 0x82}, {0x28be3bd, &(0x7f0000001e00)=0x1, 0x2}, {0x5, &(0x7f0000001e40)=0x7fffffff, 0x2}, {0x5, &(0x7f0000001e80)=0x4, 0x82}], 0x7a, 0x0, &(0x7f0000002a40)={0x0, 0x989680}, 0x0) [ 471.717750][ T6926] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 471.768043][ T3677] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 471.967842][ T6926] usb 3-1: Using ep0 maxpacket: 8 [ 472.017855][ T3677] usb 6-1: Using ep0 maxpacket: 8 [ 472.087850][ T6926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.107760][ T6926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 472.116672][ T6926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 472.134631][ T6926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 472.145866][ T6926] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 472.161720][ T3677] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.171918][ T6926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.180234][ T3677] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 472.191081][ T3677] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 472.202333][ T3677] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 472.214265][ T3677] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 472.214477][ T9779] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 472.223435][ T3677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.249623][ T6926] hub 3-1:1.0: bad descriptor, ignoring hub [ 472.255587][ T6926] hub: probe of 3-1:1.0 failed with error -5 [ 472.262075][ T9777] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 472.275837][ T6926] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 472.283234][ T3677] hub 6-1:1.0: bad descriptor, ignoring hub [ 472.289359][ T6926] cdc_wdm 3-1:1.0: Unknown control protocol [ 472.296599][ T3677] hub: probe of 6-1:1.0 failed with error -5 [ 472.304572][ T3677] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 472.310868][ T3677] cdc_wdm 6-1:1.0: Unknown control protocol [ 472.688016][ T8561] usb 6-1: USB disconnect, device number 11 [ 472.914873][ T9776] usb 3-1: reset high-speed USB device number 68 using dummy_hcd [ 473.167700][ T9776] usb 3-1: Using ep0 maxpacket: 8 [ 473.268105][ T9779] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 474.329763][ T9769] cdc_wdm 3-1:1.0: Error autopm - -16 [ 474.339422][ T6926] usb 3-1: USB disconnect, device number 68 13:54:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:54:07 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)) 13:54:07 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) (fail_nth: 4) 13:54:07 executing program 1: clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0xfffffffffffffd66, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={r0, r1+60000000}, 0x0) 13:54:07 executing program 5: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x11, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) [ 474.873988][ T9808] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 474.885763][ T9808] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 474.894190][ T9808] CPU: 1 PID: 9808 Comm: syz-executor.0 Not tainted 6.0.0-rc4-syzkaller-00055-g53e99dcff61e #0 [ 474.904540][ T9808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 474.914614][ T9808] RIP: 0010:release_udmabuf+0xcb/0x4f0 13:54:07 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x2b8, 0x0, 0x0, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xfc, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 13:54:07 executing program 1: clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0xfffffffffffffd66, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={r0, r1+60000000}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) pselect6(0xfffffffffffffd66, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={r0, r1+60000000}, 0x0) (async) 13:54:08 executing program 1: clock_gettime(0x0, &(0x7f0000000040)) (async) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0xfffffffffffffd66, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={r0, r1+60000000}, 0x0) 13:54:08 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={r0, r1+60000000}, 0x0) [ 474.920112][ T9808] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 2b 04 00 00 48 8d 7d 0c 4c 8b 63 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 e2 [ 474.939746][ T9808] RSP: 0018:ffffc900127d7d58 EFLAGS: 00010246 [ 474.945833][ T9808] RAX: dffffc0000000000 RBX: ffffffff8cb682c0 RCX: 0000000000000000 [ 474.953827][ T9808] RDX: 0000000000000000 RSI: ffffffff84ad8ac0 RDI: 0000000000000000 [ 474.961911][ T9808] RBP: fffffffffffffff4 R08: 0000000000000005 R09: 0000000000000000 [ 474.969942][ T9808] R10: 0000000000000000 R11: 000000000008c07c R12: ffff88801f0fc000 [ 474.977948][ T9808] R13: ffff8880578b1520 R14: ffff888079ff46c0 R15: 0000000000000000 [ 474.985937][ T9808] FS: 0000555556366400(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 474.994892][ T9808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.001594][ T9808] CR2: 0000001b2e522000 CR3: 00000000217bf000 CR4: 00000000003506e0 [ 475.009667][ T9808] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 475.017564][ T9828] xt_recent: Unsupported userspace flags (000000fc) [ 475.017627][ T9808] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 475.032243][ T9808] Call Trace: [ 475.035534][ T9808] [ 475.038474][ T9808] dma_buf_release+0x157/0x2d0 [ 475.043286][ T9808] ? dmabuffs_dname+0x240/0x240 [ 475.048144][ T9808] __dentry_kill+0x42b/0x640 [ 475.052756][ T9808] ? dput+0x35/0xdb0 [ 475.056639][ T9808] ? dput+0x35/0xdb0 [ 475.060522][ T9808] dput+0x806/0xdb0 [ 475.064323][ T9808] __fput+0x39c/0x9d0 [ 475.068298][ T9808] task_work_run+0xdd/0x1a0 [ 475.073313][ T9808] exit_to_user_mode_prepare+0x23c/0x250 [ 475.078956][ T9808] syscall_exit_to_user_mode+0x19/0x50 [ 475.085581][ T9808] do_syscall_64+0x42/0xb0 [ 475.090022][ T9808] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 475.095958][ T9808] RIP: 0033:0x7f387ca3bebb [ 475.100391][ T9808] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 13:54:08 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = dup(r0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)) 13:54:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0xa00, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 475.119995][ T9808] RSP: 002b:00007f387d0cfb80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 475.128411][ T9808] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007f387ca3bebb [ 475.136395][ T9808] RDX: 00007f387cba0428 RSI: ffffffffffffffff RDI: 0000000000000006 [ 475.144373][ T9808] RBP: 00007f387cb9d980 R08: 0000000000000000 R09: 00007f387cba0430 [ 475.152370][ T9808] R10: 00007f387d0cfc80 R11: 0000000000000293 R12: 0000000000073ee6 [ 475.160335][ T9808] R13: 00007f387d0cfc80 R14: 00007f387cb9bf80 R15: 0000000000000032 [ 475.168331][ T9808] [ 475.171365][ T9808] Modules linked in: 13:54:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:54:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0xb8d, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) 13:54:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}, @IFLA_LINK={0x8, 0x3}]}, 0x48}}, 0x0) [ 475.287995][ T8561] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 475.348258][ T8562] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 475.407673][ T9808] ---[ end trace 0000000000000000 ]--- [ 475.413288][ T9808] RIP: 0010:release_udmabuf+0xcb/0x4f0 [ 475.422702][ T9808] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 2b 04 00 00 48 8d 7d 0c 4c 8b 63 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 e2 [ 475.446414][ T9808] RSP: 0018:ffffc900127d7d58 EFLAGS: 00010246 [ 475.452830][ T9808] RAX: dffffc0000000000 RBX: ffffffff8cb682c0 RCX: 0000000000000000 [ 475.464754][ T9808] RDX: 0000000000000000 RSI: ffffffff84ad8ac0 RDI: 0000000000000000 [ 475.473061][ T9808] RBP: fffffffffffffff4 R08: 0000000000000005 R09: 0000000000000000 [ 475.486000][ T9808] R10: 0000000000000000 R11: 000000000008c07c R12: ffff88801f0fc000 [ 475.494323][ T9808] R13: ffff8880578b1520 R14: ffff888079ff46c0 R15: 0000000000000000 [ 475.505546][ T9808] FS: 0000555556366400(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 475.514913][ T9808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.524763][ T9808] CR2: 000000c0061c1000 CR3: 00000000217bf000 CR4: 00000000003506f0 [ 475.533317][ T9808] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 475.541950][ T9808] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 475.550322][ T9808] Kernel panic - not syncing: Fatal exception [ 475.556595][ T9808] Kernel Offset: disabled [ 475.560914][ T9808] Rebooting in 86400 seconds..