4edfd0218c4bb3f8ffe754482f48f582f3d70a999546909532b3386ff819dd05ca54c781d33ca2a1eac8164187e3dbe365fb6bfba95e3d401f66b979bf2e4f5f18e612fb9f6076717579396a4a128fb855fb6f113c19ab3023bd6828ed3aa0f4c254a5538074195dcc96b49bd0b419ae46c79c67d4d4931ee94005e80af735039ec713ad518ac57495bc4215e14c4a82aa80f8f102b1a6682202669140444860cac1c379e0bf5279ce8e73a5ff3bda257a40bad320a9a01022ee1c468aab2ddd8951cfaf55cceb64888f11149f46722e773220adf4da1629c13e44f4b892269936f141c7921b915af036cd1d5d89cca6cac76a6c5bd80244c48e9a8168f74628498137a0b6815ece8245545755440ef91b6bb3d651a4aa057d414c4033cc25d8c0d59781f24da56c664a851eb7bc974bbe9ce316d117179dbeb097fe18889eab18b0ffe5f6faa95158018d6fdf36053664b38edb5e57391c4b8d815632d8f99aa226dcc0f7869134bbe4db930871c8359a6fc1b1af604b461d27bf17a813001e8d8c17a128810f64899f16446000293eda8fb9a73f4377ddc76c7607e0f37768031f82e93f73d995a776a2730a8c7430740055f725695558d900e5b18db49667bcf60be62df9626ea5513531b98fdf15866fc2eb308d9d3137702fe2ea51114235b6e304109c366671824e47f8845ea3b7529d23a29f990dc5860453cc3481dfe625c280057c4e7c9eb1229c0161df78c7462ee92373314cfda7f44dfe7664ec166e1105f6198eb24836d59632f340c0261b5b043859d71a309145c8f44e26a14d2a449634eb5538e5f72e02009f807c13ee5cb4c636967c66f201fe4bc1a8531534d41a27124f39039fd6b19f275aed72adc07106871cc4e8f354d3ade677928a61f094ed5202360e336846fb84f76619f887c1ff65c22ecb4319d572b05f4125ed8b5907b6b4ec5600d6c01a6faccc637331be02eba3fc52109e8faeaa8037851a53d66b3fc622ee8d9cb665a762dd2f595ddfbbc1184cafab393f28ef927ddd9a1c1375f60233ed7a85112e35d3bcc32da8e6b5b6045969d8148f8b41e528647bcb7de3f518679b382c048fa65afb20a1f8e32aa68d706abaf7ac482f3e69c997f583b50ed8b9dc0ebb949470a4dc1e371b05df0c424ff18d2a8d28588c76b267e2ed1fcab4c750fdafa352c0f4f068b7969f6e373019c67f7896fa46c7cafd4a8f1336240519c2ba4957425abac3bfc90a26bed117cc7b50e00a7dc5001bc2092eb3beacf3820e6d120b904431362f6e77c2ab04efc0e7a63281cf992f0f1619de7dbba9b61b3058b3f90c78e6c4f4b3c9e9b041d2ff7ad8570999130a4ef33f332945941f5fe12ea3a70176e01ba646cb0337b786e34aada545ca65c5f06946fa8661ca25a1ecc5f09a40512d6d0c97415c56edd3c99f64816604a59dd7dc4517e8598e4caccf0c4c1e1c00715928ba72f1e6384df26880e9bab9260e17f22b8726dd8d1533c19fecb13b2745c5d88c83261152400f290bf1a5e5a5b3da93023b2ba11673b3d240d4231287fc44c94f8a858db9d7794e55517bd8d39fdb162b389c1cbdb4cecbe81c7af8d9bf8f102c33b386677102c0b70848cda747d131d0ce003f4c845f0350e612fdbe8527361d0e670c95c623145436065ab6e67e617304acae013cd4b816a932204f1542fe72cda5b352261d0d3256febab4cbfcf8c9cdf0fb007bd69f508af631f3007cfbb4b13ab0615808533602508e79096b7c97dbb95539ed9517b2f4a0c9c1cbdfe8f008faeb23f9f0e5059b624a9f93535a98f049120bd92aca76259cd5b172014a0e0319d3fd8b9fbc6d9cfac99c37f6737c91dd31ad5b3c8004374e611c033d704f0a42e8f5d9c4defbdf14a0cea4225ff59ff91c13862e8aaf1d1fdab96276083be8f0e2a66fdd8ce6d06064f7af60bf94cd6e7aa62172b17b59e02232cfbf7c0e0e6243a92e1f89c29564aa3742892706b0e9c15e214d117b4b9cb9728466084dd6ae0d829c76ed2dde0f6a8935378e190b2e32c05d1720c3f788c74fa74f36f71373e4de1b035430aca379e81a138d8d8604cab86be8d75789995975788bc503ef8cc112cdf6267f5b08bb320fc3862a676fe6a3e4667565419395c0af38d9f45987bd44fad43c4933c33af9d1e2f8c66ec3a3a23e294998fea7da306388062481a18be50b5302217fbeafe0ff65417e3749adf25c6cce60159d70a9b8de3d3f80c894b791a5e9264a01b3270c6c846bd56b0d0d96c589ce951f66ce3bb1baa152f6e6f0dd25930b1522c578903ebc1f23427e2e523ee9d805ec61d551d81b3285b4a7c79889f39a351207314ac1eb0335ecef58dcf0bf7574d18ceffc1b15aa2cc13b026e4b59022130416d4c1768437978c481356eb6c151f19666cdfe87199e98e8093aab6c713fd05b672abd7b6f942f3098ade6ec70aba57c39772b3fc1410c6b3bbb2c9fdfa05741a047aa5b94032fd94572d1470d9158c6415945e094917305adc7f8bbab6b9c497c3f10acdda00889fa18b2ebe57c54134f3bd054c66b2216c9bf4c5ca097b95ca62d5c51d4147da206bbaaa48d18b1b2b05cfb19f2b8e7aa06fbafa2d0b1a3177915347518f8d502824ca858dec614c37f07f45d8c65c18f06fe7ccb2531e0bffa219649aaea6402c01aa79cb8a7ebd3377adb4cbf38f63f0ace0fac85d3ce8899ccc555ac0fb7610204198e2be9972e0a6fba11f5461de1c91cbbeb9e8a149f30125b11b5a449d5c230f8fa7721fbe9a4e3545351345b1e335ec2558622b5e845c78d935487183e097ceb27c55262022b27a7cc8ad1d7d95eb737a982d555dcbec29f31efaa026b8d89cca7ea7b59c9c5064ff7324211b175bc5fff261cfce1fc79e75febc3c33462c4e7bcb33332ebf1cc7508c05084e6a4fe6de39888f53c2d62c95edbca35db82b297a4e53af02fd531f35f4161d6906ffde22aff95d4e3c173e22580629e8b8f6c7014e4644763c6b2ee28cea0b61afc5789f18ca1010d956100bbcc500864ce304714cacd0c10238228bbcb4c764a0d131dc81c7757cbd39dbb598408e6e99c769c70c122437841770a05d575a46ef3a8ee3fd92d9dbf3a77f325e661542b788ea68a81bdf1e3dbe2cdfd63ac8a39b2e7c3041099e6747ae29f747693b38a7171479b5a73838a3a1ee3bf19082ee0d79370865cd859934cec12ab0276c130b64e76ac1d536145d9d9d84a5db1e605d9d8e3cec81bbdc616dd6e9371aa0692e7e473215017b263affa0100fe84abcd6e0e3159fb838f9916ae47e49def811c948bebdd8e3d042fb358a28a9fe8367196ae5176443d7b9076808d8763713a1c024044efbb585b153c075477b7f4674c5288271c8080aec4a2d75eccc9d629b133ae426e6de0b5504865b6c627ee67d2231a8ce8ab8329b33e7fd4fdd049ee7c05b8b8aae1cd2a0728ceb6ad116bb3ece44b196d226539bd8d75ec23fdab7727bb9c00cc06edf01cc62fd5808aa8f05a29f45acbbc617deb05722c78e8c8ae4a5459847cacfb6d1eee552f5fad6dd3bd58801dcc6e29fc1d57007390cfd06a30e5f0219b6ff406640207fd07f120578a4c713a143732f3925835ea8eeea686a835d2d25befc40561aa6a30bfc7ccc839f0aa3af9430500f82b3d8d568716c2b44a5a35f6ab5d86bac1bd7bd1b675c9dfd3cb346eb3e41ac2f253899134a153c3fb62563cf19d074196c677bfc97423b0d8623f6b0bb839588f23673f3a7b29ca103945da50b36c9f9018e01e1c4dbdceb0a091daf6631ce2b312c391905dc9e984babf72229cb3ffe431df165ea6d95e79e8e2b83fb5b0ec7b0af4370fb0f743595560fed169c8006f7c9ebbc3b4c5737e448d8c6d07fa867ec6eaa1d1930cbf8a71082498c872a06e2e2df8c45e12bc5e7122a0f303c740bbaaafb36893576f34f4f1dfefb2a23d9462054905733e5ed8d32ffac80cb341dcf62de469454bcf19f2fcbbd22816ce7525324e3a78e0398ff9d6e2f4d6397f444adfa7537b573aab3845956dc7903a170efca65eb6f79947bae092ce05f1d3a7d3687d4777a57f2e4a7852c11529f39cca9de7421aa62d9bdf301f58af641d1e0559e869cf070a954b838f82be1be952902465c3e64998d84193415ee04d834ed8fd7e0e9d6a52599c7d2018fa93d03b559c627ac6ce5f97d63103af9e2c297f72b8438899c3db9ebed79e109bcaecf3cf81ab2c77fc49cb8171e17f7f2e6bd8ce486792ed65f822c1b2fb6c225843eb348c118f386530da165ab4a7c27bb020422bfd41b2da1875171b036d1e0bef0f7257c11f1c803cbb4d611344296f2fb2818502f47c9afafad99f36e8b9297a70b177b88c5aa075c473beb81c4f131b41a19d1a16e9c33493147582de62f428d573aa8c152739afbbc904b4be69e5e73a8a9ecc77c9e7dc8969565086d569f3daa4db5a9e9f01f2f1695eaf85b4a7822887598b8ec9c2dc006d3a20e35d110e884fc421b53208f8b5cf45c79582b74727e0e6ac7c869a93f20e383e9ee49a0e41c9aab3f3d87d3e1d8e0a310432bd8523c4e7d104cd89cac2ee1223a0b6dfc2eff73181b8ab499b3dde29e3574af359105a0fbc2755410d83115cc294eb1ebf83b9ec65b550bb1698b49ca85f89050c55afc61d6e5921eaeb99897c505bc160e2ff598aa41a10540058d05bb81d0a86fa03aa6771165fda911c4b337d0d2adfac513c49b7b9f0193f88650d3de23fa7405a53484b98192be7cc9757818ff081496f9a627829a621a5b5b46986a6a3b0d28427121f6d976da4aca8f46660a6794a3fd3a43fb528bfb0b9641e5c3a1646ea078844a0e96e1ae5ed2431d79b831da85ad694046e0252d5d6502ff71ddd555967f7189c0c6cb430fa64b28f25bdce56248745627320e24dd3a1074390b741e1a947f22b9957ac8896e1cb462e255950c1ac2aecabfb25a9f20d6ad205d4fec749e09b51bfb6dee7c16eaca2733446ea34bfd3a270ed1a4f1652baa2e16f6c978037fb0320a214b216d4b4a3f25a4062f21140e43db9b9c01c9c381b7d8541d29a43e12467f6af13d8f7e0f6830afe567cafd6df6e5f2b5b03fdcab2ab7803adf5b9cf361cb212dbf184d23096252bdccd6be380b1c9f34141813f19fd3f10c4756cdb1453411c39c1b921879296b2222a45472ea0a953bb06c0ed1dd69059fbcf42c820dab022994fef4cd885b486f761c0149e405f328da3a64181eab7c5be4674ed7dc7a395674b592f91ec45b3c903f30c3fd6bc277d35af221b740df859f4f0fe0f4950aa4ca32327ddad8492e6bc04e5912d8b4815e7456680eeb04de1a94c3af3af88fb93e313f1c8e3145c4e8c6a95ce5ab76bae2d88032e5aba5b27d0e03b593d03e0298754f19e3df0b03642342bd3815ec0a3bc47d9e660787d0549c3160e6e077ba7d23f3deffb407538041cfb8d6e03348e3cbb4e2be9dd1a596538d62c207ce33cb7c592b6d16bfbbc995a6e1ff1334bc6779ae35b36a27bdaa3ebda3ca29bb48dcbbed29adb5e22101e0010f525a84274091c723f911891b5cd92b75d8e7a3b6f07393dfa47b53daa3819fa8210f4efaafe5c2d2e172df5e14aa90badb86b47ff25fa28d0716c013458a8ed1624e9494b1bb4e0d6349c1837f1161379d74360d425291683c1ee57382d9830b437090063b0c27f62f3f36e9a6e01a4cf004870363a191d02040b59a8b73d51a9f6015dd2e4120a0ea6396dc445a507a23a0ee86612df1729ec28107fae1543af7a1f51b3ca8f9881567fd15a7e3460c42b2de75684878e070cb9c83fb273afc10993b16eb43d1242c3fa07be18a06dba434ceaf5fce85ec16030c74f1839da461a3bcbf98e726874263e027cf4955e8ec206e5619b2c3dd6b576046debe3cf17f65b5bd02903d94f1f1c31bc53ff2478ecd4bb1a6cea12f5498f6f0d64a37126bdb9d53e6dd2ece9724a623263074f173423d0e12ed08dc3544209c24c2d2abd76acad888164142510823177a034bc415841230a053d3b726de6bf437d3844b4232afe67941346ec141ae9277bf5b90a655aa25053fd9b05167aebd05a839fe42f33d614dd7c9a08bac9ca9f1da4bb194d8b69a82b13a4f654590271b852e5dd5f628b1d1535fb8c36e4820570ad258d00246cf5d6f26c4605e9658e5e64c58d507443cf9cea087cb85a9b728bec675f4904269481a606f55620489429ae6ec872aefb177d0017b87cbc57983054931749fa64534e7f11a564d67444b11f69dfed83a9a1a974139d4f337c4d3002f23e1f71022e1067f3d58f945535d94f8c927b2062f7d6ba15fcd264e8d5453ad092a2a0f58d040088bd546e07fc8cd227414a7fea477b122cc366cf1dacae276acc592a39784753ffef8332924f77b12ae1e99ab62c26777dcd8bfe9c8cd53595d22e5e9a06a0d20d8ea251c521407577caff5404a1ad812cb2330b5b3679663157507633fb0e054c0c74bbfd23470abbdf0396d7845d0cead8936d91f387cbcbbc21c037b1462bb8bd7a8e1caf9ea0625c9601871db756545f3a7383d48f0233c6d5c1aa7ee8b9ed0c87110252afdd965d61a7d70aa78cb4ac2fc4e58d3a3151a9d65b140df7952903e18c3b05ae73040d379aae2fe2e60167243530f37811e4950dd5da2d29377c1f5717722ec1e0c4fbd1d0e0b76c22a9b7cf97536ed64709cfdf66155fe0347c762c9ab3010e1f80eacd6e9a84ff6c74aefb57ebfb92ea60ea482fe18574b9e9e23a6a3c09907e3f6027b5fb637c20a31e0cb4efe64e9c2a16b6a4b52216396dc65cfa0b0130475c538c049d07d88cbb80d9058328288f8cacedcf3533713a4481f53dcea863a323a803fdfeb460232b5d8ea5339e57034c132126a0dcc2987e57bf52b00f2bcc7feee62027ccc48d18ccd863b597a557aac7b63951db1a535c6ad92543dd572ee763f9abd588fa83c1a7d652b01ff66af6e3e9ca50021e4b83090531359ddf1f0fb00c62782a42f32260e76392abb3d3000531a38f85214e2d065089c48e573e9e350951a4771831b43479f289fe1b283f0d00f865625d721800d8172c7c1c440f7c7eda7e935ff8edf9328332e356a137cae532c1e8041112d885709b9c1bfcca4e6df1d18afa87563815b6b86d0b82bc5ed22ae30bca6ff632b361eac835db2fa536199c8bdd2c36402b45d0503b00d9fff48291a20761490fefe00110fa50d1d62cd717b0469efdaa5012e97ccfce707cd33d7645085f12af9021f5aa5081e535aed753c7543f6509555cdf8644c19eae4d8026c79ed21cbb1e9d85f50c1d21aa1bbbdafe5c47058f76355bbd44898637d92ca7e48d478f3662d375f72ab14af979c04ead0f082416779625bc68abdb30704313bf56fbb19cee0412304c15309706b9c047db75ae677ad45d53918b0474f7b4cf8d30053e3c457c4539dbb286a1b5d7030cee121e47c4bda566ae6eede6d893e8762989fbce866e89e0575baf6e649461a3cf0578360eb56314ad0091d724481ffac276a7ae4f88e57a4ecf7e8e2fb2e1502d7426c5c907cfc0103fab0e0c4b787dc05aa362dade47de70bceba76d8e07910f7c104566dadc94fb5b3a19060d5d8b6a2f8037158d1b7afb0f2e9732cea0f266ab7d1f637f0844477a979cda63f96901c105c204615d0fcea1152bb2ea88fe545952f5c0a1c6ae8598c90f7951ef4c39a1c8fbcd44ddbf6168318a34d8e10707b8a51ddc9672ccfb76c56b201a9d10458d60e46928a55188e89ac251980fd84d6ec88900a49bb887f6dde6d15894db9a38e0888cbeb2b58278eefe20cc3cc910f2ad148ef69b3ca3d2956f6b05da2258711c2478f95a8586bd1ffa4851bd2a694beae331181a3db35860e012f41983f2fc0cc9bfd244bb534c369a28c8bf382c77ab20a1d98601a38edd7f8794143fc24574ffddf584ec0520bc2ae98adfd875ad53d5e60dc29d80a787d1d92f770ba2215495b50276f890c5aaa80bd7985712c06796eecefb27fdb76d00c215da6a615cdd31814e483d1f7620ceb577eed69637023107d4b19910a7a009ad448c90609e6941d6c2b2c1fe576ff5e6910236ea364b190eb7c1ad8dd1e504c7aa1ee9661a67353ed140c24ee1ac734273e2f24fab97b64048afea122796e742775fadab692ae6278599a8d5a9a1f8a2ab57f022a0c856bde87cf63e09afc72ac7b1c9119f2810e803edc6eeeecc0f30bab3e92b7d8793bb9eb5c33161ee903d5c1114261ae7d8e744486653e3ef6799d23bf5f9a064869e1d26d54658c02d4ef855f03e6ab3f19de61262b3292f92578aa10252e08c38bc835c325bf30694bdd1000862717bd94370ed19f92f16eb653bd346111b57634b191724f9219dcef12bd15aceba6fb71ed4484af67c469db3a46507de8822a738500f597dcb852c1a2ef5ae303a9adc0f4eb32256fc4f0e98b4d69b0c70e3d01cb357ad1d39707502441c6c656b6e61a62a31bdbcbc6917d2689c8495e43acbb54615883ce67d87d73cdde3b3556e9b179d587d8b285249d2ca76b407fe5fea87ee331f419eb81b4992f89091eb9b959b9aa8dd5e7093e39f0cceb982b6bc04a65ad0e93db35aec2acdcaf9778b61f1bb60ef3eabcb233f284d355e83eea4e77c83fcd05d30cac0bf2dadd62ed928f04450d3a94d3456e0fa8ac166e2eb7f41e73922b63549989a9832adfa746e0505321708e2ef7aed4fe57bfc6a534c55adf15eada171591028e07ebec5431de5173690d46b702fbcc697b063fed279da1091a5d5ebd8d3fbcd32c7e3284d5388ff9dbc3d157939f56fb6f9076b5c840f81ead2ec34caddcd293e0fc079bd610598d392abe773c7e27b4c9a9b2f2dcd015d2fa2512f752abd2b2dadd2fee17316bb1afd8434ff5db433ffc613741bb6867670c83768252c31ff8d5f5bd652714035ad39af3276b0949fac4bc8e2c7dd04aa4c5d4736af43745b8ebdf535d4eaebfbd5e71c1ecaea279d5f0cbf1aa50e41a2396b4b026542b366b687fbe0c8add4cb6c162cd27afe296d6c161ed076f630e6d9c04711b2fdfc81a8ab54d3050afb6745d5ff10a50159c8554c1cd878fc02c0a3e8da3a44dd0a2bacf78f22853a253cf13ac4018561c1a9fb1b74b866a7a384355c651bc3315c0abeeda0a168", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000380)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:53:26 executing program 1: openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000000280)=""/7, 0x7) [ 221.764841][ T27] audit: type=1800 audit(1669067606.349:5): pid=5437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="/" dev="fuse" ino=1 res=0 errno=0 [ 221.903073][ T27] audit: type=1800 audit(1669067606.489:6): pid=5439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.5" name="/" dev="fuse" ino=1 res=0 errno=0 [ 222.158936][ T27] audit: type=1800 audit(1669067606.739:7): pid=5445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="/" dev="fuse" ino=1 res=0 errno=0 21:53:27 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x3, r2, 0x4007) 21:53:27 executing program 4: personality(0x24ae02a0ffffffff) personality(0x410000e) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x1000}, {0xffffffffffffffff, 0x258}, {0xffffffffffffffff, 0x10000}, {0xffffffffffffffff, 0x61d0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x21}, {0xffffffffffffffff, 0xee02}], 0x7, &(0x7f00000000c0), &(0x7f0000000100)={[0x3169]}, 0x8) 21:53:27 executing program 1: openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000000280)=""/7, 0x7) 21:53:27 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) getsockname$l2tp6(r0, 0x0, &(0x7f00000001c0)) 21:53:27 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000e400)="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", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000380)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:53:27 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x6) 21:53:27 executing program 1: openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000000280)=""/7, 0x7) 21:53:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x3}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 21:53:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1b) ioctl$TCSETS(r0, 0x5402, 0x0) 21:53:27 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x3, 0x0, &(0x7f0000000080)) 21:53:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1b) ioctl$TCSETS(r0, 0x5402, 0x0) 21:53:27 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)='id\x00\x00b99\t3\x00\x00b310e') [ 222.697942][ T27] audit: type=1800 audit(1669067607.279:8): pid=5465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="/" dev="fuse" ino=1 res=0 errno=0 21:53:28 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x3, r2, 0x4007) 21:53:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x3}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 21:53:28 executing program 2: r0 = socket(0x1d, 0x2, 0x6) setsockopt$bt_BT_FLUSHABLE(r0, 0x6a, 0x3, 0x0, 0x0) 21:53:28 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x86, 0xce, 0x6d, 0x40, 0x7ca, 0xa801, 0xf3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x20, 0x4f, 0x41}}]}}]}}, 0x0) 21:53:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1b) ioctl$TCSETS(r0, 0x5402, 0x0) 21:53:28 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)) syz_open_procfs$namespace(0x0, 0x0) 21:53:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1b) ioctl$TCSETS(r0, 0x5402, 0x0) 21:53:28 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="93c231f8e70359dc38a270f2abbd51f97b457db6bdf9a473025e4f696f3727cafa00f10f76d4d89a16c0cf4f2103654ed00cc4c011aa11be4b2e33ae06f6755b6415a443f3958cc09e", 0x49, 0x0, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) 21:53:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x3}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 21:53:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3f86, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioprio_set$uid(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x94, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf60e806f48f99569}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4091}, 0x10) getuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB="f6", @ANYRES32=0x0, @ANYBLOB="2000aae6521a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES64=r6, @ANYRES32, @ANYRESHEX, @ANYBLOB="c9d3c0cc0baa73aac026bd5d0439867d87540b1366589eac0594cdf9e71d443317178a3109abba5589adecbbcf977e7071338aac1bb1d775ad0792b6712a2b55f04d8b00001ed7480530a0223918ac7c4181f7ad248fb228fe9a0f4c566d25241340ee425091801603cbd8bb83cf249450436283502d09aea4cf5d4c01243e5cd6ddd9ec749a71177c2fb2231ffcb4b82e9374d75f8aa49c59e2579efbdd38a4479bb56cc8b9301974badf1400e097b5a407", @ANYRES32=r5], 0x94, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00'}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0xf1, 0x0, 0x0, 0x0, 0x5a) 21:53:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x3}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 21:53:28 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="200000003cc24bd7e57a7760295aad2f7d50288cf0945b27f98d8065eaa8e59b324806793dd87b89de41cbfb38e1571400000000000000000000000000000000cfa8f1af9bb215a3b4ccc390a04806e2e4fcf7277c260c38976d3e443cf22c7afde5cf34ff993096b553dc302d1398fe501bfd0d61a224b13d0a2865393b84fbe5749e132605c7d7d761db1c209bffcc4acecb323b0480ef65b6ee1260", @ANYRES16=r0, @ANYBLOB="a00029bd7000fddbdf25830000000c0099000400000010000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000c010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ad4700000000000000000500000004000300", @ANYRES32=0x0, @ANYBLOB="bcbb20d36d7709b76fe2056aed9668ca3c02e4be3dac03dda05fe169dcc8cf"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x278, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xef, 0x2a, [@random={0xbd, 0x30, "2ffc05a31374b8fee2be269cb393eb1aba854c38f0cf6821a2b9133fc1cdd85eef4ffdd49519b8352df8924291c80d9f"}, @fast_bss_trans={0x37, 0x77, {0x8, 0x1, "3d74bee53ed0531bb7248ae1e0c4a1e3", "f5198d31f51b755fd651aab30bddd1cb76c86e61feb3f4bcdcd03d03e11d43c2", "6ea8a81639af6e5d9ea63ac65e5572e1c98b84f4300aeb036db5d9ddd74f99e7", [{0x4, 0x23, "08fe99147a9c986bba66b4782398c4668bfefe4067a1e798d667cd261e01ad35d76c59"}]}}, @measure_req={0x26, 0x3e, {0x81, 0x0, 0x9, "ec8ade40207b18996cc7a1dae0170e496078a4545f7ca6ccbccf76c179675f58b614b9729a60f2df3257216d0db79f0305f97c697696d7ef292102"}}]}, @NL80211_ATTR_IE={0x13f, 0x2a, [@measure_req={0x26, 0x70, {0x1, 0x0, 0x0, "744eb99816ca76d5ddeabce6c07a0cd6dc1a514d45a42366c9bcc9d25ac374f1abf725b0181bb63f17b4cf85c7c690bc0fcbbe9df9556c7885e6c7af89d264fe13662509499ad1426dcd0e0404cfc869704f6fb3c90948fd429852dacf61dec1124052c73f0a2856b50ac8763c"}}, @gcr_ga={0xbd, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x0, @device_b, 0x0, "", 0x0, 0x80000001, @broadcast, 0xfff}}, @fast_bss_trans={0x37, 0x8d, {0x80, 0x3, "2b532b8f6f3ef972f6217a5a7cd7c950", "25d59a28a0dbef4a9f3d5d03b522dedeb38a789bc6a0479598d50883e8be04a7", "7f0d10bf0e3131ddca65dda81fcfca3900fa456c551d646acbf0fa50439beda5", [{}, {0x0, 0x10, "978b299069617648ea9cbc5b250a4732"}, {0x1, 0x25, "16927bd995e1ce93f4d3370c78200ff9f74dcdb7dd17e9815d1a919bff67af2fae7e628f0f"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x4, {0x1, 0x5, @void, @void, @void}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x278}, 0x1, 0x0, 0x0, 0xd7c3f4ed4816d2b9}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f00000007c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$lock(r7, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, 0x0, 0x14) sendfile(r6, r5, 0x0, 0x10000a006) [ 224.012081][ T5436] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 224.133639][ T5505] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 224.251983][ T5436] usb 2-1: Using ep0 maxpacket: 8 [ 224.372257][ T5436] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.410511][ T5436] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 224.493749][ T5436] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 224.530530][ T5436] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 224.578201][ T5436] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 224.621410][ T5436] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.693947][ T5485] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 224.713940][ T5436] hub 2-1:1.0: bad descriptor, ignoring hub [ 224.734947][ T5436] hub: probe of 2-1:1.0 failed with error -5 [ 224.772213][ T5436] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 224.798356][ T5436] cdc_wdm 2-1:1.0: Unknown control protocol [ 225.364429][ T5485] cdc_wdm 2-1:1.0: Error autopm - -16 [ 225.376567][ T22] usb 2-1: USB disconnect, device number 7 21:53:30 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x3, r2, 0x4007) 21:53:30 executing program 5: r0 = openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000001c0)={0xa}) 21:53:30 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)) syz_open_procfs$namespace(0x0, 0x0) [ 225.551842][ T22] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 226.112144][ T22] usb 2-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice= f.3f [ 226.127140][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.146439][ T22] usb 2-1: Product: syz [ 226.150840][ T22] usb 2-1: Manufacturer: syz [ 226.160413][ T22] usb 2-1: SerialNumber: syz [ 226.182166][ T22] usb 2-1: config 0 descriptor?? [ 226.227398][ T22] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 226.258596][ T22] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 226.283160][ T22] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 226.293017][ T22] usb 2-1: media controller created [ 226.305124][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.345425][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 226.352765][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 226.358728][ T22] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 226.542321][ T22] rc_core: IR keymap rc-avermedia-m135a not found [ 226.549259][ T22] Registered IR keymap rc-empty [ 226.560537][ T22] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 226.590013][ T22] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input21 [ 226.636407][ T22] dvb-usb: schedule remote query interval to 150 msecs. [ 226.654631][ T22] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 226.668603][ T22] usb 2-1: USB disconnect, device number 8 [ 226.733919][ T22] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. 21:53:31 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x86, 0xce, 0x6d, 0x40, 0x7ca, 0xa801, 0xf3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x20, 0x4f, 0x41}}]}}]}}, 0x0) 21:53:31 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3f86, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioprio_set$uid(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x94, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf60e806f48f99569}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4091}, 0x10) getuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB="f6", @ANYRES32=0x0, @ANYBLOB="2000aae6521a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES64=r6, @ANYRES32, @ANYRESHEX, @ANYBLOB="c9d3c0cc0baa73aac026bd5d0439867d87540b1366589eac0594cdf9e71d443317178a3109abba5589adecbbcf977e7071338aac1bb1d775ad0792b6712a2b55f04d8b00001ed7480530a0223918ac7c4181f7ad248fb228fe9a0f4c566d25241340ee425091801603cbd8bb83cf249450436283502d09aea4cf5d4c01243e5cd6ddd9ec749a71177c2fb2231ffcb4b82e9374d75f8aa49c59e2579efbdd38a4479bb56cc8b9301974badf1400e097b5a407", @ANYRES32=r5], 0x94, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00'}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0xf1, 0x0, 0x0, 0x0, 0x5a) 21:53:31 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="200000003cc24bd7e57a7760295aad2f7d50288cf0945b27f98d8065eaa8e59b324806793dd87b89de41cbfb38e1571400000000000000000000000000000000cfa8f1af9bb215a3b4ccc390a04806e2e4fcf7277c260c38976d3e443cf22c7afde5cf34ff993096b553dc302d1398fe501bfd0d61a224b13d0a2865393b84fbe5749e132605c7d7d761db1c209bffcc4acecb323b0480ef65b6ee1260", @ANYRES16=r0, @ANYBLOB="a00029bd7000fddbdf25830000000c0099000400000010000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000c010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ad4700000000000000000500000004000300", @ANYRES32=0x0, @ANYBLOB="bcbb20d36d7709b76fe2056aed9668ca3c02e4be3dac03dda05fe169dcc8cf"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x278, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xef, 0x2a, [@random={0xbd, 0x30, "2ffc05a31374b8fee2be269cb393eb1aba854c38f0cf6821a2b9133fc1cdd85eef4ffdd49519b8352df8924291c80d9f"}, @fast_bss_trans={0x37, 0x77, {0x8, 0x1, "3d74bee53ed0531bb7248ae1e0c4a1e3", "f5198d31f51b755fd651aab30bddd1cb76c86e61feb3f4bcdcd03d03e11d43c2", "6ea8a81639af6e5d9ea63ac65e5572e1c98b84f4300aeb036db5d9ddd74f99e7", [{0x4, 0x23, "08fe99147a9c986bba66b4782398c4668bfefe4067a1e798d667cd261e01ad35d76c59"}]}}, @measure_req={0x26, 0x3e, {0x81, 0x0, 0x9, "ec8ade40207b18996cc7a1dae0170e496078a4545f7ca6ccbccf76c179675f58b614b9729a60f2df3257216d0db79f0305f97c697696d7ef292102"}}]}, @NL80211_ATTR_IE={0x13f, 0x2a, [@measure_req={0x26, 0x70, {0x1, 0x0, 0x0, "744eb99816ca76d5ddeabce6c07a0cd6dc1a514d45a42366c9bcc9d25ac374f1abf725b0181bb63f17b4cf85c7c690bc0fcbbe9df9556c7885e6c7af89d264fe13662509499ad1426dcd0e0404cfc869704f6fb3c90948fd429852dacf61dec1124052c73f0a2856b50ac8763c"}}, @gcr_ga={0xbd, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x0, @device_b, 0x0, "", 0x0, 0x80000001, @broadcast, 0xfff}}, @fast_bss_trans={0x37, 0x8d, {0x80, 0x3, "2b532b8f6f3ef972f6217a5a7cd7c950", "25d59a28a0dbef4a9f3d5d03b522dedeb38a789bc6a0479598d50883e8be04a7", "7f0d10bf0e3131ddca65dda81fcfca3900fa456c551d646acbf0fa50439beda5", [{}, {0x0, 0x10, "978b299069617648ea9cbc5b250a4732"}, {0x1, 0x25, "16927bd995e1ce93f4d3370c78200ff9f74dcdb7dd17e9815d1a919bff67af2fae7e628f0f"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x4, {0x1, 0x5, @void, @void, @void}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x278}, 0x1, 0x0, 0x0, 0xd7c3f4ed4816d2b9}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f00000007c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$lock(r7, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, 0x0, 0x14) sendfile(r6, r5, 0x0, 0x10000a006) 21:53:31 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3f86, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioprio_set$uid(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x94, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf60e806f48f99569}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4091}, 0x10) getuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB="f6", @ANYRES32=0x0, @ANYBLOB="2000aae6521a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES64=r6, @ANYRES32, @ANYRESHEX, @ANYBLOB="c9d3c0cc0baa73aac026bd5d0439867d87540b1366589eac0594cdf9e71d443317178a3109abba5589adecbbcf977e7071338aac1bb1d775ad0792b6712a2b55f04d8b00001ed7480530a0223918ac7c4181f7ad248fb228fe9a0f4c566d25241340ee425091801603cbd8bb83cf249450436283502d09aea4cf5d4c01243e5cd6ddd9ec749a71177c2fb2231ffcb4b82e9374d75f8aa49c59e2579efbdd38a4479bb56cc8b9301974badf1400e097b5a407", @ANYRES32=r5], 0x94, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00'}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0xf1, 0x0, 0x0, 0x0, 0x5a) 21:53:31 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)) syz_open_procfs$namespace(0x0, 0x0) 21:53:31 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3f86, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioprio_set$uid(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x94, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf60e806f48f99569}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4091}, 0x10) getuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB="f6", @ANYRES32=0x0, @ANYBLOB="2000aae6521a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES64=r6, @ANYRES32, @ANYRESHEX, @ANYBLOB="c9d3c0cc0baa73aac026bd5d0439867d87540b1366589eac0594cdf9e71d443317178a3109abba5589adecbbcf977e7071338aac1bb1d775ad0792b6712a2b55f04d8b00001ed7480530a0223918ac7c4181f7ad248fb228fe9a0f4c566d25241340ee425091801603cbd8bb83cf249450436283502d09aea4cf5d4c01243e5cd6ddd9ec749a71177c2fb2231ffcb4b82e9374d75f8aa49c59e2579efbdd38a4479bb56cc8b9301974badf1400e097b5a407", @ANYRES32=r5], 0x94, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00'}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0xf1, 0x0, 0x0, 0x0, 0x5a) [ 227.014763][ T5530] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 227.371916][ T3733] usb 2-1: new high-speed USB device number 9 using dummy_hcd 21:53:32 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)) syz_open_procfs$namespace(0x0, 0x0) 21:53:32 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="200000003cc24bd7e57a7760295aad2f7d50288cf0945b27f98d8065eaa8e59b324806793dd87b89de41cbfb38e1571400000000000000000000000000000000cfa8f1af9bb215a3b4ccc390a04806e2e4fcf7277c260c38976d3e443cf22c7afde5cf34ff993096b553dc302d1398fe501bfd0d61a224b13d0a2865393b84fbe5749e132605c7d7d761db1c209bffcc4acecb323b0480ef65b6ee1260", @ANYRES16=r0, @ANYBLOB="a00029bd7000fddbdf25830000000c0099000400000010000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000c010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ad4700000000000000000500000004000300", @ANYRES32=0x0, @ANYBLOB="bcbb20d36d7709b76fe2056aed9668ca3c02e4be3dac03dda05fe169dcc8cf"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x278, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xef, 0x2a, [@random={0xbd, 0x30, "2ffc05a31374b8fee2be269cb393eb1aba854c38f0cf6821a2b9133fc1cdd85eef4ffdd49519b8352df8924291c80d9f"}, @fast_bss_trans={0x37, 0x77, {0x8, 0x1, "3d74bee53ed0531bb7248ae1e0c4a1e3", "f5198d31f51b755fd651aab30bddd1cb76c86e61feb3f4bcdcd03d03e11d43c2", "6ea8a81639af6e5d9ea63ac65e5572e1c98b84f4300aeb036db5d9ddd74f99e7", [{0x4, 0x23, "08fe99147a9c986bba66b4782398c4668bfefe4067a1e798d667cd261e01ad35d76c59"}]}}, @measure_req={0x26, 0x3e, {0x81, 0x0, 0x9, "ec8ade40207b18996cc7a1dae0170e496078a4545f7ca6ccbccf76c179675f58b614b9729a60f2df3257216d0db79f0305f97c697696d7ef292102"}}]}, @NL80211_ATTR_IE={0x13f, 0x2a, [@measure_req={0x26, 0x70, {0x1, 0x0, 0x0, "744eb99816ca76d5ddeabce6c07a0cd6dc1a514d45a42366c9bcc9d25ac374f1abf725b0181bb63f17b4cf85c7c690bc0fcbbe9df9556c7885e6c7af89d264fe13662509499ad1426dcd0e0404cfc869704f6fb3c90948fd429852dacf61dec1124052c73f0a2856b50ac8763c"}}, @gcr_ga={0xbd, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x0, @device_b, 0x0, "", 0x0, 0x80000001, @broadcast, 0xfff}}, @fast_bss_trans={0x37, 0x8d, {0x80, 0x3, "2b532b8f6f3ef972f6217a5a7cd7c950", "25d59a28a0dbef4a9f3d5d03b522dedeb38a789bc6a0479598d50883e8be04a7", "7f0d10bf0e3131ddca65dda81fcfca3900fa456c551d646acbf0fa50439beda5", [{}, {0x0, 0x10, "978b299069617648ea9cbc5b250a4732"}, {0x1, 0x25, "16927bd995e1ce93f4d3370c78200ff9f74dcdb7dd17e9815d1a919bff67af2fae7e628f0f"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x4, {0x1, 0x5, @void, @void, @void}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x278}, 0x1, 0x0, 0x0, 0xd7c3f4ed4816d2b9}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f00000007c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$lock(r7, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, 0x0, 0x14) sendfile(r6, r5, 0x0, 0x10000a006) [ 227.631949][ T3733] usb 2-1: Using ep0 maxpacket: 8 [ 227.752159][ T3733] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.789763][ T3733] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 227.830271][ T3733] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 227.848246][ T3733] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 227.865950][ T3733] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 227.876628][ T3733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.878535][ T5550] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 227.922273][ T5538] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 227.952967][ T3733] hub 2-1:1.0: bad descriptor, ignoring hub [ 227.961456][ T3733] hub: probe of 2-1:1.0 failed with error -5 [ 228.081946][ T3733] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 228.116794][ T3733] cdc_wdm 2-1:1.0: Unknown control protocol [ 228.223239][ T3733] usb 2-1: USB disconnect, device number 9 21:53:33 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3f86, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioprio_set$uid(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x94, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf60e806f48f99569}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4091}, 0x10) getuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB="f6", @ANYRES32=0x0, @ANYBLOB="2000aae6521a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES64=r6, @ANYRES32, @ANYRESHEX, @ANYBLOB="c9d3c0cc0baa73aac026bd5d0439867d87540b1366589eac0594cdf9e71d443317178a3109abba5589adecbbcf977e7071338aac1bb1d775ad0792b6712a2b55f04d8b00001ed7480530a0223918ac7c4181f7ad248fb228fe9a0f4c566d25241340ee425091801603cbd8bb83cf249450436283502d09aea4cf5d4c01243e5cd6ddd9ec749a71177c2fb2231ffcb4b82e9374d75f8aa49c59e2579efbdd38a4479bb56cc8b9301974badf1400e097b5a407", @ANYRES32=r5], 0x94, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00'}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0xf1, 0x0, 0x0, 0x0, 0x5a) 21:53:33 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3f86, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioprio_set$uid(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x94, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf60e806f48f99569}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4091}, 0x10) getuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB="f6", @ANYRES32=0x0, @ANYBLOB="2000aae6521a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES64=r6, @ANYRES32, @ANYRESHEX, @ANYBLOB="c9d3c0cc0baa73aac026bd5d0439867d87540b1366589eac0594cdf9e71d443317178a3109abba5589adecbbcf977e7071338aac1bb1d775ad0792b6712a2b55f04d8b00001ed7480530a0223918ac7c4181f7ad248fb228fe9a0f4c566d25241340ee425091801603cbd8bb83cf249450436283502d09aea4cf5d4c01243e5cd6ddd9ec749a71177c2fb2231ffcb4b82e9374d75f8aa49c59e2579efbdd38a4479bb56cc8b9301974badf1400e097b5a407", @ANYRES32=r5], 0x94, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00'}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0xf1, 0x0, 0x0, 0x0, 0x5a) 21:53:33 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="200000003cc24bd7e57a7760295aad2f7d50288cf0945b27f98d8065eaa8e59b324806793dd87b89de41cbfb38e1571400000000000000000000000000000000cfa8f1af9bb215a3b4ccc390a04806e2e4fcf7277c260c38976d3e443cf22c7afde5cf34ff993096b553dc302d1398fe501bfd0d61a224b13d0a2865393b84fbe5749e132605c7d7d761db1c209bffcc4acecb323b0480ef65b6ee1260", @ANYRES16=r0, @ANYBLOB="a00029bd7000fddbdf25830000000c0099000400000010000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000c010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ad4700000000000000000500000004000300", @ANYRES32=0x0, @ANYBLOB="bcbb20d36d7709b76fe2056aed9668ca3c02e4be3dac03dda05fe169dcc8cf"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x278, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xef, 0x2a, [@random={0xbd, 0x30, "2ffc05a31374b8fee2be269cb393eb1aba854c38f0cf6821a2b9133fc1cdd85eef4ffdd49519b8352df8924291c80d9f"}, @fast_bss_trans={0x37, 0x77, {0x8, 0x1, "3d74bee53ed0531bb7248ae1e0c4a1e3", "f5198d31f51b755fd651aab30bddd1cb76c86e61feb3f4bcdcd03d03e11d43c2", "6ea8a81639af6e5d9ea63ac65e5572e1c98b84f4300aeb036db5d9ddd74f99e7", [{0x4, 0x23, "08fe99147a9c986bba66b4782398c4668bfefe4067a1e798d667cd261e01ad35d76c59"}]}}, @measure_req={0x26, 0x3e, {0x81, 0x0, 0x9, "ec8ade40207b18996cc7a1dae0170e496078a4545f7ca6ccbccf76c179675f58b614b9729a60f2df3257216d0db79f0305f97c697696d7ef292102"}}]}, @NL80211_ATTR_IE={0x13f, 0x2a, [@measure_req={0x26, 0x70, {0x1, 0x0, 0x0, "744eb99816ca76d5ddeabce6c07a0cd6dc1a514d45a42366c9bcc9d25ac374f1abf725b0181bb63f17b4cf85c7c690bc0fcbbe9df9556c7885e6c7af89d264fe13662509499ad1426dcd0e0404cfc869704f6fb3c90948fd429852dacf61dec1124052c73f0a2856b50ac8763c"}}, @gcr_ga={0xbd, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x0, @device_b, 0x0, "", 0x0, 0x80000001, @broadcast, 0xfff}}, @fast_bss_trans={0x37, 0x8d, {0x80, 0x3, "2b532b8f6f3ef972f6217a5a7cd7c950", "25d59a28a0dbef4a9f3d5d03b522dedeb38a789bc6a0479598d50883e8be04a7", "7f0d10bf0e3131ddca65dda81fcfca3900fa456c551d646acbf0fa50439beda5", [{}, {0x0, 0x10, "978b299069617648ea9cbc5b250a4732"}, {0x1, 0x25, "16927bd995e1ce93f4d3370c78200ff9f74dcdb7dd17e9815d1a919bff67af2fae7e628f0f"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x4, {0x1, 0x5, @void, @void, @void}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x278}, 0x1, 0x0, 0x0, 0xd7c3f4ed4816d2b9}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f00000007c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$lock(r7, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, 0x0, 0x14) sendfile(r6, r5, 0x0, 0x10000a006) 21:53:33 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x86, 0xce, 0x6d, 0x40, 0x7ca, 0xa801, 0xf3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x20, 0x4f, 0x41}}]}}]}}, 0x0) [ 228.831993][ T22] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 228.961904][ T3734] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 229.013197][ T5561] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 229.241855][ T3734] usb 5-1: Using ep0 maxpacket: 8 [ 229.382265][ T3734] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.402041][ T22] usb 2-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice= f.3f [ 229.411721][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.437432][ T3734] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 229.479655][ T22] usb 2-1: Product: syz [ 229.510284][ T3734] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 229.532857][ T22] usb 2-1: Manufacturer: syz [ 229.553557][ T22] usb 2-1: SerialNumber: syz [ 229.575514][ T3734] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 229.591431][ T3734] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 229.601565][ T22] usb 2-1: config 0 descriptor?? [ 229.611874][ T3734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.642881][ T5555] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 229.644520][ T22] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 229.663787][ T3734] hub 5-1:1.0: bad descriptor, ignoring hub [ 229.670425][ T22] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 229.679738][ T3734] hub: probe of 5-1:1.0 failed with error -5 [ 229.690878][ T3734] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 229.702180][ T22] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 229.711900][ T3734] cdc_wdm 5-1:1.0: Unknown control protocol [ 229.735923][ T22] usb 2-1: media controller created [ 229.777812][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.918740][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 229.947069][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 229.969088][ T22] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 230.262038][ T22] rc_core: IR keymap rc-avermedia-m135a not found [ 230.268694][ T22] Registered IR keymap rc-empty [ 230.274690][ T22] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 230.286389][ T22] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input22 [ 230.305099][ T22] dvb-usb: schedule remote query interval to 150 msecs. [ 230.312187][ T22] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. 21:53:34 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x86, 0xce, 0x6d, 0x40, 0x7ca, 0xa801, 0xf3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x20, 0x4f, 0x41}}]}}]}}, 0x0) 21:53:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3f86, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioprio_set$uid(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x94, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf60e806f48f99569}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4091}, 0x10) getuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB="f6", @ANYRES32=0x0, @ANYBLOB="2000aae6521a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES64=r6, @ANYRES32, @ANYRESHEX, @ANYBLOB="c9d3c0cc0baa73aac026bd5d0439867d87540b1366589eac0594cdf9e71d443317178a3109abba5589adecbbcf977e7071338aac1bb1d775ad0792b6712a2b55f04d8b00001ed7480530a0223918ac7c4181f7ad248fb228fe9a0f4c566d25241340ee425091801603cbd8bb83cf249450436283502d09aea4cf5d4c01243e5cd6ddd9ec749a71177c2fb2231ffcb4b82e9374d75f8aa49c59e2579efbdd38a4479bb56cc8b9301974badf1400e097b5a407", @ANYRES32=r5], 0x94, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00'}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0xf1, 0x0, 0x0, 0x0, 0x5a) 21:53:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="200000003cc24bd7e57a7760295aad2f7d50288cf0945b27f98d8065eaa8e59b324806793dd87b89de41cbfb38e1571400000000000000000000000000000000cfa8f1af9bb215a3b4ccc390a04806e2e4fcf7277c260c38976d3e443cf22c7afde5cf34ff993096b553dc302d1398fe501bfd0d61a224b13d0a2865393b84fbe5749e132605c7d7d761db1c209bffcc4acecb323b0480ef65b6ee1260", @ANYRES16=r0, @ANYBLOB="a00029bd7000fddbdf25830000000c0099000400000010000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000c010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ad4700000000000000000500000004000300", @ANYRES32=0x0, @ANYBLOB="bcbb20d36d7709b76fe2056aed9668ca3c02e4be3dac03dda05fe169dcc8cf"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x278, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xef, 0x2a, [@random={0xbd, 0x30, "2ffc05a31374b8fee2be269cb393eb1aba854c38f0cf6821a2b9133fc1cdd85eef4ffdd49519b8352df8924291c80d9f"}, @fast_bss_trans={0x37, 0x77, {0x8, 0x1, "3d74bee53ed0531bb7248ae1e0c4a1e3", "f5198d31f51b755fd651aab30bddd1cb76c86e61feb3f4bcdcd03d03e11d43c2", "6ea8a81639af6e5d9ea63ac65e5572e1c98b84f4300aeb036db5d9ddd74f99e7", [{0x4, 0x23, "08fe99147a9c986bba66b4782398c4668bfefe4067a1e798d667cd261e01ad35d76c59"}]}}, @measure_req={0x26, 0x3e, {0x81, 0x0, 0x9, "ec8ade40207b18996cc7a1dae0170e496078a4545f7ca6ccbccf76c179675f58b614b9729a60f2df3257216d0db79f0305f97c697696d7ef292102"}}]}, @NL80211_ATTR_IE={0x13f, 0x2a, [@measure_req={0x26, 0x70, {0x1, 0x0, 0x0, "744eb99816ca76d5ddeabce6c07a0cd6dc1a514d45a42366c9bcc9d25ac374f1abf725b0181bb63f17b4cf85c7c690bc0fcbbe9df9556c7885e6c7af89d264fe13662509499ad1426dcd0e0404cfc869704f6fb3c90948fd429852dacf61dec1124052c73f0a2856b50ac8763c"}}, @gcr_ga={0xbd, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x0, @device_b, 0x0, "", 0x0, 0x80000001, @broadcast, 0xfff}}, @fast_bss_trans={0x37, 0x8d, {0x80, 0x3, "2b532b8f6f3ef972f6217a5a7cd7c950", "25d59a28a0dbef4a9f3d5d03b522dedeb38a789bc6a0479598d50883e8be04a7", "7f0d10bf0e3131ddca65dda81fcfca3900fa456c551d646acbf0fa50439beda5", [{}, {0x0, 0x10, "978b299069617648ea9cbc5b250a4732"}, {0x1, 0x25, "16927bd995e1ce93f4d3370c78200ff9f74dcdb7dd17e9815d1a919bff67af2fae7e628f0f"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x4, {0x1, 0x5, @void, @void, @void}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x278}, 0x1, 0x0, 0x0, 0xd7c3f4ed4816d2b9}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f00000007c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$lock(r7, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, 0x0, 0x14) sendfile(r6, r5, 0x0, 0x10000a006) 21:53:34 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3f86, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioprio_set$uid(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x94, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf60e806f48f99569}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4091}, 0x10) getuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB="f6", @ANYRES32=0x0, @ANYBLOB="2000aae6521a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES64=r6, @ANYRES32, @ANYRESHEX, @ANYBLOB="c9d3c0cc0baa73aac026bd5d0439867d87540b1366589eac0594cdf9e71d443317178a3109abba5589adecbbcf977e7071338aac1bb1d775ad0792b6712a2b55f04d8b00001ed7480530a0223918ac7c4181f7ad248fb228fe9a0f4c566d25241340ee425091801603cbd8bb83cf249450436283502d09aea4cf5d4c01243e5cd6ddd9ec749a71177c2fb2231ffcb4b82e9374d75f8aa49c59e2579efbdd38a4479bb56cc8b9301974badf1400e097b5a407", @ANYRES32=r5], 0x94, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00'}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0xf1, 0x0, 0x0, 0x0, 0x5a) 21:53:34 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3f86, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioprio_set$uid(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x94, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf60e806f48f99569}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4091}, 0x10) getuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB="f6", @ANYRES32=0x0, @ANYBLOB="2000aae6521a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES64=r6, @ANYRES32, @ANYRESHEX, @ANYBLOB="c9d3c0cc0baa73aac026bd5d0439867d87540b1366589eac0594cdf9e71d443317178a3109abba5589adecbbcf977e7071338aac1bb1d775ad0792b6712a2b55f04d8b00001ed7480530a0223918ac7c4181f7ad248fb228fe9a0f4c566d25241340ee425091801603cbd8bb83cf249450436283502d09aea4cf5d4c01243e5cd6ddd9ec749a71177c2fb2231ffcb4b82e9374d75f8aa49c59e2579efbdd38a4479bb56cc8b9301974badf1400e097b5a407", @ANYRES32=r5], 0x94, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00'}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0xf1, 0x0, 0x0, 0x0, 0x5a) [ 230.365541][ T22] usb 2-1: USB disconnect, device number 10 [ 230.414478][ T5555] cdc_wdm 5-1:1.0: Error autopm - -16 [ 230.415226][ T2294] usb 5-1: USB disconnect, device number 13 [ 230.496214][ T22] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 230.509685][ T5573] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 230.693212][ T2294] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 230.961930][ T22] usb 2-1: new high-speed USB device number 11 using dummy_hcd 21:53:35 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="200000003cc24bd7e57a7760295aad2f7d50288cf0945b27f98d8065eaa8e59b324806793dd87b89de41cbfb38e1571400000000000000000000000000000000cfa8f1af9bb215a3b4ccc390a04806e2e4fcf7277c260c38976d3e443cf22c7afde5cf34ff993096b553dc302d1398fe501bfd0d61a224b13d0a2865393b84fbe5749e132605c7d7d761db1c209bffcc4acecb323b0480ef65b6ee1260", @ANYRES16=r0, @ANYBLOB="a00029bd7000fddbdf25830000000c0099000400000010000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000c010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ad4700000000000000000500000004000300", @ANYRES32=0x0, @ANYBLOB="bcbb20d36d7709b76fe2056aed9668ca3c02e4be3dac03dda05fe169dcc8cf"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x278, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xef, 0x2a, [@random={0xbd, 0x30, "2ffc05a31374b8fee2be269cb393eb1aba854c38f0cf6821a2b9133fc1cdd85eef4ffdd49519b8352df8924291c80d9f"}, @fast_bss_trans={0x37, 0x77, {0x8, 0x1, "3d74bee53ed0531bb7248ae1e0c4a1e3", "f5198d31f51b755fd651aab30bddd1cb76c86e61feb3f4bcdcd03d03e11d43c2", "6ea8a81639af6e5d9ea63ac65e5572e1c98b84f4300aeb036db5d9ddd74f99e7", [{0x4, 0x23, "08fe99147a9c986bba66b4782398c4668bfefe4067a1e798d667cd261e01ad35d76c59"}]}}, @measure_req={0x26, 0x3e, {0x81, 0x0, 0x9, "ec8ade40207b18996cc7a1dae0170e496078a4545f7ca6ccbccf76c179675f58b614b9729a60f2df3257216d0db79f0305f97c697696d7ef292102"}}]}, @NL80211_ATTR_IE={0x13f, 0x2a, [@measure_req={0x26, 0x70, {0x1, 0x0, 0x0, "744eb99816ca76d5ddeabce6c07a0cd6dc1a514d45a42366c9bcc9d25ac374f1abf725b0181bb63f17b4cf85c7c690bc0fcbbe9df9556c7885e6c7af89d264fe13662509499ad1426dcd0e0404cfc869704f6fb3c90948fd429852dacf61dec1124052c73f0a2856b50ac8763c"}}, @gcr_ga={0xbd, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x0, @device_b, 0x0, "", 0x0, 0x80000001, @broadcast, 0xfff}}, @fast_bss_trans={0x37, 0x8d, {0x80, 0x3, "2b532b8f6f3ef972f6217a5a7cd7c950", "25d59a28a0dbef4a9f3d5d03b522dedeb38a789bc6a0479598d50883e8be04a7", "7f0d10bf0e3131ddca65dda81fcfca3900fa456c551d646acbf0fa50439beda5", [{}, {0x0, 0x10, "978b299069617648ea9cbc5b250a4732"}, {0x1, 0x25, "16927bd995e1ce93f4d3370c78200ff9f74dcdb7dd17e9815d1a919bff67af2fae7e628f0f"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x4, {0x1, 0x5, @void, @void, @void}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x278}, 0x1, 0x0, 0x0, 0xd7c3f4ed4816d2b9}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f00000007c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$lock(r7, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, 0x0, 0x14) sendfile(r6, r5, 0x0, 0x10000a006) [ 231.242201][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 231.282165][ T2294] usb 5-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice= f.3f [ 231.322756][ T2294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.391983][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.410624][ T2294] usb 5-1: Product: syz [ 231.422161][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 231.431292][ T2294] usb 5-1: Manufacturer: syz [ 231.436312][ T2294] usb 5-1: SerialNumber: syz [ 231.441064][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 231.454013][ T2294] usb 5-1: config 0 descriptor?? [ 231.468871][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 231.517657][ T5584] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 231.523655][ T2294] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 231.570886][ T22] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 231.633275][ T2294] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 231.675572][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.712024][ T2294] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) 21:53:36 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x86, 0xce, 0x6d, 0x40, 0x7ca, 0xa801, 0xf3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x20, 0x4f, 0x41}}]}}]}}, 0x0) [ 231.752376][ T5580] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 231.814645][ T2294] usb 5-1: media controller created [ 231.844090][ T22] hub 2-1:1.0: bad descriptor, ignoring hub [ 231.860929][ T22] hub: probe of 2-1:1.0 failed with error -5 21:53:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="200000003cc24bd7e57a7760295aad2f7d50288cf0945b27f98d8065eaa8e59b324806793dd87b89de41cbfb38e1571400000000000000000000000000000000cfa8f1af9bb215a3b4ccc390a04806e2e4fcf7277c260c38976d3e443cf22c7afde5cf34ff993096b553dc302d1398fe501bfd0d61a224b13d0a2865393b84fbe5749e132605c7d7d761db1c209bffcc4acecb323b0480ef65b6ee1260", @ANYRES16=r0, @ANYBLOB="a00029bd7000fddbdf25830000000c0099000400000010000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000c010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ad4700000000000000000500000004000300", @ANYRES32=0x0, @ANYBLOB="bcbb20d36d7709b76fe2056aed9668ca3c02e4be3dac03dda05fe169dcc8cf"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x278, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xef, 0x2a, [@random={0xbd, 0x30, "2ffc05a31374b8fee2be269cb393eb1aba854c38f0cf6821a2b9133fc1cdd85eef4ffdd49519b8352df8924291c80d9f"}, @fast_bss_trans={0x37, 0x77, {0x8, 0x1, "3d74bee53ed0531bb7248ae1e0c4a1e3", "f5198d31f51b755fd651aab30bddd1cb76c86e61feb3f4bcdcd03d03e11d43c2", "6ea8a81639af6e5d9ea63ac65e5572e1c98b84f4300aeb036db5d9ddd74f99e7", [{0x4, 0x23, "08fe99147a9c986bba66b4782398c4668bfefe4067a1e798d667cd261e01ad35d76c59"}]}}, @measure_req={0x26, 0x3e, {0x81, 0x0, 0x9, "ec8ade40207b18996cc7a1dae0170e496078a4545f7ca6ccbccf76c179675f58b614b9729a60f2df3257216d0db79f0305f97c697696d7ef292102"}}]}, @NL80211_ATTR_IE={0x13f, 0x2a, [@measure_req={0x26, 0x70, {0x1, 0x0, 0x0, "744eb99816ca76d5ddeabce6c07a0cd6dc1a514d45a42366c9bcc9d25ac374f1abf725b0181bb63f17b4cf85c7c690bc0fcbbe9df9556c7885e6c7af89d264fe13662509499ad1426dcd0e0404cfc869704f6fb3c90948fd429852dacf61dec1124052c73f0a2856b50ac8763c"}}, @gcr_ga={0xbd, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x0, @device_b, 0x0, "", 0x0, 0x80000001, @broadcast, 0xfff}}, @fast_bss_trans={0x37, 0x8d, {0x80, 0x3, "2b532b8f6f3ef972f6217a5a7cd7c950", "25d59a28a0dbef4a9f3d5d03b522dedeb38a789bc6a0479598d50883e8be04a7", "7f0d10bf0e3131ddca65dda81fcfca3900fa456c551d646acbf0fa50439beda5", [{}, {0x0, 0x10, "978b299069617648ea9cbc5b250a4732"}, {0x1, 0x25, "16927bd995e1ce93f4d3370c78200ff9f74dcdb7dd17e9815d1a919bff67af2fae7e628f0f"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x4, {0x1, 0x5, @void, @void, @void}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x278}, 0x1, 0x0, 0x0, 0xd7c3f4ed4816d2b9}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f00000007c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$lock(r7, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, 0x0, 0x14) sendfile(r6, r5, 0x0, 0x10000a006) [ 231.898266][ T2294] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. 21:53:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000000)=0xfffffffa, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x2000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000100)=0x7, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x3d, 0x0) [ 231.968853][ T22] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 231.996980][ T2294] dvb-usb: bulk message failed: -22 (6/0) [ 232.017622][ T22] cdc_wdm 2-1:1.0: Unknown control protocol [ 232.030872][ T2294] dvb-usb: bulk message failed: -22 (6/0) [ 232.050838][ T5591] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 232.111300][ T2294] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 232.123149][ T22] usb 2-1: USB disconnect, device number 11 21:53:36 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$sock(r0, &(0x7f0000000280)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000001300)='W', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x1, 0x4) 21:53:36 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f00009e1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40) write(0xffffffffffffffff, 0x0, 0x0) 21:53:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3f86, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioprio_set$uid(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x94, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf60e806f48f99569}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4091}, 0x10) getuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB="f6", @ANYRES32=0x0, @ANYBLOB="2000aae6521a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES64=r6, @ANYRES32, @ANYRESHEX, @ANYBLOB="c9d3c0cc0baa73aac026bd5d0439867d87540b1366589eac0594cdf9e71d443317178a3109abba5589adecbbcf977e7071338aac1bb1d775ad0792b6712a2b55f04d8b00001ed7480530a0223918ac7c4181f7ad248fb228fe9a0f4c566d25241340ee425091801603cbd8bb83cf249450436283502d09aea4cf5d4c01243e5cd6ddd9ec749a71177c2fb2231ffcb4b82e9374d75f8aa49c59e2579efbdd38a4479bb56cc8b9301974badf1400e097b5a407", @ANYRES32=r5], 0x94, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00'}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0xf1, 0x0, 0x0, 0x0, 0x5a) [ 232.681855][ T2294] rc_core: IR keymap rc-avermedia-m135a not found [ 232.688690][ T22] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 232.696677][ T2294] Registered IR keymap rc-empty [ 232.708087][ T2294] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 232.775844][ T2294] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input23 [ 232.805854][ T2294] dvb-usb: schedule remote query interval to 150 msecs. [ 232.813046][ T2294] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 232.849373][ T2294] usb 5-1: USB disconnect, device number 14 [ 232.956614][ T2294] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 233.282094][ T22] usb 2-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice= f.3f [ 233.291242][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.299931][ T22] usb 2-1: Product: syz [ 233.304288][ T22] usb 2-1: Manufacturer: syz [ 233.309009][ T22] usb 2-1: SerialNumber: syz [ 233.317426][ T22] usb 2-1: config 0 descriptor?? [ 233.373733][ T22] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 233.398469][ T22] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 233.411960][ T2294] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 233.425034][ T22] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 233.434921][ T22] usb 2-1: media controller created [ 233.447209][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.480403][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 233.508167][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 233.526035][ T22] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' 21:53:38 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x86, 0xce, 0x6d, 0x40, 0x7ca, 0xa801, 0xf3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x20, 0x4f, 0x41}}]}}]}}, 0x0) 21:53:38 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x40}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@getlink={0x20, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x102}}, 0x20}}, 0x0) 21:53:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x38}}, 0x0) 21:53:38 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x41d9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x1c}, @local}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 21:53:38 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) setrlimit(0x9, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xfdef) [ 233.663735][ T2294] usb 5-1: Using ep0 maxpacket: 8 21:53:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}}}, 0xe8) [ 233.812684][ T2294] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.823174][ T22] rc_core: IR keymap rc-avermedia-m135a not found [ 233.830163][ T22] Registered IR keymap rc-empty [ 233.855368][ T2294] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 233.869361][ T22] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 233.898929][ T2294] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 233.920397][ T22] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input24 [ 233.949342][ T2294] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 233.992359][ T22] dvb-usb: schedule remote query interval to 150 msecs. [ 234.007664][ T2294] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 234.018167][ T22] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 234.028981][ T2294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.072631][ T22] usb 2-1: USB disconnect, device number 12 [ 234.112279][ T5587] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 234.142997][ T2294] hub 5-1:1.0: bad descriptor, ignoring hub [ 234.150246][ T2294] hub: probe of 5-1:1.0 failed with error -5 [ 234.167182][ T22] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 234.183568][ T2294] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 234.194768][ T2294] cdc_wdm 5-1:1.0: Unknown control protocol [ 234.601885][ T22] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 234.892043][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 234.963119][ T3734] usb 5-1: USB disconnect, device number 15 [ 234.968964][ T5587] cdc_wdm 5-1:1.0: Error autopm - -16 [ 235.022074][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.041391][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 235.051429][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 235.071880][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 235.091501][ T22] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 235.103099][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.132398][ T5614] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 235.142120][ T3734] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 235.163192][ T22] hub 2-1:1.0: bad descriptor, ignoring hub [ 235.169148][ T22] hub: probe of 2-1:1.0 failed with error -5 [ 235.193338][ T22] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 235.200764][ T22] cdc_wdm 2-1:1.0: Unknown control protocol 21:53:40 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x86, 0xce, 0x6d, 0x40, 0x7ca, 0xa801, 0xf3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x20, 0x4f, 0x41}}]}}]}}, 0x0) 21:53:40 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0xc0182101, &(0x7f0000000000)) 21:53:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "07c3172ba9e90f31", "7964030712a8ab053a3c9020883ee0da03259921d76ddd640a1254b082e9954a", '\x00', "fd4f6884fea76e2f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, 0x0, 0x0) 21:53:40 executing program 2: syz_emit_ethernet(0x14, &(0x7f0000000180)={@local, @empty, @void, {@generic={0x8863, "e3c8d7ee8aee"}}}, 0x0) 21:53:40 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f00009e1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40) write(0xffffffffffffffff, 0x0, 0x0) [ 235.702241][ T3734] usb 5-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice= f.3f [ 235.711348][ T3734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 21:53:40 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f00009e1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40) write(0xffffffffffffffff, 0x0, 0x0) [ 235.735940][ T27] audit: type=1326 audit(1669067620.319:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5624 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6f549 code=0x0 [ 235.759196][ T3734] usb 5-1: Product: syz [ 235.780364][ T3734] usb 5-1: Manufacturer: syz [ 235.813261][ T3734] usb 5-1: config 0 descriptor?? [ 235.843245][ T5614] cdc_wdm 2-1:1.0: Error autopm - -16 [ 235.843447][ T3731] usb 2-1: USB disconnect, device number 13 [ 235.848886][ T3734] usb 5-1: can't set config #0, error -71 [ 235.906319][ T3734] usb 5-1: USB disconnect, device number 16 [ 236.031851][ T3731] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 236.331958][ T3734] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 236.557357][ T3731] usb 2-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice= f.3f [ 236.574485][ T3731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.600939][ T3731] usb 2-1: Product: syz [ 236.610086][ T3731] usb 2-1: Manufacturer: syz [ 236.611844][ T3734] usb 5-1: Using ep0 maxpacket: 8 [ 236.619461][ T3731] usb 2-1: SerialNumber: syz [ 236.638529][ T3731] usb 2-1: config 0 descriptor?? 21:53:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) 21:53:41 executing program 0: rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) [ 236.703672][ T3731] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 236.728585][ T3731] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 236.742957][ T3734] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 21:53:41 executing program 0: r0 = openat$vicodec0(0xffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0xa}) [ 236.782165][ T3731] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 236.791196][ T3731] usb 2-1: media controller created [ 236.807081][ T3734] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 21:53:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES64], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:53:41 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x4, 0x2, 0x6}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) [ 236.838523][ T3731] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.850369][ T3734] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 21:53:41 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0xf}, 0x0) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0xf27]}, 0x8) [ 236.903639][ T3731] dvb-usb: bulk message failed: -22 (6/0) [ 236.909692][ T3734] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 236.934518][ T3731] dvb-usb: bulk message failed: -22 (6/0) [ 236.948361][ T3731] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 236.972481][ T3734] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 236.982855][ T3734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.012281][ T5633] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 237.038188][ T3734] hub 5-1:1.0: bad descriptor, ignoring hub [ 237.044470][ T3734] hub: probe of 5-1:1.0 failed with error -5 [ 237.053979][ T3734] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 237.060048][ T3734] cdc_wdm 5-1:1.0: Unknown control protocol [ 237.402148][ T3731] rc_core: IR keymap rc-avermedia-m135a not found [ 237.410562][ T3731] Registered IR keymap rc-empty [ 237.436028][ T3731] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 237.502913][ T3731] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input25 [ 237.522750][ T3731] dvb-usb: schedule remote query interval to 150 msecs. [ 237.529909][ T3731] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 237.547544][ T3731] usb 2-1: USB disconnect, device number 14 [ 237.576134][ T3731] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 237.782724][ T5633] cdc_wdm 5-1:1.0: Error autopm - -16 [ 237.783513][ T22] usb 5-1: USB disconnect, device number 17 [ 237.951874][ T22] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 238.512034][ T22] usb 5-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice= f.3f [ 238.526234][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.544642][ T22] usb 5-1: Product: syz [ 238.553347][ T22] usb 5-1: Manufacturer: syz [ 238.562472][ T22] usb 5-1: SerialNumber: syz [ 238.576386][ T22] usb 5-1: config 0 descriptor?? [ 238.626640][ T22] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 238.648505][ T22] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 238.674090][ T22] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 238.683380][ T22] usb 5-1: media controller created [ 238.690532][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.703081][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 238.709034][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 238.715722][ T22] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' 21:53:43 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0x1e4, 0x104, 0x2f0, 0x2f0, 0x2f0, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0x104}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@arp={@rand_addr, @private, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'batadv_slave_1\x00'}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @local, @empty}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x41c) 21:53:43 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000015d4b40a50600d81287000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001640)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)={0x40, 0x13, 0x6, @random="ba7817354167"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001dc0)={0x44, &(0x7f0000001480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:53:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xed2b, 0x401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x5522, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)) 21:53:43 executing program 5: syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8100}}}}}}, 0x0) 21:53:43 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f00009e1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40) write(0xffffffffffffffff, 0x0, 0x0) 21:53:43 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f00009e1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40) write(0xffffffffffffffff, 0x0, 0x0) 21:53:43 executing program 5: syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8100}}}}}}, 0x0) 21:53:43 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fchmod(r0, 0x0) 21:53:43 executing program 5: syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8100}}}}}}, 0x0) 21:53:43 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fchmod(r0, 0x0) 21:53:43 executing program 5: syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8100}}}}}}, 0x0) [ 239.062236][ T22] rc_core: IR keymap rc-avermedia-m135a not found [ 239.069263][ T22] Registered IR keymap rc-empty [ 239.074433][ T3734] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 239.105982][ T22] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 21:53:43 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fchmod(r0, 0x0) [ 239.154525][ T22] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input26 [ 239.186559][ T22] dvb-usb: schedule remote query interval to 150 msecs. 21:53:43 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000001300), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x1) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)) [ 239.223931][ T22] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 239.317094][ T22] usb 5-1: USB disconnect, device number 18 [ 239.421109][ T22] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 239.482352][ T3734] usb 1-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=87.12 [ 239.496028][ T3734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.526882][ T3734] usb 1-1: config 0 descriptor?? [ 239.574694][ T3734] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 240.225781][ T3734] usb 1-1: USB disconnect, device number 8 21:53:45 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000040), 0x2, 0x101802) read$midi(r0, &(0x7f0000000080)=""/203, 0xcb) 21:53:45 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fchmod(r0, 0x0) 21:53:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pipe2(0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x30}], 0x1) read(r0, &(0x7f0000000580)=""/214, 0xd6) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 21:53:45 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x2, 0xffffffffffffffff, 0x0) 21:53:45 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f00009e1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40) write(0xffffffffffffffff, 0x0, 0x0) 21:53:45 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f00009e1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40) write(0xffffffffffffffff, 0x0, 0x0) 21:53:45 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x77, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev}], 0x1c) 21:53:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}]}, 0x3c}}, 0x0) [ 240.810071][ T5703] input: syz0 as /devices/virtual/input/input27 21:53:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_clone3(&(0x7f0000000800)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 21:53:45 executing program 4: r0 = syz_io_uring_setup(0x61, &(0x7f0000001380), &(0x7f0000ffb000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x80002102}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) 21:53:45 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4e, 0x83, 0xc6, 0x8, 0x582, 0x7d, 0x418e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc3, 0xcf, 0x17}}]}}]}}, 0x0) 21:53:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) getdents(r0, 0x0, 0x0) 21:53:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) getdents(r0, 0x0, 0x0) [ 241.451843][ T3736] usb 6-1: new high-speed USB device number 11 using dummy_hcd 21:53:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) getdents(r0, 0x0, 0x0) 21:53:46 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0x7, 0x4) close(r0) [ 241.702018][ T3736] usb 6-1: Using ep0 maxpacket: 8 21:53:46 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x142141, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x400) [ 241.822087][ T3736] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=41.8e [ 241.858680][ T3736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.921603][ T3736] usb 6-1: config 0 descriptor?? [ 241.976319][ T3736] usb 6-1: interface 1 not found [ 242.177449][ T3736] usb 6-1: USB disconnect, device number 11 [ 242.302164][ T3683] Bluetooth: hci1: command 0x0406 tx timeout [ 242.308329][ T3683] Bluetooth: hci2: command 0x0406 tx timeout [ 242.312054][ T3678] Bluetooth: hci0: command 0x0406 tx timeout [ 242.315354][ T3683] Bluetooth: hci4: command 0x0406 tx timeout [ 242.320339][ T3678] Bluetooth: hci3: command 0x0406 tx timeout 21:53:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) getdents(r0, 0x0, 0x0) 21:53:47 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4e, 0x83, 0xc6, 0x8, 0x582, 0x7d, 0x418e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc3, 0xcf, 0x17}}]}}]}}, 0x0) 21:53:47 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000000c0)={0x60, 0x13, 0x501, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "07c207c102ba9f0800c966a7a42ea7de"}]}, 0x60}}, 0x0) 21:53:47 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000000c0)={0x60, 0x13, 0x501, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "07c207c102ba9f0800c966a7a42ea7de"}]}, 0x60}}, 0x0) [ 243.312074][ T3733] usb 6-1: new high-speed USB device number 12 using dummy_hcd 21:53:48 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 21:53:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x2, 0x4, 0x2, 0x7f, 0x900}, 0x48) 21:53:48 executing program 4: syz_clone(0xc0140100, &(0x7f0000000000), 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00') 21:53:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_clone3(&(0x7f0000000800)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 21:53:48 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000000c0)={0x60, 0x13, 0x501, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "07c207c102ba9f0800c966a7a42ea7de"}]}, 0x60}}, 0x0) 21:53:48 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000000c0)={0x60, 0x13, 0x501, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "07c207c102ba9f0800c966a7a42ea7de"}]}, 0x60}}, 0x0) 21:53:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_clone3(&(0x7f0000000800)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 21:53:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x60000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x88a8ffad}, [@IFLA_LINKINFO={0xfde2, 0x12, 0x0, 0x1, @vlan={{0xd}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x64}}, 0x0) [ 243.582095][ T3733] usb 6-1: Using ep0 maxpacket: 8 21:53:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xdc}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x44}}, 0x0) [ 243.651971][ T5763] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.712881][ T5769] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 243.732714][ T3733] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=41.8e [ 243.754208][ T3733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.799042][ T3733] usb 6-1: config 0 descriptor?? [ 243.824612][ T5763] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.841594][ T5763] device veth3 entered promiscuous mode [ 243.876393][ T3733] usb 6-1: interface 1 not found [ 244.170478][ T3733] usb 6-1: USB disconnect, device number 12 21:53:49 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4e, 0x83, 0xc6, 0x8, 0x582, 0x7d, 0x418e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc3, 0xcf, 0x17}}]}}]}}, 0x0) 21:53:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xa1913) 21:53:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x60000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x88a8ffad}, [@IFLA_LINKINFO={0xfde2, 0x12, 0x0, 0x1, @vlan={{0xd}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x64}}, 0x0) 21:53:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) 21:53:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xa1913) 21:53:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) [ 244.908725][ T5781] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.971400][ T5787] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.070898][ T5787] device veth5 entered promiscuous mode [ 245.077838][ T3731] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 245.292912][ T5791] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.337836][ T3731] usb 6-1: Using ep0 maxpacket: 8 [ 245.461944][ T3731] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=41.8e [ 245.503477][ T3731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.603611][ T3731] usb 6-1: config 0 descriptor?? [ 245.685227][ T3731] usb 6-1: interface 1 not found [ 245.958659][ T3733] usb 6-1: USB disconnect, device number 13 21:53:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_clone3(&(0x7f0000000800)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 21:53:51 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xa1913) 21:53:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x60000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x88a8ffad}, [@IFLA_LINKINFO={0xfde2, 0x12, 0x0, 0x1, @vlan={{0xd}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x64}}, 0x0) [ 247.181134][ T5796] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.365884][ T5802] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.444134][ T5802] device veth7 entered promiscuous mode 21:53:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_clone3(&(0x7f0000000800)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 21:53:52 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) process_vm_readv(0x0, &(0x7f0000000440), 0x0, &(0x7f0000001900)=[{&(0x7f0000000140)=""/4, 0x4}, {0x0}, {&(0x7f0000000580)=""/206, 0xce}, {0x0}, {0x0}, {&(0x7f0000000cc0)=""/50, 0x32}], 0x6, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x100, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) 21:53:52 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x4e, 0x83, 0xc6, 0x8, 0x582, 0x7d, 0x418e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc3, 0xcf, 0x17}}]}}]}}, 0x0) 21:53:52 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xa1913) 21:53:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x60000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x88a8ffad}, [@IFLA_LINKINFO={0xfde2, 0x12, 0x0, 0x1, @vlan={{0xd}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x64}}, 0x0) [ 248.066288][ T5811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:53:52 executing program 1: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e17c356904b3804358bf6edc6b480ba9fd45a3a8f8641e47bf1996bdc3df8277e91cb4f08b79a6c8269cc3f2da6a6f673a76645fdbe9ff60fea16f059eb8e110329c995e610c208b545cc3489ea8fdddb638164bba65daa5dda846171", 0xb8, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r5, 0x0, 0x2, 0x0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) [ 248.241392][ T5811] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 248.312118][ T5811] device veth9 entered promiscuous mode [ 248.332097][ T3733] usb 6-1: new high-speed USB device number 14 using dummy_hcd 21:53:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x4cb3, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 248.581839][ T3733] usb 6-1: Using ep0 maxpacket: 8 [ 248.732128][ T3733] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=41.8e [ 248.760088][ T3733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.856134][ T3733] usb 6-1: config 0 descriptor?? [ 248.944482][ T3733] usb 6-1: interface 1 not found 21:53:53 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) process_vm_readv(0x0, &(0x7f0000000440), 0x0, &(0x7f0000001900)=[{&(0x7f0000000140)=""/4, 0x4}, {0x0}, {&(0x7f0000000580)=""/206, 0xce}, {0x0}, {0x0}, {&(0x7f0000000cc0)=""/50, 0x32}], 0x6, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x100, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) [ 249.292052][ T3731] usb 6-1: USB disconnect, device number 14 21:53:54 executing program 1: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e17c356904b3804358bf6edc6b480ba9fd45a3a8f8641e47bf1996bdc3df8277e91cb4f08b79a6c8269cc3f2da6a6f673a76645fdbe9ff60fea16f059eb8e110329c995e610c208b545cc3489ea8fdddb638164bba65daa5dda846171", 0xb8, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r5, 0x0, 0x2, 0x0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) 21:53:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_clone3(&(0x7f0000000800)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 21:53:54 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x4cb3, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 21:53:54 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x4cb3, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 21:53:56 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_clone3(&(0x7f0000000800)={0x41001400, &(0x7f0000000300), &(0x7f0000000380), 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 21:53:56 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) process_vm_readv(0x0, &(0x7f0000000440), 0x0, &(0x7f0000001900)=[{&(0x7f0000000140)=""/4, 0x4}, {0x0}, {&(0x7f0000000580)=""/206, 0xce}, {0x0}, {0x0}, {&(0x7f0000000cc0)=""/50, 0x32}], 0x6, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x100, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) 21:53:56 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x4cb3, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 21:53:56 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x4cb3, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 21:53:56 executing program 1: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e17c356904b3804358bf6edc6b480ba9fd45a3a8f8641e47bf1996bdc3df8277e91cb4f08b79a6c8269cc3f2da6a6f673a76645fdbe9ff60fea16f059eb8e110329c995e610c208b545cc3489ea8fdddb638164bba65daa5dda846171", 0xb8, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r5, 0x0, 0x2, 0x0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) 21:53:57 executing program 1: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e17c356904b3804358bf6edc6b480ba9fd45a3a8f8641e47bf1996bdc3df8277e91cb4f08b79a6c8269cc3f2da6a6f673a76645fdbe9ff60fea16f059eb8e110329c995e610c208b545cc3489ea8fdddb638164bba65daa5dda846171", 0xb8, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r5, 0x0, 0x2, 0x0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) 21:53:58 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x4cb3, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 21:53:58 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) process_vm_readv(0x0, &(0x7f0000000440), 0x0, &(0x7f0000001900)=[{&(0x7f0000000140)=""/4, 0x4}, {0x0}, {&(0x7f0000000580)=""/206, 0xce}, {0x0}, {0x0}, {&(0x7f0000000cc0)=""/50, 0x32}], 0x6, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x100, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) 21:53:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x4cb3, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 21:53:58 executing program 0: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e17c356904b3804358bf6edc6b480ba9fd45a3a8f8641e47bf1996bdc3df8277e91cb4f08b79a6c8269cc3f2da6a6f673a76645fdbe9ff60fea16f059eb8e110329c995e610c208b545cc3489ea8fdddb638164bba65daa5dda846171", 0xb8, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r5, 0x0, 0x2, 0x0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) 21:53:59 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) process_vm_readv(0x0, &(0x7f0000000440), 0x0, &(0x7f0000001900)=[{&(0x7f0000000140)=""/4, 0x4}, {0x0}, {&(0x7f0000000580)=""/206, 0xce}, {0x0}, {0x0}, {&(0x7f0000000cc0)=""/50, 0x32}], 0x6, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x100, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) [ 255.584961][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.593076][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 21:54:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xffffffff}]}}]}, 0x38}}, 0x0) 21:54:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) process_vm_readv(0x0, &(0x7f0000000440), 0x0, &(0x7f0000001900)=[{&(0x7f0000000140)=""/4, 0x4}, {0x0}, {&(0x7f0000000580)=""/206, 0xce}, {0x0}, {0x0}, {&(0x7f0000000cc0)=""/50, 0x32}], 0x6, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x100, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) 21:54:01 executing program 2: linkat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x81}, 0x0) 21:54:01 executing program 5: openat$vsock(0xffffffffffffff9c, 0x0, 0x420400, 0x0) syz_clone(0x40300000, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)="306a31b90245ca74f535a47561029ad5c58cba28fccdd829e266cdf745f0ce47a6e59ffd75fffb080502e8d2f8a0b4e8d6507e2283db9de40b56d9496ae50f314b159933c7c6113f1f4f80d6076e12a92fff7d0cec5e49e0943a2173ee49bf406308fa4498653aa3ebf0") write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x2, 0x0) 21:54:01 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x1}}}, 0x7) 21:54:01 executing program 3: mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) 21:54:01 executing program 0: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e17c356904b3804358bf6edc6b480ba9fd45a3a8f8641e47bf1996bdc3df8277e91cb4f08b79a6c8269cc3f2da6a6f673a76645fdbe9ff60fea16f059eb8e110329c995e610c208b545cc3489ea8fdddb638164bba65daa5dda846171", 0xb8, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r5, 0x0, 0x2, 0x0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) 21:54:01 executing program 2: syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@extension_unit={0xd, 0x24, 0x8, 0x1, 0x0, 0x0, "1ff6551af53f"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x0, 0x0, "14"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x1, 0x0, 0x2a, 0x81, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x4, 0x1, 0x0, 0x40, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0x7, 0x6}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x1, 0xff, '8'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x6, 0x9, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x81, 0x0, 0xf8}, 0x2b, &(0x7f0000000380)={0x5, 0xf, 0x2b, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x0, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x61, 0x400}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x7}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc5}]}, 0x2, [{0x59, &(0x7f0000000400)=@string={0x59, 0x3, "9cde5d4aa6a454b45a6bd5bec6063a2cb89e9eb2a2dde0dec7241893cf9bf12817fc8299d745b618d7e511bdd5cd7088ebee917559aaf34030a35ec68fff75f86c85d80cf4effd93afba94a29bde62d67067e1141d0e37"}}, {0x38, &(0x7f0000000480)=@string={0x38, 0x3, "ff7a840bee37fc5311acbcdb24c03b5582f6de8ac04d2035aefe63390982a08d49f6c037646c93045e6d20d2d871b5494489f6f00b39"}}]}) 21:54:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/40, 0x28}], 0x1, &(0x7f0000008640)=[{&(0x7f0000000500)=""/95, 0x5f}], 0x1, 0x0) 21:54:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/40, 0x28}], 0x1, &(0x7f0000008640)=[{&(0x7f0000000500)=""/95, 0x5f}], 0x1, 0x0) 21:54:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x56bb, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) [ 257.311873][ T3734] usb 3-1: new full-speed USB device number 2 using dummy_hcd 21:54:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/40, 0x28}], 0x1, &(0x7f0000008640)=[{&(0x7f0000000500)=""/95, 0x5f}], 0x1, 0x0) [ 257.672405][ T3734] usb 3-1: not running at top speed; connect to a high speed hub 21:54:02 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x2) [ 257.772075][ T3734] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 257.796977][ T3734] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 257.852016][ T3734] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 257.879549][ T3734] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.904919][ T3734] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.112304][ T3734] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.141808][ T3734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.160084][ T3734] usb 3-1: Product: syz [ 258.174954][ T3734] usb 3-1: Manufacturer: 竿஄㟮叼갑쀤唻諞䷀㔠ﺮ㥣舉趠㟀汤ғ浞툠燘䦵襄㤋 [ 258.248847][ T3734] usb 3-1: SerialNumber: syz 21:54:03 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) process_vm_readv(0x0, &(0x7f0000000440), 0x0, &(0x7f0000001900)=[{&(0x7f0000000140)=""/4, 0x4}, {0x0}, {&(0x7f0000000580)=""/206, 0xce}, {0x0}, {0x0}, {&(0x7f0000000cc0)=""/50, 0x32}], 0x6, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x100, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x61c2c9d9) 21:54:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@empty}, {@in=@dev, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0xb00, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 21:54:03 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 21:54:03 executing program 0: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000340)="87418d12133f298f017cbcbf0d74494814897a048a4d8eb40942e6b25446b4492da1f03cebb7222678e01591112a5a8ddf9a06f12146bee48def795b9afb66ea6df578b1fd099e9bcbab1990be62ebd262583166169b2e990826b03e17c356904b3804358bf6edc6b480ba9fd45a3a8f8641e47bf1996bdc3df8277e91cb4f08b79a6c8269cc3f2da6a6f673a76645fdbe9ff60fea16f059eb8e110329c995e610c208b545cc3489ea8fdddb638164bba65daa5dda846171", 0xb8, 0x7, 0x0, 0x2, r1}]) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r5, 0x0, 0x2, 0x0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}, 0x0, 0x24004090}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x3e8, 0x0, 0x0, 0x1e00) 21:54:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/40, 0x28}], 0x1, &(0x7f0000008640)=[{&(0x7f0000000500)=""/95, 0x5f}], 0x1, 0x0) [ 258.612259][ T3734] usb 3-1: 0:2 : does not exist [ 258.629371][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 258.680688][ T3734] usb 3-1: USB disconnect, device number 2 21:54:03 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0\x00') mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x201000, 0x0) mount(&(0x7f00000003c0)=@filename='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x5400, 0x0) chdir(&(0x7f0000000080)='./file0\x00') mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x200f080, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0xa) 21:54:03 executing program 2: syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@extension_unit={0xd, 0x24, 0x8, 0x1, 0x0, 0x0, "1ff6551af53f"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x0, 0x0, "14"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x1, 0x0, 0x2a, 0x81, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x4, 0x1, 0x0, 0x40, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0x7, 0x6}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x1, 0xff, '8'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x6, 0x9, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x81, 0x0, 0xf8}, 0x2b, &(0x7f0000000380)={0x5, 0xf, 0x2b, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x0, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x61, 0x400}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x7}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc5}]}, 0x2, [{0x59, &(0x7f0000000400)=@string={0x59, 0x3, "9cde5d4aa6a454b45a6bd5bec6063a2cb89e9eb2a2dde0dec7241893cf9bf12817fc8299d745b618d7e511bdd5cd7088ebee917559aaf34030a35ec68fff75f86c85d80cf4effd93afba94a29bde62d67067e1141d0e37"}}, {0x38, &(0x7f0000000480)=@string={0x38, 0x3, "ff7a840bee37fc5311acbcdb24c03b5582f6de8ac04d2035aefe63390982a08d49f6c037646c93045e6d20d2d871b5494489f6f00b39"}}]}) 21:54:03 executing program 4: syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)) syz_clone(0x20021000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x0, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000080), &(0x7f0000000300), 0x0) syz_clone(0x0, &(0x7f0000001280)="f5dbaa54a38b44607c0fe890ce5e2696731b3c6a38756de608eb2c5039d57afa0203859ad4fadfd1c6be3d947e07627766cfc4bed0ade33ec4f9e64bb62b54f6536c0819193ef10343a9e4059fb9af149f1f0a8db6d935939a33aaf5f055c1236e60b65346a016ba41068881eca53a68f2e5309eac6e510618b6ceb1360d4b4ce06ec981606eafdd0fc76a24d9df806d35f7400717ba441473af1586ba9ed4477ed0e54f86e36a12b7db7b0d8aa6f9250776c33aaad7653822888be1e9b7ba4b55b8b9", 0xc3, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000001380)="afde") ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000004c0)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000013c0), 0x10) 21:54:03 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0xa, 0x0, 0x0, 0x0, 0x1) 21:54:03 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0xa, 0x0, 0x0, 0x0, 0x1) 21:54:04 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0xa, 0x0, 0x0, 0x0, 0x1) [ 259.481916][ T22] usb 3-1: new full-speed USB device number 3 using dummy_hcd 21:54:04 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) [ 259.872330][ T22] usb 3-1: not running at top speed; connect to a high speed hub [ 259.982358][ T22] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 260.001212][ T22] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 260.071665][ T22] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 260.157072][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.205753][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.422131][ T22] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.448085][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.502395][ T22] usb 3-1: Product: syz [ 260.535350][ T22] usb 3-1: Manufacturer: 竿஄㟮叼갑쀤唻諞䷀㔠ﺮ㥣舉趠㟀汤ғ浞툠燘䦵襄㤋 [ 260.619305][ T22] usb 3-1: SerialNumber: syz 21:54:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}}, 0x1c}}, 0x0) 21:54:05 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0xa, 0x0, 0x0, 0x0, 0x1) 21:54:05 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 21:54:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x10, &(0x7f0000003280)=""/4104, &(0x7f0000001080)=0x1008) 21:54:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000308000a40000000000900020073797a32000000000900010073797a30000000000800054000000017000300000c0a010300000000000000000100000008000440000000000900010073797a3000000000d8020380d4020080980201801b0001"], 0x384}}, 0x0) 21:54:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}}) [ 260.890871][ T5987] sctp: [Deprecated]: syz-executor.1 (pid 5987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.890871][ T5987] Use struct sctp_sack_info instead [ 260.982329][ T22] usb 3-1: 0:2 : does not exist [ 261.034953][ T22] usb 3-1: USB disconnect, device number 3 [ 261.127476][ T5991] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 261.188588][ T5991] netlink: 632 bytes leftover after parsing attributes in process `syz-executor.0'. 21:54:06 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff54) syz_open_procfs(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000200), 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f00000001c0)='0', 0x1) dup(r3) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB], 0x130}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000140)={0x6, 'pimreg1\x00', {}, 0x4}) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 21:54:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x60, 0x74}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x18}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x4c}}, 0x0) 21:54:06 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [], [0xfffe]}}]}}]}, 0x8c}}, 0x0) 21:54:06 executing program 2: syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@extension_unit={0xd, 0x24, 0x8, 0x1, 0x0, 0x0, "1ff6551af53f"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x0, 0x0, "14"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x1, 0x0, 0x2a, 0x81, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x4, 0x1, 0x0, 0x40, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0x7, 0x6}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x1, 0xff, '8'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x6, 0x9, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x81, 0x0, 0xf8}, 0x2b, &(0x7f0000000380)={0x5, 0xf, 0x2b, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x0, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x61, 0x400}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x7}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc5}]}, 0x2, [{0x59, &(0x7f0000000400)=@string={0x59, 0x3, "9cde5d4aa6a454b45a6bd5bec6063a2cb89e9eb2a2dde0dec7241893cf9bf12817fc8299d745b618d7e511bdd5cd7088ebee917559aaf34030a35ec68fff75f86c85d80cf4effd93afba94a29bde62d67067e1141d0e37"}}, {0x38, &(0x7f0000000480)=@string={0x38, 0x3, "ff7a840bee37fc5311acbcdb24c03b5582f6de8ac04d2035aefe63390982a08d49f6c037646c93045e6d20d2d871b5494489f6f00b39"}}]}) [ 261.518633][ T5998] netlink: 'syz-executor.3': attribute type 24 has an invalid length. 21:54:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x207b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000200)='Z', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x251c}], 0x1, 0x0, 0x46, 0x400000}, 0x100) [ 261.871838][ T3304] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 262.202098][ T3304] usb 3-1: not running at top speed; connect to a high speed hub [ 262.292074][ T3304] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 262.313582][ T3304] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping 21:54:07 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 21:54:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 21:54:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x207b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000200)='Z', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x251c}], 0x1, 0x0, 0x46, 0x400000}, 0x100) [ 262.344457][ T3304] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 262.353653][ T3304] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.365341][ T3304] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 21:54:07 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 21:54:07 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff54) syz_open_procfs(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000200), 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f00000001c0)='0', 0x1) dup(r3) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB], 0x130}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000140)={0x6, 'pimreg1\x00', {}, 0x4}) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 262.552081][ T3304] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.572524][ T3304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.590819][ T3304] usb 3-1: Product: syz [ 262.599135][ T3304] usb 3-1: Manufacturer: 竿஄㟮叼갑쀤唻諞䷀㔠ﺮ㥣舉趠㟀汤ғ浞툠燘䦵襄㤋 [ 262.633107][ T3304] usb 3-1: SerialNumber: syz 21:54:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x207b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000200)='Z', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x251c}], 0x1, 0x0, 0x46, 0x400000}, 0x100) [ 262.982321][ T3304] usb 3-1: 0:2 : does not exist [ 263.084950][ T3304] usb 3-1: USB disconnect, device number 4 21:54:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x207b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000200)='Z', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x251c}], 0x1, 0x0, 0x46, 0x400000}, 0x100) 21:54:08 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 21:54:08 executing program 2: syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@extension_unit={0xd, 0x24, 0x8, 0x1, 0x0, 0x0, "1ff6551af53f"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x0, 0x0, "14"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x1, 0x0, 0x2a, 0x81, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x4, 0x1, 0x0, 0x40, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0x7, 0x6}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x1, 0xff, '8'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x6, 0x9, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x81, 0x0, 0xf8}, 0x2b, &(0x7f0000000380)={0x5, 0xf, 0x2b, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x0, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x61, 0x400}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x7}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc5}]}, 0x2, [{0x59, &(0x7f0000000400)=@string={0x59, 0x3, "9cde5d4aa6a454b45a6bd5bec6063a2cb89e9eb2a2dde0dec7241893cf9bf12817fc8299d745b618d7e511bdd5cd7088ebee917559aaf34030a35ec68fff75f86c85d80cf4effd93afba94a29bde62d67067e1141d0e37"}}, {0x38, &(0x7f0000000480)=@string={0x38, 0x3, "ff7a840bee37fc5311acbcdb24c03b5582f6de8ac04d2035aefe63390982a08d49f6c037646c93045e6d20d2d871b5494489f6f00b39"}}]}) 21:54:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x207b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000200)='Z', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x251c}], 0x1, 0x0, 0x46, 0x400000}, 0x100) 21:54:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff54) syz_open_procfs(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000200), 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f00000001c0)='0', 0x1) dup(r3) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB], 0x130}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000140)={0x6, 'pimreg1\x00', {}, 0x4}) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 21:54:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x207b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000200)='Z', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x251c}], 0x1, 0x0, 0x46, 0x400000}, 0x100) 21:54:08 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) [ 263.992152][ T22] usb 3-1: new full-speed USB device number 5 using dummy_hcd 21:54:08 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usbip_server_init(0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 264.392429][ T22] usb 3-1: not running at top speed; connect to a high speed hub [ 264.492863][ T22] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 264.531180][ T22] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 264.577834][ T6039] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 264.584779][ T6039] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 264.621349][ T22] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping 21:54:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x207b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000200)='Z', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x251c}], 0x1, 0x0, 0x46, 0x400000}, 0x100) [ 264.665515][ T6041] vhci_hcd: connection closed [ 264.669513][ T6039] vhci_hcd vhci_hcd.0: Device attached [ 264.726595][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.773717][ T11] vhci_hcd: stop threads [ 264.778938][ T11] vhci_hcd: release socket [ 264.792020][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.823633][ T11] vhci_hcd: disconnect device [ 265.002160][ T22] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.015544][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.040320][ T22] usb 3-1: Product: syz [ 265.052440][ T22] usb 3-1: Manufacturer: 竿஄㟮叼갑쀤唻諞䷀㔠ﺮ㥣舉趠㟀汤ғ浞툠燘䦵襄㤋 [ 265.079630][ T22] usb 3-1: SerialNumber: syz 21:54:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff54) syz_open_procfs(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000240)=""/252, 0xfc}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000200), 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f00000001c0)='0', 0x1) dup(r3) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB], 0x130}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000140)={0x6, 'pimreg1\x00', {}, 0x4}) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 21:54:09 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) dup2(r1, r0) 21:54:09 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usbip_server_init(0x4) close_range(r0, 0xffffffffffffffff, 0x0) 21:54:09 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usbip_server_init(0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 265.462079][ T22] usb 3-1: 0:2 : does not exist [ 265.518014][ T22] usb 3-1: USB disconnect, device number 5 [ 265.547035][ T6059] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 265.553696][ T6059] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 265.655677][ T6064] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 265.662255][ T6064] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 265.689642][ T6060] vhci_hcd: connection closed [ 265.689661][ T6059] vhci_hcd vhci_hcd.0: Device attached [ 265.742464][ T6065] vhci_hcd: connection closed [ 265.742492][ T6064] vhci_hcd vhci_hcd.0: Device attached [ 265.759203][ T3690] udevd[3690]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 21:54:10 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) dup2(r1, r0) [ 265.823147][ T1238] vhci_hcd: stop threads [ 265.827574][ T1238] vhci_hcd: release socket [ 265.846754][ T1238] vhci_hcd: disconnect device [ 265.916841][ T1238] vhci_hcd: stop threads [ 265.942168][ T1238] vhci_hcd: release socket [ 265.982276][ T3727] vhci_hcd: vhci_device speed not set [ 265.992034][ T1238] vhci_hcd: disconnect device 21:54:10 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) dup2(r1, r0) 21:54:10 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usbip_server_init(0x4) close_range(r0, 0xffffffffffffffff, 0x0) 21:54:10 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) dup2(r1, r0) 21:54:10 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) dup2(r1, r0) 21:54:10 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usbip_server_init(0x4) close_range(r0, 0xffffffffffffffff, 0x0) 21:54:11 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) dup2(r1, r0) [ 266.457797][ T6084] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 266.464359][ T6084] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) 21:54:11 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) dup2(r1, r0) [ 266.542433][ T6084] vhci_hcd vhci_hcd.0: Device attached [ 266.548576][ T6086] vhci_hcd: connection closed [ 266.551684][ T1238] vhci_hcd: stop threads [ 266.578546][ T1238] vhci_hcd: release socket 21:54:11 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usbip_server_init(0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 266.603096][ T6089] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 266.609656][ T6089] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 266.626848][ T6089] vhci_hcd vhci_hcd.0: Device attached [ 266.664243][ T1238] vhci_hcd: disconnect device 21:54:11 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usbip_server_init(0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 266.674600][ T6091] vhci_hcd: connection closed [ 266.685132][ T1238] vhci_hcd: stop threads [ 266.706312][ T1238] vhci_hcd: release socket [ 266.721633][ T1238] vhci_hcd: disconnect device 21:54:11 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usbip_server_init(0x4) close_range(r0, 0xffffffffffffffff, 0x0) 21:54:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) dup3(r1, r0, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000001840)=[&(0x7f0000003980)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\"', 0x1}]) [ 266.809193][ T6105] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 266.815770][ T6105] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 266.898561][ T6105] vhci_hcd vhci_hcd.0: Device attached [ 266.926489][ T6110] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 266.933066][ T6110] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 266.943655][ T6114] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 266.950243][ T6114] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 266.960040][ T6114] vhci_hcd vhci_hcd.0: Device attached [ 266.970704][ T6119] vhci_hcd: connection closed [ 266.972548][ T36] vhci_hcd: stop threads [ 266.982081][ T36] vhci_hcd: release socket 21:54:11 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 266.996220][ T6107] vhci_hcd: connection closed [ 266.996440][ T36] vhci_hcd: disconnect device [ 267.007993][ T6115] vhci_hcd: connection closed [ 267.009987][ T6110] vhci_hcd vhci_hcd.0: Device attached [ 267.031682][ T36] vhci_hcd: stop threads [ 267.068669][ T36] vhci_hcd: release socket [ 267.084975][ T36] vhci_hcd: disconnect device [ 267.099916][ T36] vhci_hcd: stop threads [ 267.110065][ T36] vhci_hcd: release socket [ 267.111976][ T22] vhci_hcd: vhci_device speed not set [ 267.120587][ T36] vhci_hcd: disconnect device 21:54:11 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usbip_server_init(0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 267.251256][ T6127] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 267.257844][ T6127] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 267.282140][ T6127] vhci_hcd vhci_hcd.0: Device attached [ 267.297985][ T6129] vhci_hcd: connection closed [ 267.304482][ T36] vhci_hcd: stop threads [ 267.325812][ T36] vhci_hcd: release socket [ 267.330283][ T36] vhci_hcd: disconnect device 21:54:11 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usbip_server_init(0x4) close_range(r0, 0xffffffffffffffff, 0x0) 21:54:12 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usbip_server_init(0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 267.472124][ T6133] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 267.478697][ T6133] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 267.516828][ T6135] vhci_hcd: connection closed [ 267.520290][ T6133] vhci_hcd vhci_hcd.0: Device attached 21:54:12 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usbip_server_init(0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 267.562586][ T1238] vhci_hcd: stop threads [ 267.567276][ T1238] vhci_hcd: release socket [ 267.579881][ T1238] vhci_hcd: disconnect device 21:54:12 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usbip_server_init(0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 267.656558][ T6139] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 267.663311][ T6139] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 267.722528][ T6145] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 267.729195][ T6145] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 267.753320][ T6142] vhci_hcd: connection closed [ 267.756021][ T6139] vhci_hcd vhci_hcd.0: Device attached [ 267.773209][ T6145] vhci_hcd vhci_hcd.0: Device attached [ 267.791943][ T6150] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 267.795981][ T56] vhci_hcd: stop threads [ 267.798495][ T6150] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 267.799181][ T6147] vhci_hcd: connection closed [ 267.814163][ T6150] vhci_hcd vhci_hcd.0: Device attached [ 267.814626][ T56] vhci_hcd: release socket [ 267.834671][ T6152] vhci_hcd: connection closed [ 267.852195][ T56] vhci_hcd: disconnect device 21:54:12 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usbip_server_init(0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 267.891692][ T56] vhci_hcd: stop threads [ 267.902068][ T56] vhci_hcd: release socket 21:54:12 executing program 2: syz_usb_connect(0x0, 0x52, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x23, 0xcc, 0x30, 0x8, 0x421, 0x302, 0x156e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) [ 267.955659][ T56] vhci_hcd: disconnect device [ 267.972069][ T14] vhci_hcd: vhci_device speed not set [ 267.989335][ T56] vhci_hcd: stop threads [ 268.005419][ T56] vhci_hcd: release socket [ 268.012234][ T3304] vhci_hcd: vhci_device speed not set [ 268.031867][ T56] vhci_hcd: disconnect device [ 268.059485][ T6157] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 268.066059][ T6157] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 268.095674][ T6157] vhci_hcd vhci_hcd.0: Device attached 21:54:12 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x7}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307f, 0x0, 0x4) io_uring_enter(r0, 0x0, 0xfa48, 0x7, &(0x7f0000000000), 0x8) [ 268.111989][ T6159] vhci_hcd: connection closed [ 268.112816][ T36] vhci_hcd: stop threads [ 268.130944][ T36] vhci_hcd: release socket [ 268.141604][ T36] vhci_hcd: disconnect device 21:54:12 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000001b7b001c00128009000300626f6e64000000000c000280040018"], 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32, @ANYBLOB="8000001f00000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) [ 268.446643][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 268.457711][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 21:54:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe}, 0x48) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x20) 21:54:13 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usbip_server_init(0x4) close_range(r0, 0xffffffffffffffff, 0x0) 21:54:13 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usbip_server_init(0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 268.562164][ T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd 21:54:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r3, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xfffffffc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}]}, 0x38}}, 0x0) [ 268.616348][ T6172] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 268.623043][ T6172] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 268.639634][ T6172] vhci_hcd vhci_hcd.0: Device attached [ 268.650584][ T6174] vhci_hcd: connection closed [ 268.650848][ T3857] vhci_hcd: stop threads [ 268.670026][ T3857] vhci_hcd: release socket [ 268.681513][ T3857] vhci_hcd: disconnect device [ 268.695875][ T6178] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 268.702454][ T6178] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 268.730676][ T6178] vhci_hcd vhci_hcd.0: Device attached 21:54:13 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1c) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000180)='0', 0x1}, {&(0x7f00000006c0)="495b33c92d7ab5d6bac2e7b03e907cfd94", 0x11}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f0000000740)=0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r3, &(0x7f0000000b00), 0x0, 0x6, 0xffffffff) write$cgroup_pid(r4, &(0x7f0000000240)=r1, 0x12) connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0xae) link(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='./file1\x00') 21:54:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) [ 268.802499][ T22] usb 3-1: Using ep0 maxpacket: 8 21:54:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}]}, 0x24}}, 0x0) [ 268.828347][ T6180] vhci_hcd: connection closed [ 268.828690][ T1238] vhci_hcd: stop threads [ 268.841088][ T1238] vhci_hcd: release socket [ 268.868438][ T1238] vhci_hcd: disconnect device [ 268.922016][ T22] usb 3-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=15.6e [ 268.942266][ T3730] vhci_hcd: vhci_device speed not set [ 268.950010][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:54:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}]}, 0x24}}, 0x0) [ 268.992579][ T22] usb 3-1: config 0 descriptor?? [ 269.070475][ T22] rndis_wlan 3-1:0.0: More than one union descriptor, skipping ... [ 269.088709][ T22] usb 3-1: bad CDC descriptors [ 269.109332][ T22] rndis_host 3-1:0.0: More than one union descriptor, skipping ... 21:54:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}]}, 0x24}}, 0x0) [ 269.135371][ T22] usb 3-1: bad CDC descriptors [ 269.157020][ T22] cdc_acm 3-1:0.0: More than one union descriptor, skipping ... [ 269.267762][ T22] usb 3-1: USB disconnect, device number 6 21:54:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x4}) 21:54:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}]}, 0x24}}, 0x0) 21:54:14 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0) r3 = dup3(r1, r0, 0x0) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x2000a048}}, 0x0) 21:54:14 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x400, 0x0, 0x2c7}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000380)={r2}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_sctp(0x2, 0x0, 0x84) r4 = syz_io_uring_setup(0x568, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0xd576493c82da6270, 0x0, r3}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) recvmsg$unix(r1, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) 21:54:14 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ca"}}, 0x119) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000480), 0xc) 21:54:14 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1c) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000180)='0', 0x1}, {&(0x7f00000006c0)="495b33c92d7ab5d6bac2e7b03e907cfd94", 0x11}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f0000000740)=0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r3, &(0x7f0000000b00), 0x0, 0x6, 0xffffffff) write$cgroup_pid(r4, &(0x7f0000000240)=r1, 0x12) connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0xae) link(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='./file1\x00') 21:54:14 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, 0x0) 21:54:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xa, 0x1, @random}]}, 0x2c}}, 0x0) [ 269.850693][ T22] hid-generic 0000:0000:0000.0006: item fetching failed at offset 0/1 21:54:14 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) 21:54:14 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ca"}}, 0x119) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000480), 0xc) [ 269.977411][ T22] hid-generic: probe of 0000:0000:0000.0006 failed with error -22 21:54:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xa, 0x1, @random}]}, 0x2c}}, 0x0) 21:54:14 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$sequencer(r0, &(0x7f0000000000)=""/7, 0x9) 21:54:14 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ca"}}, 0x119) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000480), 0xc) 21:54:14 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$sequencer(r0, &(0x7f0000000000)=""/7, 0x9) 21:54:14 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ca"}}, 0x119) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000480), 0xc) [ 270.259824][ T6217] cgroup: fork rejected by pids controller in /syz4 [ 270.387530][ T3730] hid-generic 0000:0000:0000.0007: item fetching failed at offset 0/1 [ 270.453261][ T3730] hid-generic: probe of 0000:0000:0000.0007 failed with error -22 21:54:15 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x400, 0x0, 0x2c7}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000380)={r2}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_sctp(0x2, 0x0, 0x84) r4 = syz_io_uring_setup(0x568, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0xd576493c82da6270, 0x0, r3}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) recvmsg$unix(r1, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) 21:54:15 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, 0x0) 21:54:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xa, 0x1, @random}]}, 0x2c}}, 0x0) 21:54:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x2fffffc, 0x10, 0x1f}) 21:54:15 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$sequencer(r0, &(0x7f0000000000)=""/7, 0x9) 21:54:15 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1c) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000180)='0', 0x1}, {&(0x7f00000006c0)="495b33c92d7ab5d6bac2e7b03e907cfd94", 0x11}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f0000000740)=0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r3, &(0x7f0000000b00), 0x0, 0x6, 0xffffffff) write$cgroup_pid(r4, &(0x7f0000000240)=r1, 0x12) connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0xae) link(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='./file1\x00') 21:54:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xa, 0x1, @random}]}, 0x2c}}, 0x0) 21:54:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) 21:54:15 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$sequencer(r0, &(0x7f0000000000)=""/7, 0x9) 21:54:15 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0xfffffcaa, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0xfffffcaa, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a100900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) [ 271.296276][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.318244][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 21:54:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7}]}}}]}, 0x3c}}, 0x0) [ 271.354819][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 21:54:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7}]}}}]}, 0x3c}}, 0x0) 21:54:17 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x400, 0x0, 0x2c7}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000380)={r2}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_sctp(0x2, 0x0, 0x84) r4 = syz_io_uring_setup(0x568, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0xd576493c82da6270, 0x0, r3}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) recvmsg$unix(r1, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) 21:54:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x13, 0x2, @loopback}}}]}]}, 0x38}}, 0x0) 21:54:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7}]}}}]}, 0x3c}}, 0x0) 21:54:17 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1c) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000180)='0', 0x1}, {&(0x7f00000006c0)="495b33c92d7ab5d6bac2e7b03e907cfd94", 0x11}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f0000000740)=0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r3, &(0x7f0000000b00), 0x0, 0x6, 0xffffffff) write$cgroup_pid(r4, &(0x7f0000000240)=r1, 0x12) connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0xae) link(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='./file1\x00') 21:54:17 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) 21:54:17 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, 0x0) 21:54:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7}]}}}]}, 0x3c}}, 0x0) [ 272.724694][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 272.811953][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 21:54:17 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/240, 0xf0}], 0x2, 0x7f, 0xd54c) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb718}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0x8000000) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd8c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 21:54:17 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x1c16, &(0x7f0000002180)={0x0, 0x0, 0x800}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x374, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r0, &(0x7f0000002140)=""/17, 0x11, 0x0) 21:54:18 executing program 3: syz_clone(0xc000080, 0x0, 0x0, 0x0, 0x0, 0x0) 21:54:18 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x1c16, &(0x7f0000002180)={0x0, 0x0, 0x800}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x374, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r0, &(0x7f0000002140)=""/17, 0x11, 0x0) 21:54:18 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) [ 274.751969][ T22] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 275.041929][ T22] usb 4-1: Using ep0 maxpacket: 8 21:54:19 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x400, 0x0, 0x2c7}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000380)={r2}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_sctp(0x2, 0x0, 0x84) r4 = syz_io_uring_setup(0x568, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0xd576493c82da6270, 0x0, r3}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) recvmsg$unix(r1, 0x0, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) 21:54:19 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/240, 0xf0}], 0x2, 0x7f, 0xd54c) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb718}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0x8000000) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd8c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 21:54:19 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, 0x0) [ 275.172217][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.226556][ T22] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 275.256728][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.295093][ T22] usb 4-1: config 0 descriptor?? 21:54:20 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x1c16, &(0x7f0000002180)={0x0, 0x0, 0x800}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x374, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r0, &(0x7f0000002140)=""/17, 0x11, 0x0) [ 275.584343][ T22] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 21:54:20 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) 21:54:21 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x1c16, &(0x7f0000002180)={0x0, 0x0, 0x800}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x374, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r0, &(0x7f0000002140)=""/17, 0x11, 0x0) 21:54:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/240, 0xf0}], 0x2, 0x7f, 0xd54c) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb718}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0x8000000) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd8c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 21:54:22 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) [ 277.555065][ T3304] usb 4-1: USB disconnect, device number 11 [ 277.585613][ T3304] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected 21:54:22 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/240, 0xf0}], 0x2, 0x7f, 0xd54c) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb718}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0x8000000) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd8c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 21:54:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) 21:54:22 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/240, 0xf0}], 0x2, 0x7f, 0xd54c) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb718}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0x8000000) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd8c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) [ 278.022144][ T3304] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 278.261904][ T3304] usb 4-1: Using ep0 maxpacket: 8 21:54:22 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/240, 0xf0}], 0x2, 0x7f, 0xd54c) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb718}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0x8000000) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd8c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) [ 278.382117][ T3304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.439150][ T3304] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 278.524721][ T3304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.582892][ T3304] usb 4-1: config 0 descriptor?? [ 278.844499][ T3304] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 21:54:24 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/240, 0xf0}], 0x2, 0x7f, 0xd54c) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb718}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0x8000000) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd8c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 21:54:24 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/240, 0xf0}], 0x2, 0x7f, 0xd54c) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb718}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0x8000000) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd8c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 21:54:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/240, 0xf0}], 0x2, 0x7f, 0xd54c) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb718}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0x8000000) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd8c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 21:54:25 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) [ 280.969227][ T3734] usb 4-1: USB disconnect, device number 12 [ 281.020241][ T3734] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected 21:54:25 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/240, 0xf0}], 0x2, 0x7f, 0xd54c) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb718}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0x8000000) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd8c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) [ 281.511985][ T3734] usb 4-1: new high-speed USB device number 13 using dummy_hcd 21:54:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/240, 0xf0}], 0x2, 0x7f, 0xd54c) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb718}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0x8000000) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd8c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) [ 281.801849][ T3734] usb 4-1: Using ep0 maxpacket: 8 [ 281.922071][ T3734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 281.943332][ T3734] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 281.971230][ T3734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.995074][ T3734] usb 4-1: config 0 descriptor?? [ 282.254853][ T3734] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 21:54:27 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/240, 0xf0}], 0x2, 0x7f, 0xd54c) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb718}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0x8000000) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd8c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 21:54:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/240, 0xf0}], 0x2, 0x7f, 0xd54c) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb718}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0x8000000) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd8c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 21:54:27 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/240, 0xf0}], 0x2, 0x7f, 0xd54c) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb718}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0x8000000) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd8c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 21:54:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x252a, 0x5, 0x3000000, '\x00', [{0x801, 0x0, 0x0, 0x0, 0x0, 0xaa26}, {0x801, 0x0, 0x8000000}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) 21:54:27 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/240, 0xf0}], 0x2, 0x7f, 0xd54c) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb718}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0x8000000) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd8c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 21:54:28 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x10, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 21:54:28 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x10, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 21:54:28 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x10, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 21:54:28 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000340)) ioctl$PPPIOCCONNECT(r0, 0x4004743a, 0x0) 21:54:28 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) [ 284.306861][ T3734] usb 4-1: USB disconnect, device number 13 [ 284.350000][ T3734] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 284.403927][ T3690] udevd[3690]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 21:54:29 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x10, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 21:54:29 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) io_setup(0x33, &(0x7f0000000040)=0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) io_submit(r1, 0x2, &(0x7f0000001480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 284.862599][ T3734] usb 4-1: new high-speed USB device number 14 using dummy_hcd 21:54:29 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_debug_messages', 0x48a41, 0x0) r3 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30}, 0x30) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:54:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r1 = open(&(0x7f0000000200)='./bus\x00', 0x14da42, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x12, 0x0, 0x27) [ 285.139699][ T3734] usb 4-1: Using ep0 maxpacket: 8 [ 285.282721][ T3734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.309514][ T3734] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 285.344503][ T3734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.386583][ T3734] usb 4-1: config 0 descriptor?? 21:54:30 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/240, 0xf0}], 0x2, 0x7f, 0xd54c) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb718}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0x8000000) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd8c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 21:54:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7d13}) io_setup(0x1, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 21:54:30 executing program 2: symlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00', 0x0, 0x0) 21:54:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@private}, 0x0, @in6=@loopback}}, 0xe4) 21:54:30 executing program 2: io_setup(0x6, &(0x7f0000000000)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "0a3eee5e68166e90"}) r3 = dup3(r2, r1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x1b71, 0x2, 0x2, 0x2, 0x19, "12086f20b5a0a7c4f9a522b6497dafa3657b96"}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x8, r1, 0x0}]) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r6 = dup2(r4, r5) dup3(r6, r3, 0x0) 21:54:30 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x0, 0x3, 0x1) socket(0xa, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.numa_stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x2, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) dup(r2) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 21:54:30 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000000040)={0xcc00, &(0x7f0000000000)=[{}]}) [ 285.664178][ T3734] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 21:54:32 executing program 2: io_setup(0x6, &(0x7f0000000000)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "0a3eee5e68166e90"}) r3 = dup3(r2, r1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x1b71, 0x2, 0x2, 0x2, 0x19, "12086f20b5a0a7c4f9a522b6497dafa3657b96"}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x8, r1, 0x0}]) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r6 = dup2(r4, r5) dup3(r6, r3, 0x0) 21:54:32 executing program 3: io_setup(0x6, &(0x7f0000000000)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "0a3eee5e68166e90"}) r3 = dup3(r2, r1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x1b71, 0x2, 0x2, 0x2, 0x19, "12086f20b5a0a7c4f9a522b6497dafa3657b96"}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x8, r1, 0x0}]) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r6 = dup2(r4, r5) dup3(r6, r3, 0x0) 21:54:32 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000000040)={0xcc00, &(0x7f0000000000)=[{}]}) 21:54:32 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_debug_messages', 0x48a41, 0x0) r3 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30}, 0x30) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:54:32 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x1, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x8, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0, 0xfffffe45}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) 21:54:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20008051) [ 287.758007][ T3734] usb 4-1: USB disconnect, device number 14 [ 287.768988][ T3734] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected 21:54:32 executing program 1: io_setup(0x6, &(0x7f0000000000)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "0a3eee5e68166e90"}) r3 = dup3(r2, r1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x1b71, 0x2, 0x2, 0x2, 0x19, "12086f20b5a0a7c4f9a522b6497dafa3657b96"}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x8, r1, 0x0}]) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r6 = dup2(r4, r5) dup3(r6, r3, 0x0) 21:54:32 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000000040)={0xcc00, &(0x7f0000000000)=[{}]}) 21:54:32 executing program 2: io_setup(0x6, &(0x7f0000000000)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "0a3eee5e68166e90"}) r3 = dup3(r2, r1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x1b71, 0x2, 0x2, 0x2, 0x19, "12086f20b5a0a7c4f9a522b6497dafa3657b96"}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x8, r1, 0x0}]) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r6 = dup2(r4, r5) dup3(r6, r3, 0x0) 21:54:32 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000000040)={0xcc00, &(0x7f0000000000)=[{}]}) 21:54:33 executing program 3: io_setup(0x6, &(0x7f0000000000)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "0a3eee5e68166e90"}) r3 = dup3(r2, r1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x1b71, 0x2, 0x2, 0x2, 0x19, "12086f20b5a0a7c4f9a522b6497dafa3657b96"}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x8, r1, 0x0}]) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r6 = dup2(r4, r5) dup3(r6, r3, 0x0) 21:54:33 executing program 2: io_setup(0x6, &(0x7f0000000000)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "0a3eee5e68166e90"}) r3 = dup3(r2, r1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x1b71, 0x2, 0x2, 0x2, 0x19, "12086f20b5a0a7c4f9a522b6497dafa3657b96"}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x8, r1, 0x0}]) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r6 = dup2(r4, r5) dup3(r6, r3, 0x0) 21:54:33 executing program 1: io_setup(0x6, &(0x7f0000000000)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "0a3eee5e68166e90"}) r3 = dup3(r2, r1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x1b71, 0x2, 0x2, 0x2, 0x19, "12086f20b5a0a7c4f9a522b6497dafa3657b96"}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x8, r1, 0x0}]) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r6 = dup2(r4, r5) dup3(r6, r3, 0x0) 21:54:33 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_debug_messages', 0x48a41, 0x0) r3 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30}, 0x30) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:54:33 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x1, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x8, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0, 0xfffffe45}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) 21:54:33 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x1, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x8, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0, 0xfffffe45}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) 21:54:33 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000180)={{@hyper}, @any, 0x0, 0x0, 0x2}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000180)={{@hyper}, @any, 0x0, 0x0, 0x2}) 21:54:33 executing program 3: io_setup(0x6, &(0x7f0000000000)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "0a3eee5e68166e90"}) r3 = dup3(r2, r1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x1b71, 0x2, 0x2, 0x2, 0x19, "12086f20b5a0a7c4f9a522b6497dafa3657b96"}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x8, r1, 0x0}]) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r6 = dup2(r4, r5) dup3(r6, r3, 0x0) 21:54:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x10000}) 21:54:33 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000080)=""/71, 0x47) close(r1) 21:54:34 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x8, 0x5, 0x4b8, 0xec, 0x30c, 0xffffffff, 0x30c, 0x220, 0x3f0, 0x3f0, 0xffffffff, 0x3f0, 0x3f0, 0x5, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'veth0_to_bond\x00'}, 0x0, 0xa4, 0xec}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4, @ipv6=@private2, @gre_key}}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_bond\x00', 'vlan0\x00'}, 0x0, 0xec, 0x134, 0x0, {}, [@common=@ipv6header={{0x24}}, @common=@ipv6header={{0x24}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@local, @ipv6=@rand_addr=' \x01\x00', @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'veth1_to_hsr\x00', 'wg0\x00'}, 0x0, 0xa4, 0xec}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv6=@loopback}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, [], [], 'pimreg\x00', 'lo\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "8100000000000000000000005b37f9ca83139d1d43f7ff00"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x514) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a3ff200142900fe800000002c000000000000000000bbfe8000000000000000000000000000aa"], 0x0) 21:54:34 executing program 1: io_setup(0x6, &(0x7f0000000000)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "0a3eee5e68166e90"}) r3 = dup3(r2, r1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x1b71, 0x2, 0x2, 0x2, 0x19, "12086f20b5a0a7c4f9a522b6497dafa3657b96"}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x8, r1, 0x0}]) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r6 = dup2(r4, r5) dup3(r6, r3, 0x0) 21:54:34 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_debug_messages', 0x48a41, 0x0) r3 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30}, 0x30) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 21:54:34 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newchain={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005071000"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@deltfilter={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}}}, 0x24}, 0x8}, 0x0) 21:54:34 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x8}, 0x0, 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc0585609, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1dfa4e4f"}, 0x0, 0x1, {0x0}}) [ 289.809899][ T7348] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:54:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) [ 290.036635][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:54:34 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x1, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x8, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0, 0xfffffe45}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) 21:54:34 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x1, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x8, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0, 0xfffffe45}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) 21:54:34 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newchain={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005071000"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@deltfilter={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}}}, 0x24}, 0x8}, 0x0) 21:54:34 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3fc0}}, './file0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8915, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001040)) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x80083, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) [ 290.244278][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:54:35 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newchain={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005071000"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@deltfilter={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}}}, 0x24}, 0x8}, 0x0) 21:54:35 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0xce, 0xbb, 0xb3, 0x10, 0x1c73, 0x861f, 0xc3a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe8, 0x62, 0x20}}]}}]}}, 0x0) [ 290.603220][ T7380] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:54:35 executing program 0: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) 21:54:35 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newchain={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005071000"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@deltfilter={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}}}, 0x24}, 0x8}, 0x0) [ 290.881926][ T3730] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 290.884044][ T7388] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 291.031871][ T3734] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 291.161799][ T3730] usb 2-1: Using ep0 maxpacket: 16 [ 291.292111][ T3734] usb 1-1: Using ep0 maxpacket: 8 21:54:35 executing program 3: r0 = getpgid(0x0) r1 = getpgrp(0xffffffffffffffff) r2 = openat$null(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000040)={r3}) 21:54:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="d8000000180081064e81f782db4cb904021d0800fd007c09e8fe55a10a000b000500142603600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9", 0xd8}], 0x1}, 0x0) [ 291.432060][ T3734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.461678][ T3734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 21:54:36 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002680), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x40045109, &(0x7f00000000c0)) [ 291.476216][ T3730] usb 2-1: New USB device found, idVendor=1c73, idProduct=861f, bcdDevice=c3.a8 [ 291.488904][ T7394] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 291.510167][ T3730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.570861][ T3734] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 291.591082][ T3730] usb 2-1: Product: syz [ 291.690164][ T3730] usb 2-1: Manufacturer: syz 21:54:36 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002680), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x40045109, &(0x7f00000000c0)) [ 291.711094][ T3730] usb 2-1: SerialNumber: syz [ 291.719424][ T3734] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 291.774424][ T3730] usb 2-1: config 0 descriptor?? [ 291.819134][ T3734] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 291.893732][ T3730] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state [ 291.900948][ T3730] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 291.908208][ T3734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.916892][ T3730] dvb_usb_anysee: probe of 2-1:0.0 failed with error -22 [ 291.927336][ T3734] usb 1-1: config 0 descriptor?? [ 292.093862][ T3730] usb 2-1: USB disconnect, device number 15 21:54:36 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002680), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x40045109, &(0x7f00000000c0)) [ 292.182069][ T3734] usb 1-1: GET_CAPABILITIES returned 0 [ 292.190100][ T3734] usbtmc 1-1:0.0: can't read capabilities 21:54:36 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x1, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x8, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0, 0xfffffe45}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) 21:54:36 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002680), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x40045109, &(0x7f00000000c0)) [ 292.392302][ T3731] usb 1-1: USB disconnect, device number 9 21:54:37 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3fc0}}, './file0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8915, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001040)) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x80083, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:54:37 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4632, &(0x7f0000000180), &(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x8f5a, 0xf6, 0x3, 0x1, 0x5, 0x3f, 0x5, 0x6, 0x0, 0x8, 0x1, 0x9c, 0x0, 0x3, 0x81, '\x00', 0x9, 0x2}) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="b534e15c2355"}, 0x80, 0x0, 0xfffffe45}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) 21:54:37 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002680), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x40045109, &(0x7f00000000c0)) 21:54:37 executing program 0: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) 21:54:37 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0xce, 0xbb, 0xb3, 0x10, 0x1c73, 0x861f, 0xc3a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe8, 0x62, 0x20}}]}}]}}, 0x0) 21:54:37 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002680), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x40045109, &(0x7f00000000c0)) 21:54:37 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002680), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x40045109, &(0x7f00000000c0)) [ 293.291953][ T3730] usb 2-1: new high-speed USB device number 16 using dummy_hcd 21:54:38 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0xd576493c82da6270}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 293.391843][ T22] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 293.551801][ T3730] usb 2-1: Using ep0 maxpacket: 16 [ 293.632140][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 293.773351][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 21:54:38 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000540), 0x1, 0x2) write(r0, &(0x7f0000000280), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 293.831442][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 293.862165][ T3730] usb 2-1: New USB device found, idVendor=1c73, idProduct=861f, bcdDevice=c3.a8 [ 293.912692][ T3730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.949869][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 293.969934][ T3730] usb 2-1: Product: syz [ 293.985880][ T3730] usb 2-1: Manufacturer: syz [ 294.006118][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.019719][ T3730] usb 2-1: SerialNumber: syz 21:54:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x5, 0x8, [0x0, 0x0]}) [ 294.053827][ T3730] usb 2-1: config 0 descriptor?? [ 294.060404][ T22] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.123835][ T3730] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state [ 294.132185][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.151618][ T3730] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 294.189697][ T22] usb 1-1: config 0 descriptor?? [ 294.196215][ T3730] dvb_usb_anysee: probe of 2-1:0.0 failed with error -22 21:54:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x1f4}}, 0x0) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/2, 0x2}], 0x1}, 0x0) 21:54:38 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x3e) [ 294.452532][ T22] usb 1-1: GET_CAPABILITIES returned 0 [ 294.458752][ T22] usbtmc 1-1:0.0: can't read capabilities [ 294.514205][ T3736] usb 2-1: USB disconnect, device number 16 [ 294.773307][ T22] usb 1-1: USB disconnect, device number 10 21:54:39 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3fc0}}, './file0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8915, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001040)) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x80083, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:54:39 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x1f4}}, 0x0) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/2, 0x2}], 0x1}, 0x0) 21:54:39 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008ddbdc08fc042815057900000001090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 21:54:39 executing program 0: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) 21:54:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x4, &(0x7f0000000380)={0x8, 0x4}) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10) dup(r3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) 21:54:39 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0xce, 0xbb, 0xb3, 0x10, 0x1c73, 0x861f, 0xc3a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe8, 0x62, 0x20}}]}}]}}, 0x0) 21:54:39 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x1f4}}, 0x0) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/2, 0x2}], 0x1}, 0x0) 21:54:39 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x1f4}}, 0x0) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/2, 0x2}], 0x1}, 0x0) 21:54:39 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffb}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f00000001c0), 0x40000000000010c, 0x2, 0x0) 21:54:40 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffb}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f00000001c0), 0x40000000000010c, 0x2, 0x0) [ 295.432009][ T3736] usb 4-1: new high-speed USB device number 15 using dummy_hcd 21:54:40 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffb}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f00000001c0), 0x40000000000010c, 0x2, 0x0) [ 295.602939][ T3730] usb 2-1: new high-speed USB device number 17 using dummy_hcd 21:54:40 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffb}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f00000001c0), 0x40000000000010c, 0x2, 0x0) [ 295.663490][ T22] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 295.681905][ T3736] usb 4-1: Using ep0 maxpacket: 8 [ 295.802208][ T3736] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 295.815625][ T3736] usb 4-1: config 0 has no interface number 0 [ 295.846409][ T3736] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=79.05 [ 295.862102][ T3730] usb 2-1: Using ep0 maxpacket: 16 [ 295.881386][ T3736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.929041][ T3736] usb 4-1: config 0 descriptor?? [ 295.942316][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 295.984112][ T3736] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 296.072693][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 296.088800][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 296.109139][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 296.132302][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.149638][ T22] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 296.171028][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.182229][ T3730] usb 2-1: New USB device found, idVendor=1c73, idProduct=861f, bcdDevice=c3.a8 [ 296.199579][ T3730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.219452][ T22] usb 1-1: config 0 descriptor?? [ 296.228599][ T3730] usb 2-1: Product: syz [ 296.239206][ T3730] usb 2-1: Manufacturer: syz [ 296.247711][ T3730] usb 2-1: SerialNumber: syz [ 296.267162][ T3730] usb 2-1: config 0 descriptor?? [ 296.334036][ T3730] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state [ 296.346632][ T3730] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 296.365128][ T3730] dvb_usb_anysee: probe of 2-1:0.0 failed with error -22 [ 296.502096][ T22] usb 1-1: GET_CAPABILITIES returned 0 [ 296.508133][ T22] usbtmc 1-1:0.0: can't read capabilities [ 296.607837][ T3731] usb 2-1: USB disconnect, device number 17 [ 296.641958][ T3736] gspca_spca1528: reg_w err -71 [ 296.672059][ T3736] spca1528: probe of 4-1:0.1 failed with error -71 [ 296.694863][ T3736] usb 4-1: USB disconnect, device number 15 [ 296.760275][ T3304] usb 1-1: USB disconnect, device number 11 21:54:41 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3fc0}}, './file0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8915, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001040)) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x80083, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 21:54:41 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000480)=""/239, 0xef}], 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 21:54:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 21:54:41 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22048881, &(0x7f0000000340)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x24, &(0x7f00000000c0)=0xc, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040), 0x8) 21:54:41 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0xce, 0xbb, 0xb3, 0x10, 0x1c73, 0x861f, 0xc3a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe8, 0x62, 0x20}}]}}]}}, 0x0) 21:54:41 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xfffff}, 0x2f) ppoll(&(0x7f0000000140)=[{r1, 0x7}], 0x1, 0x0, 0x0, 0x0) 21:54:41 executing program 0: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) 21:54:42 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x0, 0x8) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x200002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) sendfile(r2, r0, 0x0, 0x80001d00c0d0) 21:54:42 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) write$dsp(r0, &(0x7f0000001080)='4', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000000)) [ 297.561936][ T3736] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 297.671858][ T3731] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 297.816796][ T3736] usb 2-1: Using ep0 maxpacket: 16 21:54:42 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000480)=""/239, 0xef}], 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 297.922119][ T3731] usb 1-1: Using ep0 maxpacket: 8 [ 298.042396][ T3731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 298.077750][ T3731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 298.100591][ T3731] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 298.111332][ T3736] usb 2-1: New USB device found, idVendor=1c73, idProduct=861f, bcdDevice=c3.a8 [ 298.123026][ T3736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.131167][ T3731] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 21:54:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x0, 0x1100, 0x0}) [ 298.157895][ T3736] usb 2-1: Product: syz [ 298.167793][ T3736] usb 2-1: Manufacturer: syz [ 298.194482][ T3731] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.204148][ T3736] usb 2-1: SerialNumber: syz [ 298.230253][ T3731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.239238][ T3736] usb 2-1: config 0 descriptor?? 21:54:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x0, 0x1100, 0x0}) [ 298.274598][ T3731] usb 1-1: config 0 descriptor?? [ 298.288273][ T3736] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state [ 298.301447][ T3736] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 298.315274][ T3736] dvb_usb_anysee: probe of 2-1:0.0 failed with error -22 [ 298.572936][ T3727] usb 2-1: USB disconnect, device number 18 [ 298.573255][ T3731] usb 1-1: GET_CAPABILITIES returned 0 [ 298.641486][ T3731] usbtmc 1-1:0.0: can't read capabilities [ 298.827132][ T3731] usb 1-1: USB disconnect, device number 12 21:54:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x890c, 0x0) 21:54:44 executing program 4: r0 = io_uring_setup(0x42fd, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x2) 21:54:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x0, 0x1100, 0x0}) 21:54:44 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000480)=""/239, 0xef}], 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 21:54:44 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x6, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0xd}, @initr0]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xc9, &(0x7f0000000100)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 21:54:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000039000100000000000000000001000000040000000c000180060006008835000008000200", @ANYRES16=r1, @ANYBLOB="0f"], 0x2c}}, 0x0) 21:54:44 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b94275923268cdb1a66d3aeef4cd11033d5170cc7694e14cc7bf31d4ae0902c2a1c530a126c3633a12cde5dec05a7aa23f5469f3b00b38dffeb5896771936fa5a5", 0x93, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 21:54:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x0, 0x1100, 0x0}) 21:54:44 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ptrace$setopts(0x4200, 0x0, 0x6, 0x0) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x80, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0)=0x3) 21:54:44 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd9174879607171c1bc9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bda23f64af1b71011ab7f355c458dc342b08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d255be1ed66d9051f22614d1f62734d679039a97d2b74b7ddb138804e4ff9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a09c502f9a65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f884146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241a38efa4d6437c2ed58d8aa6bd0c74dab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbe173ec7d00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09d314844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b7225788208f8fffffffffffffffc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef9ac3bba5be6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b5686481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c000000000038417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee523d3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e668c423fcbb31ae91864c882313151741a962d8c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87431132d8549f99bf6c5cb060da70ad529d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624e6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c1b8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f739a366762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257f380eb2d15f83164c051d20fbf0a1bcf47710f33a8728ef1b32f0441d56a8b61669863176b9ba73336aaf2bfc8ccfdd3b55271b257c0f5c7075561d808b952e77c40637482ec1b323034f26070e77de50f2e3a645b06a1ff0c2ec6244da3aa85bf1d56ddc312a12a5971b3b5aee5565a759b52e29c79951cc33200c064c8e6a7c61950b6cd773495d9ffc43a94ec5c6682820a990d7ed85f6cd7989997d78e8a7cfe866f7cb610f638f05edebe571e5e65579a141516f7c192ba0d6675f49e2de326b3b2f907b37792efc93f17255c9baf9fc8db260c1fd5458e7157addb62ede0483a1b3eb38f7944ae3d2683141149cfb3afeb9edc92df6c5d4838da16c55956f779305f626198121382364ae6be6cbd36d907d18b77fab9ae92d578e7094a274a06b172c865789ff4279d3402dacb6ad8a2b86fa81f33b79d3bff3bdcb47afcc22578f7b1aa598bf69793bc08c396042822e4a3f468c91aa48337b946e520990320f38b64b43265c5ba8de0dd6757be112061fec197deda2fff4723542eb6a5e05092ad7340237c510331ba01bb5dab5f373f2eb3e99490d741264fbaa6684d58c13697f87deee03538cbc841229f8da3a9e4740fd73d1af1be53ff0d1606dfcdec2bb2e1aaca25d5469911d3faeb0e2a6687fa10c7bc36d4ba126fc282db67683db98f394c7dcbab655bbe5b82bf70994863bec87fc97ae8fb28b7a214975f56020099da"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000073c0)={0x1, 0xd, 0x0, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) [ 299.713654][ T7522] openvswitch: netlink: Flow actions may not be safe on all matching packets. 21:54:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000039000100000000000000000001000000040000000c000180060006008835000008000200", @ANYRES16=r1, @ANYBLOB="0f"], 0x2c}}, 0x0) 21:54:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x15}]}], {0x14, 0x10}}, 0x94}}, 0x0) [ 299.915465][ T7536] openvswitch: netlink: Flow actions may not be safe on all matching packets. 21:54:44 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/759], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001d00)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x7, 0xfffff801, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x0, 0x40, 0x3ff, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x2f, 0x20, 0x83, 0xffffffff, 0x70, @remote, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x7800, 0x8, 0x200000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x70, 0x48000000, 0x3a, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8, 0x8, 0x5, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x4, 0x4, 0x5, 0x6, 0x20, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8000, 0x20, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="74756e184e12c6c62a88b00000000000a61ce94dd19a9c0c4faa1ced1e7487f9dea95c8d42eb900e1cc740f8ffffffffffffffd25da600a168874a11ed33221b48a7ed1eb39a5ee1583c93252b9ad600d0ad58ae8ea230af8ad6887275d4ef3cdbe2f6e39e0457d9846dd4435cc6f31246206dc7f2ff9ec6c7ca0555056d8d6447f8fb1c004c778a196c3ddb33a8b054b5c92fdc3e9de0145a5f8ee02cca0c197b17f19dc0315a809e17727efb02cd76384f494c", @ANYRES32=r5, @ANYBLOB="004000400000100000000003471d005c00650000ff2f9078640101010a01010294040100820ddbc5cb444e97ba37543d4400890f23ffffffffe0000002ac1414aa071b7ae00000020a01010264010102ac1414aa7f000001ac1414aa940400008307e6e000000200"]}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0xfffffffffffffd92) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0xbf22, 0x0, r8}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000008c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x7, 0xd7, 0x28b}, 0x10, 0x37ca, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0x1, 0x1, 0xffffffffffffffff, r8, 0x1, r1]}, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x0, 0xfff, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r9, &(0x7f00000000c0)="cee5b4298ea7ee3c386023b1274dc01a97e8f36ef40532e0e034f13991f24066d730336c2ac347232eb579ff24e9a8a0b3e0e57568e94906cd313accb318ac6c2c2bbaddf1be73183e9e643bc7797be32d552147c7efc20da00821ddab2eed770345e84396a138391162047a0c97c21b87df6b247ca7c90b77c45f7ec7", &(0x7f0000000140)=""/160}, 0x20) 21:54:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000039000100000000000000000001000000040000000c000180060006008835000008000200", @ANYRES16=r1, @ANYBLOB="0f"], 0x2c}}, 0x0) [ 300.017709][ T7535] hub 9-0:1.0: USB hub found [ 300.023639][ T7535] hub 9-0:1.0: 8 ports detected 21:54:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x15}]}], {0x14, 0x10}}, 0x94}}, 0x0) [ 300.172122][ T7545] openvswitch: netlink: Flow actions may not be safe on all matching packets. 21:54:45 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000480)=""/239, 0xef}], 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 21:54:45 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/759], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001d00)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x7, 0xfffff801, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x0, 0x40, 0x3ff, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x2f, 0x20, 0x83, 0xffffffff, 0x70, @remote, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x7800, 0x8, 0x200000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x70, 0x48000000, 0x3a, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8, 0x8, 0x5, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x4, 0x4, 0x5, 0x6, 0x20, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8000, 0x20, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="74756e184e12c6c62a88b00000000000a61ce94dd19a9c0c4faa1ced1e7487f9dea95c8d42eb900e1cc740f8ffffffffffffffd25da600a168874a11ed33221b48a7ed1eb39a5ee1583c93252b9ad600d0ad58ae8ea230af8ad6887275d4ef3cdbe2f6e39e0457d9846dd4435cc6f31246206dc7f2ff9ec6c7ca0555056d8d6447f8fb1c004c778a196c3ddb33a8b054b5c92fdc3e9de0145a5f8ee02cca0c197b17f19dc0315a809e17727efb02cd76384f494c", @ANYRES32=r5, @ANYBLOB="004000400000100000000003471d005c00650000ff2f9078640101010a01010294040100820ddbc5cb444e97ba37543d4400890f23ffffffffe0000002ac1414aa071b7ae00000020a01010264010102ac1414aa7f000001ac1414aa940400008307e6e000000200"]}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0xfffffffffffffd92) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0xbf22, 0x0, r8}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000e00)=ANY=[@ANYBLOB="8182ff07fcffffff05370500020000001862000003000000000000000000000018440000feffffff000000000000000005500400fcffffff85f6fffffeffffff183000000500000000000000000092be394e5db76ddca007ea1adc4b136cec7d788ee477a710800955d560c96c7874da2cc60000c4987e06836e8a0004618d5637a7732951ca7d9645d7ae5c7ffdfa0c1e2b4a56f659bb6970c494f9a838b28f7d69a805e6c98458959d33a3a1e1bb7752201a489bdd6bd31fd873fa404b27e5846d938d60344320df2da9e1bd12b688845d08bb7b1a16aca72d799950f4fc3c9c72133123d74dd6504a74013f7e1a55cd1dbdf377c8b321156d2bab9b184aba66b6d929e34570f32e1bca15d1f5e5e6b523fa7810a75e9c75df81225da85413602bc633c1d9277fa8a8c4b026f9536003e3232a8fa6445b978b3a224335d59b9e0b4b9c0d8c212a26171effe398bea009037f152d569e76664c9804101137d77f228ce3c82134b3336125408cde888e9d0a3132c94e160048ade5ac761182c658fd02dbfcc3e92a5ce3edec265631a3c93334985bdb7e72ac9f2cc66336726e18c8cef0222b0c20a1ecb369cda8"], &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000008c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x7, 0xd7, 0x28b}, 0x10, 0x37ca, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0x1, 0x1, 0xffffffffffffffff, r8, 0x1, r1]}, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x0, 0xfff, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r9, &(0x7f00000000c0)="cee5b4298ea7ee3c386023b1274dc01a97e8f36ef40532e0e034f13991f24066d730336c2ac347232eb579ff24e9a8a0b3e0e57568e94906cd313accb318ac6c2c2bbaddf1be73183e9e643bc7797be32d552147c7efc20da00821ddab2eed770345e84396a138391162047a0c97c21b87df6b247ca7c90b77c45f7ec7", &(0x7f0000000140)=""/160}, 0x20) 21:54:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000039000100000000000000000001000000040000000c000180060006008835000008000200", @ANYRES16=r1, @ANYBLOB="0f"], 0x2c}}, 0x0) [ 300.591465][ T7551] openvswitch: netlink: Flow actions may not be safe on all matching packets. 21:54:45 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf9a87c0f0c8cd51e56d9e5e7708f156b6cb08566bc86ba6997bb7ae18b9cdf9e6cfda9c6390190e2d468e8c38a818a6a1397b5fbbaa4ddc9a36df424135a28d1e5eaa50850ade812fe83ac7ea0136dc3729879ca51977eef8c2c546938b7b8a4656a71a783b302d7918e6c206af735e9a985cd4cda46d39bca00ff4aa309fd6a598af5e0199f1eb562875450c10d95b7ffb00"/759], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001d00)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x7, 0xfffff801, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x0, 0x40, 0x3ff, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x2f, 0x20, 0x83, 0xffffffff, 0x70, @remote, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x7800, 0x8, 0x200000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x70, 0x48000000, 0x3a, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8, 0x8, 0x5, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x4, 0x4, 0x5, 0x6, 0x20, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8000, 0x20, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="74756e184e12c6c62a88b00000000000a61ce94dd19a9c0c4faa1ced1e7487f9dea95c8d42eb900e1cc740f8ffffffffffffffd25da600a168874a11ed33221b48a7ed1eb39a5ee1583c93252b9ad600d0ad58ae8ea230af8ad6887275d4ef3cdbe2f6e39e0457d9846dd4435cc6f31246206dc7f2ff9ec6c7ca0555056d8d6447f8fb1c004c778a196c3ddb33a8b054b5c92fdc3e9de0145a5f8ee02cca0c197b17f19dc0315a809e17727efb02cd76384f494c", @ANYRES32=r5, @ANYBLOB="004000400000100000000003471d005c00650000ff2f9078640101010a01010294040100820ddbc5cb444e97ba37543d4400890f23ffffffffe0000002ac1414aa071b7ae00000020a01010264010102ac1414aa7f000001ac1414aa940400008307e6e000000200"]}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0xfffffffffffffd92) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0xbf22, 0x0, r8}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000008c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x7, 0xd7, 0x28b}, 0x10, 0x37ca, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0x1, 0x1, 0xffffffffffffffff, r8, 0x1, r1]}, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x0, 0xfff, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r9, &(0x7f00000000c0)="cee5b4298ea7ee3c386023b1274dc01a97e8f36ef40532e0e034f13991f24066d730336c2ac347232eb579ff24e9a8a0b3e0e57568e94906cd313accb318ac6c2c2bbaddf1be73183e9e643bc7797be32d552147c7efc20da00821ddab2eed770345e84396a138391162047a0c97c21b87df6b247ca7c90b77c45f7ec7", &(0x7f0000000140)=""/160}, 0x20) 21:54:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x15}]}], {0x14, 0x10}}, 0x94}}, 0x0) 21:54:45 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b94275923268cdb1a66d3aeef4cd11033d5170cc7694e14cc7bf31d4ae0902c2a1c530a126c3633a12cde5dec05a7aa23f5469f3b00b38dffeb5896771936fa5a5", 0x93, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 21:54:45 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ptrace$setopts(0x4200, 0x0, 0x6, 0x0) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x80, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0)=0x3) 21:54:45 executing program 2: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b94275923268cdb1a66d3aeef4cd11033d5170cc7694e14cc7bf31d4ae0902c2a1c530a126c3633a12cde5dec05a7aa23f5469f3b00b38dffeb5896771936fa5a5", 0x93, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 21:54:45 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/759], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001d00)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x7, 0xfffff801, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x0, 0x40, 0x3ff, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x2f, 0x20, 0x83, 0xffffffff, 0x70, @remote, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x7800, 0x8, 0x200000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x70, 0x48000000, 0x3a, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8, 0x8, 0x5, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x4, 0x4, 0x5, 0x6, 0x20, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8000, 0x20, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="74756e184e12c6c62a88b00000000000a61ce94dd19a9c0c4faa1ced1e7487f9dea95c8d42eb900e1cc740f8ffffffffffffffd25da600a168874a11ed33221b48a7ed1eb39a5ee1583c93252b9ad600d0ad58ae8ea230af8ad6887275d4ef3cdbe2f6e39e0457d9846dd4435cc6f31246206dc7f2ff9ec6c7ca0555056d8d6447f8fb1c004c778a196c3ddb33a8b054b5c92fdc3e9de0145a5f8ee02cca0c197b17f19dc0315a809e17727efb02cd76384f494c", @ANYRES32=r5, @ANYBLOB="004000400000100000000003471d005c00650000ff2f9078640101010a01010294040100820ddbc5cb444e97ba37543d4400890f23ffffffffe0000002ac1414aa071b7ae00000020a01010264010102ac1414aa7f000001ac1414aa940400008307e6e000000200"]}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0xfffffffffffffd92) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0xbf22, 0x0, r8}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000008c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x7, 0xd7, 0x28b}, 0x10, 0x37ca, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0x1, 0x1, 0xffffffffffffffff, r8, 0x1, r1]}, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x0, 0xfff, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r9, &(0x7f00000000c0)="cee5b4298ea7ee3c386023b1274dc01a97e8f36ef40532e0e034f13991f24066d730336c2ac347232eb579ff24e9a8a0b3e0e57568e94906cd313accb318ac6c2c2bbaddf1be73183e9e643bc7797be32d552147c7efc20da00821ddab2eed770345e84396a138391162047a0c97c21b87df6b247ca7c90b77c45f7ec7", &(0x7f0000000140)=""/160}, 0x20) 21:54:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x15}]}], {0x14, 0x10}}, 0x94}}, 0x0) [ 301.112453][ T7564] hub 9-0:1.0: USB hub found [ 301.117564][ T7564] hub 9-0:1.0: 8 ports detected 21:54:45 executing program 1: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b94275923268cdb1a66d3aeef4cd11033d5170cc7694e14cc7bf31d4ae0902c2a1c530a126c3633a12cde5dec05a7aa23f5469f3b00b38dffeb5896771936fa5a5", 0x93, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 21:54:46 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/759], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001d00)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x7, 0xfffff801, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x0, 0x40, 0x3ff, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x2f, 0x20, 0x83, 0xffffffff, 0x70, @remote, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x7800, 0x8, 0x200000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x70, 0x48000000, 0x3a, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8, 0x8, 0x5, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x4, 0x4, 0x5, 0x6, 0x20, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8000, 0x20, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="74756e184e12c6c62a88b00000000000a61ce94dd19a9c0c4faa1ced1e7487f9dea95c8d42eb900e1cc740f8ffffffffffffffd25da600a168874a11ed33221b48a7ed1eb39a5ee1583c93252b9ad600d0ad58ae8ea230af8ad6887275d4ef3cdbe2f6e39e0457d9846dd4435cc6f31246206dc7f2ff9ec6c7ca0555056d8d6447f8fb1c004c778a196c3ddb33a8b054b5c92fdc3e9de0145a5f8ee02cca0c197b17f19dc0315a809e17727efb02cd76384f494c", @ANYRES32=r5, @ANYBLOB="004000400000100000000003471d005c00650000ff2f9078640101010a01010294040100820ddbc5cb444e97ba37543d4400890f23ffffffffe0000002ac1414aa071b7ae00000020a01010264010102ac1414aa7f000001ac1414aa940400008307e6e000000200"]}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0xfffffffffffffd92) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0xbf22, 0x0, r8}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000008c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x7, 0xd7, 0x28b}, 0x10, 0x37ca, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0x1, 0x1, 0xffffffffffffffff, r8, 0x1, r1]}, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x0, 0xfff, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r9, &(0x7f00000000c0)="cee5b4298ea7ee3c386023b1274dc01a97e8f36ef40532e0e034f13991f24066d730336c2ac347232eb579ff24e9a8a0b3e0e57568e94906cd313accb318ac6c2c2bbaddf1be73183e9e643bc7797be32d552147c7efc20da00821ddab2eed770345e84396a138391162047a0c97c21b87df6b247ca7c90b77c45f7ec7", &(0x7f0000000140)=""/160}, 0x20) 21:54:47 executing program 2: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b94275923268cdb1a66d3aeef4cd11033d5170cc7694e14cc7bf31d4ae0902c2a1c530a126c3633a12cde5dec05a7aa23f5469f3b00b38dffeb5896771936fa5a5", 0x93, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 21:54:47 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b94275923268cdb1a66d3aeef4cd11033d5170cc7694e14cc7bf31d4ae0902c2a1c530a126c3633a12cde5dec05a7aa23f5469f3b00b38dffeb5896771936fa5a5", 0x93, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 21:54:47 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba63cca54a2edbe9d8f3b423cdacfa7e32fe023136f9f65515b0e1a38d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f76907dc6751dfb265a0e3ccae669e173a649c1cf96587d452d64e7cc957d77578f4c35235138d5521f9000059c35da860e8efbc6f2b2a3e317312b71cfeec79c66c54c33283ba58d31a201085c8e09aa8810000000000000000000000000000000087eef3291dec7e3567fa75e4647dcefbfdf51d2fa00c58c50ca842d1d7823fd6b0538b579bed8783cbfc5ee523b98454836270fa80474d2044748099c05af8698043db126f6e981cdf85bdf93decdf28963adf11277da6beb9ef5757f3e7d80d2a396c3f7c4822319c41f2426aa14ffff01da42387a87f62de25b782ecce6a77c037bf948af67f32ff25d46694b41709e779a4ba851dffeb325cb93819a15da2b9981d18315adf3b48ddd9e9f7b9dbfab781b3163f76f04ba6e84734249c506754269682cbf762656276d9326c799e2aacb475985dbf588b8fcc85128fc7000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf9a87c0f0c8cd51e56d9e5e7708f156b6cb08566bc86ba6997bb7ae18b9cdf9e6cfda9c6390190e2d468e8c38a818a6a1397b5fbbaa4ddc9a36df424135a28d1e5eaa50850ade812fe83ac7ea0136dc3729879ca51977eef8c2c546938b7b8a4656a71a783b302d7918e6c206af735e9a985cd4cda46d39bca00ff4aa309fd6a598af5e0199f1eb562875450c10d95b7ffb00"/759], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001d00)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x7, 0xfffff801, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x0, 0x40, 0x3ff, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x2f, 0x20, 0x83, 0xffffffff, 0x70, @remote, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x7800, 0x8, 0x200000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x70, 0x48000000, 0x3a, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8, 0x8, 0x5, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x4, 0x4, 0x5, 0x6, 0x20, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8000, 0x20, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="74756e184e12c6c62a88b00000000000a61ce94dd19a9c0c4faa1ced1e7487f9dea95c8d42eb900e1cc740f8ffffffffffffffd25da600a168874a11ed33221b48a7ed1eb39a5ee1583c93252b9ad600d0ad58ae8ea230af8ad6887275d4ef3cdbe2f6e39e0457d9846dd4435cc6f31246206dc7f2ff9ec6c7ca0555056d8d6447f8fb1c004c778a196c3ddb33a8b054b5c92fdc3e9de0145a5f8ee02cca0c197b17f19dc0315a809e17727efb02cd76384f494c", @ANYRES32=r5, @ANYBLOB="004000400000100000000003471d005c00650000ff2f9078640101010a01010294040100820ddbc5cb444e97ba37543d4400890f23ffffffffe0000002ac1414aa071b7ae00000020a01010264010102ac1414aa7f000001ac1414aa940400008307e6e000000200"]}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0xfffffffffffffd92) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0xbf22, 0x0, r8}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000008c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x7, 0xd7, 0x28b}, 0x10, 0x37ca, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0x1, 0x1, 0xffffffffffffffff, r8, 0x1, r1]}, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x0, 0xfff, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r9, &(0x7f00000000c0)="cee5b4298ea7ee3c386023b1274dc01a97e8f36ef40532e0e034f13991f24066d730336c2ac347232eb579ff24e9a8a0b3e0e57568e94906cd313accb318ac6c2c2bbaddf1be73183e9e643bc7797be32d552147c7efc20da00821ddab2eed770345e84396a138391162047a0c97c21b87df6b247ca7c90b77c45f7ec7", &(0x7f0000000140)=""/160}, 0x20) 21:54:47 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000000240)="cdaadd3c7d0ee3cb9b8c6f11ca8f2b6b94e8d22bdef809c91269e1b2c00c736e8e4cf9fe5768feb0c88166fb6bd9b5227897f5e6052d98617e633714ce7266cf868e5326e0ca90fe7bbac2eadb02cfcab3a165f7358bc68a65b59711518fba46b647f4", 0x63, 0x0, &(0x7f0000000340), &(0x7f0000000380)) syz_clone(0x0, 0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000001800)="b52e76111a394b82d74aa9624803f7087552f036298d5debbff23eae87ea9af52131c1b4505de8307e23aabbe2462e0d718ae8845aeae8ad0adc11f8a154c7cb2e84882add95f353025f72203e30d5db7e5150ba1d5cb7a28fdc3cda06ca7555bc4584584c446341729367a68d690221ad96911258924cbdaea6513598ceec5dbb1dbf1477dd37112c653a239a5f2de0be2789e6de9eb5ea99da5adca9d0626650695b5d") bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e}, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0x0, 0x0, &(0x7f0000001400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000014c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x3, 0x0, 0x7, 0x3}, 0x10}, 0x80) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x3, &(0x7f0000001340)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000014c0)={0x9, 0x5}, 0x8, 0x10, 0x0}, 0x80) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x5, &(0x7f0000001340)=@framed={{}, [@map_idx_val]}, &(0x7f0000001400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000014c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x3, 0xa}, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002240)={0x11, 0xd, &(0x7f0000002a00)=ANY=[@ANYRES32, @ANYBLOB="4000000000000000183a00000200000000000000000000001855000001000000000000000000000085200019774a510085200000030000009d84c0ff1000000018430000ffffffff0000000000000000186400000c0000000000000051000000c42f9983f110"], &(0x7f0000002140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002180)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000021c0)={0x4, 0xe, 0x81, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002200)=[0x1, 0x1]}, 0x80) getresuid(&(0x7f0000002500), 0x0, &(0x7f0000002580)) syz_clone(0x0, &(0x7f00000025c0)="ec1f97dc7454ecedbe1c3ec86367e0c4c89379e8ea2135cdc355592aa3e9011b665ed1f43d6079cc351b2f6623c6d468016458d322", 0x35, &(0x7f0000002600), &(0x7f0000002640), &(0x7f0000002680)="ad9909ffb0704431ad4d22a9ec123ae680b0b7c5f3f20292f444339e44f4e1b340f2a2957dc42cbd3b25e7b305607039252fbe3dd248491d2228c50edf74d6ad44c094218ba3693deb28a344ad79c19e22c503b5731be8ddcfd21f5e2540efe321d1be93ad9b42bb4d8bd24d1b600b7baad74f6912c01d393df8bd833d326ca12bb73387de2839ecb26af3bddea5b5850051c899bada941b258b971745a233650d8e41d8fe7eb102a5088dd8e72febb5fd60c1ab7f435dd0907852bf47c42609b6474ef0697511e5f2c9972089897cf67f0158ba2b32ebf23a119c3b44a8c9e7f3") socket(0x22, 0x3, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000002780)=@bloom_filter={0x1e, 0x6, 0x1000, 0x81, 0x2, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x4}, 0x48) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f00000020c0)={0x8001, 0x1}) 21:54:47 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='9p_client_req\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/759], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001d00)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x7, 0xfffff801, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x0, 0x40, 0x3ff, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x2f, 0x20, 0x83, 0xffffffff, 0x70, @remote, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x7800, 0x8, 0x200000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x70, 0x48000000, 0x3a, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8, 0x8, 0x5, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x4, 0x4, 0x5, 0x6, 0x20, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8000, 0x20, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="74756e184e12c6c62a88b00000000000a61ce94dd19a9c0c4faa1ced1e7487f9dea95c8d42eb900e1cc740f8ffffffffffffffd25da600a168874a11ed33221b48a7ed1eb39a5ee1583c93252b9ad600d0ad58ae8ea230af8ad6887275d4ef3cdbe2f6e39e0457d9846dd4435cc6f31246206dc7f2ff9ec6c7ca0555056d8d6447f8fb1c004c778a196c3ddb33a8b054b5c92fdc3e9de0145a5f8ee02cca0c197b17f19dc0315a809e17727efb02cd76384f494c", @ANYRES32=r5, @ANYBLOB="004000400000100000000003471d005c00650000ff2f9078640101010a01010294040100820ddbc5cb444e97ba37543d4400890f23ffffffffe0000002ac1414aa071b7ae00000020a01010264010102ac1414aa7f000001ac1414aa940400008307e6e000000200"]}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0xfffffffffffffd92) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0xbf22, 0x0, r8}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000008c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x7, 0xd7, 0x28b}, 0x10, 0x37ca, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0x1, 0x1, 0xffffffffffffffff, r8, 0x1, r1]}, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x0, 0xfff, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r9, &(0x7f00000000c0)="cee5b4298ea7ee3c386023b1274dc01a97e8f36ef40532e0e034f13991f24066d730336c2ac347232eb579ff24e9a8a0b3e0e57568e94906cd313accb318ac6c2c2bbaddf1be73183e9e643bc7797be32d552147c7efc20da00821ddab2eed770345e84396a138391162047a0c97c21b87df6b247ca7c90b77c45f7ec7", &(0x7f0000000140)=""/160}, 0x20) 21:54:47 executing program 1: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b94275923268cdb1a66d3aeef4cd11033d5170cc7694e14cc7bf31d4ae0902c2a1c530a126c3633a12cde5dec05a7aa23f5469f3b00b38dffeb5896771936fa5a5", 0x93, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) [ 302.893411][ T7589] hub 9-0:1.0: USB hub found [ 302.899670][ T7589] hub 9-0:1.0: 8 ports detected 21:54:47 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ptrace$setopts(0x4200, 0x0, 0x6, 0x0) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x80, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0)=0x3) 21:54:47 executing program 3: r0 = epoll_create(0x5) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x40, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x2f) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x400, 0x4) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 21:54:48 executing program 3: r0 = epoll_create(0x5) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x40, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x2f) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x400, 0x4) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 21:54:48 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000000240)="cdaadd3c7d0ee3cb9b8c6f11ca8f2b6b94e8d22bdef809c91269e1b2c00c736e8e4cf9fe5768feb0c88166fb6bd9b5227897f5e6052d98617e633714ce7266cf868e5326e0ca90fe7bbac2eadb02cfcab3a165f7358bc68a65b59711518fba46b647f4", 0x63, 0x0, &(0x7f0000000340), &(0x7f0000000380)) syz_clone(0x0, 0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000001800)="b52e76111a394b82d74aa9624803f7087552f036298d5debbff23eae87ea9af52131c1b4505de8307e23aabbe2462e0d718ae8845aeae8ad0adc11f8a154c7cb2e84882add95f353025f72203e30d5db7e5150ba1d5cb7a28fdc3cda06ca7555bc4584584c446341729367a68d690221ad96911258924cbdaea6513598ceec5dbb1dbf1477dd37112c653a239a5f2de0be2789e6de9eb5ea99da5adca9d0626650695b5d") bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e}, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0x0, 0x0, &(0x7f0000001400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000014c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x3, 0x0, 0x7, 0x3}, 0x10}, 0x80) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x3, &(0x7f0000001340)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000014c0)={0x9, 0x5}, 0x8, 0x10, 0x0}, 0x80) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x5, &(0x7f0000001340)=@framed={{}, [@map_idx_val]}, &(0x7f0000001400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000014c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x3, 0xa}, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002240)={0x11, 0xd, &(0x7f0000002a00)=ANY=[@ANYRES32, @ANYBLOB="4000000000000000183a00000200000000000000000000001855000001000000000000000000000085200019774a510085200000030000009d84c0ff1000000018430000ffffffff0000000000000000186400000c0000000000000051000000c42f9983f110"], &(0x7f0000002140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002180)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000021c0)={0x4, 0xe, 0x81, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002200)=[0x1, 0x1]}, 0x80) getresuid(&(0x7f0000002500), 0x0, &(0x7f0000002580)) syz_clone(0x0, &(0x7f00000025c0)="ec1f97dc7454ecedbe1c3ec86367e0c4c89379e8ea2135cdc355592aa3e9011b665ed1f43d6079cc351b2f6623c6d468016458d322", 0x35, &(0x7f0000002600), &(0x7f0000002640), &(0x7f0000002680)="ad9909ffb0704431ad4d22a9ec123ae680b0b7c5f3f20292f444339e44f4e1b340f2a2957dc42cbd3b25e7b305607039252fbe3dd248491d2228c50edf74d6ad44c094218ba3693deb28a344ad79c19e22c503b5731be8ddcfd21f5e2540efe321d1be93ad9b42bb4d8bd24d1b600b7baad74f6912c01d393df8bd833d326ca12bb73387de2839ecb26af3bddea5b5850051c899bada941b258b971745a233650d8e41d8fe7eb102a5088dd8e72febb5fd60c1ab7f435dd0907852bf47c42609b6474ef0697511e5f2c9972089897cf67f0158ba2b32ebf23a119c3b44a8c9e7f3") socket(0x22, 0x3, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000002780)=@bloom_filter={0x1e, 0x6, 0x1000, 0x81, 0x2, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x4}, 0x48) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f00000020c0)={0x8001, 0x1}) 21:54:48 executing program 2: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b94275923268cdb1a66d3aeef4cd11033d5170cc7694e14cc7bf31d4ae0902c2a1c530a126c3633a12cde5dec05a7aa23f5469f3b00b38dffeb5896771936fa5a5", 0x93, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 21:54:48 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b94275923268cdb1a66d3aeef4cd11033d5170cc7694e14cc7bf31d4ae0902c2a1c530a126c3633a12cde5dec05a7aa23f5469f3b00b38dffeb5896771936fa5a5", 0x93, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 21:54:48 executing program 3: r0 = epoll_create(0x5) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x40, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x2f) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x400, 0x4) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 21:54:48 executing program 1: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b94275923268cdb1a66d3aeef4cd11033d5170cc7694e14cc7bf31d4ae0902c2a1c530a126c3633a12cde5dec05a7aa23f5469f3b00b38dffeb5896771936fa5a5", 0x93, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r4, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 21:54:48 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ptrace$setopts(0x4200, 0x0, 0x6, 0x0) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x80, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0)=0x3) [ 304.464381][ T7635] hub 9-0:1.0: USB hub found [ 304.470518][ T7635] hub 9-0:1.0: 8 ports detected 21:54:49 executing program 3: r0 = epoll_create(0x5) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x40, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x2f) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x400, 0x4) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 21:54:49 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xffffffffffffffff) 21:54:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x26e1706d0266376f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) 21:54:50 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000000240)="cdaadd3c7d0ee3cb9b8c6f11ca8f2b6b94e8d22bdef809c91269e1b2c00c736e8e4cf9fe5768feb0c88166fb6bd9b5227897f5e6052d98617e633714ce7266cf868e5326e0ca90fe7bbac2eadb02cfcab3a165f7358bc68a65b59711518fba46b647f4", 0x63, 0x0, &(0x7f0000000340), &(0x7f0000000380)) syz_clone(0x0, 0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000001800)="b52e76111a394b82d74aa9624803f7087552f036298d5debbff23eae87ea9af52131c1b4505de8307e23aabbe2462e0d718ae8845aeae8ad0adc11f8a154c7cb2e84882add95f353025f72203e30d5db7e5150ba1d5cb7a28fdc3cda06ca7555bc4584584c446341729367a68d690221ad96911258924cbdaea6513598ceec5dbb1dbf1477dd37112c653a239a5f2de0be2789e6de9eb5ea99da5adca9d0626650695b5d") bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e}, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0x0, 0x0, &(0x7f0000001400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000014c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x3, 0x0, 0x7, 0x3}, 0x10}, 0x80) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x3, &(0x7f0000001340)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000014c0)={0x9, 0x5}, 0x8, 0x10, 0x0}, 0x80) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x5, &(0x7f0000001340)=@framed={{}, [@map_idx_val]}, &(0x7f0000001400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000014c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x3, 0xa}, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002240)={0x11, 0xd, &(0x7f0000002a00)=ANY=[@ANYRES32, @ANYBLOB="4000000000000000183a00000200000000000000000000001855000001000000000000000000000085200019774a510085200000030000009d84c0ff1000000018430000ffffffff0000000000000000186400000c0000000000000051000000c42f9983f110"], &(0x7f0000002140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002180)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000021c0)={0x4, 0xe, 0x81, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002200)=[0x1, 0x1]}, 0x80) getresuid(&(0x7f0000002500), 0x0, &(0x7f0000002580)) syz_clone(0x0, &(0x7f00000025c0)="ec1f97dc7454ecedbe1c3ec86367e0c4c89379e8ea2135cdc355592aa3e9011b665ed1f43d6079cc351b2f6623c6d468016458d322", 0x35, &(0x7f0000002600), &(0x7f0000002640), &(0x7f0000002680)="ad9909ffb0704431ad4d22a9ec123ae680b0b7c5f3f20292f444339e44f4e1b340f2a2957dc42cbd3b25e7b305607039252fbe3dd248491d2228c50edf74d6ad44c094218ba3693deb28a344ad79c19e22c503b5731be8ddcfd21f5e2540efe321d1be93ad9b42bb4d8bd24d1b600b7baad74f6912c01d393df8bd833d326ca12bb73387de2839ecb26af3bddea5b5850051c899bada941b258b971745a233650d8e41d8fe7eb102a5088dd8e72febb5fd60c1ab7f435dd0907852bf47c42609b6474ef0697511e5f2c9972089897cf67f0158ba2b32ebf23a119c3b44a8c9e7f3") socket(0x22, 0x3, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000002780)=@bloom_filter={0x1e, 0x6, 0x1000, 0x81, 0x2, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x4}, 0x48) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f00000020c0)={0x8001, 0x1}) 21:54:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}]}}}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 21:54:50 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x2710, @host}, 0x10) 21:54:50 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTLCK(r0, 0x5414, &(0x7f0000000100)) 21:54:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x80, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3, 0x0, @private, @multicast1}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 21:54:50 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, r0, 0x103, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}]}]}, 0x2c}}, 0x0) 21:54:50 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23}}]}, 0x80}}, 0x0) 21:54:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x74}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 21:54:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x80, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3, 0x0, @private, @multicast1}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 21:54:50 executing program 0: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x80, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3, 0x0, @private, @multicast1}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [ 305.965317][ T7665] tipc: Started in network mode [ 305.985397][ T7665] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 21:54:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r4], 0x28}}, 0x0) [ 306.021052][ T7665] tipc: Enabled bearer , priority 10 21:54:50 executing program 2: add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\n', 0x1, 0xfffffffffffffffe) [ 306.148424][ T7676] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 306.176132][ T7678] trusted_key: encrypted_key: insufficient parameters specified [ 306.200431][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:54:51 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000000240)="cdaadd3c7d0ee3cb9b8c6f11ca8f2b6b94e8d22bdef809c91269e1b2c00c736e8e4cf9fe5768feb0c88166fb6bd9b5227897f5e6052d98617e633714ce7266cf868e5326e0ca90fe7bbac2eadb02cfcab3a165f7358bc68a65b59711518fba46b647f4", 0x63, 0x0, &(0x7f0000000340), &(0x7f0000000380)) syz_clone(0x0, 0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000001800)="b52e76111a394b82d74aa9624803f7087552f036298d5debbff23eae87ea9af52131c1b4505de8307e23aabbe2462e0d718ae8845aeae8ad0adc11f8a154c7cb2e84882add95f353025f72203e30d5db7e5150ba1d5cb7a28fdc3cda06ca7555bc4584584c446341729367a68d690221ad96911258924cbdaea6513598ceec5dbb1dbf1477dd37112c653a239a5f2de0be2789e6de9eb5ea99da5adca9d0626650695b5d") bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e}, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0x0, 0x0, &(0x7f0000001400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000014c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x3, 0x0, 0x7, 0x3}, 0x10}, 0x80) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x3, &(0x7f0000001340)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000014c0)={0x9, 0x5}, 0x8, 0x10, 0x0}, 0x80) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x5, &(0x7f0000001340)=@framed={{}, [@map_idx_val]}, &(0x7f0000001400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000014c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x3, 0xa}, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002240)={0x11, 0xd, &(0x7f0000002a00)=ANY=[@ANYRES32, @ANYBLOB="4000000000000000183a00000200000000000000000000001855000001000000000000000000000085200019774a510085200000030000009d84c0ff1000000018430000ffffffff0000000000000000186400000c0000000000000051000000c42f9983f110"], &(0x7f0000002140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002180)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000021c0)={0x4, 0xe, 0x81, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002200)=[0x1, 0x1]}, 0x80) getresuid(&(0x7f0000002500), 0x0, &(0x7f0000002580)) syz_clone(0x0, &(0x7f00000025c0)="ec1f97dc7454ecedbe1c3ec86367e0c4c89379e8ea2135cdc355592aa3e9011b665ed1f43d6079cc351b2f6623c6d468016458d322", 0x35, &(0x7f0000002600), &(0x7f0000002640), &(0x7f0000002680)="ad9909ffb0704431ad4d22a9ec123ae680b0b7c5f3f20292f444339e44f4e1b340f2a2957dc42cbd3b25e7b305607039252fbe3dd248491d2228c50edf74d6ad44c094218ba3693deb28a344ad79c19e22c503b5731be8ddcfd21f5e2540efe321d1be93ad9b42bb4d8bd24d1b600b7baad74f6912c01d393df8bd833d326ca12bb73387de2839ecb26af3bddea5b5850051c899bada941b258b971745a233650d8e41d8fe7eb102a5088dd8e72febb5fd60c1ab7f435dd0907852bf47c42609b6474ef0697511e5f2c9972089897cf67f0158ba2b32ebf23a119c3b44a8c9e7f3") socket(0x22, 0x3, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000002780)=@bloom_filter={0x1e, 0x6, 0x1000, 0x81, 0x2, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x4}, 0x48) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f00000020c0)={0x8001, 0x1}) 21:54:51 executing program 0: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x80, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3, 0x0, @private, @multicast1}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 21:54:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x80, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3, 0x0, @private, @multicast1}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 21:54:51 executing program 2: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) 21:54:51 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 21:54:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090254000101000000090400000002060000052406000005240000000d240f01000000000800000000152412"], 0x0) 21:54:51 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x37, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:54:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x80, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3, 0x0, @private, @multicast1}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 21:54:51 executing program 0: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x80, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3, 0x0, @private, @multicast1}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 21:54:51 executing program 4: socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) 21:54:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x8, 0x5, "e0000002"}}}}, @RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0x38}}, 0x0) 21:54:51 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) creat(&(0x7f0000000040)='./bus\x00', 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 306.928049][ T3734] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 307.133336][ T3736] tipc: Node number set to 10463914 [ 307.363303][ T3734] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.572063][ T3734] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.598313][ T3734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.647510][ T3734] usb 4-1: Product: syz [ 307.675080][ T3734] usb 4-1: Manufacturer: syz [ 307.715536][ T3734] usb 4-1: SerialNumber: syz [ 307.792887][ T3734] usb 4-1: bad CDC descriptors 21:54:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) creat(&(0x7f0000000040)='./bus\x00', 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) 21:54:52 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:54:52 executing program 0: r0 = syz_clone(0xc100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/mcfilter\x00') r2 = gettid() getresgid(&(0x7f0000002340), &(0x7f0000002380)=0x0, &(0x7f00000023c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f00000045c0)=0x0, &(0x7f0000004600)=0x0, &(0x7f0000004640)=0x0) r9 = geteuid() syz_fuse_handle_req(r1, &(0x7f0000000040)="a1ab9d550d33e37ea3f4366bf9fc5d3dc897f6b7f3192484edd837386a2bdac9f594f4305058a6f8bb52ed6e4c1e9871422c6b37e6a804443e8bd480b3ddaad9b32776a7505f12482b9a1ed6481cde54ffeb53ba5b53ac01d463d260ea27cdc5b0f32bc4d5c780e59d06c13d26761f4c44400656ac49f51715d77c6feb4b782e804c3ba0b60489403c5fe70a6495aa87fe4fdabe41faeb973e3770e9e6740dac3832ed52a2d43cf472c24c1a6bb855899d22fa95c25b9c6aa542261d5fcb1a0f2bb304482a77cd96091102035b8b526f6d7a6eaf965e104cfcfbf089177b1eb7d0ddf6d7509f4fb4b3f71ae4b1b5c646d274d2c687fcef0c192a3ca565b9998302178cde8aca06cd5bf616910e6f061e92a1663433b4b64c12ab40e0c2c802e1683557bc6293d6d80d949527830bbb6d31340b0866711d3a69839a61a6b669d95a2829106a221993d3b13a3cd59d69f970e1326150997cc13e2fadda80f658fd66207205d7c6aaf5468b74ea29f6eee7c6d5060a28578c08e9fb6d1c4c9d60d20e43ee89427f412727972d14e97e94443cf1868a8df99a1051d790d55d0fbfde0aeb29c03b3d2fecc31a2709794c99f77866a5741cf95c56716f03780208589abdbe368a38ae3c1fdb41da161da30dea246639284c895ed33d53763625450b83c122b0a7364359bf9755d2a41ab00228ee48326bcf12c7d18533c1a1f753b79c8dea518158ed4e8eb4cfc3777d73c71bcfcd3ecbf0c8d0b2268c063f2603978f5f063b0b20c3eb647f711cad09a4b246ba0310caf4d9683ea2ee20d104736b29941b691860b033fafbed043f974b9d3b8f3e936536e3363db06268a6ba546d0ba40d37409434181fb6759aa6d7de3320945cd7651efb4a97ce7ec3de1604bfe47cba055762cf4f485ad669ba3ae50fa3fe7a7ad43146c47fb3fc18e0f19357486cb398d7e9a041c5aa70add9f23b64bfc95da68414e83f044f967b1231471249eaa42a7b3c9ddefa5d32ad29ef22549ddbc414e3d32ec651f658b1c66295d28d376006ef2cd5ca9b32245ddaccd0cd0ad29be1f1a222db98f7083fb819285c3a5adb9ad5400b063a93d24e2d594ddc55be888013ddf457f4d1dbec22429882f3ced3156843bd5edac3288f61ca7872050aceb5d26a3110e8606ffb3428285c8224b0db6169448e1b36bdd2d187cbb93d9d66e1f11550bc4c25389369f831cfa0531b1c1d303db09134c6f37715c173ffac0b426bf44b802acaf7555d6fd9bf9c56ec193af9f5d4572c63a547ead172f11888c36bc87f09b8ccf5371070a4be6acc288ae4f74bda9830ed38ed7e5b8dc82a9f14e87066627ff5574a2dd04b39cadf3b637d4bbedd858fc480a5081f2ed81ef1ae53d3c9a5c8f5cb4ff9c74ff463e0c94d57621456eee9236c9b44f7da0e7ebdea94e8c6e51b72c3fabaea8caed7f5fc5c1d2ed20e9eb31f12b904b21fd5a00050b7ce9d6178a9964b5135b1e89a13f412b9c219133335acf10ac64f82a65908fb62f2a2909c2d3a5fb5a7d5fc3428ba76ec15c3f1a83e331415e42b504bcb571caa733115144ff75eca253e674728eee839de63de701be8af10dcc04c9e6e91e70de500efd61e3a06197aad50d206e816622fe0b0ff9be7a55f0121207a9f67b60d14613376464c35aabb55fa070c81a0231bfc7a05a6d034cf5c0edf4ea85f8ec1c72d888afa9994f242ec6632d661dfa91d898518f490fe220c036bcd27b7a182799656ac0453a296a9c803aa93234810222211009e5f8589dfd6f3f3de5b9e7e9e269409ea01045e2f9c3f47c11694d4342a8c908c1f9cedf64e4b78359c8171056ed65e352e31430016fc0a79cb7c8d54ac97bfaa56bf3a738a4fc35e28d7e6e7896b0a8be77253a098dcba0760f72837bc3ec3c18a142b8574e0cfd009ac180ef15ce8b07dec2e3e4166ab27662c5cb67a6ba9e69d24b717019425d0a802c52e3557af4b080af2a85fb31a7283fa2bca44dab2ffad9bd092edb25aa0bcba81943fc8106f961bcd875ea3452b7bc82052a27d6a34181dbc757493986eee73b574d8499f3d393a2d002baf3269c57cbefe78bfbc51ee10a9b3b5ec133d19cdd3f49db450104aed6dfccba0c1ba40f29a774dee820fa99b8c681cba1c32568f11902cdbdef5d670f62d9e40bf1c693f95c978bfc4f722ef83b9bc6569e6d6ff053a96a982e8d64d6c382f192bb3991acc2fe3f36622b5d33a632fef1bfb281e4f56fa748d8afa50868a68ee2f8cab7f3afa3e77542ef883b74a7aa75b78f2f4e0ef1dd8b186bc45ffb7344cd5cb2c27dbeb1d8f0f08c337f0e15e1707ac771efaf918f2143f31ee5a69ff9ca81ae262c4df42688d5b3d12d0412b060c226ee6ecce5be007ec5e6243a68e21db1516a8d04485e8074384ac00f9d7a96f9c47253b5167b6cc6192e243fbdcbcbb875628511952486487ec4a16ed4cca1dc451d262beee4eddf657088b570388f2fb547bfcb3a49d5037b5a9ef8f1d464029704e06fcabc434ce455456e26323c69ed37aaa0d0a3181af2aa5cc050dece91faa2a07c35202b95e8b14316f20ee3bcbc57f1c8fc0af9e12e6f95970a3fd40e3551b9362868ff7b9c54c7d0367da833e4439417268fa13ed10842f5d7d5ccc8b2b2a1d618f4761553356b2548ac268710cc6280a7cae64d023a93c4e03ad82724c9d2c49c17bc43d3a073707dd6891d2280473a791d79d6bff6b62e4b8c2fad0f2c8494e4a4cf475ce90b2691ee60d6c1a961ea90c1ea192018ae8b7865df1e4c12fb7c1a06e98842fb3eb415f82d0d5c9a4dbb5bd109c69864af94590028c64891c56877002946d91def375a1663da1be7c9da699a04e8b92289a79095e29aeb5d50f3b7cb50de65283304e336271bbf191a0a87915f94cec02c9cb75fb91b51189ee8256aa6ebae957a5f8b54055ae9c69297f830e54a76f35c8e75b332b54989974ba4310bfe8ff54f5251065b881d6ef92e150089fa15552b499bd830cd9ce55ca6e4d46efea5d07b2cd9e3d7935cac0f39620533f8344b6106eb9f4a93f711201beb4fe963b1e90e26c682f611b8c18cd0f3d279d7a11756a66f7f864b9f0775b6d1c1e6197bb86f6cbd2e84fa6502cc388c59f7aecf886db2d107a5eff61fb863b82bda55ed801421d035c291e0b9d1bd451b0765cbb20944959672e48f3c39ef3a8d250ce58e0b3f9e1381c6fc64efb98f0fe5ed17f62201e7cad89ab87ab4af886a08dacedd5ce299ae47340578519952383f99293527d08f7a2ffb8e02de2075f46768b2f2ffea6873082e8dd62a241cbbb315b05ff45f2c3d204a781fe2717ce6005abaffb8ccb6f4e2e7fd0944d195893477592efe3126b508f29cfdcec3da685d7e4f5ab3417bd8421e0547963d49fcef519902a0cbfb9875c2460d1844699dab2ca987626305df5bf6fbf8ea2c16e53107d347801866aa812b636207b539f35e163c68e78d1407a37a8f332e9c3672f0c721bebe473289f737ad06e8e52cf26f4ae42aada65ef79eb6bc6890602eae68ec807144f45ca86ce75bc38e6dc4f16edb063f32872b1ea39574d666a2fcb453d4f39bac56cbbdc080e38109d46e5e4732d6232cb3f04891aa442a554571728338f37d68d54878cc935700e46ba03bc0829457e94dd8bc877c85dbce39f18fbb0fcd629748ea814940c0434e913435f28c33af875e6590074c3241fa5c1b81ceb98d34a74962a98fce354e0d0c9ce667a9af9c23d1775dc0c80ba6f8566529fd1c4e7bf76aa134f39326943fbb97e0e89de713622c2000f36f88d89510754ed822100605d8263884a57083349e5d22e3c10d22a9d12eb2229e9a6c901cc5c3ed636b57b2836544d5406febda0370a561a6979cdb982b0a1d43e3bc404afa60eaa39645319945a98b85d7dc748ba018022ac59ea81b8752ba15a8d89482304ed90fe26cd5a206b16a42acfa8d3874e2cddf9d62f8597540b82583afb9862e560d06bb33d5fdbb962897b9fc8e1d614bc870b9079f390b1b0aad5d28be2976b7918c44ad9c7ed44ba116b8cfcb08b7168c908dd8a2256c6c4835b5b00cdd911a231a8255b17f194e2acfb6e6e172c6145c8d96da2740e7a9dd953696e75f44dc8f80eed77cb35b97495edae9c77e4acc92b01f4e565feda963717940c84c775b06a8edeb728e69405b7b7f7b5a11f685a99311c8c2cccd092081bec554ca1791aa4ce00b63c09637b4bf9c59207a8513423cce2e993e5ba762ea97f61924006ff70aa94868d720a0cc63410c00a9d8958d942af8b83768a190777eb2089b60d12fd57245a70eb6088e1d87a09dde759e550578d9e9f9b9ba2bf975cb86c3bb65a9ef8e5baa3ad36c88552c7c94e6789da0e13168da34f54a5cd4f05a5cbcbbda2858f20e0bfbe177f25670db96732ad582a7cb8734b79d87e115fd1f72b7cd1afb803c3a2f6de32cfd2bb6bf846b2be85cf93daf09b1c7bae87eea1c3c62f5595d5ffaffaf7fb9b44d34961b02978b056f13d8c815456fd303df3a9923c8fe05cc6012b69730d136fa33b4b7e1fc8279d73a487549d81e608c8dbd79c76593b54f26d7c91225665cc765dfcbc1f1b07f3b49d913dcdb1e66ffc05684bf8594723f80a8b5893a634f4a897ed7b1b114e90dee2e0b6488e82400553be61c85f8b0b7ad9a30d0de7fed47110ab34055be44a23cf81c26c5c0d8a7187a17cd53a252f1c05d3b5d4f3e8f0a8bd54fdf07692d0c418c69e3c534f0b06c117cb78f476331473672f22fde80d034b174d60cc4ce04fde79a19834e9b8dab3f156dd6c1f3e5750491293b6907ca8e007a57e7aa9aea88e33483a4be9b4280db7035b2c138ff182d13acc547f042a26b7839adaebdca06579a38ba8ac461aa5d4444894f2c91a3b17546f98100f9bc9ef5a1eaef8a965a38b4dbf3ad296cafe3b1858316b584698009e4531649304374aeec8d89f042e5f0ff09f9df43f20e0cc71b16de4ff01a2145c7386267c5caaa2df2fa5237325eceff1576e3c6c0b3ca4724290c1b81ebd99089ddc9339f8fc085f8030b9243d9765cfdadd7a07f05d66f8d67e7688182385becccfd75883371aa824276e48fcfeef669b8f691799281fe73df676027b589e54114760153f16812169014d4f76c4feeba5ac17f084ef6ba0046edf49377438e98cf9bdcb9054bdcf3d36517096e4efe8ad2e594f13059974e035d547a78e48d6f671136f07efd6056be40721a20710748921fa4d532fcc824e587d716bc1463861a227d2ad285f3c76f6ed1d46d2ae63ce4717226e6dc11bd6ef5db0ad2846822cf109a45236f782cb16b73aec21899bbac1e0eb81a6fa101e1d6d7403de5a06ec3ae2c8888290f6ea62c3d53d8e2369b371b7636f063cde6f1001e975505563ff6adedfa757bbc43a6a2e345da611378a84e55c14cf997eb9bb85ab91b928882640aaf064ec1a8614de722b26a961526fb33fd35dec8213026c4b67528857830cd08412ae86a33bf88b8654e55b0fe6e293876669fd784980f40dc7291ad10bd2a4818800302471fce8b80219b937a5459a832e5332d1930962656e76699ac4dc961e020d680289ea72059a606e2c852a467c1a301eba4ffae1181b950a373272722efd986a7d2d4f9a38cd4fe463de6d4b5b02869e7e3ca99634456e8fe5421a5ec3bf0376133f967f9e063ee07180cd15a631b20a3953aedea5a8bdbd5b56f039c50b12392995eb0afa0eda7d81e6ae9981fc6e5dc6d88add2cde1155e29301c480532d5f605a8d67b9678d019d159dd101a9dee37013f5a6c274cd5e445768ee17ea935fbe625759bfb30ba1aac7261b7fcad0305ecbf3f8dd74cd3b06d4d9962f9b7d00ccb2b826df70544279aff1483c904f53f8e5cbb944a5127e64acc375cd8063715df87a39194a5e8eeaace94dab72e66628faf07271d1259f7703741cf207656edaf5bb78ab626c65cf355446adb82a2d4f3f80617580f2fec23dcc8b5bbc31b23f245148318fe093f5dddf8962b3ec040b819c2ee4704287cdefd82a16ec56436dbb72fb06ca295d78927174add7c59deaf4746bc7469487b767f1e184ad218810a437b60048b0cd31e577ea86193adfbb77ed697b65cf20b5e388d66b2e24cd9a3cce78fa72b0c0b8b1da18e6eec1ee7a374aea18678fd383ca07a77654dfd6663b29ade0af9557f9fe1849da99908e6fdd80c4cec39265a7970208e4084d6126482eb7cd1b02f0a4b94590f99fa1badf3bc2ba1054c0aaa57919d028e4e70a17334ffaeda24b23b6ee30a8d1e250fcf016b400e5ab04871711ec943e105e00ed3cd8639d987a87f2e7b7b3ef50f3e881dd6106e0fdeac4e8db06d8585c3ece6847cb06b65bdc02e4a4d054f1c4baa9fcc0185e105aa9b19fc881601162e41176076a5530fe29792d128a5b586a1e27d7771dd7697c33c42255298f77bb40c727d5677a0628b4c00ce2ae6efbb5cbdcd80b864fd19652e700a357a6e81f83b80c0b122636ca4a33ff222fe4d8f2cda20943d303bd69019602d20f9ed8ea65d42e10b7e9f15648005450dfadd9285e1929151ace559e6cf1ade938dd54ecd2b9245ae77ad2a840144c5630830452661339b1265a95df70e584a67ec6e426ff02156ca37c229d555ebf434a1b7906c7571d0dd9126ebb008f7a1fdd489265410f5e477074b3f04cae4f3d2c6b5f0f41bccce035b6d76ad3815bcb7de74f6d50c09a3a03417634406473da244268a8af37b3340010abc8da40afa71a9ed4543617a277f932a96fe9935d89152dd2f7c90c0b667adb26569da17da12f7c63bed8f91d92f0c93ad6e203f9769cd648a2e88f07a736dcfbf82676fed86d0a2a2c680b002953b8deb12947c5df2cba5ad5248e39a939f79678521723d74c45d02f363b5d7b3edacde7c67a287346bd759d874fc8a27c7f2f86dd00684631645bfab16fbe60cb1b17056b9ed725d4bef68fcc8e3111c462dfa2c9f6f7d42d9cb2281f0150082a20cc469f28965ebe65b5a515793a6057bbe3b171d928c6eac06f59dd2e9347babac10412fa8e9368b8e122f4b0ecde0c3e384656f34552451073ac706705fa9802d2da5b773ba15c7786f0272ffc5df5139536dee5dd8daa4d2750b2c76a032eeeb3f7eb902fe050ec802551272e5677dfddadf601a44a1d533e31f8b649e4ca1773a1dd8f8934551ecd57a759d67e98d0c6249acbdf004ff533877050d7d3adec37d8fb0b1bce2c5fcfe4d665cb198763138863c90f46403e1c3ee69a96a3fe6af5c0f27f2aad33a5afee570db27b53a85701abe9d05103be78b665ae252f1d82a7e347e9e216b42d1a27d6897a44b09db169ed6c422fccbcdd7a47d8994438fa2d29d5c91826b9058e7fcb2844230be889cedca1fba6fc974f1a79438af24948122cb1c62a0873c4e9ce730643ae150f592ef6c0e3c671bda5b4dc180bd358dfe7785aa24a76d54a63dabfaa192b542de242bfdf1db968409e85f33d9ba0d917b1eb959e2927a92454eea8d0d444169ca9b38766af0d28e351c135af6f9ecb2bcf2a5c453ed1b57d627fedc4977e9ba1824722395b071ba58b1d174194dac00e0407880ea50442b89de3be2384d8e359b51119aab3356c01b305fc78dcc54b31d2fc1bc15225741335e64bf201107e24c093626f215929976488e874a0a2448d7e3904a55f6c284b6061456d555c0c197bce5a45c25021de5a8232d7b2cdfd8f4fdbb1b24b6ee9269101098081d33bcf737f41f8a1656c8935c5ba29a483fdd9cf5048051542647235d66942e6067178cff02c1a0c5b6ccfbe9a3d31670ec92d15c5cccde5b784684d71420d2acf363881b16f52777712887382db10b2434c2174816b563edc1e1de5b3ff2d9df35bbdc822c4bd6413e8187e311d3b178effd7a1bcae15fa18c50a064672228e7bdd0371261ea29784e12929d3e6f3bf2f816d7bdebe5ddbb87ea295b34d149e89ed5545e3ed659c505169084faa2927b2c79750a1a2488a0321ec26042c2acf53a429dec9febf0b7079b2442e9d94d6cb28f2c59e23eca47778f6ee0be2bff338730bb21904e4a5ae615bd2d0b21d40034944f176d97514eeaff0c330e7fef03a311017b3a4c1f98cad0664789ca024803e319066fe6ba5d40b1c788dd26da4f72c54da7b3918571900dd289a858f720488195c16da0f31c08986f69524b77617ac7b9703310efdb17462e2954adc5162ca6362577a8879307da1073eab1f34bd2cd5ef502367fd3b736d375ff7891fe63b6ee97ae9eec5d8d8d1e7f13760ea2d9e5806977c91db6bd56abee25e7df6e65ac47ccbc968186dce4403e97d001e145d63b03bbedc1643f81d2888f1e9b478a19e40db81168d4575a558b01f7e6e3d4f714ad7075156b3e673ae5cb49cc99a7e74533b0e3c90c1eddb3132f33513726cab39e7d77ef3bf1c0414064c7699b34778123a28aae8e866fe3e91f436f6245dfe560a218cab80ef63f5bfa9c4c43b6c040d3374f7e76e9fe2edaf6a9db1a3a4ffc4f2d520c5cf6c6fa560017310e985ab8edf2099857f64603e6e08dbeb7e1d04e7b75b9c60529ee309286cd78573a7fb5648b67d7de6d80564ec16ccb08d323ee2a3501cede6bab266c2674fa33196fb26385538a962aea944a1a1dd90915f0a5f1695f54a32a7966c25229e6fb45ab41dd265614960d323db01ef894d2c1fdc76eb1d41df2bf541c7defa2f446a36d1e51b92fcb83460ded127b68edc10356ac10598e62a765ef4d776ec360d6d15f12df9ed02691bbdecb9207e4217a69def9b72dea5c172eb17ae1826b26595dfe88af845b3377262b2b8621aeb0086098d5bffa0c4fa39526f4ee9ba1be9bdbbae9ff853ac90cc6d166822ea781769654bcd0bf280686020e4108a444168da95699de8df7a973dc65a7a871ff5ac83f537c492c3c647e7db3731f08c48de34c30f7bc12c6f8b0f426213f1275c12b683bfaefb0ab0092aed3d7d008c3a4ceebfc2a4e10ff6f0f802323f392f0c46d08671776051ac51aa3fd644ca3013e119abbb213a25c6b5d3b99d2c90dc98b61b2ff1b74ee16313bdc3b6b826dd41ec17908133f17397715cccfd8072fe2eed70402522088390372ca2973dc8b1d675187e1fe5aaf35ebe024845e50fd6d763abc61b89a98ac96d3f867bce189d7529716b19bb64daf61390b7ee012c1944c7c2f9902448d45bf62f8f8a3aa94bcf63a1254a68dd162d0970dfab206e672959392e0686a74aaa6076401c721dbeb31395ddb986db488342553c521703bf58b3d585cf517567d239b342db61c7fdb8a9f4fb0871ed3dacafaee51ac92527826d3b32191a9c4dd8f07a733821bcb5eb987eba90f223f2f11ea90ddaede89d3eddf0ee84b57a02d4c55d68a79341ac3ff6cb7b145198f9d62cb60b7e454ca51b92ff1d92727cd6851954b6c2c69967620b5e16863a6ecc5f4aecc327a3cef28ecf1e567324830d617d2c0f32bfe7c1a25f836c675d78412df2e5d5e639dfa64167d422de357a9f3e906699b46a08ae468bbe60e4eeef0bd4294162627cbea1eba1494de205d8a5b92209d17fcdfb5b5daffd94deacb7448d90570e60b2f13727df990be74f01c340a46764b6210da575976f2a5cff73a9b3c61d63f93cf160d65ab185782b648109f62d6deb6b3db624ed93be0fc896289e449c65fa3d7cb2fd3fb381570812b138e5011e34038441114029ead2126d49dea55e90dc5a0b35cd54fec9889be4a45a513f8e1e6532290618735a8b6c94f499128cb7e22eb33758c3eb0240a7155e41bd08ee3c6ed2948450550e98549feb61955bb6cab4eef679198f1dc581441ed58a3729412730083e7d8ee0fb553479fe597f5f4e6beff30872e6f5e3c7af2593d731bc19b069f3875a129043185b4155114a04c54447a16461baaf1833d0521f92ecf81a885a008d0232ca81d3786f1716ee0651f1cb2948cef023b7e72f477bb932ee4c2964c7ad3f5eb8f19243608242ecad4ac6f8e409205d8ab3058a3c17f24c993211da668a48c6ca40dd055b9599ae1c6e1784827ee7e723e3579cf11fced427a0a3884b169f65fdea351e3fbba8c5ad3ea26bad9a4a6e2f70795c17a954e57a03fa19bf486232b74f64e368e6b08d91a622248adcdc9e43ab01d3662e4d556719aa2c6ce14cbff3742de4c10df0a322b862965402c0836f2835a278dcdc0993d8866ada8ef7d31f0fe874353c7f98121729c46ee62e6b12957657093f5bc227f290172fe9d3edfa467bc185514ae3af02655685858678a503c0efe15aa9c80ccb5eaca9adc27841e986ff2f9c0b55149be97ae9d0ab59a5ef05e0d9ec442520c639b36e89cc3a58802f295c39618f19282bcfa62f81623ced6b3181f1e9dba01752743e6fc7804179a2115e665854af16f1b3c508d395a8d01983bf7d9e6b2de96972e1327b7cc5cf9a9c2a8276dc35d992dbaf2bafab4c4decf95ee4220c7bcf4b48e0440a75ca2fe3230fdec6b8deb6f55af01afae7abe2b4e6ed5f141e78fce4d94977709aad0b412a71abcbb34fa4965c2aac94ce17fc86de1ca60f0ed8263ca3a8942baa5581967e801d3a6ce6eee4bc372f8dc05cbbf48ccf867b0eb6774952cb865989f77f296af11ccc13a456a6c870f2d5d62da25cda02435a39201ed4fadad5db9510f9a3ac5077b56092c1b95525c23ce03dc22da4d5b9d435963bcbf2b9665f8b54fa237fde336ca3748cb62dbbe06fc11e202f54bc346b1ea9ca911f56004112a65448ac87933beea0e55ff4d99f2a76997449f530f053516f3771f240c83a9d177b48889ad56ca4bd1fb592bbb0239f33adfee118e3b465285e3d5988ef89679cde914d7ca0d0d05641c72f5101a29429d0ba203a022a60eaf0915ce438e0c52889e80f7b870d308c8f816657315f937d05a833493f80f254f32de173c91192b94c1ac69ac56cbd4c7b92ea3ef2035b1acfddae28d503b470e008a3059a614410c09f5d7380140db4d99cd32fa7249c34f85290993e71332c4e8212a9bcb2c94b5a871de8f3e77cf182b529fd9a584abd469c1b882d804938192b94e41d965cef253763e15451e64cc0003ad8e8d27221ca512dbe39f5949605a4e5178fcd6a0899e1b5a507171b200f2016a4dd79e71666442a06315b48b9ff9109a19c186b601f7379913c4667ed58b25ac2eb21e08d1c5c2175dffb8c6bf6d2231c87ea7b1f62d65b1b7973ce8d542de3880a51c6550710123e657c71e7a9b6059f1882e30ecce218879357d976dca35664b7cd8995410ca78d19f23b19f6026399d3ae246317a1d2b5bf1cb5cbe6cfdd0d23745ddfa54678aabcd2e88c98c3722e4868ce8afdf2ed8cef8de26b653bf8bdff810d27c5a68dbc879e8c0a98b3e54b9f41d2a87523c33c64f2c1d8c2abadbe3e8bc9c5d139a4c4f801bfa32d265dbd2844aecb53c51c39c39a67381cd562c371def318e3b207ea5d63085d9512cbc03271c9f14a3542498a4c9aeb3ccd14d8ec66fb0c6473e4f9ff403839f50afaec80728ae1b91295a1bc91ee097355b7ccde7c552e8ec449326572dda2b94a6bc0227776dab19b3a55e2826f1921248e03", 0x2000, &(0x7f0000004a00)={&(0x7f0000002040)={0x50, 0xfffffffffffffffe, 0x2440, {0x7, 0x26, 0x7, 0x1040, 0x4, 0x9, 0x1}}, &(0x7f00000020c0)={0x18, 0xfffffffffffffffe, 0x5, {0x1}}, &(0x7f0000002100)={0x18, 0xffffffffffffffda, 0x80000001, {0x7}}, &(0x7f0000002140)={0x18, 0xfffffffffffffffe, 0x6937, {0x1}}, &(0x7f0000002180)={0x18, 0x0, 0x100000000, {0xdc3}}, &(0x7f00000021c0)={0x28, 0x0, 0x6, {{0x2, 0x1f, 0x0, r2}}}, &(0x7f0000002200)={0x60, 0x0, 0x9, {{0x2ff84ac9, 0x3000000, 0x9, 0xffffffffffffffc0, 0x1, 0x5, 0x0, 0x8000000}}}, &(0x7f0000002280)={0x18, 0x0, 0x8, {0x6}}, &(0x7f00000022c0)={0x11, 0xffffffffffffffda, 0x4, {'\x00'}}, &(0x7f0000002300)={0x20, 0xffffffffffffffda, 0x7, {0x0, 0x1}}, &(0x7f0000002400)={0x78, 0x0, 0x80000000, {0x7, 0x3, 0x0, {0x4, 0x1000, 0x7, 0x6, 0x2, 0x40, 0x3a, 0x3f, 0x6, 0x4000, 0x6, 0xffffffffffffffff, r3, 0x0, 0x5}}}, &(0x7f00000044c0)={0x90, 0xffffffffffffffda, 0x3, {0x7f, 0x3, 0x59, 0x1f, 0xdefc, 0x9, {0x6, 0x40, 0x7, 0x10001, 0x8, 0x400, 0x30, 0x3, 0x10001, 0x4000, 0x7d2, 0xee00, r5, 0x80, 0xbb}}}, &(0x7f0000004580)={0x10, 0xffffffffffffffda, 0xffff}, &(0x7f0000004680)={0x278, 0x0, 0x58fa2037, [{{0x4, 0x3, 0x7fff, 0x3, 0x8, 0xffffffff, {0x6, 0x4, 0x3, 0x5, 0x9, 0x4, 0x81, 0x2, 0x4, 0x1000, 0x5, 0xee00, 0xee00, 0x9, 0xffffffff}}, {0x1, 0x2e4c, 0x0, 0x6}}, {{0x4, 0x0, 0x9, 0x9, 0x1, 0x9, {0x4, 0x7fffffff, 0x8, 0x1, 0x3f365963, 0x4, 0x1000, 0x100, 0x1, 0xa000, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x6, 0x2}}, {0x5, 0x3, 0x0, 0x8000}}, {{0x5, 0x3, 0x856, 0x63, 0x4, 0x35a, {0x5, 0x9, 0xa8, 0x1, 0x3, 0x4, 0x9, 0xd7, 0x9, 0x4000, 0x2, 0x0, r8, 0xfffffffa, 0x1}}, {0x6, 0xfffffffffffffff7, 0x1, 0xe0a, '-'}}, {{0x5, 0x3, 0x80, 0xb489, 0x1000, 0x1f, {0x4, 0x4, 0x8, 0x0, 0x2, 0x6, 0x401, 0x8, 0xf2, 0x8000, 0x1, r9, 0xee01, 0x9}}, {0x3, 0x8, 0x0, 0x7}}]}, &(0x7f0000004900)={0xa0, 0xffffffffffffffda, 0x3e9acc73, {{0x5, 0x2, 0x7, 0xfc4, 0x85, 0x5, {0x1, 0x8, 0x1, 0x1, 0x1, 0x40, 0xfffffffd, 0x9d, 0x1f, 0x1000, 0x7, 0xffffffffffffffff, 0xee01, 0x100, 0x9d}}, {0x0, 0x1a}}}, &(0x7f00000049c0)={0x20, 0xfffffffffffffff5, 0x9, {0x80000000, 0x4, 0x80000000}}}) r10 = openat$proc_capi20(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r1, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) getresuid(&(0x7f000000ac00), &(0x7f000000ac40), &(0x7f000000ac80)=0x0) read$FUSE(r1, &(0x7f000000acc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) openat$nci(0xffffff9c, &(0x7f000000cfc0), 0x2, 0x0) write$FUSE_DIRENTPLUS(r10, &(0x7f000000cd00)={0x2a0, 0x0, r11, [{{0x1, 0x1, 0x0, 0x8, 0x6, 0x8e, {0x1, 0x9, 0x7, 0x8, 0x6, 0x7fffffff, 0x3f, 0x9, 0x8, 0xa000, 0xfd0, r4, r7, 0xb15, 0x3}}, {0x2, 0x9, 0xd, 0x1000, 'net/mcfilter\x00'}}, {{0x4, 0x1, 0x8, 0x7, 0x8000, 0x4, {0x5, 0x5, 0x2, 0xffffffffffff8b6b, 0x6, 0x0, 0x8, 0xfffffe00, 0x4, 0xa000, 0x8, r12, r6, 0x101, 0xeb1}}, {0x6, 0x9, 0xd, 0x1, 'net/mcfilter\x00'}}, {{0x1, 0x3, 0xd8, 0xfffffffffffffffc, 0x4, 0x8, {0x5, 0x9, 0xcfb, 0xffffffff7fffffff, 0x1, 0x926c, 0x80, 0xffff, 0xffffffef, 0x1000, 0x5, r13, r8, 0xffff, 0x10001}}, {0x5, 0x5, 0x7, 0x8e, '\x1b\xba$.@{}'}}, {{0x3, 0x2, 0x56, 0x1, 0x9, 0x3, {0x6, 0x0, 0x7fff, 0x7, 0x4, 0x80000001, 0x4d, 0x9, 0xffffffff, 0x1000, 0x3af, r9, r7, 0x101, 0x7}}, {0x5, 0x13d, 0x1, 0x8, '-'}}]}, 0x2a0) openat$sysfs(0xffffff9c, &(0x7f0000004a40)='/sys/module/pulse8_cec', 0x4800, 0x6e2a7a91472702cf) read$FUSE(0xffffffffffffffff, &(0x7f0000004a80)={0x2020}, 0x2020) geteuid() read$FUSE(r1, &(0x7f0000006ac0)={0x2020}, 0x2020) r14 = openat$proc_capi20(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r14) ioctl$TIOCMGET(r14, 0x5415, &(0x7f000000d000)) 21:54:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) 21:54:52 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00001a2000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007cf000/0x800000)=nil) madvise(&(0x7f000086f000/0x3000)=nil, 0x3000, 0x17) pkey_mprotect(&(0x7f0000288000/0xc00000)=nil, 0xc00000, 0xa, 0xffffffffffffffff) mlock(&(0x7f00009e2000/0x4000)=nil, 0x4000) 21:54:54 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00001a2000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007cf000/0x800000)=nil) madvise(&(0x7f000086f000/0x3000)=nil, 0x3000, 0x17) pkey_mprotect(&(0x7f0000288000/0xc00000)=nil, 0xc00000, 0xa, 0xffffffffffffffff) mlock(&(0x7f00009e2000/0x4000)=nil, 0x4000) 21:54:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) 21:54:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x7}]}}}]}, 0x3c}}, 0x0) 21:54:54 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000580)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@any, 0xffffffff}, @hyper}) 21:54:54 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00001a2000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007cf000/0x800000)=nil) madvise(&(0x7f000086f000/0x3000)=nil, 0x3000, 0x17) pkey_mprotect(&(0x7f0000288000/0xc00000)=nil, 0xc00000, 0xa, 0xffffffffffffffff) mlock(&(0x7f00009e2000/0x4000)=nil, 0x4000) 21:54:54 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) creat(&(0x7f0000000040)='./bus\x00', 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 309.613930][ T14] usb 4-1: USB disconnect, device number 16 21:54:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000080)={0x0, 0x11, 0x21}) 21:54:54 executing program 0: r0 = memfd_create(&(0x7f0000000240)='\x103\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\ba\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\xc8\xb8\xe5b\b\x8c`\xea\x13A\x90\x01\x00&\xd0\x9daA\xff\xff\xff\xff\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\x00\x00\x00|\x18\xcc\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{&(0x7f0000315000/0x1000)=nil, 0x1000}}) 21:54:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) 21:54:54 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000002c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r3 = syz_io_uring_setup(0x87, &(0x7f0000000a80), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000002240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r3, 0x3911, 0x0, 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 21:54:54 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00001a2000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007cf000/0x800000)=nil) madvise(&(0x7f000086f000/0x3000)=nil, 0x3000, 0x17) pkey_mprotect(&(0x7f0000288000/0xc00000)=nil, 0xc00000, 0xa, 0xffffffffffffffff) mlock(&(0x7f00009e2000/0x4000)=nil, 0x4000) 21:54:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) 21:54:54 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00001a2000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007cf000/0x800000)=nil) madvise(&(0x7f000086f000/0x3000)=nil, 0x3000, 0x17) pkey_mprotect(&(0x7f0000288000/0xc00000)=nil, 0xc00000, 0xa, 0xffffffffffffffff) mlock(&(0x7f00009e2000/0x4000)=nil, 0x4000) 21:54:54 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) symlink(&(0x7f0000000140)='..\x00', &(0x7f0000000040)='./file0\x00') capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)) rename(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='./file0/../file0\x00') 21:54:54 executing program 5: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00001a2000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007cf000/0x800000)=nil) madvise(&(0x7f000086f000/0x3000)=nil, 0x3000, 0x17) pkey_mprotect(&(0x7f0000288000/0xc00000)=nil, 0xc00000, 0xa, 0xffffffffffffffff) mlock(&(0x7f00009e2000/0x4000)=nil, 0x4000) 21:54:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/64, &(0x7f0000000040)=0x40) 21:54:54 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0xfe, 0xe9, 0x8, 0xfe6, 0x9800, 0x195d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xeb, 0x14}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001000)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 310.592569][ T14] usb 1-1: new high-speed USB device number 13 using dummy_hcd 21:54:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) creat(&(0x7f0000000040)='./bus\x00', 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) 21:54:55 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0xc0502103, &(0x7f0000000040)) 21:54:55 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00001a2000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007cf000/0x800000)=nil) madvise(&(0x7f000086f000/0x3000)=nil, 0x3000, 0x17) pkey_mprotect(&(0x7f0000288000/0xc00000)=nil, 0xc00000, 0xa, 0xffffffffffffffff) mlock(&(0x7f00009e2000/0x4000)=nil, 0x4000) 21:54:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000009c00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x16, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2c, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x1100) [ 310.683867][ T27] audit: type=1326 audit(1669067695.269:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf549 code=0x0 21:54:55 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) dup(r0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) shutdown(0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x77f, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x3f00000000000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 21:54:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000009c00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x16, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2c, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x1100) [ 310.842137][ T14] usb 1-1: Using ep0 maxpacket: 8 21:54:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r0, 0x11a, 0x1, 0x0, &(0x7f0000000480)) 21:54:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000009c00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x16, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2c, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x1100) [ 310.962152][ T14] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 310.994408][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:54:55 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r2}, 0x50) 21:54:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000009c00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x16, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2c, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x1100) [ 311.094176][ T14] usb 1-1: config 0 descriptor?? 21:54:55 executing program 1: r0 = syz_io_uring_setup(0x587e, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x8000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) write$FUSE_BMAP(r4, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x454}}, 0x18) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) read$FUSE(r3, &(0x7f0000002640)={0x2020}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50}, 0x50) dup2(r1, r2) [ 311.831889][ T14] CoreChips 1-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 313.282056][ T14] CoreChips 1-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 313.311940][ T14] CoreChips 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 313.323401][ T14] CoreChips: probe of 1-1:0.0 failed with error -71 [ 313.343298][ T14] usb 1-1: USB disconnect, device number 13 21:54:58 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0xfe, 0xe9, 0x8, 0xfe6, 0x9800, 0x195d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xeb, 0x14}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001000)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 21:54:58 executing program 5: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) dup2(r1, r0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 21:54:58 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffd4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e00003d000b05d25a80648c6394f90524fc60100002400a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 21:54:58 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0xc0502103, &(0x7f0000000040)) 21:54:58 executing program 1: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0xf11]}, 0x8) 21:54:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) io_setup(0x7, &(0x7f0000000280)=0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}]) 21:54:58 executing program 5: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) dup2(r1, r0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) [ 313.811599][ T27] audit: type=1326 audit(1669067698.389:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf549 code=0x0 [ 313.847463][ T7811] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 21:54:58 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0xfe, 0xe9, 0x8, 0xfe6, 0x9800, 0x195d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xeb, 0x14}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001000)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 313.867897][ T7811] netlink: 3740 bytes leftover after parsing attributes in process `syz-executor.3'. 21:54:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300005000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 21:54:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb305}]}}}}}}}, 0x0) 21:54:58 executing program 5: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) dup2(r1, r0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 21:54:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300005000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) [ 314.090122][ T7821] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 314.212369][ T22] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 314.311949][ T3736] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 314.491866][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 314.551926][ T3736] usb 4-1: Using ep0 maxpacket: 8 [ 314.634745][ T22] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 314.643996][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.655103][ T22] usb 1-1: config 0 descriptor?? [ 314.672322][ T3736] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 314.681393][ T3736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.694050][ T3736] usb 4-1: config 0 descriptor?? [ 315.345246][ T22] CoreChips 1-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 315.391941][ T3736] CoreChips 4-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 316.801935][ T22] CoreChips 1-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 316.832137][ T22] CoreChips 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 316.842104][ T3736] CoreChips 4-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 316.843805][ T22] CoreChips: probe of 1-1:0.0 failed with error -71 [ 316.868810][ T22] usb 1-1: USB disconnect, device number 14 [ 316.872060][ T3736] CoreChips 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 316.893149][ T3736] CoreChips: probe of 4-1:0.0 failed with error -71 [ 316.916584][ T3736] usb 4-1: USB disconnect, device number 17 [ 317.014988][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.021334][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 21:55:01 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0xfe, 0xe9, 0x8, 0xfe6, 0x9800, 0x195d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xeb, 0x14}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001000)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 21:55:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb305}]}}}}}}}, 0x0) 21:55:01 executing program 5: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) dup2(r1, r0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 21:55:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300005000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 21:55:01 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0xc0502103, &(0x7f0000000040)) 21:55:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300005000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) [ 317.356860][ T27] audit: type=1326 audit(1669067701.939:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf549 code=0x0 [ 317.361264][ T7835] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:55:02 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0xfe, 0xe9, 0x8, 0xfe6, 0x9800, 0x195d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xeb, 0x14}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001000)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 21:55:02 executing program 5: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="00000090fd39"}, 0x14) write$binfmt_aout(r0, &(0x7f0000001480)=ANY=[@ANYBLOB="8000f20009000620020000000806000108000604f6080000000000007f"], 0x120) 21:55:02 executing program 2: r0 = syz_usb_connect(0x4, 0x36, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES64=0x0], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/12, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x208e24b) read$char_usb(r2, &(0x7f0000000140)=""/106, 0x6a) write$char_usb(r1, 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f0000000300)=""/178, 0xb2) read$char_usb(r3, &(0x7f0000000080)=""/170, 0xaa) syz_usb_disconnect(r0) r4 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) fremovexattr(r4, &(0x7f0000000200)=@random={'security.', '/sys/kernel/debug/binder/transactions\x00'}) 21:55:02 executing program 5: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="00000090fd39"}, 0x14) write$binfmt_aout(r0, &(0x7f0000001480)=ANY=[@ANYBLOB="8000f20009000620020000000806000108000604f6080000000000007f"], 0x120) 21:55:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb305}]}}}}}}}, 0x0) 21:55:02 executing program 5: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="00000090fd39"}, 0x14) write$binfmt_aout(r0, &(0x7f0000001480)=ANY=[@ANYBLOB="8000f20009000620020000000806000108000604f6080000000000007f"], 0x120) [ 317.681028][ T7850] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 317.782008][ T3736] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 317.822137][ T14] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 318.042062][ T3736] usb 1-1: Using ep0 maxpacket: 8 [ 318.091941][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 318.162085][ T3736] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 318.171214][ T3736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.184690][ T3736] usb 1-1: config 0 descriptor?? [ 318.222205][ T14] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 318.231484][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.244311][ T14] usb 4-1: config 0 descriptor?? [ 318.891956][ T3736] CoreChips 1-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 318.942031][ T14] CoreChips 4-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 320.331925][ T3736] CoreChips 1-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 320.361962][ T3736] CoreChips 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 320.374104][ T3736] CoreChips: probe of 1-1:0.0 failed with error -71 [ 320.392157][ T14] CoreChips 4-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 320.404124][ T3736] usb 1-1: USB disconnect, device number 15 [ 320.422095][ T14] CoreChips 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 320.435878][ T14] CoreChips: probe of 4-1:0.0 failed with error -71 [ 320.461223][ T14] usb 4-1: USB disconnect, device number 18 21:55:05 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0xfe, 0xe9, 0x8, 0xfe6, 0x9800, 0x195d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xeb, 0x14}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001000)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 21:55:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb305}]}}}}}}}, 0x0) 21:55:05 executing program 5: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="00000090fd39"}, 0x14) write$binfmt_aout(r0, &(0x7f0000001480)=ANY=[@ANYBLOB="8000f20009000620020000000806000108000604f6080000000000007f"], 0x120) 21:55:05 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0xc0502103, &(0x7f0000000040)) 21:55:05 executing program 2: r0 = syz_usb_connect(0x4, 0x36, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES64=0x0], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/12, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x208e24b) read$char_usb(r2, &(0x7f0000000140)=""/106, 0x6a) write$char_usb(r1, 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f0000000300)=""/178, 0xb2) read$char_usb(r3, &(0x7f0000000080)=""/170, 0xaa) syz_usb_disconnect(r0) r4 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) fremovexattr(r4, &(0x7f0000000200)=@random={'security.', '/sys/kernel/debug/binder/transactions\x00'}) 21:55:05 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0xfe, 0xe9, 0x8, 0xfe6, 0x9800, 0x195d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xeb, 0x14}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001000)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 320.906324][ T27] audit: type=1326 audit(1669067705.489:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf549 code=0x0 [ 320.910554][ T7861] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:55:05 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x300, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000180)={r0, 0xd9, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8e686379658090529c56d4b6000df30977a6453f32b899dea90f9f38dc7cc43ef19136d45cf39b8e797debde629bc2156b55e779534b86ef0c61e91c22bbd335", "0173eb78bac89ab526bf73ff164e470ca56f3167666289a5ef0c184427fa707d4ed67ceb7708ec94be13b9c7fe126278715cd6d40662496d0ce5344187e68346", "3838499ec9cbb8d227e50cfd8f451f8ed56f1f8f16b3e53fb66281377763b369"}}) 21:55:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f00000000c0)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}}) 21:55:05 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x300, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000180)={r0, 0xd9, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8e686379658090529c56d4b6000df30977a6453f32b899dea90f9f38dc7cc43ef19136d45cf39b8e797debde629bc2156b55e779534b86ef0c61e91c22bbd335", "0173eb78bac89ab526bf73ff164e470ca56f3167666289a5ef0c184427fa707d4ed67ceb7708ec94be13b9c7fe126278715cd6d40662496d0ce5344187e68346", "3838499ec9cbb8d227e50cfd8f451f8ed56f1f8f16b3e53fb66281377763b369"}}) 21:55:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/4079, 0x2000116f}], 0x1}, 0x0) 21:55:05 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x300, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000180)={r0, 0xd9, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8e686379658090529c56d4b6000df30977a6453f32b899dea90f9f38dc7cc43ef19136d45cf39b8e797debde629bc2156b55e779534b86ef0c61e91c22bbd335", "0173eb78bac89ab526bf73ff164e470ca56f3167666289a5ef0c184427fa707d4ed67ceb7708ec94be13b9c7fe126278715cd6d40662496d0ce5344187e68346", "3838499ec9cbb8d227e50cfd8f451f8ed56f1f8f16b3e53fb66281377763b369"}}) 21:55:05 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x300, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000180)={r0, 0xd9, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8e686379658090529c56d4b6000df30977a6453f32b899dea90f9f38dc7cc43ef19136d45cf39b8e797debde629bc2156b55e779534b86ef0c61e91c22bbd335", "0173eb78bac89ab526bf73ff164e470ca56f3167666289a5ef0c184427fa707d4ed67ceb7708ec94be13b9c7fe126278715cd6d40662496d0ce5344187e68346", "3838499ec9cbb8d227e50cfd8f451f8ed56f1f8f16b3e53fb66281377763b369"}}) [ 321.251981][ T3736] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 321.281053][ T14] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 321.521843][ T3736] usb 1-1: Using ep0 maxpacket: 8 [ 321.541912][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 321.672108][ T3736] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 321.685917][ T3736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.694819][ T14] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 321.705414][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.716830][ T3736] usb 1-1: config 0 descriptor?? [ 321.727428][ T14] usb 4-1: config 0 descriptor?? [ 322.401993][ T14] CoreChips 4-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 322.414339][ T3736] CoreChips 1-1:0.0 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 323.911999][ T14] CoreChips 4-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 323.922790][ T3736] CoreChips 1-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 323.962107][ T14] CoreChips 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 323.973714][ T3736] CoreChips 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 323.985241][ T14] CoreChips: probe of 4-1:0.0 failed with error -71 [ 323.992220][ T3736] CoreChips: probe of 1-1:0.0 failed with error -71 [ 324.021999][ T14] usb 4-1: USB disconnect, device number 19 [ 324.029182][ T3736] usb 1-1: USB disconnect, device number 16 21:55:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x33}}) 21:55:09 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x68d, 'syz0\x00'}, 0x5, 0x222, 0xffff, r1, 0x1, 0x0, 'syz0\x00', &(0x7f00000003c0)=['\x00'], 0x1}) socket$key(0xf, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect$hid(0x0, 0xfffffffffffffe8c, 0x0, 0x0) 21:55:09 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 21:55:09 executing program 2: r0 = syz_usb_connect(0x4, 0x36, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES64=0x0], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/12, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x208e24b) read$char_usb(r2, &(0x7f0000000140)=""/106, 0x6a) write$char_usb(r1, 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f0000000300)=""/178, 0xb2) read$char_usb(r3, &(0x7f0000000080)=""/170, 0xaa) syz_usb_disconnect(r0) r4 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) fremovexattr(r4, &(0x7f0000000200)=@random={'security.', '/sys/kernel/debug/binder/transactions\x00'}) 21:55:09 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000300)="5cdd3086ddffff6633c9bbac88a8eb3a8dbc8e261f1fc2ba55136998db5b88a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f0000000100)={@loopback={0xfe800000}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='host1x_channel_submit_complete\x00'}, 0x10) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', r3, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r4}, 0x80) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="0216800000000000851000c7608c527c0a323000faffffff850000006a0000009500000000000000950000008ee9060018630000060000000000000078e5ff0018000000cd572375"], &(0x7f0000000700)='GPL\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r4, r5, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r4}, 0x80) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001340)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001380)={r0, 0x1c27, 0x2, 0x9}) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1}, 0x48) r9 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f0000000100)=@tcp6=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x1, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x81}, @ldst={0x2, 0x0, 0x6, 0xb, 0x7, 0x1, 0x1f}, @call={0x85, 0x0, 0x0, 0x7e}, @call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x3, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x1, 0x2c889c00, 0x2}, 0x10, r4, r0, 0x0, &(0x7f00000013c0)=[r6, 0x1, r7, 0xffffffffffffffff, 0x1, r8]}, 0x80) 21:55:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee20000000ffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x34, 0x2, [@TCA_RSVP_ACT={0x30, 0x6, [@m_xt={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) 21:55:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, 0x0) 21:55:09 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000300)="5cdd3086ddffff6633c9bbac88a8eb3a8dbc8e261f1fc2ba55136998db5b88a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f0000000100)={@loopback={0xfe800000}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='host1x_channel_submit_complete\x00'}, 0x10) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', r3, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r4}, 0x80) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="0216800000000000851000c7608c527c0a323000faffffff850000006a0000009500000000000000950000008ee9060018630000060000000000000078e5ff0018000000cd572375"], &(0x7f0000000700)='GPL\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r4, r5, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000f040000000000006d400500000000003400000001ed00007b030000000000001d440000000000007a0a00fe00ffffffc3030400f1000000b7000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd5ef5681b36a30c6471a4bc4d82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62f84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f48a7382f13d000000225d85ae49e7e383dc5049036b98fb685123b2731514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6ebb047b96d338666590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c0200a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d14017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744dccc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19fa367256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31cb6b9ce97f03ca91a01ba2c60ca99e8ebc15ece1ff1675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c655a22d490300800a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c1799213695be7fd95be8d58809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58588cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d9953243e2bb42b197cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db6019037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2b8100000000000000f5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f3366bca2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6e0e0d383ffce01881a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c71411c928d8b894d9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f24b72edcff33a40c1b791830ac2478734c8dc0c40ad4072c08dbcfbbb8dc071897d76c00f013441580113ab1381fc3f0f5b00a410dab1dc7d2aa509b9ef21ac2b2389c2aac7048addbac53cedba2c20fbe18acd5b546102e3e3af296681b0db7ce9b878024bcd504480de0a65df48ae310633c9f7accfa2a5527af3df8cdbc2817cae9b6ff827ea5f850a23fc0f46650d99eaad66119015ef840893fc3348d4fbce1b6b6906bcddff1e825d923b64fd383b1e776a566f2b702f2f4a464ecf3408ed97ffe8b1c813713f1712c48be3ebe6ad7c24c7467c7474c589a08f883a5e7bda74fc0c741eb2bc408a4a9b0b66bec9bee32d7f620942258a7f5cafa2e3bd7b2197c3c77df319e494ef46dfc4eae680d219536f0aa8b1ba291eb2abb0adf8154e"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r4}, 0x80) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001340)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001380)={r0, 0x1c27, 0x2, 0x9}) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1}, 0x48) r9 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f0000000100)=@tcp6=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x1, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x81}, @ldst={0x2, 0x0, 0x6, 0xb, 0x7, 0x1, 0x1f}, @call={0x85, 0x0, 0x0, 0x7e}, @call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x3, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x1, 0x2c889c00, 0x2}, 0x10, r4, r0, 0x0, &(0x7f00000013c0)=[r6, 0x1, r7, 0xffffffffffffffff, 0x1, r8]}, 0x80) [ 324.585507][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 21:55:09 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x80, 0x0}, 0x0) 21:55:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, 0x0) 21:55:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, 0x0) 21:55:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, 0x0) 21:55:09 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000489000/0x2000)=nil, &(0x7f0000a13000/0x4000)=nil, 0x2000}) 21:55:10 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x68d, 'syz0\x00'}, 0x5, 0x222, 0xffff, r1, 0x1, 0x0, 'syz0\x00', &(0x7f00000003c0)=['\x00'], 0x1}) socket$key(0xf, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect$hid(0x0, 0xfffffffffffffe8c, 0x0, 0x0) 21:55:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="4103092cbbf2480401020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 21:55:10 executing program 0: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1}) 21:55:10 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000300)="5cdd3086ddffff6633c9bbac88a8eb3a8dbc8e261f1fc2ba55136998db5b88a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f0000000100)={@loopback={0xfe800000}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='host1x_channel_submit_complete\x00'}, 0x10) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', r3, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r4}, 0x80) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="0216800000000000851000c7608c527c0a323000faffffff850000006a0000009500000000000000950000008ee9060018630000060000000000000078e5ff0018000000cd572375"], &(0x7f0000000700)='GPL\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r4, r5, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r4}, 0x80) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001340)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001380)={r0, 0x1c27, 0x2, 0x9}) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1}, 0x48) r9 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f0000000100)=@tcp6=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x1, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x81}, @ldst={0x2, 0x0, 0x6, 0xb, 0x7, 0x1, 0x1f}, @call={0x85, 0x0, 0x0, 0x7e}, @call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x3, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x1, 0x2c889c00, 0x2}, 0x10, r4, r0, 0x0, &(0x7f00000013c0)=[r6, 0x1, r7, 0xffffffffffffffff, 0x1, r8]}, 0x80) 21:55:10 executing program 2: r0 = syz_usb_connect(0x4, 0x36, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES64=0x0], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/12, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x208e24b) read$char_usb(r2, &(0x7f0000000140)=""/106, 0x6a) write$char_usb(r1, 0x0, 0x0) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f0000000300)=""/178, 0xb2) read$char_usb(r3, &(0x7f0000000080)=""/170, 0xaa) syz_usb_disconnect(r0) r4 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) fremovexattr(r4, &(0x7f0000000200)=@random={'security.', '/sys/kernel/debug/binder/transactions\x00'}) 21:55:10 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 21:55:10 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 21:55:10 executing program 0: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1}) 21:55:10 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000300)="5cdd3086ddffff6633c9bbac88a8eb3a8dbc8e261f1fc2ba55136998db5b88a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f0000000100)={@loopback={0xfe800000}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='host1x_channel_submit_complete\x00'}, 0x10) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', r3, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r4}, 0x80) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="0216800000000000851000c7608c527c0a323000faffffff850000006a0000009500000000000000950000008ee9060018630000060000000000000078e5ff0018000000cd572375"], &(0x7f0000000700)='GPL\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r4, r5, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r4}, 0x80) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001340)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001380)={r0, 0x1c27, 0x2, 0x9}) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1}, 0x48) r9 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f0000000100)=@tcp6=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x1, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x81}, @ldst={0x2, 0x0, 0x6, 0xb, 0x7, 0x1, 0x1f}, @call={0x85, 0x0, 0x0, 0x7e}, @call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x3, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x1, 0x2c889c00, 0x2}, 0x10, r4, r0, 0x0, &(0x7f00000013c0)=[r6, 0x1, r7, 0xffffffffffffffff, 0x1, r8]}, 0x80) 21:55:11 executing program 4: r0 = openat$mixer(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000001200)) 21:55:11 executing program 0: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1}) 21:55:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x1, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 21:55:12 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x68d, 'syz0\x00'}, 0x5, 0x222, 0xffff, r1, 0x1, 0x0, 'syz0\x00', &(0x7f00000003c0)=['\x00'], 0x1}) socket$key(0xf, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect$hid(0x0, 0xfffffffffffffe8c, 0x0, 0x0) 21:55:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newaddr={0x17, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) 21:55:12 executing program 4: syz_clone(0x42028080, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 21:55:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x1e, 0x262) 21:55:12 executing program 0: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1}) 21:55:12 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 21:55:12 executing program 2: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r2) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r5, r4, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) 21:55:12 executing program 0: clock_adjtime(0x9685e2c0e07132db, &(0x7f0000000000)) 21:55:12 executing program 2: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r2) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r5, r4, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) 21:55:12 executing program 0: unshare(0x40000400) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x8084a0646002fde7, 0x0, 0x0}) 21:55:12 executing program 2: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r2) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r5, r4, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) 21:55:12 executing program 4: syz_clone(0x42028080, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 21:55:13 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x68d, 'syz0\x00'}, 0x5, 0x222, 0xffff, r1, 0x1, 0x0, 'syz0\x00', &(0x7f00000003c0)=['\x00'], 0x1}) socket$key(0xf, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect$hid(0x0, 0xfffffffffffffe8c, 0x0, 0x0) 21:55:13 executing program 2: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r2) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r5, r4, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) 21:55:13 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/dev\x00') read$hidraw(r0, &(0x7f00000003c0)=""/111, 0x6f) read$hidraw(r0, &(0x7f0000000d80)=""/137, 0x89) 21:55:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x1e, 0x262) 21:55:14 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 21:55:14 executing program 4: syz_clone(0x42028080, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 21:55:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0x5}}}]}], {0x14, 0x10}}, 0x94}}, 0x0) 21:55:14 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x53, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x862f01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000010c0)=""/4096) [ 329.750224][ T7966] syz-executor.3 (7966): drop_caches: 1 [ 329.833783][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 21:55:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0x5}}}]}], {0x14, 0x10}}, 0x94}}, 0x0) 21:55:14 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x53, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x862f01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000010c0)=""/4096) [ 330.410219][ T8004] syz-executor.3 (8004): drop_caches: 1 [ 330.436672][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 21:55:15 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x53, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x862f01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000010c0)=""/4096) [ 330.730508][ T8004] syz-executor.3 (8004): drop_caches: 1 21:55:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0x5}}}]}], {0x14, 0x10}}, 0x94}}, 0x0) [ 330.883993][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 21:55:16 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x53, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x862f01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000010c0)=""/4096) 21:55:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x1e, 0x262) 21:55:16 executing program 4: syz_clone(0x42028080, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 21:55:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0x5}}}]}], {0x14, 0x10}}, 0x94}}, 0x0) 21:55:16 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x1e, 0x262) 21:55:16 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 331.763029][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 21:55:16 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058b9b"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x3, "b1a3c7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x20, 0x1, 0x3, "1ac131"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x3, "22eea0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200103"], 0x0}) 21:55:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=@ipv6_newaddr={0x5c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_RT_PRIORITY={0x8}, @IFA_LOCAL={0x28, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @IFA_CACHEINFO={0x14}]}, 0x5c}}, 0x0) 21:55:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181042) r1 = dup(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x44) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)="deef8d"}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000000c0)) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc04c565d, &(0x7f0000000380)=@fd={0x1ff, 0xb, 0x4, 0x8, 0x5, {0x77359400}, {0x1, 0x0, 0x80, 0x2, 0xff, 0x7f, "eaccc0d8"}, 0x8, 0x4, {}, 0x20000005}) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffd8) 21:55:16 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005c, 0x19) mlock(&(0x7f0000102000/0x5000)=nil, 0x5000) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(r0) socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) [ 332.331803][ T22] usb 3-1: new high-speed USB device number 7 using dummy_hcd 21:55:17 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000700)={0x1, "fc"}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x3}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001d00)={0x24, 0x0, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_disconnect(r0) [ 332.449352][ T8020] syz-executor.1 (8020): drop_caches: 1 [ 332.752064][ T22] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 332.791904][ T3727] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 332.837715][ T8036] fs-verity (sda1, inode 1135): Malformed file signature [ 332.885162][ T8024] syz-executor.3 (8024): drop_caches: 1 [ 332.912808][ T22] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 333.064341][ T22] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 21:55:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181042) r1 = dup(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x44) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)="deef8d"}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000000c0)) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc04c565d, &(0x7f0000000380)=@fd={0x1ff, 0xb, 0x4, 0x8, 0x5, {0x77359400}, {0x1, 0x0, 0x80, 0x2, 0xff, 0x7f, "eaccc0d8"}, 0x8, 0x4, {}, 0x20000005}) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffd8) [ 333.136630][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:55:17 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x1e, 0x262) [ 333.259075][ T8020] syz-executor.1 (8020): drop_caches: 1 [ 333.302119][ T3727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.324839][ T3727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.365609][ T3727] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 333.385280][ T3727] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 333.398452][ T3727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.415925][ T3727] usb 5-1: config 0 descriptor?? 21:55:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x1e, 0x262) [ 333.554497][ T8024] syz-executor.3 (8024): drop_caches: 1 21:55:18 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005c, 0x19) mlock(&(0x7f0000102000/0x5000)=nil, 0x5000) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(r0) socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) [ 333.681544][ T8046] fs-verity (sda1, inode 1135): Malformed file signature [ 333.886348][ T3727] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 333.935844][ T3727] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 334.219017][ T8050] syz-executor.1 (8050): drop_caches: 1 [ 334.259736][ T3727] usb 5-1: USB disconnect, device number 19 [ 334.267779][ T8041] usb 5-1: string descriptor 0 read error: -19 [ 334.856078][ T8055] syz-executor.3 (8055): drop_caches: 1 21:55:19 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000700)={0x1, "fc"}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x3}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001d00)={0x24, 0x0, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_disconnect(r0) 21:55:19 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181042) r1 = dup(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x44) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)="deef8d"}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000000c0)) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc04c565d, &(0x7f0000000380)=@fd={0x1ff, 0xb, 0x4, 0x8, 0x5, {0x77359400}, {0x1, 0x0, 0x80, 0x2, 0xff, 0x7f, "eaccc0d8"}, 0x8, 0x4, {}, 0x20000005}) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffd8) 21:55:19 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x1e, 0x262) [ 335.270997][ T8050] syz-executor.1 (8050): drop_caches: 1 [ 335.521877][ T3732] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 335.572876][ T8055] syz-executor.3 (8055): drop_caches: 1 [ 335.892488][ T3732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.909002][ T8066] fs-verity (sda1, inode 1135): Malformed file signature [ 335.932595][ T3732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.951917][ T3732] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 335.973812][ T3732] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.056855][ T3732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.134338][ T3732] usb 5-1: config 0 descriptor?? [ 336.212144][ T22] aiptek 3-1:17.0: Aiptek tried all speeds, no sane response [ 336.219781][ T22] aiptek: probe of 3-1:17.0 failed with error -22 [ 336.300843][ T22] usb 3-1: USB disconnect, device number 7 21:55:21 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000700)={0x1, "fc"}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x3}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001d00)={0x24, 0x0, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_disconnect(r0) 21:55:21 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005c, 0x19) mlock(&(0x7f0000102000/0x5000)=nil, 0x5000) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(r0) socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 21:55:21 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058b9b"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x3, "b1a3c7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x20, 0x1, 0x3, "1ac131"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x3, "22eea0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200103"], 0x0}) [ 336.633692][ T3732] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 336.706223][ T8067] syz-executor.1 (8067): drop_caches: 1 [ 336.714425][ T3732] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 21:55:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181042) r1 = dup(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = creat(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x44) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)="deef8d"}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000000c0)) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc04c565d, &(0x7f0000000380)=@fd={0x1ff, 0xb, 0x4, 0x8, 0x5, {0x77359400}, {0x1, 0x0, 0x80, 0x2, 0xff, 0x7f, "eaccc0d8"}, 0x8, 0x4, {}, 0x20000005}) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffd8) 21:55:21 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058b9b"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x3, "b1a3c7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x20, 0x1, 0x3, "1ac131"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x3, "22eea0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200103"], 0x0}) [ 336.872015][ T22] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 337.041829][ T26] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 337.183342][ T3736] usb 5-1: USB disconnect, device number 20 [ 337.209692][ T8060] usb 5-1: string descriptor 0 read error: -19 [ 337.292160][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.303173][ T3727] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 337.327570][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.366932][ T8079] fs-verity (sda1, inode 1135): Malformed file signature [ 337.378731][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 337.414027][ T22] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 337.443537][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.462131][ T26] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 337.505998][ T22] usb 4-1: config 0 descriptor?? [ 337.521461][ T26] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 337.566517][ T26] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 337.626511][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:55:22 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005c, 0x19) mlock(&(0x7f0000102000/0x5000)=nil, 0x5000) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(r0) socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) [ 337.712274][ T3727] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 337.735976][ T3727] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 337.771670][ T3727] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 337.817712][ T3727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:55:22 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000700)={0x1, "fc"}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x3}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001d00)={0x24, 0x0, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_disconnect(r0) [ 338.027447][ T22] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving 21:55:22 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000700)={0x1, "fc"}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x3}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001d00)={0x24, 0x0, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_disconnect(r0) [ 338.094174][ T22] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 338.231949][ T3733] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 338.441831][ T3736] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 338.466762][ T3732] usb 4-1: USB disconnect, device number 20 [ 338.474475][ T8072] usb 4-1: string descriptor 0 read error: -19 [ 338.481508][ T8091] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -19 21:55:23 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000700)={0x1, "fc"}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x3}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001d00)={0x24, 0x0, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_disconnect(r0) [ 338.637696][ T3733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.648727][ T3733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.659217][ T3733] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 338.680295][ T3733] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 338.693279][ T3733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.710802][ T3733] usb 5-1: config 0 descriptor?? [ 338.822145][ T3736] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.833527][ T3736] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.843729][ T3736] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 338.857650][ T3736] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 338.867127][ T3736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.885279][ T3736] usb 1-1: config 0 descriptor?? [ 338.903316][ T22] usb 6-1: new high-speed USB device number 15 using dummy_hcd 21:55:23 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000700)={0x1, "fc"}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x3}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001d00)={0x24, 0x0, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_disconnect(r0) [ 339.204286][ T3733] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 339.226092][ T3733] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 339.312359][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.330450][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.351877][ T22] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 339.364473][ T3736] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 339.382198][ T3736] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 339.424208][ T22] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 339.451840][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.478381][ T22] usb 6-1: config 0 descriptor?? [ 339.561996][ T3736] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 339.637807][ T3733] usb 5-1: USB disconnect, device number 21 [ 339.641991][ T8087] usb 5-1: string descriptor 0 read error: -19 [ 339.650540][ T8099] plantronics 0003:047F:FFFF.000B: usb_submit_urb(ctrl) failed: -19 [ 339.666868][ T4146] usb 1-1: USB disconnect, device number 17 [ 339.921968][ T3736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.939889][ T3736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.944216][ T22] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 339.965090][ T3736] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 339.985870][ T22] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 340.008590][ T3736] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 340.045060][ T3736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.078440][ T3736] usb 4-1: config 0 descriptor?? 21:55:25 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000700)={0x1, "fc"}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x3}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001d00)={0x24, 0x0, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_disconnect(r0) 21:55:25 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000700)={0x1, "fc"}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x3}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001d00)={0x24, 0x0, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_disconnect(r0) [ 340.370759][ T3733] usb 6-1: USB disconnect, device number 15 [ 340.381970][ T8094] usb 6-1: string descriptor 0 read error: -19 [ 340.392718][ T8101] plantronics 0003:047F:FFFF.000D: usb_submit_urb(ctrl) failed: -19 [ 340.563531][ T3736] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 340.593656][ T3736] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 340.662408][ T26] aiptek 3-1:17.0: Aiptek tried all speeds, no sane response [ 340.670033][ T26] aiptek: probe of 3-1:17.0 failed with error -22 [ 340.685133][ T26] usb 3-1: USB disconnect, device number 8 [ 340.732045][ T22] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 340.771879][ T3736] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 340.922438][ T3727] aiptek 2-1:17.0: Aiptek tried all speeds, no sane response [ 340.930574][ T3727] aiptek: probe of 2-1:17.0 failed with error -22 [ 340.945452][ T3727] usb 2-1: USB disconnect, device number 19 [ 340.970371][ T26] usb 4-1: USB disconnect, device number 21 [ 340.982379][ T8098] usb 4-1: string descriptor 0 read error: -19 21:55:25 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058b9b"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x3, "b1a3c7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x20, 0x1, 0x3, "1ac131"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x3, "22eea0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200103"], 0x0}) 21:55:25 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000700)={0x1, "fc"}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x3}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001d00)={0x24, 0x0, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_disconnect(r0) [ 341.132286][ T3736] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.132294][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.132328][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.143948][ T3736] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.177230][ T3736] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 341.190875][ T3736] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.191467][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 341.200691][ T3736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.220560][ T22] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.231773][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.233157][ T3736] usb 1-1: config 0 descriptor?? [ 341.255168][ T22] usb 5-1: config 0 descriptor?? 21:55:25 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058b9b"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x3, "b1a3c7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x20, 0x1, 0x3, "1ac131"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x3, "22eea0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200103"], 0x0}) [ 341.372056][ T5436] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 341.502056][ T3731] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 341.631938][ T3732] usb 2-1: new high-speed USB device number 20 using dummy_hcd 21:55:26 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000700)={0x1, "fc"}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x3}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001d00)={0x24, 0x0, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_disconnect(r0) [ 341.733263][ T3736] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 341.742818][ T5436] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.755051][ T5436] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 341.767381][ T5436] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 341.768916][ T22] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 341.777079][ T5436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.794673][ T3736] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 341.830192][ T22] plantronics 0003:047F:FFFF.0010: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 341.872364][ T3731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.891368][ T3731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.911218][ T3731] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 341.925180][ T3731] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.942312][ T3731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.958075][ T3731] usb 6-1: config 0 descriptor?? [ 342.011994][ T3727] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 342.012053][ T3732] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 342.034403][ T3732] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 342.044623][ T3732] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 342.054974][ T3732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.079459][ T7] usb 5-1: USB disconnect, device number 22 [ 342.140645][ T3736] usb 1-1: USB disconnect, device number 18 [ 342.147038][ T8106] usb 1-1: string descriptor 0 read error: -19 [ 342.422069][ T3727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.437981][ T3727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.447832][ T3727] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 342.474234][ T3731] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 342.476526][ T3727] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 342.489148][ T3731] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 342.491497][ T3727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.538868][ T3727] usb 4-1: config 0 descriptor?? 21:55:27 executing program 4: timer_create(0x2, 0x0, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x77359400}}, 0x0) 21:55:27 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x8, 0x5, &(0x7f0000000040)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000005840)={0x0, 0xfffffffffffeffff, 0x0, 0x0, 0x4, [{}, {}, {}, {}]}) 21:55:27 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000700)={0x1, "fc"}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x3}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001d00)={0x24, 0x0, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_disconnect(r0) [ 342.889168][ T3736] usb 6-1: USB disconnect, device number 16 [ 342.902128][ T8112] usb 6-1: string descriptor 0 read error: -19 21:55:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000005c0)=0x820, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="41030800e1fc000000000000c52cf7c259752000b02f88a8", 0xfceb, 0x0, 0x0, 0x0) 21:55:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)="bc", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000980ffff", 0x8) [ 343.004500][ T3727] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 343.023523][ T3727] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 343.231969][ T22] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 343.389307][ T3731] usb 4-1: USB disconnect, device number 22 [ 343.401911][ T8116] usb 4-1: string descriptor 0 read error: -19 21:55:28 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000700)={0x1, "fc"}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x3}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001d00)={0x24, 0x0, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_disconnect(r0) [ 343.662367][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.673649][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.684125][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 343.698437][ T22] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.708131][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.720916][ T22] usb 1-1: config 0 descriptor?? 21:55:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback=0xac141424}}}}}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000004400)="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", 0x1000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}, &(0x7f0000000000)=0x40) [ 343.902023][ T3736] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 344.214669][ T22] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 344.226530][ T22] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 344.262098][ T3736] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.280801][ T3736] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.290973][ T3736] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 344.304627][ T3736] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 344.314154][ T3736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.328672][ T3736] usb 6-1: config 0 descriptor?? [ 344.607086][ T22] usb 1-1: USB disconnect, device number 19 [ 344.622005][ T8131] usb 1-1: string descriptor 0 read error: -19 [ 344.814949][ T3736] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 344.822956][ T5436] aiptek 3-1:17.0: Aiptek tried all speeds, no sane response [ 344.830400][ T5436] aiptek: probe of 3-1:17.0 failed with error -22 [ 344.840352][ T3736] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 344.855810][ T5436] usb 3-1: USB disconnect, device number 9 [ 345.012293][ T3732] aiptek 2-1:17.0: Aiptek tried all speeds, no sane response [ 345.025041][ T3732] aiptek: probe of 2-1:17.0 failed with error -22 [ 345.050206][ T3732] usb 2-1: USB disconnect, device number 20 21:55:29 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058b9b"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x3, "b1a3c7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x20, 0x1, 0x3, "1ac131"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x3, "22eea0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200103"], 0x0}) 21:55:29 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback=0xac141424}}}}}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000004400)="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", 0x1000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}, &(0x7f0000000000)=0x40) [ 345.233723][ T5436] usb 6-1: USB disconnect, device number 17 [ 345.253085][ T8141] usb 6-1: string descriptor 0 read error: -19 21:55:30 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058b9b"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x3, "b1a3c7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x20, 0x1, 0x3, "1ac131"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x3, "22eea0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200103"], 0x0}) 21:55:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_ID={0x8, 0x300}]}, 0x20}}, 0x0) 21:55:30 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback=0xac141424}}}}}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000004400)="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", 0x1000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}, &(0x7f0000000000)=0x40) 21:55:30 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f00000000c0)) 21:55:30 executing program 3: r0 = socket(0x29, 0x2, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) 21:55:30 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0bc5310, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000280)={0x0, 0x0, 'client0\x00', 0x0, "73a7f91eff9d44a2", "d379ee84c2e83f9e44fd05f44f29a1afc498ff1a1f07f03ffd4040764e5d0a14"}) tkill(r0, 0x7) 21:55:30 executing program 0: syz_clone(0x8480, 0x0, 0x0, 0x0, 0x0, 0x0) 21:55:30 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback=0xac141424}}}}}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000004400)="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", 0x1000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}, &(0x7f0000000000)=0x40) [ 345.592184][ T3727] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 345.721836][ T22] usb 2-1: new high-speed USB device number 21 using dummy_hcd 21:55:30 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0bc5310, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000280)={0x0, 0x0, 'client0\x00', 0x0, "73a7f91eff9d44a2", "d379ee84c2e83f9e44fd05f44f29a1afc498ff1a1f07f03ffd4040764e5d0a14"}) tkill(r0, 0x7) 21:55:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x77, &(0x7f0000000140)=[@in={0x2, 0x0, @multicast1}], 0x10) [ 346.032587][ T3727] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 346.044621][ T3727] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 346.055452][ T3727] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 346.064622][ T3727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.132037][ T22] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 346.145505][ T22] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 346.155707][ T22] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 346.164969][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.102368][ T3727] aiptek 3-1:17.0: Aiptek tried all speeds, no sane response [ 349.109858][ T3727] aiptek: probe of 3-1:17.0 failed with error -22 [ 349.130843][ T3727] usb 3-1: USB disconnect, device number 10 [ 349.202021][ T22] aiptek 2-1:17.0: Aiptek tried all speeds, no sane response [ 349.209544][ T22] aiptek: probe of 2-1:17.0 failed with error -22 [ 349.223171][ T22] usb 2-1: USB disconnect, device number 21 21:55:34 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 21:55:34 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210017000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f00000009c0)={0x1, 0x0, 0x2, 0x0, 0x2}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000540)={0x20, 0x31, 0xd8, "200b4ec47d0ed8a1f9064a027188146bd6ca33b410e36dcf741f32b034b845737f989637216fbd369fdf8860a140e4e3bfafb860a2a6025fcfab3566ffbfa51dbf56ccb38915389e57b03265f0a10de6b30295e2f5a62b0577ae2906ba46efdfa7341756fc9a60fe9ef354e15768a7093842ae876e714c761d8e48195ba474adda14cbe0337032fb1676b3b6577f3ba2fdcb40ae7a4b35a09f1c79fa7679790bc5200f95b7eace30fc1291248f91894e84f431cc3a55c9f009edeb0412f6ce83eaf88fdb3a4c7eb68549d8a3a94e4cf65395935b44aa094d"}, 0x0, 0x0, &(0x7f0000000680), 0x0}) syncfs(0xffffffffffffffff) 21:55:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000080)=0x6, 0x4) 21:55:34 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00645a50e9c53a8b2449740000000000000017ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@newqdisc={0x45c, 0x24, 0x78b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x4}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) 21:55:34 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0bc5310, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000280)={0x0, 0x0, 'client0\x00', 0x0, "73a7f91eff9d44a2", "d379ee84c2e83f9e44fd05f44f29a1afc498ff1a1f07f03ffd4040764e5d0a14"}) tkill(r0, 0x7) 21:55:34 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 21:55:34 executing program 1: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000001700)=[{&(0x7f0000000180)=""/157, 0x9d}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f00000004c0)=""/135, 0x87}], 0x5, &(0x7f0000001c40)=[{&(0x7f00000017c0)=""/108, 0x6c}, {&(0x7f00000018c0)=""/229, 0xe5}, {&(0x7f00000019c0)=""/130, 0x82}, {&(0x7f0000001a80)=""/170, 0xaa}, {&(0x7f0000001b40)=""/244, 0xf4}], 0x5, 0x0) 21:55:34 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000100)="000000000000001fffffff7ae30e97861f4104bfeacd1f63dd65dd5709667390f2c00ea5e2a4edf7", 0x28, r0) 21:55:34 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100102"], 0x10}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x29e, 0x4) recvmmsg(r0, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 21:55:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3}) 21:55:34 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, r0+10000000}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001500)={{0x0, 0x3938700}}, &(0x7f0000001540)) 21:55:34 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000001540), 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 21:55:34 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) io_setup(0x5ff, &(0x7f0000000040)=0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_submit(r1, 0x2, &(0x7f0000000640)=[&(0x7f0000000180)={0x7000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0210000006ffffffffff600000000004", 0x1002}]) [ 349.771900][ T3732] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 350.142262][ T3732] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 350.153739][ T3732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.165387][ T3732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.175522][ T3732] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 350.188610][ T3732] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 350.197751][ T3732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.214864][ T3732] usb 6-1: config 0 descriptor?? [ 350.703078][ T3732] appleir 0003:05AC:8243.0015: No inputs registered, leaving [ 350.713569][ T3732] appleir 0003:05AC:8243.0015: hiddev0,hidraw0: USB HID v17.00 Device [HID 05ac:8243] on usb-dummy_hcd.5-1/input0 [ 352.171874][ T22] usb 6-1: reset high-speed USB device number 18 using dummy_hcd 21:55:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) 21:55:37 executing program 1: r0 = openat$autofs(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0x541b, 0x0) 21:55:37 executing program 0: capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, &(0x7f0000000280)) 21:55:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3}) 21:55:37 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0bc5310, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000280)={0x0, 0x0, 'client0\x00', 0x0, "73a7f91eff9d44a2", "d379ee84c2e83f9e44fd05f44f29a1afc498ff1a1f07f03ffd4040764e5d0a14"}) tkill(r0, 0x7) 21:55:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3}) 21:55:37 executing program 1: setitimer(0x0, 0x0, &(0x7f0000000340)) [ 352.733272][ T8223] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) 21:55:37 executing program 1: r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000054000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000280", @ANYRES32, @ANYBLOB="00000010fc0000000000000000000000000000000000000020000100", @ANYBLOB="fb74471f9e4bb39a18a65c3674c03ffc252fa8aafc393eba60"], 0x58}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:55:37 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000100)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'ip6tnl0\x00'}}, 0x31) [ 352.843123][ T8243] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 21:55:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) [ 352.896924][ T27] audit: type=1326 audit(1669067737.479:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8245 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6f549 code=0x0 21:55:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3}) 21:55:37 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x6be5, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x4c87, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 21:55:37 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x4043}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20}, 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 353.039536][ T3727] usb 6-1: USB disconnect, device number 18 21:55:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3}) 21:55:37 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x4008550d, 0x0) 21:55:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) 21:55:37 executing program 1: r0 = socket(0x29, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) 21:55:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3}) 21:55:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) 21:55:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3}) 21:55:38 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000100)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'ip6tnl0\x00'}}, 0x31) 21:55:38 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000180)=@string={0x2}}]}) 21:55:38 executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x0) 21:55:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@dev, 0x0, 0x3c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in=@local}]}, 0x104}}, 0x0) [ 353.760397][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 353.804253][ T27] audit: type=1326 audit(1669067738.389:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8295 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6f549 code=0x0 21:55:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x1d, 0x4) 21:55:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0x39, 0x1, 0x0, 0x0, {0x1}, [@typed={0x6800}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@empty}]}, @typed={0x4, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x34}}, 0x0) 21:55:38 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000019acd7401e04414009a7000000010902120001800000000904"], 0x0) 21:55:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) rseq(&(0x7f0000001140), 0x20, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) [ 354.010353][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 354.031984][ T3727] usb 6-1: new high-speed USB device number 19 using dummy_hcd 21:55:38 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x541b, 0x0) 21:55:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)={0x0, 0x2, [{0x1, 0x1}, {}]}) 21:55:38 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x304, @dev}, 0x7, {0x2, 0x0, @empty}}) 21:55:38 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x258, 0x4c, 0x200, 0x0, 0x0, 0x390, 0x2e8, 0x2e8, 0x390, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@unspec=@realm={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e00) [ 354.271851][ T3727] usb 6-1: Using ep0 maxpacket: 8 [ 354.274613][ T8312] usb usb9: usbfs: process 8312 (syz-executor.4) did not claim interface 0 before use [ 354.332067][ T3732] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 354.392299][ T3727] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 354.452013][ T3727] usb 6-1: language id specifier not provided by device, defaulting to English 21:55:39 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000100)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'ip6tnl0\x00'}}, 0x31) [ 354.582274][ T3727] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 354.598201][ T3727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.617307][ T3727] usb 6-1: Product: syz [ 354.627096][ T3727] usb 6-1: Manufacturer: syz [ 354.676306][ T3727] usb 6-1: SerialNumber: syz [ 354.694459][ T27] audit: type=1326 audit(1669067739.279:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6f549 code=0x0 [ 354.742105][ T3732] usb 4-1: New USB device found, idVendor=041e, idProduct=4041, bcdDevice=a7.09 [ 354.755730][ T3732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.763053][ T3727] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 354.846116][ T3732] gspca_main: sq930x-2.14.0 probing 041e:4041 [ 354.967011][ T3727] usb 6-1: USB disconnect, device number 19 [ 355.072004][ T3732] gspca_sq930x: reg_r 001f failed -71 [ 355.077608][ T3732] sq930x: probe of 4-1:128.0 failed with error -71 [ 355.100891][ T3732] usb 4-1: USB disconnect, device number 23 21:55:40 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000180)=@string={0x2}}]}) 21:55:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)={0x0, 0x2, [{0x1, 0x1}, {}]}) 21:55:40 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x304, @dev}, 0x7, {0x2, 0x0, @empty}}) 21:55:40 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x258, 0x4c, 0x200, 0x0, 0x0, 0x390, 0x2e8, 0x2e8, 0x390, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@unspec=@realm={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e00) 21:55:40 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000100)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'ip6tnl0\x00'}}, 0x31) 21:55:40 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x258, 0x4c, 0x200, 0x0, 0x0, 0x390, 0x2e8, 0x2e8, 0x390, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@unspec=@realm={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e00) 21:55:40 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x304, @dev}, 0x7, {0x2, 0x0, @empty}}) [ 355.522193][ T8324] usb usb9: usbfs: process 8324 (syz-executor.4) did not claim interface 0 before use 21:55:40 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x304, @dev}, 0x7, {0x2, 0x0, @empty}}) 21:55:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)={0x0, 0x2, [{0x1, 0x1}, {}]}) [ 355.651493][ T27] audit: type=1326 audit(1669067740.229:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8333 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6f549 code=0x0 [ 355.768140][ T8340] usb usb9: usbfs: process 8340 (syz-executor.4) did not claim interface 0 before use 21:55:40 executing program 2: r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'vlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="0a00000008dc5c170000000000000000db6e000800008100000088a8"], 0x300}], 0x1}, 0x0) 21:55:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)={0x0, 0x2, [{0x1, 0x1}, {}]}) [ 355.831926][ T3736] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 356.002327][ T8343] usb usb9: usbfs: process 8343 (syz-executor.4) did not claim interface 0 before use 21:55:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)=@newsa={0x154, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@private2}, {@in=@local, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}}}]}, 0x154}}, 0x0) [ 356.112079][ T3736] usb 6-1: Using ep0 maxpacket: 8 [ 356.133603][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 356.252811][ T3736] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 356.322388][ T3736] usb 6-1: language id specifier not provided by device, defaulting to English [ 356.472406][ T3736] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.521003][ T3736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.556125][ T3736] usb 6-1: Product: syz [ 356.570750][ T3736] usb 6-1: Manufacturer: syz [ 356.582902][ T3736] usb 6-1: SerialNumber: syz [ 356.642937][ T3736] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 356.882666][ T3736] usb 6-1: USB disconnect, device number 20 21:55:42 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000180)=@string={0x2}}]}) 21:55:42 executing program 2: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0xf19]}, 0x8) 21:55:42 executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@link_local, @random="e0d35b100fbb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x15, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @empty=0xff08, {[@timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@dev}, {@empty}]}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@broadcast}, {@multicast2}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @end, @ra={0x94, 0x4}]}}}}}}}, 0x0) 21:55:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x258, 0x4c, 0x200, 0x0, 0x0, 0x390, 0x2e8, 0x2e8, 0x390, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@unspec=@realm={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e00) 21:55:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="07000000eb"], 0x20000600}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x74, 0x10, 0x401, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x52802}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=0x0, @ANYBLOB="000128bd7000ffdbdf250f000000010001801400020063616966300000000000000000000000140002007465616d5f736c6176655f30000000001400020076657468305f766972745f776966690014000200776c616e300000000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="28000180140002007866726d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="2000018014000200766972743000000000000008000300"/32], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x1d, r5}, 0x10, &(0x7f0000000300)={&(0x7f00000002c0)={0x4, 0x820, 0x0, {}, {0x77359400}, {0x0, 0x1, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "eaf8e2ee9672ef3d"}}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd2c, 0x25dfdbfc, {0x7, r2}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x810}, 0xc0d0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r7, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 21:55:42 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x258, 0x4c, 0x200, 0x0, 0x0, 0x390, 0x2e8, 0x2e8, 0x390, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@unspec=@realm={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e00) 21:55:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000200)={0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) 21:55:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x6, 0x7, 0x1, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000240)={r4}) r5 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x305e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x1e, 0x0, 0x0, 0x200000000000000) 21:55:42 executing program 2: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0xf19]}, 0x8) [ 357.782219][ T3727] usb 6-1: new high-speed USB device number 21 using dummy_hcd 21:55:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000200)={0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) 21:55:42 executing program 2: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0xf19]}, 0x8) [ 358.052024][ T3727] usb 6-1: Using ep0 maxpacket: 8 21:55:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000200)={0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) [ 358.192014][ T3727] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 358.293263][ T3727] usb 6-1: language id specifier not provided by device, defaulting to English [ 358.432849][ T3727] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.450374][ T3727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.483200][ T3727] usb 6-1: Product: syz [ 358.528156][ T3727] usb 6-1: Manufacturer: syz [ 358.571177][ T3727] usb 6-1: SerialNumber: syz [ 358.662600][ T3727] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 358.957227][ T3727] usb 6-1: USB disconnect, device number 21 21:55:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000200)={0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) 21:55:44 executing program 2: r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0xf19]}, 0x8) 21:55:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x258, 0x4c, 0x200, 0x0, 0x0, 0x390, 0x2e8, 0x2e8, 0x390, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@unspec=@realm={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e00) 21:55:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x6, 0x7, 0x1, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000240)={r4}) r5 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x305e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x1e, 0x0, 0x0, 0x200000000000000) 21:55:44 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000180)=@string={0x2}}]}) 21:55:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x258, 0x4c, 0x200, 0x0, 0x0, 0x390, 0x2e8, 0x2e8, 0x390, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@unspec=@realm={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e00) 21:55:44 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x6, 0x7, 0x1, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000240)={r4}) r5 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x305e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x1e, 0x0, 0x0, 0x200000000000000) 21:55:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "8d75e35790cdaa96010dfa074c97"}}]}, 0x30}}, 0x0) [ 359.891910][ T3727] usb 6-1: new high-speed USB device number 22 using dummy_hcd 21:55:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "8d75e35790cdaa96010dfa074c97"}}]}, 0x30}}, 0x0) [ 360.172177][ T3727] usb 6-1: Using ep0 maxpacket: 8 21:55:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "8d75e35790cdaa96010dfa074c97"}}]}, 0x30}}, 0x0) 21:55:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "8d75e35790cdaa96010dfa074c97"}}]}, 0x30}}, 0x0) [ 360.321999][ T3727] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 21:55:45 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x54) waitid(0x0, 0x0, 0x0, 0x2, 0x0) [ 360.412179][ T3727] usb 6-1: language id specifier not provided by device, defaulting to English [ 360.601880][ T3727] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.617179][ T3727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.638758][ T3727] usb 6-1: Product: syz [ 360.651159][ T3727] usb 6-1: Manufacturer: syz [ 360.663721][ T3727] usb 6-1: SerialNumber: syz 21:55:45 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x54) waitid(0x0, 0x0, 0x0, 0x2, 0x0) [ 360.742995][ T3727] cdc_ether: probe of 6-1:1.0 failed with error -22 21:55:45 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') write$FUSE_BMAP(r0, 0x0, 0x0) 21:55:45 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x54) waitid(0x0, 0x0, 0x0, 0x2, 0x0) [ 361.040540][ T5436] usb 6-1: USB disconnect, device number 22 21:55:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x6, 0x7, 0x1, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000240)={r4}) r5 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x305e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x1e, 0x0, 0x0, 0x200000000000000) 21:55:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$FUSE(r2, &(0x7f0000000280), 0xfffffed3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000001840)={0x0, @l2tp={0x2, 0x0, @empty=0x3bb, 0x4}, @l2={0x1f, 0x6, @any, 0x992}, @nl=@unspec, 0x3d6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x100000000000000, 0x1000400004, 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"e6696328276c80ede1cbb140551427cb", r4, 0x0, {0x0, 0x7ff}, {}, 0x28e, [0x0, 0x0, 0x7ff, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x9, 0x1, 0x3]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, r4, 0x3, @unused=[0x0, 0x6, 0x70000000, 0xfff], @devid}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000300)={{r0}, r4, 0x0, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000c74a000000000000000800000000000025000000000000002000000000000000050000000000000008000000000000000700000000000000330488bb2cd04a75475322b9000000000000010400873300000084ee00000000000005000000000000002dae5162b602bf210339064b5d947db4b558f02db7adc79600902776eb11b5ffffffffffffffffdc7b72f94e41c5d840ebf84b811b7adf5c7d8cac8afcba966eafa83287285c"]}, @name="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"}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0}}], 0x600, 0x0, 0x0) 21:55:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x77, 0x0, 0x0) 21:55:46 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x54) waitid(0x0, 0x0, 0x0, 0x2, 0x0) 21:55:46 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x6, 0x7, 0x1, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000240)={r4}) r5 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x305e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x1e, 0x0, 0x0, 0x200000000000000) 21:55:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="41323fbccd370f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x56, 0x0, &(0x7f0000000040)={0x0, 0x0, [0x0, 0xd0e, 0x993]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:55:46 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000017c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 21:55:46 executing program 5: pwritev2(0xffffffffffffffff, &(0x7f00000034c0)=[{&(0x7f0000000140)="2a730448c11296cceed93c2387f83b1bf812fead7170cca788d2ea7538db8feb181667096d24ab70d153de3107f87b2d5119c1653e9f777034cee00e97bda7cd17040dc705a6d97211876c97a446e216770964e16f5be89289f8d972d110abdeaf3bdf335e064acd", 0x68}], 0x1, 0x0, 0x0, 0x0) r0 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000000140)={0x68, 0x0, r1, [{0x2000000000000007}, {0x0, 0x0, 0x2, 0x0, '^\''}, {0x0, 0x0, 0x7, 0x0, 'ns/net\x02'}]}, 0x68) 21:55:46 executing program 2: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 361.987377][ T8445] CUSE: info not properly terminated 21:55:46 executing program 5: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000340)={0x0, 0x1, 0xd8}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x30080, 0x0) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000780)={0xe8, "f9a0a341a2d9a259ff7ee28e1d4a8d71ca3756a994d6b5592d001dceeaeb9ef06ba5e8253a78301b4965b88dccaf18c3ad6ca11185edfd8b9cddcff138ddbef2d7bf40386de4188fd67b2c50007850f6f719993c086a2aa97dce2c99e1d26e1ae33606e41c3ba15637ee8b2a3a7465184e7b6f41b5b47b416865fec82e3aceab13cb4fd7ba06b2519e31bcc351c91be1e557207ff2cf55ee3e3d196566e0fafa547fbf20385e0127e614d8d315d32629d04e56c97766d8246e2a217ae906f247c91fa9910a4a3d971e30d96620767d3605f3b86de70d928bb717f3e4e3c91b94e6ecb61113cf118a"}) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2000400, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030303630302c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303230302c64656661756c745f7065726d697373696f6e732c6d61785c726561643d3078303030303030303030303009003030302c6d61785f726561643d3078303030303030303030303030303030302c6d61736b3d4d41595f455845432c6673636f6e746578743d757365725f752c636f6e746578743d73797361646d5f752c646566636f6e746578743d756e636f6e66696e65645f752c7375626a5f726f6c653d29152d2c736d61636b66736861743d5c2c00"]) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x6]}, 0x8, 0x100000) syz_clone(0x41804000, &(0x7f0000000400)="73e6b74c5080073bdd5a737a7fe0eeb834c2c33b9434bbf20d15a943aba00b1ab95c06c1802c522e323d04ee199be7a399a495102999e5794c19b6e0f58c1e1f8a108763cf9c6bfcb2e872d4b9c4a9e293063f10fbb466b6ab0e990575f3b4cfea0fcabf95d3e2d2964d8413749d2c7653a47db6a74f", 0x76, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="6f70763c51b66108c11376fd777a27996cbbe510f2abccb9fdfb87fef157a8ade6a4edf95b7f93429484daaead605cc24dd5ab5dd854f55bdd2372de7cf48d40f7ab2370f1723fd4af255d43510ab2344685298c755929d6ef364f8f0d1f7b7a233207e355af813988e1bc3c903ff0b3ffc652cd39e2c158123d6b0c36eed4844c76dc646ae19b7e455287231625cac519b111f9ffabacb36087d6e1431f6d7af0b18fa0340826fb766ec5c8b1953faeb381bf4de0b97148ec548ee22511a4c74394579d0a9e30adefb7be48b617fffe92940eed77c2ea1a7099c358ccdaf5cbb556cf76db") 21:55:46 executing program 2: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4f0, 0x364, 0x59000000, 0x294, 0x0, 0x294, 0x428, 0x378, 0x378, 0x428, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x344, 0x364, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0xe2, 0x0, 0x64, 0x0, 0x0, 0x1, 0x402}}}, @common=@inet=@hashlimit2={{0x150}, {'gretap0\x00', {0x0, 0xde60, 0x0, 0x0, 0x0, 0x9, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x54c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4f0, 0x364, 0x59000000, 0x294, 0x0, 0x294, 0x428, 0x378, 0x378, 0x428, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x344, 0x364, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0xe2, 0x0, 0x64, 0x0, 0x0, 0x1, 0x402}}}, @common=@inet=@hashlimit2={{0x150}, {'gretap0\x00', {0x0, 0xde60, 0x0, 0x0, 0x0, 0x9, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x54c) 21:55:47 executing program 2: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4f0, 0x364, 0x59000000, 0x294, 0x0, 0x294, 0x428, 0x378, 0x378, 0x428, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x344, 0x364, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0xe2, 0x0, 0x64, 0x0, 0x0, 0x1, 0x402}}}, @common=@inet=@hashlimit2={{0x150}, {'gretap0\x00', {0x0, 0xde60, 0x0, 0x0, 0x0, 0x9, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x54c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4f0, 0x364, 0x59000000, 0x294, 0x0, 0x294, 0x428, 0x378, 0x378, 0x428, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x344, 0x364, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0xe2, 0x0, 0x64, 0x0, 0x0, 0x1, 0x402}}}, @common=@inet=@hashlimit2={{0x150}, {'gretap0\x00', {0x0, 0xde60, 0x0, 0x0, 0x0, 0x9, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x54c) 21:55:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x6, 0x7, 0x1, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000240)={r4}) r5 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x305e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x1e, 0x0, 0x0, 0x200000000000000) 21:55:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="41323fbccd370f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x56, 0x0, &(0x7f0000000040)={0x0, 0x0, [0x0, 0xd0e, 0x993]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:55:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$FUSE(r2, &(0x7f0000000280), 0xfffffed3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000001840)={0x0, @l2tp={0x2, 0x0, @empty=0x3bb, 0x4}, @l2={0x1f, 0x6, @any, 0x992}, @nl=@unspec, 0x3d6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x100000000000000, 0x1000400004, 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"e6696328276c80ede1cbb140551427cb", r4, 0x0, {0x0, 0x7ff}, {}, 0x28e, [0x0, 0x0, 0x7ff, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x9, 0x1, 0x3]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, r4, 0x3, @unused=[0x0, 0x6, 0x70000000, 0xfff], @devid}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000300)={{r0}, r4, 0x0, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000c74a000000000000000800000000000025000000000000002000000000000000050000000000000008000000000000000700000000000000330488bb2cd04a75475322b9000000000000010400873300000084ee00000000000005000000000000002dae5162b602bf210339064b5d947db4b558f02db7adc79600902776eb11b5ffffffffffffffffdc7b72f94e41c5d840ebf84b811b7adf5c7d8cac8afcba966eafa83287285c"]}, @name="c7e323b65aca7dd1f123033b9524c91430a74797f9f77640369e38b2e5833ed8c81ea0105ab2c585aaac971cf7072ad4eacba440dd284e0af133ec491430d388c2a77a3f23ed8b1996af069fa391faa40476663c05da1dfb81acb9edfef67227aca547a0cde962e0cd85658b748d358b9945ceb57af59a02cd52e319c566fd2c67cde7a1af8b89739a01ad0aee2c3823a32870caef0824e2805803f959bed2c6597eb003baa504d1044e37e985cd4adf3cda437bdbf8378a8d76f53b3f8b7341e03c9d98adf67e215922387ca18b7673b836398ec05fa59812aa5ce5fe54c10c6c684a5f2c313bf1ef06f8304146765b75d59e90839859bbf1420a1125d635e2a72b0422e42e42d411f1b01b89a9e54fc4a7fcf719efd04486811778a1325d40b33740609bbd5365d2e6744e94f3c6860602e0ff6319ead51d32d080c35d23e98601dbed974a931b3de2363e53bcb990f0c4fa6c1a70796745cf19c60c7ef33a90e91c7f87027085ba818f1c9c4260491184bf9ef42ab9ca01357b7e2aee98654d698a356d84cb2ba6a2712209877fbc12f1ff8bf15970dce319abf37f459c2055975d1a51e6e0f80f4d317a8e5323192ebd18dd1c3036c2f140198a64ecf37d022f13e9a2330ded28d3ace14b82418ca79014351b850e0381a22a36441f74c863e2df7628aebb7d34aa4689f3e79f621f12fda5df4e36332c19dbd51aa0d6271ce14921c9b26cb961a9d0afa75e11afb199a63eea86292d0275e372fa8fca2eb3d8446986f7ea592b764bd4c9b97bec4efe30d51ff196041a6b88b3787c515f8375237c28e2a068b66a1f1d6a64c04952f9d08f55aeb45ed26c447bbdfbd98174147b553698426a8a480aafead59223e2d8801677fe42a623f33474a0da1a2968b2941951baaf64779952728555c38331f2aa685ebc8fbc5f93ec8653dd0f41638c3122797d73078ce9b84e847ae9a197bcd362f56ee161a4c83b2f71017bd0be765ee5c67f11044856cb8e189a788dc3d0e48dde3d36db400ced724848aea8598e32c3c1a4f9a9052ead18637c4317f0d3acce7e4d913bd537a4a048c5aef9e0cf15b74ae4203b81630260a365801302605c251a013df93057e5103b1aa0f2eb4f31533568a883503af284fd71038264ec6704c82b8ffd03875c4a288bc5e854985e5d075be3850b129cc9faefd8c6342205a614819d91aac17c45f4a0466875571cb4be9783c5508287cd24a24a9d28710b944407dcc9eca1c1abe14715455b22381bd4ca64158d9841c9686661212b48b2f8323b8fcd96471915d0a83f4a850cdf41b3f2d7cc9f95d140420c6e00065ef94b93f2e4b8d6a5b0c4cc77b5798ab43b5a6465f49be333e5d772d24a8d547e14530f804a1239c3d4f67db1ffc6f64e065211aa68dc7db12ef7f9c805c19a591a231d3181dcc2b0212c5e009d98ae4deefdb45e45a08907b232f36bdfdcb7f8ac31e880a7117b9bee674d96e28242154aff5928ee66cddc3830927ca64782ff844dd9446c29257b7136a4713a6664436290b383a8c3a749114f31c7eee5fa513d3eac3d8e0f9ee6e8b66ad116f5a87e43ce59803afe3b7b7123a3064ff8011b96073be8c5853b33f4825deed0fe766cda918b2f60084038758b655d3464448cf7580d6acf7e80154bba46b9c5e4964fc5dadad3a34638b565837a90f29244569c34f06750a938e3108f3b1b8ee21482b32fe3d55d6f01e1549a9a5f9b97520acbb259a70b188e18a885b28dfbb23fe997660dbfe4c1ab8b365a4c403431b8a0b6640ea066c770693781d4090a694dcc7b93a190390dc67bffa5a747a1355481b0e36c95bfea69c53724336e3b9e5215de73b1fa84ef6847290601c523a65227a2293c8f032e72ba4e8179412500d6b4c345f1d2ed7157d394d4b3e7892a3a1111e1dd44bf7efb4be95a15e0c1ceb40f098722cc781073a0478b1ceae4195504a35dd0977a6a55218cac3e43f83a48336ecb6fe36b15c02db8f2f4607134ebdd71a2bc1a2c64909c829e162a4588fca3e9ffb3f0efda911ddf45a91e80fa069bf6da5b77654e07b4fa5a23c1f867e9610b5bcc732da02bc0b0353186b9b6542016f837c09f4a10c28d36e2b0a4f7b98a269f7dbdbc99b0d0e110eb13af27fbf1e1caa19c8c7a08c4a106038b8bb93e98e26956e56d055d41a97a8e420a10c746170f86854910b37640cb1d5cc12bea8fdc15496031a31e4e9daaf67dfb901c6768eef3fb0cbeb23d3ea6b7018b1af45879b4d3a46c81e0a1b148497e02c059f0d8e17773afb0217800f2d4507f3877290fc63f23e54986ad7eddc6f5bc78c76141f208c9def3ab61089421fe6c262fa004fc85befd47478e511f29e48a7a3acc80470fdc0c919131635c642ec7d6784e6e242565ded4aea2ecb466040f3fda3ae1953d41008dc179d44916c01328794a6a505b9675a1ca79d89e6073baf9827f68464391f968d420430d23028430232eb1a22798c8df82864df2931614e983b1e234094c3b3daffb8b27cab1f84576c1cbbb9e45e3c52f6e481b96f51dcf10daccd3d0a78fa6e96ed1e5961c251f927a76fbe5e4f44af10811da2bb9f31336b54236bc5578c0bbc6d44f37f1303a79b4cd76aed7bcb849e9978ae7ec3244bbaabd88553a6cdceb1722855153e7508cd5847972b081752b211ea7397586d3ba280d7b5cff0d4f0ebdd1b14b02940f8ea5d5f2ed8cb9463bd567095945a4bf4dd2c9418b89ec6f019610cb604ee5612ffe11721afd4d646425051744ee5801e78a2f4b68e5e4d92097fc029427d3c44ee4c20462b552732e0804f033fbd9692d1ca73ae7d501cbc2562516e158ae022cf14bd82aafa7b9958c13386e95376f0e94d06ebd53fc587b0424641dd89f118c6db19524f827cc5a8e4134454aacfee16d9b27330394ea792ac86cdc8f5d07301b369946fd48ba6799a3036c4fd3793fa972adbb842e050c7e3ef38bd0b0ad9d5d54bff378ee29919dd6c062e6182b2c5a7f6f133a52c57debef9a1672a571dc9e14146dc240c91e9592b1c85c64ae97a3e40bffbbc134ec6bec3b03fba07063973d56dc8ea22b9eab68c82f4692b077f793c9edf94a6c83797c1f0be55f9818c7869de6f70acd11b3de5949630f3e5107df88e5c9ad6fdc6417da67c426d02bf6506e6f4e2e6a879e74c2f7519f9a268fd7cace40a9fed5369d25efa021080932192df9e41c485a14754efb6cd3e8cead395bb4364038eaf9e97766356bafbe7cb8f6d49b28aafa68b98a692d18794c6e03eed72486e9452ed758f4597325484cbdf6bea9a55e6452c828df9689e08798617a2a3f651cdbaaa7c705f180f6a7f14c9a458363b08c5a71d2099fb9345f7f915e0c2fb59d251cc4a0715b2c8fecf8161db4f6ff8133c50686903442b64ba971e5bbfd692937ef7b28ceee7bf7290d9ecaeff406b23cfd4618f5f70ed725a6cdf9ac554f5df272fa9fb95f810b65446d41a1aab294551b03640b3e291b43d64fdbd852d4f6e5343930ad30b49b14d6815139663ed990fb0b5150ee98e1f83871ac6d7d9d3c285850c0c48c602e40fc82c4578786e4d33d40f66a93606fdad373a5b6e6541edf6adfd69de1cd02e7df1f5358029ba45df0102e66bf365239edc821dbb8754842f76b4db23cf1665e0e7366a42998b4f2491f0b53cdc2a042f086a4cbbf7468b58969aa818d98b6d1d2718b29d2f9fba9eee3165c3d618e8a785f0aee42dcdfb5b1be8eaba8b146a21015b55634fc102c67510aeb1e590dfc88204a2148e179abfc32e315ee3b72d18242b8e203b7d0c3daf2e778a167baa19cbb5a4e1efa13317bf0d1e8a5a4ac347a66c1719a7ee0fbc9325d86d28bae66e4b4807cf36f2f7f45b619d6b1af06b957eabd9e191bf28b77e5018d12df4b3ff9e1800dfa9b2b447d360f4cf15efb78358f4e3a0fa83be890217f07563cd825d4c56fbea2f30a5e505c4bdcca2c79366171599dc1b365d1bec4293aad1f1f09c668041c0672770975ca78f28d9062488a5b376f0923fce6b7b9629f52d718f636d941a64d276deb8f6f0eac75d6ccd25b1e7f89e708cf7c2bd86417547667630a2d25c26a0ae3f49366494bc7ec1f0a436e33a616ecd7486e3c27bcc322fdb5a6ffecdadd1d423f03bf45635e43a259ba7edef3c6a745cc742412799fcec20b32fc6df84820937b6ba1f8d8f9980fabed3601ddb2cf866da34dfa71a2da042bc5d872f02738a3fdbf6aa4b8b36278a67d0168767c75a3f586cb464d1867fbaf2b3ca6ba084252e106a0b4ef08090859dec3d17513acd7288a962c065ac884a2462f3ba3896d9bade230dadf8862a11c931666197037482661b4678a05e5704f863d49ab71b898990aef715aee4934f58a18a16b5bdf037315c61a668a6e899aba36c8b40d464b5536777eeeff80181478fa31c92d32fbaa2b85daa10ce5b0a04600d465de05e7395c027545e5565e47825d86285d0f68d304c1cc098219260cd3644aec1b5e2eceb3bcee64ad2a810c280ca31673910f8b5e0f131326ff8693e05f499d682e5cce351ea5a01255a0947dbe263ff144ca815e81fe35398723880bf82543ba9285382c32f9a322e87d14417b2fa7ed37640a4eca55c312c15e00c6c723b158f6219f2869e135898b387df2e41fa972d9062dd4ee195657c3aaa5143812ef6f26de52195c7ed1aa06fcff0807a1d6226a6864e040b7ad6b36c886d014935a89a0b68ddc7b8b193a0b9ec83a43dc62c763430f7f0c7c843a3a882dd60b259b06862481aa24120cc486e7bf2a0871d85d482edc76b67ed52bd7a6ecd9e8b9d3bc38904c077761a4ce861c11119f9d961944d7a6fd863c2365046025af867a8d9ad518de9e7cb3599ae462b0670ad4530f1745e588165b403cc621b7e56ab3f03ee07d9efb6cbb89e9f3d2e2b160e831a537ab88a69a35fa1779b8abc2a281904ad5385de8a8ccc522599266f63f9e3b2f91daf47454eebdc51f9d24132d560dc42f7768ca942eb307b51b197fa4baea589dc295c33ae380034b976b7a5fdc68ca055571cfccc712ee676f98dc1516c4bff69481a013cd21acae32c2d87bf8c80ec66828ce85f96a0fe4dd4588398b10cf2c953d5923c9a48035bbca05e0fde4a519454ab034fc858d439367f1a8803848ddaeae17d62a6dd449282dee65acfb46f8f6110c51950737cdf439034002290a055ef2006f02678a3ed5a24e5b4b0f4eb1dee1956fe02b6c9afaeb3d51f2d56d9d482ea4b9e23ec8237e1ce730bfe29a5a6d7b5d07055bc054da99b21633e0233a8ba824d60ec86e999318e286c6c7378d70088a1ce01a5075c13a0949cbdf9fb3a93d1fb4b24ede496565cb402bb99a5e608db062b89ce7462bc630b644c99fd4bbd577dea754b38d49fb78c9422319b56bf8b469daf6d5a3e0152aa09fceac9487b4f3cd02009912ef7a900159d056442ec0b49ab6ef092ac3733e0822e50073d1b6f223480c2b6ee5a30cabebe307f1cbbda73a585230b9b3adae258a70bdab471938c98a534838e8a7a00397f05f2730c70a96a8d574d14830358f3bce65af5dd752c4fe013e0053c54d979b8bcac1933a6e8c883c73290710e62abd127292c15dee12f31a66f4c7d1f762edf85b911ff352b7c5a7c4afe2a82559091d2bc837e332dcdc30336641b4826beaf019b4869320867adc4f8baba4b8801ddf0b0e33"}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0}}], 0x600, 0x0, 0x0) 21:55:47 executing program 2: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4f0, 0x364, 0x59000000, 0x294, 0x0, 0x294, 0x428, 0x378, 0x378, 0x428, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x344, 0x364, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0xe2, 0x0, 0x64, 0x0, 0x0, 0x1, 0x402}}}, @common=@inet=@hashlimit2={{0x150}, {'gretap0\x00', {0x0, 0xde60, 0x0, 0x0, 0x0, 0x9, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x54c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4f0, 0x364, 0x59000000, 0x294, 0x0, 0x294, 0x428, 0x378, 0x378, 0x428, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x344, 0x364, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0xe2, 0x0, 0x64, 0x0, 0x0, 0x1, 0x402}}}, @common=@inet=@hashlimit2={{0x150}, {'gretap0\x00', {0x0, 0xde60, 0x0, 0x0, 0x0, 0x9, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x54c) 21:55:48 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x6, 0x7, 0x1, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000240)={r4}) r5 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x305e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x1e, 0x0, 0x0, 0x200000000000000) 21:55:48 executing program 5: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000340)={0x0, 0x1, 0xd8}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x30080, 0x0) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000780)={0xe8, "f9a0a341a2d9a259ff7ee28e1d4a8d71ca3756a994d6b5592d001dceeaeb9ef06ba5e8253a78301b4965b88dccaf18c3ad6ca11185edfd8b9cddcff138ddbef2d7bf40386de4188fd67b2c50007850f6f719993c086a2aa97dce2c99e1d26e1ae33606e41c3ba15637ee8b2a3a7465184e7b6f41b5b47b416865fec82e3aceab13cb4fd7ba06b2519e31bcc351c91be1e557207ff2cf55ee3e3d196566e0fafa547fbf20385e0127e614d8d315d32629d04e56c97766d8246e2a217ae906f247c91fa9910a4a3d971e30d96620767d3605f3b86de70d928bb717f3e4e3c91b94e6ecb61113cf118a"}) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2000400, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x6]}, 0x8, 0x100000) syz_clone(0x41804000, &(0x7f0000000400)="73e6b74c5080073bdd5a737a7fe0eeb834c2c33b9434bbf20d15a943aba00b1ab95c06c1802c522e323d04ee199be7a399a495102999e5794c19b6e0f58c1e1f8a108763cf9c6bfcb2e872d4b9c4a9e293063f10fbb466b6ab0e990575f3b4cfea0fcabf95d3e2d2964d8413749d2c7653a47db6a74f", 0x76, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="6f70763c51b66108c11376fd777a27996cbbe510f2abccb9fdfb87fef157a8ade6a4edf95b7f93429484daaead605cc24dd5ab5dd854f55bdd2372de7cf48d40f7ab2370f1723fd4af255d43510ab2344685298c755929d6ef364f8f0d1f7b7a233207e355af813988e1bc3c903ff0b3ffc652cd39e2c158123d6b0c36eed4844c76dc646ae19b7e455287231625cac519b111f9ffabacb36087d6e1431f6d7af0b18fa0340826fb766ec5c8b1953faeb381bf4de0b97148ec548ee22511a4c74394579d0a9e30adefb7be48b617fffe92940eed77c2ea1a7099c358ccdaf5cbb556cf76db") 21:55:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="41323fbccd370f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x56, 0x0, &(0x7f0000000040)={0x0, 0x0, [0x0, 0xd0e, 0x993]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:55:48 executing program 2: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4f0, 0x364, 0x59000000, 0x294, 0x0, 0x294, 0x428, 0x378, 0x378, 0x428, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x344, 0x364, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0xe2, 0x0, 0x64, 0x0, 0x0, 0x1, 0x402}}}, @common=@inet=@hashlimit2={{0x150}, {'gretap0\x00', {0x0, 0xde60, 0x0, 0x0, 0x0, 0x9, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x54c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4f0, 0x364, 0x59000000, 0x294, 0x0, 0x294, 0x428, 0x378, 0x378, 0x428, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x344, 0x364, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0xe2, 0x0, 0x64, 0x0, 0x0, 0x1, 0x402}}}, @common=@inet=@hashlimit2={{0x150}, {'gretap0\x00', {0x0, 0xde60, 0x0, 0x0, 0x0, 0x9, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x54c) 21:55:48 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a00}, 0x48) 21:55:49 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a00}, 0x48) 21:55:49 executing program 0: quotactl(0x0, &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 21:55:49 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a00}, 0x48) 21:55:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x10) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="2603e469aee22f5ca9b7c0c63a606fc369599250a567733dcaf1c2d59a74dc156296225687f6951224", 0x29}, {&(0x7f0000000380)}, {&(0x7f0000000500)="aded038890789c17396c07304a5e7e88c19ae8d4677277faabce9255014fa11b87c0f32425976396920a7c8ba74c779edd8716d19e4237f4e892825a897efa477bebfeb50fe432c2046b692879377f695cb60c1afcc2a6f7fae94984651aee093296caf98fe7d8ee3795d57dd4d356ff3309031b3987e43987da7083bb2b574ecabfcf41f459cc3fd540344dae2350ab9c", 0x91}, {0x0}, {&(0x7f0000000640)="39dcbed6a0bcf0c004b7076c0f1e8af570de29b1b66b03ea60833c851a9786d868a5c3d7164a8deb3869ce64dcdb536cfdbe48ef9026999a48cdabfb298d0d961335429736976bb80c4e163ca14b40111be013c67bd9ffe0df852bbd48c88749b1a4188ee6a7bb871fdaadcdb331a9cc02c6919c70d3e1bc7ae60bd655b8cf2b8e3966cf14a22050dbe879536db62a3b4fbc6409a91282ca71a47f379bd5ddb2cc280f2caab8d4ad1ede94504d456fd8cead0b2134fe2d572ba82a7fd0233fee177d0bcd086c62e2fab4c1a728ab61be03572882b7b7aa23dcf3dd3af046c3cc783ef98c9dda2316467b8e5f7d5220cf81278e", 0xf3}], 0x5}, 0x4000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) 21:55:49 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a00}, 0x48) 21:55:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="41323fbccd370f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x56, 0x0, &(0x7f0000000040)={0x0, 0x0, [0x0, 0xd0e, 0x993]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:55:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$FUSE(r2, &(0x7f0000000280), 0xfffffed3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000001840)={0x0, @l2tp={0x2, 0x0, @empty=0x3bb, 0x4}, @l2={0x1f, 0x6, @any, 0x992}, @nl=@unspec, 0x3d6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x100000000000000, 0x1000400004, 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"e6696328276c80ede1cbb140551427cb", r4, 0x0, {0x0, 0x7ff}, {}, 0x28e, [0x0, 0x0, 0x7ff, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x9, 0x1, 0x3]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, r4, 0x3, @unused=[0x0, 0x6, 0x70000000, 0xfff], @devid}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000300)={{r0}, r4, 0x0, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000c74a000000000000000800000000000025000000000000002000000000000000050000000000000008000000000000000700000000000000330488bb2cd04a75475322b9000000000000010400873300000084ee00000000000005000000000000002dae5162b602bf210339064b5d947db4b558f02db7adc79600902776eb11b5ffffffffffffffffdc7b72f94e41c5d840ebf84b811b7adf5c7d8cac8afcba966eafa83287285c"]}, @name="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"}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0}}], 0x600, 0x0, 0x0) 21:55:50 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000280)={0x5}) 21:55:50 executing program 5: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000340)={0x0, 0x1, 0xd8}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x30080, 0x0) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000780)={0xe8, "f9a0a341a2d9a259ff7ee28e1d4a8d71ca3756a994d6b5592d001dceeaeb9ef06ba5e8253a78301b4965b88dccaf18c3ad6ca11185edfd8b9cddcff138ddbef2d7bf40386de4188fd67b2c50007850f6f719993c086a2aa97dce2c99e1d26e1ae33606e41c3ba15637ee8b2a3a7465184e7b6f41b5b47b416865fec82e3aceab13cb4fd7ba06b2519e31bcc351c91be1e557207ff2cf55ee3e3d196566e0fafa547fbf20385e0127e614d8d315d32629d04e56c97766d8246e2a217ae906f247c91fa9910a4a3d971e30d96620767d3605f3b86de70d928bb717f3e4e3c91b94e6ecb61113cf118a"}) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2000400, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x6]}, 0x8, 0x100000) syz_clone(0x41804000, &(0x7f0000000400)="73e6b74c5080073bdd5a737a7fe0eeb834c2c33b9434bbf20d15a943aba00b1ab95c06c1802c522e323d04ee199be7a399a495102999e5794c19b6e0f58c1e1f8a108763cf9c6bfcb2e872d4b9c4a9e293063f10fbb466b6ab0e990575f3b4cfea0fcabf95d3e2d2964d8413749d2c7653a47db6a74f", 0x76, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="6f70763c51b66108c11376fd777a27996cbbe510f2abccb9fdfb87fef157a8ade6a4edf95b7f93429484daaead605cc24dd5ab5dd854f55bdd2372de7cf48d40f7ab2370f1723fd4af255d43510ab2344685298c755929d6ef364f8f0d1f7b7a233207e355af813988e1bc3c903ff0b3ffc652cd39e2c158123d6b0c36eed4844c76dc646ae19b7e455287231625cac519b111f9ffabacb36087d6e1431f6d7af0b18fa0340826fb766ec5c8b1953faeb381bf4de0b97148ec548ee22511a4c74394579d0a9e30adefb7be48b617fffe92940eed77c2ea1a7099c358ccdaf5cbb556cf76db") 21:55:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x64}}, 0x0) 21:55:50 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="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"]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r3, 0x2f, 0x40, 0x8, 0x8, 0x0, @private0, @empty, 0x125d28379dbb1352, 0x7, 0x3f, 0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000980)=[{{&(0x7f0000000680)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000700)="d2462f1b8f5e7facb09ba9411c6c28fc4c7a808f58899fe3ddd0e692c2becdac5be45c34b91f2b28f603d2281bd523c9c2933ea4340266914f85d911160baa2836c62b9577ab05b72cacb5cffeb70a2ec0269a5347297f21c36708be1fa6b3b5851ac2e9644f5a786edf22afb9edda8a1b849cd29df9696bbe9d5e0e71c85240435a73af4b44e5ad48603b53ec84d7dc8c96649bc7b7043066e88a3f0c4d586e573f53cf76aebd0fc1cd886473c5b9a09725093819b76037afe2ad", 0xbb}, {&(0x7f00000007c0)="2a80da8d4d6875025d796d53f206e151910d59793230cfe8b793cc3454892485733b91f6fa99cd38f6f53ffe014120c301f34e8fe957d0dd86b0c092512aec1899cdcc1dd18068fd219f26ea39d73917cf1e2b20dacb14c13e8bc0b7ca1e46949b1b857f61e7631dc8c20a647b2de1ef8afe347ecc57de11fc494267641840fddec7e2be9dceb495fe12b853f055668ac5adfef3968eb27128c80806b2e38b5053b6a8baede149d03b976d423fa6d9c1", 0xb0}, {&(0x7f0000000880)="de1c9bb775d6a0eabcf19a68ab6402542941b4c2894710b2561a3e50de9713876c0470c464b9007e99a232b266688969ab67754c3afd70b9cd925e55b238", 0x3e}], 0x3, &(0x7f0000000900)=[{0x54, 0x101, 0x4, "56102d92453e7192e484277031f0e16ae544926d6d45ecb2368f91289744f6d90f5e56b5ff2360a2135b2982ba67230cf0224bdf97bea13e0120e227764b95bb770983473bfc"}], 0x54}}], 0x1, 0x20040000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d80)={'ip6tnl0\x00', r2, 0x4, 0x1, 0x1, 0x0, 0x28, @private0, @mcast1, 0x8000, 0x80, 0x2, 0x31}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000a80)={'erspan0\x00', r2, 0x80, 0x8000, 0x80000000, 0x7, {{0x29, 0x4, 0x0, 0x3, 0xa4, 0x66, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xe2, [@rand_addr=0x64010100]}, @ssrr={0x89, 0x17, 0x81, [@multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010102, @rand_addr=0x64010100]}, @cipso={0x86, 0x6f, 0x3, [{0x1, 0x4, "29a9"}, {0x1, 0x8, "42f65e79e3b1"}, {0x7, 0xd, "6b8966a9d416a6eb5b0ab7"}, {0x2, 0x12, "81ade79707f473e483f2b15f11ed2a06"}, {0x0, 0xd, "a4a74c88ac6b70f2d940fe"}, {0x2, 0xb, "5f64ce198eca1ed7a3"}, {0x6, 0x8, "e670e28b41ca"}, {0x0, 0xd, '\x00'/11}, {0x1, 0x3, "ad"}, {0x1, 0xe, "0eccadafb97cc851d290bf84"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_newaddrlabel={0x24, 0x48, 0x200, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x8, 0x0, r5}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x8884) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0x10}, {0xfff2, 0xb}, {0xa}}, [{0x8, 0xb, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x8040010) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0xe4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xb4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa4, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x101}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x1f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2658163d}}]}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9c2f, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x20}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd31, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0xe4}}, 0x40) 21:55:50 executing program 3: r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @dev, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x0, 0x0, 0x0, @private}}}}}, 0x0) 21:55:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x10) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="2603e469aee22f5ca9b7c0c63a606fc369599250a567733dcaf1c2d59a74dc156296225687f6951224", 0x29}, {&(0x7f0000000380)}, {&(0x7f0000000500)="aded038890789c17396c07304a5e7e88c19ae8d4677277faabce9255014fa11b87c0f32425976396920a7c8ba74c779edd8716d19e4237f4e892825a897efa477bebfeb50fe432c2046b692879377f695cb60c1afcc2a6f7fae94984651aee093296caf98fe7d8ee3795d57dd4d356ff3309031b3987e43987da7083bb2b574ecabfcf41f459cc3fd540344dae2350ab9c", 0x91}, {0x0}, {&(0x7f0000000640)="39dcbed6a0bcf0c004b7076c0f1e8af570de29b1b66b03ea60833c851a9786d868a5c3d7164a8deb3869ce64dcdb536cfdbe48ef9026999a48cdabfb298d0d961335429736976bb80c4e163ca14b40111be013c67bd9ffe0df852bbd48c88749b1a4188ee6a7bb871fdaadcdb331a9cc02c6919c70d3e1bc7ae60bd655b8cf2b8e3966cf14a22050dbe879536db62a3b4fbc6409a91282ca71a47f379bd5ddb2cc280f2caab8d4ad1ede94504d456fd8cead0b2134fe2d572ba82a7fd0233fee177d0bcd086c62e2fab4c1a728ab61be03572882b7b7aa23dcf3dd3af046c3cc783ef98c9dda2316467b8e5f7d5220cf81278e", 0xf3}], 0x5}, 0x4000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) 21:55:50 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x10) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="2603e469aee22f5ca9b7c0c63a606fc369599250a567733dcaf1c2d59a74dc156296225687f6951224", 0x29}, {&(0x7f0000000380)}, {&(0x7f0000000500)="aded038890789c17396c07304a5e7e88c19ae8d4677277faabce9255014fa11b87c0f32425976396920a7c8ba74c779edd8716d19e4237f4e892825a897efa477bebfeb50fe432c2046b692879377f695cb60c1afcc2a6f7fae94984651aee093296caf98fe7d8ee3795d57dd4d356ff3309031b3987e43987da7083bb2b574ecabfcf41f459cc3fd540344dae2350ab9c", 0x91}, {0x0}, {&(0x7f0000000640)="39dcbed6a0bcf0c004b7076c0f1e8af570de29b1b66b03ea60833c851a9786d868a5c3d7164a8deb3869ce64dcdb536cfdbe48ef9026999a48cdabfb298d0d961335429736976bb80c4e163ca14b40111be013c67bd9ffe0df852bbd48c88749b1a4188ee6a7bb871fdaadcdb331a9cc02c6919c70d3e1bc7ae60bd655b8cf2b8e3966cf14a22050dbe879536db62a3b4fbc6409a91282ca71a47f379bd5ddb2cc280f2caab8d4ad1ede94504d456fd8cead0b2134fe2d572ba82a7fd0233fee177d0bcd086c62e2fab4c1a728ab61be03572882b7b7aa23dcf3dd3af046c3cc783ef98c9dda2316467b8e5f7d5220cf81278e", 0xf3}], 0x5}, 0x4000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) 21:55:50 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="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"]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r3, 0x2f, 0x40, 0x8, 0x8, 0x0, @private0, @empty, 0x125d28379dbb1352, 0x7, 0x3f, 0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000980)=[{{&(0x7f0000000680)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000700)="d2462f1b8f5e7facb09ba9411c6c28fc4c7a808f58899fe3ddd0e692c2becdac5be45c34b91f2b28f603d2281bd523c9c2933ea4340266914f85d911160baa2836c62b9577ab05b72cacb5cffeb70a2ec0269a5347297f21c36708be1fa6b3b5851ac2e9644f5a786edf22afb9edda8a1b849cd29df9696bbe9d5e0e71c85240435a73af4b44e5ad48603b53ec84d7dc8c96649bc7b7043066e88a3f0c4d586e573f53cf76aebd0fc1cd886473c5b9a09725093819b76037afe2ad", 0xbb}, {&(0x7f00000007c0)="2a80da8d4d6875025d796d53f206e151910d59793230cfe8b793cc3454892485733b91f6fa99cd38f6f53ffe014120c301f34e8fe957d0dd86b0c092512aec1899cdcc1dd18068fd219f26ea39d73917cf1e2b20dacb14c13e8bc0b7ca1e46949b1b857f61e7631dc8c20a647b2de1ef8afe347ecc57de11fc494267641840fddec7e2be9dceb495fe12b853f055668ac5adfef3968eb27128c80806b2e38b5053b6a8baede149d03b976d423fa6d9c1", 0xb0}, {&(0x7f0000000880)="de1c9bb775d6a0eabcf19a68ab6402542941b4c2894710b2561a3e50de9713876c0470c464b9007e99a232b266688969ab67754c3afd70b9cd925e55b238", 0x3e}], 0x3, &(0x7f0000000900)=[{0x54, 0x101, 0x4, "56102d92453e7192e484277031f0e16ae544926d6d45ecb2368f91289744f6d90f5e56b5ff2360a2135b2982ba67230cf0224bdf97bea13e0120e227764b95bb770983473bfc"}], 0x54}}], 0x1, 0x20040000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d80)={'ip6tnl0\x00', r2, 0x4, 0x1, 0x1, 0x0, 0x28, @private0, @mcast1, 0x8000, 0x80, 0x2, 0x31}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000a80)={'erspan0\x00', r2, 0x80, 0x8000, 0x80000000, 0x7, {{0x29, 0x4, 0x0, 0x3, 0xa4, 0x66, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xe2, [@rand_addr=0x64010100]}, @ssrr={0x89, 0x17, 0x81, [@multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010102, @rand_addr=0x64010100]}, @cipso={0x86, 0x6f, 0x3, [{0x1, 0x4, "29a9"}, {0x1, 0x8, "42f65e79e3b1"}, {0x7, 0xd, "6b8966a9d416a6eb5b0ab7"}, {0x2, 0x12, "81ade79707f473e483f2b15f11ed2a06"}, {0x0, 0xd, "a4a74c88ac6b70f2d940fe"}, {0x2, 0xb, "5f64ce198eca1ed7a3"}, {0x6, 0x8, "e670e28b41ca"}, {0x0, 0xd, '\x00'/11}, {0x1, 0x3, "ad"}, {0x1, 0xe, "0eccadafb97cc851d290bf84"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_newaddrlabel={0x24, 0x48, 0x200, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x8, 0x0, r5}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x8884) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0x10}, {0xfff2, 0xb}, {0xa}}, [{0x8, 0xb, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x8040010) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0xe4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xb4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa4, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x101}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x1f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2658163d}}]}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9c2f, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x20}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd31, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0xe4}}, 0x40) 21:55:50 executing program 3: r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @dev, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x0, 0x0, 0x0, @private}}}}}, 0x0) 21:55:50 executing program 3: r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @dev, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x0, 0x0, 0x0, @private}}}}}, 0x0) 21:55:51 executing program 3: r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @dev, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x0, 0x0, 0x0, @private}}}}}, 0x0) 21:55:51 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$FUSE(r2, &(0x7f0000000280), 0xfffffed3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000001840)={0x0, @l2tp={0x2, 0x0, @empty=0x3bb, 0x4}, @l2={0x1f, 0x6, @any, 0x992}, @nl=@unspec, 0x3d6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x100000000000000, 0x1000400004, 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"e6696328276c80ede1cbb140551427cb", r4, 0x0, {0x0, 0x7ff}, {}, 0x28e, [0x0, 0x0, 0x7ff, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x9, 0x1, 0x3]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, r4, 0x3, @unused=[0x0, 0x6, 0x70000000, 0xfff], @devid}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000300)={{r0}, r4, 0x0, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000c74a000000000000000800000000000025000000000000002000000000000000050000000000000008000000000000000700000000000000330488bb2cd04a75475322b9000000000000010400873300000084ee00000000000005000000000000002dae5162b602bf210339064b5d947db4b558f02db7adc79600902776eb11b5ffffffffffffffffdc7b72f94e41c5d840ebf84b811b7adf5c7d8cac8afcba966eafa83287285c"]}, @name="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"}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0}}], 0x600, 0x0, 0x0) 21:55:51 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="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"]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r3, 0x2f, 0x40, 0x8, 0x8, 0x0, @private0, @empty, 0x125d28379dbb1352, 0x7, 0x3f, 0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000980)=[{{&(0x7f0000000680)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000700)="d2462f1b8f5e7facb09ba9411c6c28fc4c7a808f58899fe3ddd0e692c2becdac5be45c34b91f2b28f603d2281bd523c9c2933ea4340266914f85d911160baa2836c62b9577ab05b72cacb5cffeb70a2ec0269a5347297f21c36708be1fa6b3b5851ac2e9644f5a786edf22afb9edda8a1b849cd29df9696bbe9d5e0e71c85240435a73af4b44e5ad48603b53ec84d7dc8c96649bc7b7043066e88a3f0c4d586e573f53cf76aebd0fc1cd886473c5b9a09725093819b76037afe2ad", 0xbb}, {&(0x7f00000007c0)="2a80da8d4d6875025d796d53f206e151910d59793230cfe8b793cc3454892485733b91f6fa99cd38f6f53ffe014120c301f34e8fe957d0dd86b0c092512aec1899cdcc1dd18068fd219f26ea39d73917cf1e2b20dacb14c13e8bc0b7ca1e46949b1b857f61e7631dc8c20a647b2de1ef8afe347ecc57de11fc494267641840fddec7e2be9dceb495fe12b853f055668ac5adfef3968eb27128c80806b2e38b5053b6a8baede149d03b976d423fa6d9c1", 0xb0}, {&(0x7f0000000880)="de1c9bb775d6a0eabcf19a68ab6402542941b4c2894710b2561a3e50de9713876c0470c464b9007e99a232b266688969ab67754c3afd70b9cd925e55b238", 0x3e}], 0x3, &(0x7f0000000900)=[{0x54, 0x101, 0x4, "56102d92453e7192e484277031f0e16ae544926d6d45ecb2368f91289744f6d90f5e56b5ff2360a2135b2982ba67230cf0224bdf97bea13e0120e227764b95bb770983473bfc"}], 0x54}}], 0x1, 0x20040000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d80)={'ip6tnl0\x00', r2, 0x4, 0x1, 0x1, 0x0, 0x28, @private0, @mcast1, 0x8000, 0x80, 0x2, 0x31}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000a80)={'erspan0\x00', r2, 0x80, 0x8000, 0x80000000, 0x7, {{0x29, 0x4, 0x0, 0x3, 0xa4, 0x66, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xe2, [@rand_addr=0x64010100]}, @ssrr={0x89, 0x17, 0x81, [@multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010102, @rand_addr=0x64010100]}, @cipso={0x86, 0x6f, 0x3, [{0x1, 0x4, "29a9"}, {0x1, 0x8, "42f65e79e3b1"}, {0x7, 0xd, "6b8966a9d416a6eb5b0ab7"}, {0x2, 0x12, "81ade79707f473e483f2b15f11ed2a06"}, {0x0, 0xd, "a4a74c88ac6b70f2d940fe"}, {0x2, 0xb, "5f64ce198eca1ed7a3"}, {0x6, 0x8, "e670e28b41ca"}, {0x0, 0xd, '\x00'/11}, {0x1, 0x3, "ad"}, {0x1, 0xe, "0eccadafb97cc851d290bf84"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_newaddrlabel={0x24, 0x48, 0x200, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x8, 0x0, r5}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x8884) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0x10}, {0xfff2, 0xb}, {0xa}}, [{0x8, 0xb, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x8040010) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0xe4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xb4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa4, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x101}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x1f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2658163d}}]}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9c2f, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x20}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd31, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0xe4}}, 0x40) 21:55:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x10) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="2603e469aee22f5ca9b7c0c63a606fc369599250a567733dcaf1c2d59a74dc156296225687f6951224", 0x29}, {&(0x7f0000000380)}, {&(0x7f0000000500)="aded038890789c17396c07304a5e7e88c19ae8d4677277faabce9255014fa11b87c0f32425976396920a7c8ba74c779edd8716d19e4237f4e892825a897efa477bebfeb50fe432c2046b692879377f695cb60c1afcc2a6f7fae94984651aee093296caf98fe7d8ee3795d57dd4d356ff3309031b3987e43987da7083bb2b574ecabfcf41f459cc3fd540344dae2350ab9c", 0x91}, {0x0}, {&(0x7f0000000640)="39dcbed6a0bcf0c004b7076c0f1e8af570de29b1b66b03ea60833c851a9786d868a5c3d7164a8deb3869ce64dcdb536cfdbe48ef9026999a48cdabfb298d0d961335429736976bb80c4e163ca14b40111be013c67bd9ffe0df852bbd48c88749b1a4188ee6a7bb871fdaadcdb331a9cc02c6919c70d3e1bc7ae60bd655b8cf2b8e3966cf14a22050dbe879536db62a3b4fbc6409a91282ca71a47f379bd5ddb2cc280f2caab8d4ad1ede94504d456fd8cead0b2134fe2d572ba82a7fd0233fee177d0bcd086c62e2fab4c1a728ab61be03572882b7b7aa23dcf3dd3af046c3cc783ef98c9dda2316467b8e5f7d5220cf81278e", 0xf3}], 0x5}, 0x4000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) 21:55:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="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"]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r3, 0x2f, 0x40, 0x8, 0x8, 0x0, @private0, @empty, 0x125d28379dbb1352, 0x7, 0x3f, 0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000980)=[{{&(0x7f0000000680)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000700)="d2462f1b8f5e7facb09ba9411c6c28fc4c7a808f58899fe3ddd0e692c2becdac5be45c34b91f2b28f603d2281bd523c9c2933ea4340266914f85d911160baa2836c62b9577ab05b72cacb5cffeb70a2ec0269a5347297f21c36708be1fa6b3b5851ac2e9644f5a786edf22afb9edda8a1b849cd29df9696bbe9d5e0e71c85240435a73af4b44e5ad48603b53ec84d7dc8c96649bc7b7043066e88a3f0c4d586e573f53cf76aebd0fc1cd886473c5b9a09725093819b76037afe2ad", 0xbb}, {&(0x7f00000007c0)="2a80da8d4d6875025d796d53f206e151910d59793230cfe8b793cc3454892485733b91f6fa99cd38f6f53ffe014120c301f34e8fe957d0dd86b0c092512aec1899cdcc1dd18068fd219f26ea39d73917cf1e2b20dacb14c13e8bc0b7ca1e46949b1b857f61e7631dc8c20a647b2de1ef8afe347ecc57de11fc494267641840fddec7e2be9dceb495fe12b853f055668ac5adfef3968eb27128c80806b2e38b5053b6a8baede149d03b976d423fa6d9c1", 0xb0}, {&(0x7f0000000880)="de1c9bb775d6a0eabcf19a68ab6402542941b4c2894710b2561a3e50de9713876c0470c464b9007e99a232b266688969ab67754c3afd70b9cd925e55b238", 0x3e}], 0x3, &(0x7f0000000900)=[{0x54, 0x101, 0x4, "56102d92453e7192e484277031f0e16ae544926d6d45ecb2368f91289744f6d90f5e56b5ff2360a2135b2982ba67230cf0224bdf97bea13e0120e227764b95bb770983473bfc"}], 0x54}}], 0x1, 0x20040000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d80)={'ip6tnl0\x00', r2, 0x4, 0x1, 0x1, 0x0, 0x28, @private0, @mcast1, 0x8000, 0x80, 0x2, 0x31}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000a80)={'erspan0\x00', r2, 0x80, 0x8000, 0x80000000, 0x7, {{0x29, 0x4, 0x0, 0x3, 0xa4, 0x66, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xe2, [@rand_addr=0x64010100]}, @ssrr={0x89, 0x17, 0x81, [@multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010102, @rand_addr=0x64010100]}, @cipso={0x86, 0x6f, 0x3, [{0x1, 0x4, "29a9"}, {0x1, 0x8, "42f65e79e3b1"}, {0x7, 0xd, "6b8966a9d416a6eb5b0ab7"}, {0x2, 0x12, "81ade79707f473e483f2b15f11ed2a06"}, {0x0, 0xd, "a4a74c88ac6b70f2d940fe"}, {0x2, 0xb, "5f64ce198eca1ed7a3"}, {0x6, 0x8, "e670e28b41ca"}, {0x0, 0xd, '\x00'/11}, {0x1, 0x3, "ad"}, {0x1, 0xe, "0eccadafb97cc851d290bf84"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_newaddrlabel={0x24, 0x48, 0x200, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x8, 0x0, r5}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x8884) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0x10}, {0xfff2, 0xb}, {0xa}}, [{0x8, 0xb, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x8040010) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0xe4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xb4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa4, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x101}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x1f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2658163d}}]}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9c2f, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x20}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd31, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0xe4}}, 0x40) 21:55:52 executing program 5: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000340)={0x0, 0x1, 0xd8}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x30080, 0x0) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000780)={0xe8, "f9a0a341a2d9a259ff7ee28e1d4a8d71ca3756a994d6b5592d001dceeaeb9ef06ba5e8253a78301b4965b88dccaf18c3ad6ca11185edfd8b9cddcff138ddbef2d7bf40386de4188fd67b2c50007850f6f719993c086a2aa97dce2c99e1d26e1ae33606e41c3ba15637ee8b2a3a7465184e7b6f41b5b47b416865fec82e3aceab13cb4fd7ba06b2519e31bcc351c91be1e557207ff2cf55ee3e3d196566e0fafa547fbf20385e0127e614d8d315d32629d04e56c97766d8246e2a217ae906f247c91fa9910a4a3d971e30d96620767d3605f3b86de70d928bb717f3e4e3c91b94e6ecb61113cf118a"}) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2000400, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x6]}, 0x8, 0x100000) syz_clone(0x41804000, &(0x7f0000000400)="73e6b74c5080073bdd5a737a7fe0eeb834c2c33b9434bbf20d15a943aba00b1ab95c06c1802c522e323d04ee199be7a399a495102999e5794c19b6e0f58c1e1f8a108763cf9c6bfcb2e872d4b9c4a9e293063f10fbb466b6ab0e990575f3b4cfea0fcabf95d3e2d2964d8413749d2c7653a47db6a74f", 0x76, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="6f70763c51b66108c11376fd777a27996cbbe510f2abccb9fdfb87fef157a8ade6a4edf95b7f93429484daaead605cc24dd5ab5dd854f55bdd2372de7cf48d40f7ab2370f1723fd4af255d43510ab2344685298c755929d6ef364f8f0d1f7b7a233207e355af813988e1bc3c903ff0b3ffc652cd39e2c158123d6b0c36eed4844c76dc646ae19b7e455287231625cac519b111f9ffabacb36087d6e1431f6d7af0b18fa0340826fb766ec5c8b1953faeb381bf4de0b97148ec548ee22511a4c74394579d0a9e30adefb7be48b617fffe92940eed77c2ea1a7099c358ccdaf5cbb556cf76db") 21:55:52 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x10) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="2603e469aee22f5ca9b7c0c63a606fc369599250a567733dcaf1c2d59a74dc156296225687f6951224", 0x29}, {&(0x7f0000000380)}, {&(0x7f0000000500)="aded038890789c17396c07304a5e7e88c19ae8d4677277faabce9255014fa11b87c0f32425976396920a7c8ba74c779edd8716d19e4237f4e892825a897efa477bebfeb50fe432c2046b692879377f695cb60c1afcc2a6f7fae94984651aee093296caf98fe7d8ee3795d57dd4d356ff3309031b3987e43987da7083bb2b574ecabfcf41f459cc3fd540344dae2350ab9c", 0x91}, {0x0}, {&(0x7f0000000640)="39dcbed6a0bcf0c004b7076c0f1e8af570de29b1b66b03ea60833c851a9786d868a5c3d7164a8deb3869ce64dcdb536cfdbe48ef9026999a48cdabfb298d0d961335429736976bb80c4e163ca14b40111be013c67bd9ffe0df852bbd48c88749b1a4188ee6a7bb871fdaadcdb331a9cc02c6919c70d3e1bc7ae60bd655b8cf2b8e3966cf14a22050dbe879536db62a3b4fbc6409a91282ca71a47f379bd5ddb2cc280f2caab8d4ad1ede94504d456fd8cead0b2134fe2d572ba82a7fd0233fee177d0bcd086c62e2fab4c1a728ab61be03572882b7b7aa23dcf3dd3af046c3cc783ef98c9dda2316467b8e5f7d5220cf81278e", 0xf3}], 0x5}, 0x4000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) 21:55:52 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="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"]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r3, 0x2f, 0x40, 0x8, 0x8, 0x0, @private0, @empty, 0x125d28379dbb1352, 0x7, 0x3f, 0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000980)=[{{&(0x7f0000000680)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000700)="d2462f1b8f5e7facb09ba9411c6c28fc4c7a808f58899fe3ddd0e692c2becdac5be45c34b91f2b28f603d2281bd523c9c2933ea4340266914f85d911160baa2836c62b9577ab05b72cacb5cffeb70a2ec0269a5347297f21c36708be1fa6b3b5851ac2e9644f5a786edf22afb9edda8a1b849cd29df9696bbe9d5e0e71c85240435a73af4b44e5ad48603b53ec84d7dc8c96649bc7b7043066e88a3f0c4d586e573f53cf76aebd0fc1cd886473c5b9a09725093819b76037afe2ad", 0xbb}, {&(0x7f00000007c0)="2a80da8d4d6875025d796d53f206e151910d59793230cfe8b793cc3454892485733b91f6fa99cd38f6f53ffe014120c301f34e8fe957d0dd86b0c092512aec1899cdcc1dd18068fd219f26ea39d73917cf1e2b20dacb14c13e8bc0b7ca1e46949b1b857f61e7631dc8c20a647b2de1ef8afe347ecc57de11fc494267641840fddec7e2be9dceb495fe12b853f055668ac5adfef3968eb27128c80806b2e38b5053b6a8baede149d03b976d423fa6d9c1", 0xb0}, {&(0x7f0000000880)="de1c9bb775d6a0eabcf19a68ab6402542941b4c2894710b2561a3e50de9713876c0470c464b9007e99a232b266688969ab67754c3afd70b9cd925e55b238", 0x3e}], 0x3, &(0x7f0000000900)=[{0x54, 0x101, 0x4, "56102d92453e7192e484277031f0e16ae544926d6d45ecb2368f91289744f6d90f5e56b5ff2360a2135b2982ba67230cf0224bdf97bea13e0120e227764b95bb770983473bfc"}], 0x54}}], 0x1, 0x20040000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d80)={'ip6tnl0\x00', r2, 0x4, 0x1, 0x1, 0x0, 0x28, @private0, @mcast1, 0x8000, 0x80, 0x2, 0x31}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000a80)={'erspan0\x00', r2, 0x80, 0x8000, 0x80000000, 0x7, {{0x29, 0x4, 0x0, 0x3, 0xa4, 0x66, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xe2, [@rand_addr=0x64010100]}, @ssrr={0x89, 0x17, 0x81, [@multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010102, @rand_addr=0x64010100]}, @cipso={0x86, 0x6f, 0x3, [{0x1, 0x4, "29a9"}, {0x1, 0x8, "42f65e79e3b1"}, {0x7, 0xd, "6b8966a9d416a6eb5b0ab7"}, {0x2, 0x12, "81ade79707f473e483f2b15f11ed2a06"}, {0x0, 0xd, "a4a74c88ac6b70f2d940fe"}, {0x2, 0xb, "5f64ce198eca1ed7a3"}, {0x6, 0x8, "e670e28b41ca"}, {0x0, 0xd, '\x00'/11}, {0x1, 0x3, "ad"}, {0x1, 0xe, "0eccadafb97cc851d290bf84"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_newaddrlabel={0x24, 0x48, 0x200, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x8, 0x0, r5}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x8884) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0x10}, {0xfff2, 0xb}, {0xa}}, [{0x8, 0xb, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x8040010) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0xe4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xb4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa4, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x101}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x1f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2658163d}}]}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9c2f, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x20}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd31, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0xe4}}, 0x40) 21:55:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="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"]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r3, 0x2f, 0x40, 0x8, 0x8, 0x0, @private0, @empty, 0x125d28379dbb1352, 0x7, 0x3f, 0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000980)=[{{&(0x7f0000000680)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000700)="d2462f1b8f5e7facb09ba9411c6c28fc4c7a808f58899fe3ddd0e692c2becdac5be45c34b91f2b28f603d2281bd523c9c2933ea4340266914f85d911160baa2836c62b9577ab05b72cacb5cffeb70a2ec0269a5347297f21c36708be1fa6b3b5851ac2e9644f5a786edf22afb9edda8a1b849cd29df9696bbe9d5e0e71c85240435a73af4b44e5ad48603b53ec84d7dc8c96649bc7b7043066e88a3f0c4d586e573f53cf76aebd0fc1cd886473c5b9a09725093819b76037afe2ad", 0xbb}, {&(0x7f00000007c0)="2a80da8d4d6875025d796d53f206e151910d59793230cfe8b793cc3454892485733b91f6fa99cd38f6f53ffe014120c301f34e8fe957d0dd86b0c092512aec1899cdcc1dd18068fd219f26ea39d73917cf1e2b20dacb14c13e8bc0b7ca1e46949b1b857f61e7631dc8c20a647b2de1ef8afe347ecc57de11fc494267641840fddec7e2be9dceb495fe12b853f055668ac5adfef3968eb27128c80806b2e38b5053b6a8baede149d03b976d423fa6d9c1", 0xb0}, {&(0x7f0000000880)="de1c9bb775d6a0eabcf19a68ab6402542941b4c2894710b2561a3e50de9713876c0470c464b9007e99a232b266688969ab67754c3afd70b9cd925e55b238", 0x3e}], 0x3, &(0x7f0000000900)=[{0x54, 0x101, 0x4, "56102d92453e7192e484277031f0e16ae544926d6d45ecb2368f91289744f6d90f5e56b5ff2360a2135b2982ba67230cf0224bdf97bea13e0120e227764b95bb770983473bfc"}], 0x54}}], 0x1, 0x20040000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d80)={'ip6tnl0\x00', r2, 0x4, 0x1, 0x1, 0x0, 0x28, @private0, @mcast1, 0x8000, 0x80, 0x2, 0x31}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000a80)={'erspan0\x00', r2, 0x80, 0x8000, 0x80000000, 0x7, {{0x29, 0x4, 0x0, 0x3, 0xa4, 0x66, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xe2, [@rand_addr=0x64010100]}, @ssrr={0x89, 0x17, 0x81, [@multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010102, @rand_addr=0x64010100]}, @cipso={0x86, 0x6f, 0x3, [{0x1, 0x4, "29a9"}, {0x1, 0x8, "42f65e79e3b1"}, {0x7, 0xd, "6b8966a9d416a6eb5b0ab7"}, {0x2, 0x12, "81ade79707f473e483f2b15f11ed2a06"}, {0x0, 0xd, "a4a74c88ac6b70f2d940fe"}, {0x2, 0xb, "5f64ce198eca1ed7a3"}, {0x6, 0x8, "e670e28b41ca"}, {0x0, 0xd, '\x00'/11}, {0x1, 0x3, "ad"}, {0x1, 0xe, "0eccadafb97cc851d290bf84"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_newaddrlabel={0x24, 0x48, 0x200, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x8, 0x0, r5}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x8884) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0x10}, {0xfff2, 0xb}, {0xa}}, [{0x8, 0xb, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x8040010) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0xe4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xb4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa4, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x101}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x1f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2658163d}}]}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9c2f, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x20}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd31, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0xe4}}, 0x40) 21:55:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x10) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="2603e469aee22f5ca9b7c0c63a606fc369599250a567733dcaf1c2d59a74dc156296225687f6951224", 0x29}, {&(0x7f0000000380)}, {&(0x7f0000000500)="aded038890789c17396c07304a5e7e88c19ae8d4677277faabce9255014fa11b87c0f32425976396920a7c8ba74c779edd8716d19e4237f4e892825a897efa477bebfeb50fe432c2046b692879377f695cb60c1afcc2a6f7fae94984651aee093296caf98fe7d8ee3795d57dd4d356ff3309031b3987e43987da7083bb2b574ecabfcf41f459cc3fd540344dae2350ab9c", 0x91}, {0x0}, {&(0x7f0000000640)="39dcbed6a0bcf0c004b7076c0f1e8af570de29b1b66b03ea60833c851a9786d868a5c3d7164a8deb3869ce64dcdb536cfdbe48ef9026999a48cdabfb298d0d961335429736976bb80c4e163ca14b40111be013c67bd9ffe0df852bbd48c88749b1a4188ee6a7bb871fdaadcdb331a9cc02c6919c70d3e1bc7ae60bd655b8cf2b8e3966cf14a22050dbe879536db62a3b4fbc6409a91282ca71a47f379bd5ddb2cc280f2caab8d4ad1ede94504d456fd8cead0b2134fe2d572ba82a7fd0233fee177d0bcd086c62e2fab4c1a728ab61be03572882b7b7aa23dcf3dd3af046c3cc783ef98c9dda2316467b8e5f7d5220cf81278e", 0xf3}], 0x5}, 0x4000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) 21:55:53 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="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"]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r3, 0x2f, 0x40, 0x8, 0x8, 0x0, @private0, @empty, 0x125d28379dbb1352, 0x7, 0x3f, 0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000980)=[{{&(0x7f0000000680)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000700)="d2462f1b8f5e7facb09ba9411c6c28fc4c7a808f58899fe3ddd0e692c2becdac5be45c34b91f2b28f603d2281bd523c9c2933ea4340266914f85d911160baa2836c62b9577ab05b72cacb5cffeb70a2ec0269a5347297f21c36708be1fa6b3b5851ac2e9644f5a786edf22afb9edda8a1b849cd29df9696bbe9d5e0e71c85240435a73af4b44e5ad48603b53ec84d7dc8c96649bc7b7043066e88a3f0c4d586e573f53cf76aebd0fc1cd886473c5b9a09725093819b76037afe2ad", 0xbb}, {&(0x7f00000007c0)="2a80da8d4d6875025d796d53f206e151910d59793230cfe8b793cc3454892485733b91f6fa99cd38f6f53ffe014120c301f34e8fe957d0dd86b0c092512aec1899cdcc1dd18068fd219f26ea39d73917cf1e2b20dacb14c13e8bc0b7ca1e46949b1b857f61e7631dc8c20a647b2de1ef8afe347ecc57de11fc494267641840fddec7e2be9dceb495fe12b853f055668ac5adfef3968eb27128c80806b2e38b5053b6a8baede149d03b976d423fa6d9c1", 0xb0}, {&(0x7f0000000880)="de1c9bb775d6a0eabcf19a68ab6402542941b4c2894710b2561a3e50de9713876c0470c464b9007e99a232b266688969ab67754c3afd70b9cd925e55b238", 0x3e}], 0x3, &(0x7f0000000900)=[{0x54, 0x101, 0x4, "56102d92453e7192e484277031f0e16ae544926d6d45ecb2368f91289744f6d90f5e56b5ff2360a2135b2982ba67230cf0224bdf97bea13e0120e227764b95bb770983473bfc"}], 0x54}}], 0x1, 0x20040000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d80)={'ip6tnl0\x00', r2, 0x4, 0x1, 0x1, 0x0, 0x28, @private0, @mcast1, 0x8000, 0x80, 0x2, 0x31}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000a80)={'erspan0\x00', r2, 0x80, 0x8000, 0x80000000, 0x7, {{0x29, 0x4, 0x0, 0x3, 0xa4, 0x66, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @broadcast, {[@lsrr={0x83, 0x7, 0xe2, [@rand_addr=0x64010100]}, @ssrr={0x89, 0x17, 0x81, [@multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010102, @rand_addr=0x64010100]}, @cipso={0x86, 0x6f, 0x3, [{0x1, 0x4, "29a9"}, {0x1, 0x8, "42f65e79e3b1"}, {0x7, 0xd, "6b8966a9d416a6eb5b0ab7"}, {0x2, 0x12, "81ade79707f473e483f2b15f11ed2a06"}, {0x0, 0xd, "a4a74c88ac6b70f2d940fe"}, {0x2, 0xb, "5f64ce198eca1ed7a3"}, {0x6, 0x8, "e670e28b41ca"}, {0x0, 0xd, '\x00'/11}, {0x1, 0x3, "ad"}, {0x1, 0xe, "0eccadafb97cc851d290bf84"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_newaddrlabel={0x24, 0x48, 0x200, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x8, 0x0, r5}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x8884) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0x10}, {0xfff2, 0xb}, {0xa}}, [{0x8, 0xb, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x8040010) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0xe4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xb4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa4, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x101}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x1f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2658163d}}]}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9c2f, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x20}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd31, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0xe4}}, 0x40) 21:55:53 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x10) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="2603e469aee22f5ca9b7c0c63a606fc369599250a567733dcaf1c2d59a74dc156296225687f6951224", 0x29}, {&(0x7f0000000380)}, {&(0x7f0000000500)="aded038890789c17396c07304a5e7e88c19ae8d4677277faabce9255014fa11b87c0f32425976396920a7c8ba74c779edd8716d19e4237f4e892825a897efa477bebfeb50fe432c2046b692879377f695cb60c1afcc2a6f7fae94984651aee093296caf98fe7d8ee3795d57dd4d356ff3309031b3987e43987da7083bb2b574ecabfcf41f459cc3fd540344dae2350ab9c", 0x91}, {0x0}, {&(0x7f0000000640)="39dcbed6a0bcf0c004b7076c0f1e8af570de29b1b66b03ea60833c851a9786d868a5c3d7164a8deb3869ce64dcdb536cfdbe48ef9026999a48cdabfb298d0d961335429736976bb80c4e163ca14b40111be013c67bd9ffe0df852bbd48c88749b1a4188ee6a7bb871fdaadcdb331a9cc02c6919c70d3e1bc7ae60bd655b8cf2b8e3966cf14a22050dbe879536db62a3b4fbc6409a91282ca71a47f379bd5ddb2cc280f2caab8d4ad1ede94504d456fd8cead0b2134fe2d572ba82a7fd0233fee177d0bcd086c62e2fab4c1a728ab61be03572882b7b7aa23dcf3dd3af046c3cc783ef98c9dda2316467b8e5f7d5220cf81278e", 0xf3}], 0x5}, 0x4000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) 21:55:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x10) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="2603e469aee22f5ca9b7c0c63a606fc369599250a567733dcaf1c2d59a74dc156296225687f6951224", 0x29}, {&(0x7f0000000380)}, {&(0x7f0000000500)="aded038890789c17396c07304a5e7e88c19ae8d4677277faabce9255014fa11b87c0f32425976396920a7c8ba74c779edd8716d19e4237f4e892825a897efa477bebfeb50fe432c2046b692879377f695cb60c1afcc2a6f7fae94984651aee093296caf98fe7d8ee3795d57dd4d356ff3309031b3987e43987da7083bb2b574ecabfcf41f459cc3fd540344dae2350ab9c", 0x91}, {0x0}, {&(0x7f0000000640)="39dcbed6a0bcf0c004b7076c0f1e8af570de29b1b66b03ea60833c851a9786d868a5c3d7164a8deb3869ce64dcdb536cfdbe48ef9026999a48cdabfb298d0d961335429736976bb80c4e163ca14b40111be013c67bd9ffe0df852bbd48c88749b1a4188ee6a7bb871fdaadcdb331a9cc02c6919c70d3e1bc7ae60bd655b8cf2b8e3966cf14a22050dbe879536db62a3b4fbc6409a91282ca71a47f379bd5ddb2cc280f2caab8d4ad1ede94504d456fd8cead0b2134fe2d572ba82a7fd0233fee177d0bcd086c62e2fab4c1a728ab61be03572882b7b7aa23dcf3dd3af046c3cc783ef98c9dda2316467b8e5f7d5220cf81278e", 0xf3}], 0x5}, 0x4000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) 21:55:54 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x10) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="2603e469aee22f5ca9b7c0c63a606fc369599250a567733dcaf1c2d59a74dc156296225687f6951224", 0x29}, {&(0x7f0000000380)}, {&(0x7f0000000500)="aded038890789c17396c07304a5e7e88c19ae8d4677277faabce9255014fa11b87c0f32425976396920a7c8ba74c779edd8716d19e4237f4e892825a897efa477bebfeb50fe432c2046b692879377f695cb60c1afcc2a6f7fae94984651aee093296caf98fe7d8ee3795d57dd4d356ff3309031b3987e43987da7083bb2b574ecabfcf41f459cc3fd540344dae2350ab9c", 0x91}, {0x0}, {&(0x7f0000000640)="39dcbed6a0bcf0c004b7076c0f1e8af570de29b1b66b03ea60833c851a9786d868a5c3d7164a8deb3869ce64dcdb536cfdbe48ef9026999a48cdabfb298d0d961335429736976bb80c4e163ca14b40111be013c67bd9ffe0df852bbd48c88749b1a4188ee6a7bb871fdaadcdb331a9cc02c6919c70d3e1bc7ae60bd655b8cf2b8e3966cf14a22050dbe879536db62a3b4fbc6409a91282ca71a47f379bd5ddb2cc280f2caab8d4ad1ede94504d456fd8cead0b2134fe2d572ba82a7fd0233fee177d0bcd086c62e2fab4c1a728ab61be03572882b7b7aa23dcf3dd3af046c3cc783ef98c9dda2316467b8e5f7d5220cf81278e", 0xf3}], 0x5}, 0x4000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) 21:55:54 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x10) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="2603e469aee22f5ca9b7c0c63a606fc369599250a567733dcaf1c2d59a74dc156296225687f6951224", 0x29}, {&(0x7f0000000380)}, {&(0x7f0000000500)="aded038890789c17396c07304a5e7e88c19ae8d4677277faabce9255014fa11b87c0f32425976396920a7c8ba74c779edd8716d19e4237f4e892825a897efa477bebfeb50fe432c2046b692879377f695cb60c1afcc2a6f7fae94984651aee093296caf98fe7d8ee3795d57dd4d356ff3309031b3987e43987da7083bb2b574ecabfcf41f459cc3fd540344dae2350ab9c", 0x91}, {0x0}, {&(0x7f0000000640)="39dcbed6a0bcf0c004b7076c0f1e8af570de29b1b66b03ea60833c851a9786d868a5c3d7164a8deb3869ce64dcdb536cfdbe48ef9026999a48cdabfb298d0d961335429736976bb80c4e163ca14b40111be013c67bd9ffe0df852bbd48c88749b1a4188ee6a7bb871fdaadcdb331a9cc02c6919c70d3e1bc7ae60bd655b8cf2b8e3966cf14a22050dbe879536db62a3b4fbc6409a91282ca71a47f379bd5ddb2cc280f2caab8d4ad1ede94504d456fd8cead0b2134fe2d572ba82a7fd0233fee177d0bcd086c62e2fab4c1a728ab61be03572882b7b7aa23dcf3dd3af046c3cc783ef98c9dda2316467b8e5f7d5220cf81278e", 0xf3}], 0x5}, 0x4000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) 21:55:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x10) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="2603e469aee22f5ca9b7c0c63a606fc369599250a567733dcaf1c2d59a74dc156296225687f6951224", 0x29}, {&(0x7f0000000380)}, {&(0x7f0000000500)="aded038890789c17396c07304a5e7e88c19ae8d4677277faabce9255014fa11b87c0f32425976396920a7c8ba74c779edd8716d19e4237f4e892825a897efa477bebfeb50fe432c2046b692879377f695cb60c1afcc2a6f7fae94984651aee093296caf98fe7d8ee3795d57dd4d356ff3309031b3987e43987da7083bb2b574ecabfcf41f459cc3fd540344dae2350ab9c", 0x91}, {0x0}, {&(0x7f0000000640)="39dcbed6a0bcf0c004b7076c0f1e8af570de29b1b66b03ea60833c851a9786d868a5c3d7164a8deb3869ce64dcdb536cfdbe48ef9026999a48cdabfb298d0d961335429736976bb80c4e163ca14b40111be013c67bd9ffe0df852bbd48c88749b1a4188ee6a7bb871fdaadcdb331a9cc02c6919c70d3e1bc7ae60bd655b8cf2b8e3966cf14a22050dbe879536db62a3b4fbc6409a91282ca71a47f379bd5ddb2cc280f2caab8d4ad1ede94504d456fd8cead0b2134fe2d572ba82a7fd0233fee177d0bcd086c62e2fab4c1a728ab61be03572882b7b7aa23dcf3dd3af046c3cc783ef98c9dda2316467b8e5f7d5220cf81278e", 0xf3}], 0x5}, 0x4000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) 21:55:55 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x10) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="2603e469aee22f5ca9b7c0c63a606fc369599250a567733dcaf1c2d59a74dc156296225687f6951224", 0x29}, {&(0x7f0000000380)}, {&(0x7f0000000500)="aded038890789c17396c07304a5e7e88c19ae8d4677277faabce9255014fa11b87c0f32425976396920a7c8ba74c779edd8716d19e4237f4e892825a897efa477bebfeb50fe432c2046b692879377f695cb60c1afcc2a6f7fae94984651aee093296caf98fe7d8ee3795d57dd4d356ff3309031b3987e43987da7083bb2b574ecabfcf41f459cc3fd540344dae2350ab9c", 0x91}, {0x0}, {&(0x7f0000000640)="39dcbed6a0bcf0c004b7076c0f1e8af570de29b1b66b03ea60833c851a9786d868a5c3d7164a8deb3869ce64dcdb536cfdbe48ef9026999a48cdabfb298d0d961335429736976bb80c4e163ca14b40111be013c67bd9ffe0df852bbd48c88749b1a4188ee6a7bb871fdaadcdb331a9cc02c6919c70d3e1bc7ae60bd655b8cf2b8e3966cf14a22050dbe879536db62a3b4fbc6409a91282ca71a47f379bd5ddb2cc280f2caab8d4ad1ede94504d456fd8cead0b2134fe2d572ba82a7fd0233fee177d0bcd086c62e2fab4c1a728ab61be03572882b7b7aa23dcf3dd3af046c3cc783ef98c9dda2316467b8e5f7d5220cf81278e", 0xf3}], 0x5}, 0x4000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) 21:55:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x10) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="2603e469aee22f5ca9b7c0c63a606fc369599250a567733dcaf1c2d59a74dc156296225687f6951224", 0x29}, {&(0x7f0000000380)}, {&(0x7f0000000500)="aded038890789c17396c07304a5e7e88c19ae8d4677277faabce9255014fa11b87c0f32425976396920a7c8ba74c779edd8716d19e4237f4e892825a897efa477bebfeb50fe432c2046b692879377f695cb60c1afcc2a6f7fae94984651aee093296caf98fe7d8ee3795d57dd4d356ff3309031b3987e43987da7083bb2b574ecabfcf41f459cc3fd540344dae2350ab9c", 0x91}, {0x0}, {&(0x7f0000000640)="39dcbed6a0bcf0c004b7076c0f1e8af570de29b1b66b03ea60833c851a9786d868a5c3d7164a8deb3869ce64dcdb536cfdbe48ef9026999a48cdabfb298d0d961335429736976bb80c4e163ca14b40111be013c67bd9ffe0df852bbd48c88749b1a4188ee6a7bb871fdaadcdb331a9cc02c6919c70d3e1bc7ae60bd655b8cf2b8e3966cf14a22050dbe879536db62a3b4fbc6409a91282ca71a47f379bd5ddb2cc280f2caab8d4ad1ede94504d456fd8cead0b2134fe2d572ba82a7fd0233fee177d0bcd086c62e2fab4c1a728ab61be03572882b7b7aa23dcf3dd3af046c3cc783ef98c9dda2316467b8e5f7d5220cf81278e", 0xf3}], 0x5}, 0x4000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) 21:55:56 executing program 5: r0 = gettid() process_vm_readv(r0, &(0x7f0000002940)=[{0x0}, {&(0x7f0000002600)=""/112, 0x70}], 0x2, &(0x7f0000004ec0)=[{&(0x7f0000002980)=""/4096, 0x1000}], 0x1, 0x0) 21:55:56 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "83fe865da757f1da74c793f75b95c2b194fa1589458e60c500503c2a87cc715b80ac62ea94b074ca332285a46683625db4d98626624fe3de0d260344397ef03a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000180)=@keyring) 21:55:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x100000) 21:55:57 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x10) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="2603e469aee22f5ca9b7c0c63a606fc369599250a567733dcaf1c2d59a74dc156296225687f6951224", 0x29}, {&(0x7f0000000380)}, {&(0x7f0000000500)="aded038890789c17396c07304a5e7e88c19ae8d4677277faabce9255014fa11b87c0f32425976396920a7c8ba74c779edd8716d19e4237f4e892825a897efa477bebfeb50fe432c2046b692879377f695cb60c1afcc2a6f7fae94984651aee093296caf98fe7d8ee3795d57dd4d356ff3309031b3987e43987da7083bb2b574ecabfcf41f459cc3fd540344dae2350ab9c", 0x91}, {0x0}, {&(0x7f0000000640)="39dcbed6a0bcf0c004b7076c0f1e8af570de29b1b66b03ea60833c851a9786d868a5c3d7164a8deb3869ce64dcdb536cfdbe48ef9026999a48cdabfb298d0d961335429736976bb80c4e163ca14b40111be013c67bd9ffe0df852bbd48c88749b1a4188ee6a7bb871fdaadcdb331a9cc02c6919c70d3e1bc7ae60bd655b8cf2b8e3966cf14a22050dbe879536db62a3b4fbc6409a91282ca71a47f379bd5ddb2cc280f2caab8d4ad1ede94504d456fd8cead0b2134fe2d572ba82a7fd0233fee177d0bcd086c62e2fab4c1a728ab61be03572882b7b7aa23dcf3dd3af046c3cc783ef98c9dda2316467b8e5f7d5220cf81278e", 0xf3}], 0x5}, 0x4000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) 21:55:57 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x10) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="2603e469aee22f5ca9b7c0c63a606fc369599250a567733dcaf1c2d59a74dc156296225687f6951224", 0x29}, {&(0x7f0000000380)}, {&(0x7f0000000500)="aded038890789c17396c07304a5e7e88c19ae8d4677277faabce9255014fa11b87c0f32425976396920a7c8ba74c779edd8716d19e4237f4e892825a897efa477bebfeb50fe432c2046b692879377f695cb60c1afcc2a6f7fae94984651aee093296caf98fe7d8ee3795d57dd4d356ff3309031b3987e43987da7083bb2b574ecabfcf41f459cc3fd540344dae2350ab9c", 0x91}, {0x0}, {&(0x7f0000000640)="39dcbed6a0bcf0c004b7076c0f1e8af570de29b1b66b03ea60833c851a9786d868a5c3d7164a8deb3869ce64dcdb536cfdbe48ef9026999a48cdabfb298d0d961335429736976bb80c4e163ca14b40111be013c67bd9ffe0df852bbd48c88749b1a4188ee6a7bb871fdaadcdb331a9cc02c6919c70d3e1bc7ae60bd655b8cf2b8e3966cf14a22050dbe879536db62a3b4fbc6409a91282ca71a47f379bd5ddb2cc280f2caab8d4ad1ede94504d456fd8cead0b2134fe2d572ba82a7fd0233fee177d0bcd086c62e2fab4c1a728ab61be03572882b7b7aa23dcf3dd3af046c3cc783ef98c9dda2316467b8e5f7d5220cf81278e", 0xf3}], 0x5}, 0x4000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) 21:55:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x100000) 21:55:57 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000600)=r0, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) 21:55:57 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_x_nat_t_type={0x1}]}, 0x58}}, 0x0) 21:55:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x100000) 21:55:57 executing program 4: r0 = getpid() r1 = getpgid(r0) r2 = syz_clone(0x8000000, &(0x7f0000000000)="81b22c17164f3b16fc16a55f86a8f16cd2ea3e7c218eebc84b91c7f1849c17caacef4a8ebcb3ea4f94d1a3d62fc1177f55f04c41d2d5fd05de02e957ea8ea92c399391d0041a988d073abf2f941b9d4d4ae6c71f49b992b9f7efbfce9556b6c36ce6b8cce623ccbcafa44a502d624bf44f3b25905847e33c0ad85f4477ff116b194c4dbffd7f2477ec9697414ee56abf743531e3f0e843f54690433a115b0dc27ad25778418678bc9fd9fe0b70dd02d001e965fd2639d69a7d72b93b7814c2d9c6f641ffe12177c0ef30afe7ab7c15b7b6e05bdba27fa1b3331c8bc3361de9d2ca", 0xe1, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="67ba729a69219c88bc11971298f62c6fdf0a13e0243dd8c6cfdab0d35ec6c856760e48528d0e98a4831dce26dc026fc24fea8b09e0111bcb27ce83002c38395b6d09fcf3d9690794ea120b5e140b1fe323ba094a1ec2fcabef954bc1e735533ac89fa4b37af2c182b7acf478668941a1552f79f117318a1c4512f5bf62db27f6ff7bb875500d3df49dd56d9401b30fab1d58091e75b9b6d7d151492ceaf9c67d88a4ec9ed2f027fbcf87238f260d08f6fa128daddebf7374fab8eab2f757f3bdbff48180bc30d30f085baf4d2242b886a418578015923ee684c6cc33e907ad75") syz_clone(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) syz_clone(0x0, &(0x7f0000000400)="6dc7e51430badd8f14e612c183252c3ecee1d0d612510604ac1a953df7b74a40b2e8a6e9ecbf0e1618b2da93f44e2e4b8e43a76068f3bcddb9c0ec4b907108d5504dda3bdcb3a3db2295ad1fbf11e05189bac9f4c9c0df7449226f40da091cb7044b05bde9a0a9488fe5d83185700e1c857300d6b438b5c22bc8ffadfdfc2a0b8de2f338", 0x84, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="369cd08ddd5fc904f6ae3e04b95bff44ba7ba499f62e1ad00837fa6c0e196d827a4c02d869db054343ae4ba108f9fdb826ee319acca987ae148140ebc876bf418399014461d32158711b621baff24c22525450ffd4160da7f4101ce33d57902bdbd797d80a5bf3097406c34b3f36c4b5fed6b81325d41f8ebfedd749b5a08d7712f41326c8b519dd77e65acee691afe05d12fcba4aa2b4e2ba7fa3c6394dd68bcfaabc4affae45533f9584a9603409cf0265d1ebe70bed3f10c464903c02c539680d0e8e48f7adeea7cef0ce1a9927a2efc996266d877a3e23c2") openat$pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000680)={0x7, 'veth0_macvtap\x00', {0xc224}}) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') syz_clone3(&(0x7f0000002500)={0x2000000, &(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0), {0x33}, &(0x7f0000002300)=""/193, 0xc1, &(0x7f0000002400)=""/149, &(0x7f00000024c0)=[r1, r1, r2], 0x3}, 0x58) getpgid(r2) getpgid(0x0) r3 = getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000002640), 0x80000, 0x0) getpgrp(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)=@ipv4_getaddr={0x44, 0x16, 0x2, 0x70bd27, 0x25dfdbfc, {0x2, 0x8, 0x4, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_LABEL={0x14, 0x3, 'rose0\x00'}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) getpgrp(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000027c0)='ns/mnt\x00') gettid() syz_open_procfs$namespace(0x0, &(0x7f0000002800)='ns/pid\x00') syz_clone(0x0, &(0x7f0000002840)="2ccf61a5b5cefd73ba72ab72176485cd04e92922ff0ca8a4c4ba", 0x1a, &(0x7f0000002880), &(0x7f00000028c0), 0x0) getpgrp(0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000002980)=0x4, 0x8) 21:55:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x55}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ef4ef0a964"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "ceb506a9b472b0f6bd68bf6a"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "15ac29db0c"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '#'}]}, 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 21:55:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x100000) 21:55:58 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x25, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_TOS={0x5}, @IFLA_GRE_FWMARK={0x8}]}}}]}, 0x64}}, 0x0) 21:55:58 executing program 2: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x1, 0x0, 0x10000000}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x6}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2}) 21:55:58 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010800000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0022090300000ab2ad92"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000440)={0x0, 0x2, 0x0, 0x0, "321084aded00fd52cb99b302b51e199266e75796de54364648afc5530c830e0c"}) [ 373.756187][ T8650] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 21:55:58 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x10) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @empty}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="2603e469aee22f5ca9b7c0c63a606fc369599250a567733dcaf1c2d59a74dc156296225687f6951224", 0x29}, {&(0x7f0000000380)}, {&(0x7f0000000500)="aded038890789c17396c07304a5e7e88c19ae8d4677277faabce9255014fa11b87c0f32425976396920a7c8ba74c779edd8716d19e4237f4e892825a897efa477bebfeb50fe432c2046b692879377f695cb60c1afcc2a6f7fae94984651aee093296caf98fe7d8ee3795d57dd4d356ff3309031b3987e43987da7083bb2b574ecabfcf41f459cc3fd540344dae2350ab9c", 0x91}, {0x0}, {&(0x7f0000000640)="39dcbed6a0bcf0c004b7076c0f1e8af570de29b1b66b03ea60833c851a9786d868a5c3d7164a8deb3869ce64dcdb536cfdbe48ef9026999a48cdabfb298d0d961335429736976bb80c4e163ca14b40111be013c67bd9ffe0df852bbd48c88749b1a4188ee6a7bb871fdaadcdb331a9cc02c6919c70d3e1bc7ae60bd655b8cf2b8e3966cf14a22050dbe879536db62a3b4fbc6409a91282ca71a47f379bd5ddb2cc280f2caab8d4ad1ede94504d456fd8cead0b2134fe2d572ba82a7fd0233fee177d0bcd086c62e2fab4c1a728ab61be03572882b7b7aa23dcf3dd3af046c3cc783ef98c9dda2316467b8e5f7d5220cf81278e", 0xf3}], 0x5}, 0x4000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) [ 373.852137][ T8650] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.0'. 21:55:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) 21:55:58 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$inet(r0, 0x0, 0x0) 21:55:58 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058b9b"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x20, 0x1, 0x3, "1ac131"}, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 21:55:58 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$inet(r0, 0x0, 0x0) 21:55:58 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$inet(r0, 0x0, 0x0) [ 374.222024][ T5436] usb 2-1: new high-speed USB device number 22 using dummy_hcd 21:55:59 executing program 4: r0 = getpid() r1 = getpgid(r0) r2 = syz_clone(0x8000000, &(0x7f0000000000)="81b22c17164f3b16fc16a55f86a8f16cd2ea3e7c218eebc84b91c7f1849c17caacef4a8ebcb3ea4f94d1a3d62fc1177f55f04c41d2d5fd05de02e957ea8ea92c399391d0041a988d073abf2f941b9d4d4ae6c71f49b992b9f7efbfce9556b6c36ce6b8cce623ccbcafa44a502d624bf44f3b25905847e33c0ad85f4477ff116b194c4dbffd7f2477ec9697414ee56abf743531e3f0e843f54690433a115b0dc27ad25778418678bc9fd9fe0b70dd02d001e965fd2639d69a7d72b93b7814c2d9c6f641ffe12177c0ef30afe7ab7c15b7b6e05bdba27fa1b3331c8bc3361de9d2ca", 0xe1, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="67ba729a69219c88bc11971298f62c6fdf0a13e0243dd8c6cfdab0d35ec6c856760e48528d0e98a4831dce26dc026fc24fea8b09e0111bcb27ce83002c38395b6d09fcf3d9690794ea120b5e140b1fe323ba094a1ec2fcabef954bc1e735533ac89fa4b37af2c182b7acf478668941a1552f79f117318a1c4512f5bf62db27f6ff7bb875500d3df49dd56d9401b30fab1d58091e75b9b6d7d151492ceaf9c67d88a4ec9ed2f027fbcf87238f260d08f6fa128daddebf7374fab8eab2f757f3bdbff48180bc30d30f085baf4d2242b886a418578015923ee684c6cc33e907ad75") syz_clone(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) syz_clone(0x0, &(0x7f0000000400)="6dc7e51430badd8f14e612c183252c3ecee1d0d612510604ac1a953df7b74a40b2e8a6e9ecbf0e1618b2da93f44e2e4b8e43a76068f3bcddb9c0ec4b907108d5504dda3bdcb3a3db2295ad1fbf11e05189bac9f4c9c0df7449226f40da091cb7044b05bde9a0a9488fe5d83185700e1c857300d6b438b5c22bc8ffadfdfc2a0b8de2f338", 0x84, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="369cd08ddd5fc904f6ae3e04b95bff44ba7ba499f62e1ad00837fa6c0e196d827a4c02d869db054343ae4ba108f9fdb826ee319acca987ae148140ebc876bf418399014461d32158711b621baff24c22525450ffd4160da7f4101ce33d57902bdbd797d80a5bf3097406c34b3f36c4b5fed6b81325d41f8ebfedd749b5a08d7712f41326c8b519dd77e65acee691afe05d12fcba4aa2b4e2ba7fa3c6394dd68bcfaabc4affae45533f9584a9603409cf0265d1ebe70bed3f10c464903c02c539680d0e8e48f7adeea7cef0ce1a9927a2efc996266d877a3e23c2") openat$pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000680)={0x7, 'veth0_macvtap\x00', {0xc224}}) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') syz_clone3(&(0x7f0000002500)={0x2000000, &(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0), {0x33}, &(0x7f0000002300)=""/193, 0xc1, &(0x7f0000002400)=""/149, &(0x7f00000024c0)=[r1, r1, r2], 0x3}, 0x58) getpgid(r2) getpgid(0x0) r3 = getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000002640), 0x80000, 0x0) getpgrp(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)=@ipv4_getaddr={0x44, 0x16, 0x2, 0x70bd27, 0x25dfdbfc, {0x2, 0x8, 0x4, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_LABEL={0x14, 0x3, 'rose0\x00'}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) getpgrp(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000027c0)='ns/mnt\x00') gettid() syz_open_procfs$namespace(0x0, &(0x7f0000002800)='ns/pid\x00') syz_clone(0x0, &(0x7f0000002840)="2ccf61a5b5cefd73ba72ab72176485cd04e92922ff0ca8a4c4ba", 0x1a, &(0x7f0000002880), &(0x7f00000028c0), 0x0) getpgrp(0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000002980)=0x4, 0x8) 21:55:59 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626fc978000000000c00028005001e"], 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500f4ffff000095811d", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 21:55:59 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$inet(r0, 0x0, 0x0) [ 374.461952][ T3736] usb 1-1: new high-speed USB device number 20 using dummy_hcd 21:55:59 executing program 2: r0 = getpid() r1 = getpgid(r0) r2 = syz_clone(0x8000000, &(0x7f0000000000)="81b22c17164f3b16fc16a55f86a8f16cd2ea3e7c218eebc84b91c7f1849c17caacef4a8ebcb3ea4f94d1a3d62fc1177f55f04c41d2d5fd05de02e957ea8ea92c399391d0041a988d073abf2f941b9d4d4ae6c71f49b992b9f7efbfce9556b6c36ce6b8cce623ccbcafa44a502d624bf44f3b25905847e33c0ad85f4477ff116b194c4dbffd7f2477ec9697414ee56abf743531e3f0e843f54690433a115b0dc27ad25778418678bc9fd9fe0b70dd02d001e965fd2639d69a7d72b93b7814c2d9c6f641ffe12177c0ef30afe7ab7c15b7b6e05bdba27fa1b3331c8bc3361de9d2ca", 0xe1, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="67ba729a69219c88bc11971298f62c6fdf0a13e0243dd8c6cfdab0d35ec6c856760e48528d0e98a4831dce26dc026fc24fea8b09e0111bcb27ce83002c38395b6d09fcf3d9690794ea120b5e140b1fe323ba094a1ec2fcabef954bc1e735533ac89fa4b37af2c182b7acf478668941a1552f79f117318a1c4512f5bf62db27f6ff7bb875500d3df49dd56d9401b30fab1d58091e75b9b6d7d151492ceaf9c67d88a4ec9ed2f027fbcf87238f260d08f6fa128daddebf7374fab8eab2f757f3bdbff48180bc30d30f085baf4d2242b886a418578015923ee684c6cc33e907ad75") syz_clone(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) syz_clone(0x0, &(0x7f0000000400)="6dc7e51430badd8f14e612c183252c3ecee1d0d612510604ac1a953df7b74a40b2e8a6e9ecbf0e1618b2da93f44e2e4b8e43a76068f3bcddb9c0ec4b907108d5504dda3bdcb3a3db2295ad1fbf11e05189bac9f4c9c0df7449226f40da091cb7044b05bde9a0a9488fe5d83185700e1c857300d6b438b5c22bc8ffadfdfc2a0b8de2f338", 0x84, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="369cd08ddd5fc904f6ae3e04b95bff44ba7ba499f62e1ad00837fa6c0e196d827a4c02d869db054343ae4ba108f9fdb826ee319acca987ae148140ebc876bf418399014461d32158711b621baff24c22525450ffd4160da7f4101ce33d57902bdbd797d80a5bf3097406c34b3f36c4b5fed6b81325d41f8ebfedd749b5a08d7712f41326c8b519dd77e65acee691afe05d12fcba4aa2b4e2ba7fa3c6394dd68bcfaabc4affae45533f9584a9603409cf0265d1ebe70bed3f10c464903c02c539680d0e8e48f7adeea7cef0ce1a9927a2efc996266d877a3e23c2") openat$pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000680)={0x7, 'veth0_macvtap\x00', {0xc224}}) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') syz_clone3(&(0x7f0000002500)={0x2000000, &(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0), {0x33}, &(0x7f0000002300)=""/193, 0xc1, &(0x7f0000002400)=""/149, &(0x7f00000024c0)=[r1, r1, r2], 0x3}, 0x58) getpgid(r2) getpgid(0x0) r3 = getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000002640), 0x80000, 0x0) getpgrp(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)=@ipv4_getaddr={0x44, 0x16, 0x2, 0x70bd27, 0x25dfdbfc, {0x2, 0x8, 0x4, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_LABEL={0x14, 0x3, 'rose0\x00'}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) getpgrp(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000027c0)='ns/mnt\x00') gettid() syz_open_procfs$namespace(0x0, &(0x7f0000002800)='ns/pid\x00') syz_clone(0x0, &(0x7f0000002840)="2ccf61a5b5cefd73ba72ab72176485cd04e92922ff0ca8a4c4ba", 0x1a, &(0x7f0000002880), &(0x7f00000028c0), 0x0) getpgrp(0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000002980)=0x4, 0x8) [ 374.652079][ T5436] usb 2-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.704289][ T5436] usb 2-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.815445][ T5436] usb 2-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 374.842138][ T3736] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 374.912777][ T3736] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 375.030995][ T5436] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 375.066202][ T3736] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 375.095611][ T5436] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.112626][ T3736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.190338][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 375.618232][ T5436] cm6533_jd 0003:0D8C:0022.0016: unknown main item tag 0x0 [ 375.640699][ T5436] cm6533_jd 0003:0D8C:0022.0016: unknown main item tag 0x0 21:56:00 executing program 3: r0 = getpid() r1 = getpgid(r0) r2 = syz_clone(0x8000000, &(0x7f0000000000)="81b22c17164f3b16fc16a55f86a8f16cd2ea3e7c218eebc84b91c7f1849c17caacef4a8ebcb3ea4f94d1a3d62fc1177f55f04c41d2d5fd05de02e957ea8ea92c399391d0041a988d073abf2f941b9d4d4ae6c71f49b992b9f7efbfce9556b6c36ce6b8cce623ccbcafa44a502d624bf44f3b25905847e33c0ad85f4477ff116b194c4dbffd7f2477ec9697414ee56abf743531e3f0e843f54690433a115b0dc27ad25778418678bc9fd9fe0b70dd02d001e965fd2639d69a7d72b93b7814c2d9c6f641ffe12177c0ef30afe7ab7c15b7b6e05bdba27fa1b3331c8bc3361de9d2ca", 0xe1, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="67ba729a69219c88bc11971298f62c6fdf0a13e0243dd8c6cfdab0d35ec6c856760e48528d0e98a4831dce26dc026fc24fea8b09e0111bcb27ce83002c38395b6d09fcf3d9690794ea120b5e140b1fe323ba094a1ec2fcabef954bc1e735533ac89fa4b37af2c182b7acf478668941a1552f79f117318a1c4512f5bf62db27f6ff7bb875500d3df49dd56d9401b30fab1d58091e75b9b6d7d151492ceaf9c67d88a4ec9ed2f027fbcf87238f260d08f6fa128daddebf7374fab8eab2f757f3bdbff48180bc30d30f085baf4d2242b886a418578015923ee684c6cc33e907ad75") syz_clone(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) syz_clone(0x0, &(0x7f0000000400)="6dc7e51430badd8f14e612c183252c3ecee1d0d612510604ac1a953df7b74a40b2e8a6e9ecbf0e1618b2da93f44e2e4b8e43a76068f3bcddb9c0ec4b907108d5504dda3bdcb3a3db2295ad1fbf11e05189bac9f4c9c0df7449226f40da091cb7044b05bde9a0a9488fe5d83185700e1c857300d6b438b5c22bc8ffadfdfc2a0b8de2f338", 0x84, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="369cd08ddd5fc904f6ae3e04b95bff44ba7ba499f62e1ad00837fa6c0e196d827a4c02d869db054343ae4ba108f9fdb826ee319acca987ae148140ebc876bf418399014461d32158711b621baff24c22525450ffd4160da7f4101ce33d57902bdbd797d80a5bf3097406c34b3f36c4b5fed6b81325d41f8ebfedd749b5a08d7712f41326c8b519dd77e65acee691afe05d12fcba4aa2b4e2ba7fa3c6394dd68bcfaabc4affae45533f9584a9603409cf0265d1ebe70bed3f10c464903c02c539680d0e8e48f7adeea7cef0ce1a9927a2efc996266d877a3e23c2") openat$pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000680)={0x7, 'veth0_macvtap\x00', {0xc224}}) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') syz_clone3(&(0x7f0000002500)={0x2000000, &(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0), {0x33}, &(0x7f0000002300)=""/193, 0xc1, &(0x7f0000002400)=""/149, &(0x7f00000024c0)=[r1, r1, r2], 0x3}, 0x58) getpgid(r2) getpgid(0x0) r3 = getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000002640), 0x80000, 0x0) getpgrp(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)=@ipv4_getaddr={0x44, 0x16, 0x2, 0x70bd27, 0x25dfdbfc, {0x2, 0x8, 0x4, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_LABEL={0x14, 0x3, 'rose0\x00'}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) getpgrp(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000027c0)='ns/mnt\x00') gettid() syz_open_procfs$namespace(0x0, &(0x7f0000002800)='ns/pid\x00') syz_clone(0x0, &(0x7f0000002840)="2ccf61a5b5cefd73ba72ab72176485cd04e92922ff0ca8a4c4ba", 0x1a, &(0x7f0000002880), &(0x7f00000028c0), 0x0) getpgrp(0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000002980)=0x4, 0x8) [ 375.673362][ T5436] cm6533_jd 0003:0D8C:0022.0016: unknown main item tag 0x0 [ 375.746477][ T5436] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/0003:0D8C:0022.0016/input/input36 [ 375.817794][ T5436] cm6533_jd 0003:0D8C:0022.0016: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 375.875585][ T5436] usb 2-1: USB disconnect, device number 22 21:56:01 executing program 1: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) dup2(r2, r1) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2}) 21:56:01 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626fc978000000000c00028005001e"], 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500f4ffff000095811d", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 21:56:01 executing program 2: r0 = getpid() r1 = getpgid(r0) r2 = syz_clone(0x8000000, &(0x7f0000000000)="81b22c17164f3b16fc16a55f86a8f16cd2ea3e7c218eebc84b91c7f1849c17caacef4a8ebcb3ea4f94d1a3d62fc1177f55f04c41d2d5fd05de02e957ea8ea92c399391d0041a988d073abf2f941b9d4d4ae6c71f49b992b9f7efbfce9556b6c36ce6b8cce623ccbcafa44a502d624bf44f3b25905847e33c0ad85f4477ff116b194c4dbffd7f2477ec9697414ee56abf743531e3f0e843f54690433a115b0dc27ad25778418678bc9fd9fe0b70dd02d001e965fd2639d69a7d72b93b7814c2d9c6f641ffe12177c0ef30afe7ab7c15b7b6e05bdba27fa1b3331c8bc3361de9d2ca", 0xe1, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="67ba729a69219c88bc11971298f62c6fdf0a13e0243dd8c6cfdab0d35ec6c856760e48528d0e98a4831dce26dc026fc24fea8b09e0111bcb27ce83002c38395b6d09fcf3d9690794ea120b5e140b1fe323ba094a1ec2fcabef954bc1e735533ac89fa4b37af2c182b7acf478668941a1552f79f117318a1c4512f5bf62db27f6ff7bb875500d3df49dd56d9401b30fab1d58091e75b9b6d7d151492ceaf9c67d88a4ec9ed2f027fbcf87238f260d08f6fa128daddebf7374fab8eab2f757f3bdbff48180bc30d30f085baf4d2242b886a418578015923ee684c6cc33e907ad75") syz_clone(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) syz_clone(0x0, &(0x7f0000000400)="6dc7e51430badd8f14e612c183252c3ecee1d0d612510604ac1a953df7b74a40b2e8a6e9ecbf0e1618b2da93f44e2e4b8e43a76068f3bcddb9c0ec4b907108d5504dda3bdcb3a3db2295ad1fbf11e05189bac9f4c9c0df7449226f40da091cb7044b05bde9a0a9488fe5d83185700e1c857300d6b438b5c22bc8ffadfdfc2a0b8de2f338", 0x84, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="369cd08ddd5fc904f6ae3e04b95bff44ba7ba499f62e1ad00837fa6c0e196d827a4c02d869db054343ae4ba108f9fdb826ee319acca987ae148140ebc876bf418399014461d32158711b621baff24c22525450ffd4160da7f4101ce33d57902bdbd797d80a5bf3097406c34b3f36c4b5fed6b81325d41f8ebfedd749b5a08d7712f41326c8b519dd77e65acee691afe05d12fcba4aa2b4e2ba7fa3c6394dd68bcfaabc4affae45533f9584a9603409cf0265d1ebe70bed3f10c464903c02c539680d0e8e48f7adeea7cef0ce1a9927a2efc996266d877a3e23c2") openat$pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000680)={0x7, 'veth0_macvtap\x00', {0xc224}}) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') syz_clone3(&(0x7f0000002500)={0x2000000, &(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0), {0x33}, &(0x7f0000002300)=""/193, 0xc1, &(0x7f0000002400)=""/149, &(0x7f00000024c0)=[r1, r1, r2], 0x3}, 0x58) getpgid(r2) getpgid(0x0) r3 = getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000002640), 0x80000, 0x0) getpgrp(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)=@ipv4_getaddr={0x44, 0x16, 0x2, 0x70bd27, 0x25dfdbfc, {0x2, 0x8, 0x4, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_LABEL={0x14, 0x3, 'rose0\x00'}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) getpgrp(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000027c0)='ns/mnt\x00') gettid() syz_open_procfs$namespace(0x0, &(0x7f0000002800)='ns/pid\x00') syz_clone(0x0, &(0x7f0000002840)="2ccf61a5b5cefd73ba72ab72176485cd04e92922ff0ca8a4c4ba", 0x1a, &(0x7f0000002880), &(0x7f00000028c0), 0x0) getpgrp(0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000002980)=0x4, 0x8) [ 376.583959][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 21:56:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000001) [ 376.871974][ T3736] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 376.893566][ T3736] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input35 [ 377.015482][ T3736] input: failed to attach handler kbd to device input35, error: -5 [ 377.134847][ T3736] usb 1-1: USB disconnect, device number 20 21:56:01 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626fc978000000000c00028005001e"], 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500f4ffff000095811d", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 21:56:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa02) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = dup3(r0, r1, 0x0) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50}, 0x50) ioctl$SG_GET_REQUEST_TABLE(r2, 0x227c, &(0x7f0000000240)) 21:56:02 executing program 3: r0 = getpid() r1 = getpgid(r0) r2 = syz_clone(0x8000000, &(0x7f0000000000)="81b22c17164f3b16fc16a55f86a8f16cd2ea3e7c218eebc84b91c7f1849c17caacef4a8ebcb3ea4f94d1a3d62fc1177f55f04c41d2d5fd05de02e957ea8ea92c399391d0041a988d073abf2f941b9d4d4ae6c71f49b992b9f7efbfce9556b6c36ce6b8cce623ccbcafa44a502d624bf44f3b25905847e33c0ad85f4477ff116b194c4dbffd7f2477ec9697414ee56abf743531e3f0e843f54690433a115b0dc27ad25778418678bc9fd9fe0b70dd02d001e965fd2639d69a7d72b93b7814c2d9c6f641ffe12177c0ef30afe7ab7c15b7b6e05bdba27fa1b3331c8bc3361de9d2ca", 0xe1, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="67ba729a69219c88bc11971298f62c6fdf0a13e0243dd8c6cfdab0d35ec6c856760e48528d0e98a4831dce26dc026fc24fea8b09e0111bcb27ce83002c38395b6d09fcf3d9690794ea120b5e140b1fe323ba094a1ec2fcabef954bc1e735533ac89fa4b37af2c182b7acf478668941a1552f79f117318a1c4512f5bf62db27f6ff7bb875500d3df49dd56d9401b30fab1d58091e75b9b6d7d151492ceaf9c67d88a4ec9ed2f027fbcf87238f260d08f6fa128daddebf7374fab8eab2f757f3bdbff48180bc30d30f085baf4d2242b886a418578015923ee684c6cc33e907ad75") syz_clone(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) syz_clone(0x0, &(0x7f0000000400)="6dc7e51430badd8f14e612c183252c3ecee1d0d612510604ac1a953df7b74a40b2e8a6e9ecbf0e1618b2da93f44e2e4b8e43a76068f3bcddb9c0ec4b907108d5504dda3bdcb3a3db2295ad1fbf11e05189bac9f4c9c0df7449226f40da091cb7044b05bde9a0a9488fe5d83185700e1c857300d6b438b5c22bc8ffadfdfc2a0b8de2f338", 0x84, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="369cd08ddd5fc904f6ae3e04b95bff44ba7ba499f62e1ad00837fa6c0e196d827a4c02d869db054343ae4ba108f9fdb826ee319acca987ae148140ebc876bf418399014461d32158711b621baff24c22525450ffd4160da7f4101ce33d57902bdbd797d80a5bf3097406c34b3f36c4b5fed6b81325d41f8ebfedd749b5a08d7712f41326c8b519dd77e65acee691afe05d12fcba4aa2b4e2ba7fa3c6394dd68bcfaabc4affae45533f9584a9603409cf0265d1ebe70bed3f10c464903c02c539680d0e8e48f7adeea7cef0ce1a9927a2efc996266d877a3e23c2") openat$pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000680)={0x7, 'veth0_macvtap\x00', {0xc224}}) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') syz_clone3(&(0x7f0000002500)={0x2000000, &(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0), {0x33}, &(0x7f0000002300)=""/193, 0xc1, &(0x7f0000002400)=""/149, &(0x7f00000024c0)=[r1, r1, r2], 0x3}, 0x58) getpgid(r2) getpgid(0x0) r3 = getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000002640), 0x80000, 0x0) getpgrp(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)=@ipv4_getaddr={0x44, 0x16, 0x2, 0x70bd27, 0x25dfdbfc, {0x2, 0x8, 0x4, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_LABEL={0x14, 0x3, 'rose0\x00'}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) getpgrp(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000027c0)='ns/mnt\x00') gettid() syz_open_procfs$namespace(0x0, &(0x7f0000002800)='ns/pid\x00') syz_clone(0x0, &(0x7f0000002840)="2ccf61a5b5cefd73ba72ab72176485cd04e92922ff0ca8a4c4ba", 0x1a, &(0x7f0000002880), &(0x7f00000028c0), 0x0) getpgrp(0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000002980)=0x4, 0x8) [ 377.580726][ T8720] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 21:56:02 executing program 4: r0 = getpid() r1 = getpgid(r0) r2 = syz_clone(0x8000000, &(0x7f0000000000)="81b22c17164f3b16fc16a55f86a8f16cd2ea3e7c218eebc84b91c7f1849c17caacef4a8ebcb3ea4f94d1a3d62fc1177f55f04c41d2d5fd05de02e957ea8ea92c399391d0041a988d073abf2f941b9d4d4ae6c71f49b992b9f7efbfce9556b6c36ce6b8cce623ccbcafa44a502d624bf44f3b25905847e33c0ad85f4477ff116b194c4dbffd7f2477ec9697414ee56abf743531e3f0e843f54690433a115b0dc27ad25778418678bc9fd9fe0b70dd02d001e965fd2639d69a7d72b93b7814c2d9c6f641ffe12177c0ef30afe7ab7c15b7b6e05bdba27fa1b3331c8bc3361de9d2ca", 0xe1, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="67ba729a69219c88bc11971298f62c6fdf0a13e0243dd8c6cfdab0d35ec6c856760e48528d0e98a4831dce26dc026fc24fea8b09e0111bcb27ce83002c38395b6d09fcf3d9690794ea120b5e140b1fe323ba094a1ec2fcabef954bc1e735533ac89fa4b37af2c182b7acf478668941a1552f79f117318a1c4512f5bf62db27f6ff7bb875500d3df49dd56d9401b30fab1d58091e75b9b6d7d151492ceaf9c67d88a4ec9ed2f027fbcf87238f260d08f6fa128daddebf7374fab8eab2f757f3bdbff48180bc30d30f085baf4d2242b886a418578015923ee684c6cc33e907ad75") syz_clone(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) syz_clone(0x0, &(0x7f0000000400)="6dc7e51430badd8f14e612c183252c3ecee1d0d612510604ac1a953df7b74a40b2e8a6e9ecbf0e1618b2da93f44e2e4b8e43a76068f3bcddb9c0ec4b907108d5504dda3bdcb3a3db2295ad1fbf11e05189bac9f4c9c0df7449226f40da091cb7044b05bde9a0a9488fe5d83185700e1c857300d6b438b5c22bc8ffadfdfc2a0b8de2f338", 0x84, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="369cd08ddd5fc904f6ae3e04b95bff44ba7ba499f62e1ad00837fa6c0e196d827a4c02d869db054343ae4ba108f9fdb826ee319acca987ae148140ebc876bf418399014461d32158711b621baff24c22525450ffd4160da7f4101ce33d57902bdbd797d80a5bf3097406c34b3f36c4b5fed6b81325d41f8ebfedd749b5a08d7712f41326c8b519dd77e65acee691afe05d12fcba4aa2b4e2ba7fa3c6394dd68bcfaabc4affae45533f9584a9603409cf0265d1ebe70bed3f10c464903c02c539680d0e8e48f7adeea7cef0ce1a9927a2efc996266d877a3e23c2") openat$pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000680)={0x7, 'veth0_macvtap\x00', {0xc224}}) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') syz_clone3(&(0x7f0000002500)={0x2000000, &(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0), {0x33}, &(0x7f0000002300)=""/193, 0xc1, &(0x7f0000002400)=""/149, &(0x7f00000024c0)=[r1, r1, r2], 0x3}, 0x58) getpgid(r2) getpgid(0x0) r3 = getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000002640), 0x80000, 0x0) getpgrp(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)=@ipv4_getaddr={0x44, 0x16, 0x2, 0x70bd27, 0x25dfdbfc, {0x2, 0x8, 0x4, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_LABEL={0x14, 0x3, 'rose0\x00'}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) getpgrp(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000027c0)='ns/mnt\x00') gettid() syz_open_procfs$namespace(0x0, &(0x7f0000002800)='ns/pid\x00') syz_clone(0x0, &(0x7f0000002840)="2ccf61a5b5cefd73ba72ab72176485cd04e92922ff0ca8a4c4ba", 0x1a, &(0x7f0000002880), &(0x7f00000028c0), 0x0) getpgrp(0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000002980)=0x4, 0x8) 21:56:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "253ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) 21:56:02 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000001) [ 377.841248][ T8726] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:56:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000001) 21:56:02 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626fc978000000000c00028005001e"], 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff00000500f4ffff000095811d", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) [ 378.467272][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.474516][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.585083][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 21:56:03 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000001) 21:56:03 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000001) 21:56:04 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000000380)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "5716a2", 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x10}, @loopback={0xfe80000000000000}, [@dstopts={0x3c}]}}}}}}}, 0x0) 21:56:04 executing program 2: r0 = getpid() r1 = getpgid(r0) r2 = syz_clone(0x8000000, &(0x7f0000000000)="81b22c17164f3b16fc16a55f86a8f16cd2ea3e7c218eebc84b91c7f1849c17caacef4a8ebcb3ea4f94d1a3d62fc1177f55f04c41d2d5fd05de02e957ea8ea92c399391d0041a988d073abf2f941b9d4d4ae6c71f49b992b9f7efbfce9556b6c36ce6b8cce623ccbcafa44a502d624bf44f3b25905847e33c0ad85f4477ff116b194c4dbffd7f2477ec9697414ee56abf743531e3f0e843f54690433a115b0dc27ad25778418678bc9fd9fe0b70dd02d001e965fd2639d69a7d72b93b7814c2d9c6f641ffe12177c0ef30afe7ab7c15b7b6e05bdba27fa1b3331c8bc3361de9d2ca", 0xe1, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="67ba729a69219c88bc11971298f62c6fdf0a13e0243dd8c6cfdab0d35ec6c856760e48528d0e98a4831dce26dc026fc24fea8b09e0111bcb27ce83002c38395b6d09fcf3d9690794ea120b5e140b1fe323ba094a1ec2fcabef954bc1e735533ac89fa4b37af2c182b7acf478668941a1552f79f117318a1c4512f5bf62db27f6ff7bb875500d3df49dd56d9401b30fab1d58091e75b9b6d7d151492ceaf9c67d88a4ec9ed2f027fbcf87238f260d08f6fa128daddebf7374fab8eab2f757f3bdbff48180bc30d30f085baf4d2242b886a418578015923ee684c6cc33e907ad75") syz_clone(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) syz_clone(0x0, &(0x7f0000000400)="6dc7e51430badd8f14e612c183252c3ecee1d0d612510604ac1a953df7b74a40b2e8a6e9ecbf0e1618b2da93f44e2e4b8e43a76068f3bcddb9c0ec4b907108d5504dda3bdcb3a3db2295ad1fbf11e05189bac9f4c9c0df7449226f40da091cb7044b05bde9a0a9488fe5d83185700e1c857300d6b438b5c22bc8ffadfdfc2a0b8de2f338", 0x84, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="369cd08ddd5fc904f6ae3e04b95bff44ba7ba499f62e1ad00837fa6c0e196d827a4c02d869db054343ae4ba108f9fdb826ee319acca987ae148140ebc876bf418399014461d32158711b621baff24c22525450ffd4160da7f4101ce33d57902bdbd797d80a5bf3097406c34b3f36c4b5fed6b81325d41f8ebfedd749b5a08d7712f41326c8b519dd77e65acee691afe05d12fcba4aa2b4e2ba7fa3c6394dd68bcfaabc4affae45533f9584a9603409cf0265d1ebe70bed3f10c464903c02c539680d0e8e48f7adeea7cef0ce1a9927a2efc996266d877a3e23c2") openat$pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000680)={0x7, 'veth0_macvtap\x00', {0xc224}}) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') syz_clone3(&(0x7f0000002500)={0x2000000, &(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0), {0x33}, &(0x7f0000002300)=""/193, 0xc1, &(0x7f0000002400)=""/149, &(0x7f00000024c0)=[r1, r1, r2], 0x3}, 0x58) getpgid(r2) getpgid(0x0) r3 = getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000002640), 0x80000, 0x0) getpgrp(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)=@ipv4_getaddr={0x44, 0x16, 0x2, 0x70bd27, 0x25dfdbfc, {0x2, 0x8, 0x4, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_LABEL={0x14, 0x3, 'rose0\x00'}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) getpgrp(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000027c0)='ns/mnt\x00') gettid() syz_open_procfs$namespace(0x0, &(0x7f0000002800)='ns/pid\x00') syz_clone(0x0, &(0x7f0000002840)="2ccf61a5b5cefd73ba72ab72176485cd04e92922ff0ca8a4c4ba", 0x1a, &(0x7f0000002880), &(0x7f00000028c0), 0x0) getpgrp(0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000002980)=0x4, 0x8) 21:56:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dda87dfc7468514b9a726ed500000000000002003f3c1d000000808dced1338900070000000000000000001c62a42c8772"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000440)=""/126, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 21:56:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000001) 21:56:06 executing program 3: r0 = getpid() r1 = getpgid(r0) r2 = syz_clone(0x8000000, &(0x7f0000000000)="81b22c17164f3b16fc16a55f86a8f16cd2ea3e7c218eebc84b91c7f1849c17caacef4a8ebcb3ea4f94d1a3d62fc1177f55f04c41d2d5fd05de02e957ea8ea92c399391d0041a988d073abf2f941b9d4d4ae6c71f49b992b9f7efbfce9556b6c36ce6b8cce623ccbcafa44a502d624bf44f3b25905847e33c0ad85f4477ff116b194c4dbffd7f2477ec9697414ee56abf743531e3f0e843f54690433a115b0dc27ad25778418678bc9fd9fe0b70dd02d001e965fd2639d69a7d72b93b7814c2d9c6f641ffe12177c0ef30afe7ab7c15b7b6e05bdba27fa1b3331c8bc3361de9d2ca", 0xe1, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="67ba729a69219c88bc11971298f62c6fdf0a13e0243dd8c6cfdab0d35ec6c856760e48528d0e98a4831dce26dc026fc24fea8b09e0111bcb27ce83002c38395b6d09fcf3d9690794ea120b5e140b1fe323ba094a1ec2fcabef954bc1e735533ac89fa4b37af2c182b7acf478668941a1552f79f117318a1c4512f5bf62db27f6ff7bb875500d3df49dd56d9401b30fab1d58091e75b9b6d7d151492ceaf9c67d88a4ec9ed2f027fbcf87238f260d08f6fa128daddebf7374fab8eab2f757f3bdbff48180bc30d30f085baf4d2242b886a418578015923ee684c6cc33e907ad75") syz_clone(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) syz_clone(0x0, &(0x7f0000000400)="6dc7e51430badd8f14e612c183252c3ecee1d0d612510604ac1a953df7b74a40b2e8a6e9ecbf0e1618b2da93f44e2e4b8e43a76068f3bcddb9c0ec4b907108d5504dda3bdcb3a3db2295ad1fbf11e05189bac9f4c9c0df7449226f40da091cb7044b05bde9a0a9488fe5d83185700e1c857300d6b438b5c22bc8ffadfdfc2a0b8de2f338", 0x84, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="369cd08ddd5fc904f6ae3e04b95bff44ba7ba499f62e1ad00837fa6c0e196d827a4c02d869db054343ae4ba108f9fdb826ee319acca987ae148140ebc876bf418399014461d32158711b621baff24c22525450ffd4160da7f4101ce33d57902bdbd797d80a5bf3097406c34b3f36c4b5fed6b81325d41f8ebfedd749b5a08d7712f41326c8b519dd77e65acee691afe05d12fcba4aa2b4e2ba7fa3c6394dd68bcfaabc4affae45533f9584a9603409cf0265d1ebe70bed3f10c464903c02c539680d0e8e48f7adeea7cef0ce1a9927a2efc996266d877a3e23c2") openat$pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000680)={0x7, 'veth0_macvtap\x00', {0xc224}}) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') syz_clone3(&(0x7f0000002500)={0x2000000, &(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0), {0x33}, &(0x7f0000002300)=""/193, 0xc1, &(0x7f0000002400)=""/149, &(0x7f00000024c0)=[r1, r1, r2], 0x3}, 0x58) getpgid(r2) getpgid(0x0) r3 = getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000002640), 0x80000, 0x0) getpgrp(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)=@ipv4_getaddr={0x44, 0x16, 0x2, 0x70bd27, 0x25dfdbfc, {0x2, 0x8, 0x4, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_LABEL={0x14, 0x3, 'rose0\x00'}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) getpgrp(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000027c0)='ns/mnt\x00') gettid() syz_open_procfs$namespace(0x0, &(0x7f0000002800)='ns/pid\x00') syz_clone(0x0, &(0x7f0000002840)="2ccf61a5b5cefd73ba72ab72176485cd04e92922ff0ca8a4c4ba", 0x1a, &(0x7f0000002880), &(0x7f00000028c0), 0x0) getpgrp(0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000002980)=0x4, 0x8) 21:56:07 executing program 4: r0 = getpid() r1 = getpgid(r0) r2 = syz_clone(0x8000000, &(0x7f0000000000)="81b22c17164f3b16fc16a55f86a8f16cd2ea3e7c218eebc84b91c7f1849c17caacef4a8ebcb3ea4f94d1a3d62fc1177f55f04c41d2d5fd05de02e957ea8ea92c399391d0041a988d073abf2f941b9d4d4ae6c71f49b992b9f7efbfce9556b6c36ce6b8cce623ccbcafa44a502d624bf44f3b25905847e33c0ad85f4477ff116b194c4dbffd7f2477ec9697414ee56abf743531e3f0e843f54690433a115b0dc27ad25778418678bc9fd9fe0b70dd02d001e965fd2639d69a7d72b93b7814c2d9c6f641ffe12177c0ef30afe7ab7c15b7b6e05bdba27fa1b3331c8bc3361de9d2ca", 0xe1, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="67ba729a69219c88bc11971298f62c6fdf0a13e0243dd8c6cfdab0d35ec6c856760e48528d0e98a4831dce26dc026fc24fea8b09e0111bcb27ce83002c38395b6d09fcf3d9690794ea120b5e140b1fe323ba094a1ec2fcabef954bc1e735533ac89fa4b37af2c182b7acf478668941a1552f79f117318a1c4512f5bf62db27f6ff7bb875500d3df49dd56d9401b30fab1d58091e75b9b6d7d151492ceaf9c67d88a4ec9ed2f027fbcf87238f260d08f6fa128daddebf7374fab8eab2f757f3bdbff48180bc30d30f085baf4d2242b886a418578015923ee684c6cc33e907ad75") syz_clone(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) syz_clone(0x0, &(0x7f0000000400)="6dc7e51430badd8f14e612c183252c3ecee1d0d612510604ac1a953df7b74a40b2e8a6e9ecbf0e1618b2da93f44e2e4b8e43a76068f3bcddb9c0ec4b907108d5504dda3bdcb3a3db2295ad1fbf11e05189bac9f4c9c0df7449226f40da091cb7044b05bde9a0a9488fe5d83185700e1c857300d6b438b5c22bc8ffadfdfc2a0b8de2f338", 0x84, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="369cd08ddd5fc904f6ae3e04b95bff44ba7ba499f62e1ad00837fa6c0e196d827a4c02d869db054343ae4ba108f9fdb826ee319acca987ae148140ebc876bf418399014461d32158711b621baff24c22525450ffd4160da7f4101ce33d57902bdbd797d80a5bf3097406c34b3f36c4b5fed6b81325d41f8ebfedd749b5a08d7712f41326c8b519dd77e65acee691afe05d12fcba4aa2b4e2ba7fa3c6394dd68bcfaabc4affae45533f9584a9603409cf0265d1ebe70bed3f10c464903c02c539680d0e8e48f7adeea7cef0ce1a9927a2efc996266d877a3e23c2") openat$pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000680)={0x7, 'veth0_macvtap\x00', {0xc224}}) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') syz_clone3(&(0x7f0000002500)={0x2000000, &(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0), {0x33}, &(0x7f0000002300)=""/193, 0xc1, &(0x7f0000002400)=""/149, &(0x7f00000024c0)=[r1, r1, r2], 0x3}, 0x58) getpgid(r2) getpgid(0x0) r3 = getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000002640), 0x80000, 0x0) getpgrp(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)=@ipv4_getaddr={0x44, 0x16, 0x2, 0x70bd27, 0x25dfdbfc, {0x2, 0x8, 0x4, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_LABEL={0x14, 0x3, 'rose0\x00'}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) getpgrp(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000027c0)='ns/mnt\x00') gettid() syz_open_procfs$namespace(0x0, &(0x7f0000002800)='ns/pid\x00') syz_clone(0x0, &(0x7f0000002840)="2ccf61a5b5cefd73ba72ab72176485cd04e92922ff0ca8a4c4ba", 0x1a, &(0x7f0000002880), &(0x7f00000028c0), 0x0) getpgrp(0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000002980)=0x4, 0x8) 21:56:07 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000001) 21:56:07 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dda87dfc7468514b9a726ed500000000000002003f3c1d000000808dced1338900070000000000000000001c62a42c8772"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000440)=""/126, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 21:56:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dda87dfc7468514b9a726ed500000000000002003f3c1d000000808dced1338900070000000000000000001c62a42c8772"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000440)=""/126, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 21:56:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dda87dfc7468514b9a726ed500000000000002003f3c1d000000808dced1338900070000000000000000001c62a42c8772"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000440)=""/126, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 21:56:08 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)) r1 = dup(r0) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000040)={0xffffffffd6c9f3b2}) 21:56:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x11, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000019008111e00212ba0d8105040a020000030f0000067c55a1bc000900b800069902000000b000150e02008178a8000500050001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 21:56:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dda87dfc7468514b9a726ed500000000000002003f3c1d000000808dced1338900070000000000000000001c62a42c8772"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000440)=""/126, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 21:56:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_coalesce={0x1}}) 21:56:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dda87dfc7468514b9a726ed500000000000002003f3c1d000000808dced1338900070000000000000000001c62a42c8772"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000440)=""/126, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 21:56:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dda87dfc7468514b9a726ed500000000000002003f3c1d000000808dced1338900070000000000000000001c62a42c8772"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000440)=""/126, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 21:56:10 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000140)={0x1}, 0x8) sendmmsg(r1, 0x0, 0x0, 0x4000000) r2 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000001c0)) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/209, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r3 = socket$packet(0x11, 0x3, 0x300) r4 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) r5 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x1, r5}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 21:56:11 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2) r1 = dup(r0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x88) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) 21:56:11 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000140)={0x1}, 0x8) sendmmsg(r1, 0x0, 0x0, 0x4000000) r2 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000001c0)) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/209, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r3 = socket$packet(0x11, 0x3, 0x300) r4 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) r5 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x1, r5}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 21:56:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dda87dfc7468514b9a726ed500000000000002003f3c1d000000808dced1338900070000000000000000001c62a42c8772"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000440)=""/126, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 21:56:11 executing program 4: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000001001000001"], 0x10}, 0x0) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/64, 0x40}], 0x1) 21:56:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dda87dfc7468514b9a726ed500000000000002003f3c1d000000808dced1338900070000000000000000001c62a42c8772"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000440)=""/126, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 21:56:12 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000140)={0x1}, 0x8) sendmmsg(r1, 0x0, 0x0, 0x4000000) r2 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000001c0)) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/209, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r3 = socket$packet(0x11, 0x3, 0x300) r4 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) r5 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x1, r5}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 21:56:12 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x106, 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) 21:56:12 executing program 4: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000001001000001"], 0x10}, 0x0) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/64, 0x40}], 0x1) 21:56:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dda87dfc7468514b9a726ed500000000000002003f3c1d000000808dced1338900070000000000000000001c62a42c8772"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000440)=""/126, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 21:56:12 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000140)={0x1}, 0x8) sendmmsg(r1, 0x0, 0x0, 0x4000000) r2 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000001c0)) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/209, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r3 = socket$packet(0x11, 0x3, 0x300) r4 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) r5 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x1, r5}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 21:56:12 executing program 0: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x4, 0x3, [0x0, 0x0, 0x4]}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, '-'}, @output_terminal={0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 21:56:13 executing program 5: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000080)={'syz_tun\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) dup2(r1, r0) 21:56:13 executing program 4: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000001001000001"], 0x10}, 0x0) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/64, 0x40}], 0x1) 21:56:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x8, 0x1000, 0x0, 0x14}, 0x48) [ 388.772139][ T5436] usb 1-1: new high-speed USB device number 21 using dummy_hcd 21:56:13 executing program 5: r0 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/143, 0x8f}], 0x1, 0x0, 0x0) 21:56:13 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001c80), 0x800, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000053c0)) [ 389.041785][ T5436] usb 1-1: Using ep0 maxpacket: 32 21:56:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000005c0)=0x820, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4103092c1116480401120200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a26321a54e7df305f80a8cac700000000000057c3feffff", 0xfc40, 0x800, 0x0, 0x2f) 21:56:13 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)) poll(0x0, 0x0, 0x603) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80010) [ 389.183857][ T5436] usb 1-1: config 1 interface 1 has no altsetting 0 21:56:13 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x40, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) listen(r0, 0x0) listen(r0, 0x0) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:56:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 389.341913][ T5436] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.351573][ T5436] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.360747][ T5436] usb 1-1: Product: syz [ 389.365514][ T5436] usb 1-1: Manufacturer: syz [ 389.370329][ T5436] usb 1-1: SerialNumber: syz 21:56:14 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file4/file6\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file7\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2001, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 21:56:14 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x40, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) listen(r0, 0x0) listen(r0, 0x0) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 389.742240][ T5436] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 389.828932][ T5436] usb 1-1: USB disconnect, device number 21 21:56:14 executing program 0: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x4, 0x3, [0x0, 0x0, 0x4]}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, '-'}, @output_terminal={0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 21:56:14 executing program 4: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000001001000001"], 0x10}, 0x0) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/64, 0x40}], 0x1) 21:56:14 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x40, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) listen(r0, 0x0) listen(r0, 0x0) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:56:14 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "15a201", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}}}}, 0x0) 21:56:14 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)) poll(0x0, 0x0, 0x603) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80010) 21:56:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000000)=@ethtool_channels}) 21:56:14 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x40, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) listen(r0, 0x0) listen(r0, 0x0) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:56:14 executing program 3: r0 = socket(0x200040000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271d, 0x0, &(0x7f000033bffc)) 21:56:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x2c}}, 0x0) 21:56:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0xfffffffc, &(0x7f0000000080)={&(0x7f0000000000)={0x74, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) 21:56:15 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x304721, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f0000000380)) move_mount(r2, &(0x7f00000001c0)='./file0/file0\x00', r2, &(0x7f0000000340)='./file1\x00', 0x65) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) unshare(0x6c060000) unshare(0x2010000) [ 390.503342][ T3732] usb 1-1: new high-speed USB device number 22 using dummy_hcd 21:56:15 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') [ 390.762600][ T3732] usb 1-1: Using ep0 maxpacket: 32 [ 390.891966][ T3732] usb 1-1: config 1 interface 1 has no altsetting 0 [ 391.092829][ T3732] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 391.123559][ T3732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.178973][ T3732] usb 1-1: Product: syz [ 391.211660][ T3732] usb 1-1: Manufacturer: syz [ 391.248087][ T3732] usb 1-1: SerialNumber: syz [ 391.661842][ T3733] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 391.682035][ T3732] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 391.772735][ T3732] usb 1-1: USB disconnect, device number 22 [ 391.901758][ T3733] usb 5-1: Using ep0 maxpacket: 16 [ 392.021912][ T3733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.045716][ T3733] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 392.090397][ T3733] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 392.114400][ T3733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.172868][ T3733] usb 5-1: config 0 descriptor?? 21:56:16 executing program 0: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x4, 0x3, [0x0, 0x0, 0x4]}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, '-'}, @output_terminal={0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 21:56:16 executing program 2: getresgid(0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000003940)={0x0, 0x0, &(0x7f00000026c0)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001fff000000000100000000000000", @ANYRES32=r3, @ANYBLOB="eeffffff00000000140012800b000100626174616476"], 0x68}}, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xeb93acb922670253) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x413, 0x0, 0x0, {0x4, 0x64, 0xc00, r8}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) 21:56:16 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)) poll(0x0, 0x0, 0x603) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80010) 21:56:16 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x1c, 0x0, &(0x7f0000000080)) 21:56:16 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x304721, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f0000000380)) move_mount(r2, &(0x7f00000001c0)='./file0/file0\x00', r2, &(0x7f0000000340)='./file1\x00', 0x65) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) unshare(0x6c060000) unshare(0x2010000) [ 392.273492][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 392.362757][ T8932] device batadv1 entered promiscuous mode [ 392.425115][ T8939] batman_adv: batadv1: Adding interface: team0 [ 392.496493][ T8939] batman_adv: batadv1: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 21:56:17 executing program 3: r0 = openat$capi20(0xffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000900)) [ 392.592024][ T22] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 392.652464][ T8939] batman_adv: batadv1: Interface activated: team0 [ 392.666433][ T3733] HID 045e:07da: Invalid code 65791 type 1 [ 392.714490][ T3733] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0017/input/input37 [ 392.842979][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 392.862675][ T3733] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 21:56:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0xfb}) [ 392.962096][ T22] usb 1-1: config 1 interface 1 has no altsetting 0 [ 393.132051][ T22] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 21:56:17 executing program 2: getresgid(0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000003940)={0x0, 0x0, &(0x7f00000026c0)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001fff000000000100000000000000", @ANYRES32=r3, @ANYBLOB="eeffffff00000000140012800b000100626174616476"], 0x68}}, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xeb93acb922670253) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x413, 0x0, 0x0, {0x4, 0x64, 0xc00, r8}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) [ 393.171587][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.297467][ T22] usb 1-1: Product: syz [ 393.333814][ T22] usb 1-1: Manufacturer: syz [ 393.363637][ T22] usb 1-1: SerialNumber: syz 21:56:18 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x304721, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f0000000380)) move_mount(r2, &(0x7f00000001c0)='./file0/file0\x00', r2, &(0x7f0000000340)='./file1\x00', 0x65) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) unshare(0x6c060000) unshare(0x2010000) [ 393.678923][ T4146] usb 5-1: USB disconnect, device number 23 [ 393.728191][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 393.762256][ T22] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found 21:56:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0xfb}) 21:56:18 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)) poll(0x0, 0x0, 0x603) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80010) [ 393.903318][ T8948] device batadv2 entered promiscuous mode [ 393.960219][ T22] usb 1-1: USB disconnect, device number 23 [ 393.973760][ T8956] batman_adv: batadv1: Interface deactivated: team0 [ 393.996150][ T8956] batman_adv: batadv1: Removing interface: team0 21:56:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000002380)="240000001a005f3814f9f407000904018000000000edba00000000000000010040000000", 0x24) [ 394.274582][ T8956] batman_adv: batadv2: Adding interface: team0 21:56:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0xfb}) 21:56:19 executing program 0: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x4, 0x3, [0x0, 0x0, 0x4]}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, '-'}, @output_terminal={0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 394.388807][ T8956] batman_adv: batadv2: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 21:56:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0xfb}) 21:56:19 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x142, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) write$sequencer(r0, &(0x7f0000000080)=[@t={0x81, 0x5}], 0x8) [ 394.746187][ T8956] batman_adv: batadv2: Interface activated: team0 21:56:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x0, 0x40}, 0x8) 21:56:19 executing program 2: getresgid(0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000003940)={0x0, 0x0, &(0x7f00000026c0)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001fff000000000100000000000000", @ANYRES32=r3, @ANYBLOB="eeffffff00000000140012800b000100626174616476"], 0x68}}, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xeb93acb922670253) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x413, 0x0, 0x0, {0x4, 0x64, 0xc00, r8}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) [ 394.892028][ T3736] usb 1-1: new high-speed USB device number 24 using dummy_hcd 21:56:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x0, 0x40}, 0x8) [ 395.151801][ T3736] usb 1-1: Using ep0 maxpacket: 32 21:56:19 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x304721, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f0000000380)) move_mount(r2, &(0x7f00000001c0)='./file0/file0\x00', r2, &(0x7f0000000340)='./file1\x00', 0x65) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) unshare(0x6c060000) unshare(0x2010000) 21:56:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x0, 0x40}, 0x8) 21:56:19 executing program 3: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x8}, 0x10) [ 395.342017][ T3736] usb 1-1: config 1 interface 1 has no altsetting 0 [ 395.436317][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.466160][ T8988] device batadv3 entered promiscuous mode [ 395.522068][ T3736] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.536382][ T1238] [ 395.538746][ T1238] ===================================================== [ 395.545674][ T1238] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 395.553109][ T1238] 6.1.0-rc6-syzkaller #0 Not tainted [ 395.558380][ T1238] ----------------------------------------------------- [ 395.565294][ T1238] kworker/u4:6/1238 [HC0[0]:SC0[4]:HE1:SE0] is trying to acquire: [ 395.573080][ T1238] ffff88807cd603b8 (k-clock-AF_INET){+++.}-{2:2}, at: sock_i_uid+0x1f/0xb0 [ 395.581737][ T1238] [ 395.581737][ T1238] and this task is already holding: [ 395.589105][ T1238] ffffc90001635568 (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2}, at: inet_csk_get_port+0xb30/0x2640 [ 395.599705][ T1238] which would create a new lock dependency: [ 395.605589][ T1238] (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} -> (k-clock-AF_INET){+++.}-{2:2} [ 395.614466][ T1238] [ 395.614466][ T1238] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 395.623903][ T1238] (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} [ 395.623928][ T1238] [ 395.623928][ T1238] ... which became SOFTIRQ-irq-safe at: [ 395.637578][ T1238] lock_acquire+0x1e3/0x630 [ 395.642175][ T1238] _raw_spin_lock+0x2e/0x40 [ 395.646819][ T1238] __inet_inherit_port+0x297/0x14e0 [ 395.652104][ T1238] tcp_v4_syn_recv_sock+0xb5b/0x14c0 [ 395.657487][ T1238] tcp_check_req+0x632/0x1aa0 [ 395.662246][ T1238] tcp_v4_rcv+0x24b4/0x3980 [ 395.666829][ T1238] ip_protocol_deliver_rcu+0x9f/0x7c0 [ 395.672284][ T1238] ip_local_deliver_finish+0x2ec/0x4c0 [ 395.677827][ T1238] ip_local_deliver+0x1ae/0x200 [ 395.682770][ T1238] ip_sublist_rcv_finish+0x9a/0x2c0 [ 395.688051][ T1238] ip_sublist_rcv+0x533/0x980 [ 395.692809][ T1238] ip_list_rcv+0x31e/0x470 [ 395.697305][ T1238] __netif_receive_skb_list_core+0x548/0x8f0 [ 395.703399][ T1238] netif_receive_skb_list_internal+0x75f/0xd90 [ 395.709647][ T1238] napi_complete_done+0x1f5/0x890 [ 395.714763][ T1238] virtnet_poll+0xd08/0x1300 [ 395.719484][ T1238] __napi_poll+0xb8/0x770 [ 395.723902][ T1238] net_rx_action+0xa00/0xde0 [ 395.728583][ T1238] __do_softirq+0x1fb/0xadc [ 395.733207][ T1238] __irq_exit_rcu+0x123/0x180 [ 395.738002][ T1238] irq_exit_rcu+0x9/0x20 [ 395.742323][ T1238] common_interrupt+0xad/0xd0 [ 395.747110][ T1238] asm_common_interrupt+0x26/0x40 [ 395.752313][ T1238] acpi_idle_do_entry+0x1fd/0x2a0 [ 395.757421][ T1238] acpi_idle_enter+0x368/0x510 [ 395.762278][ T1238] cpuidle_enter_state+0x1af/0xd40 [ 395.767527][ T1238] cpuidle_enter+0x4e/0xa0 [ 395.772038][ T1238] do_idle+0x3f7/0x590 [ 395.776206][ T1238] cpu_startup_entry+0x18/0x20 [ 395.781055][ T1238] start_secondary+0x256/0x300 [ 395.785905][ T1238] secondary_startup_64_no_verify+0xce/0xdb [ 395.791900][ T1238] [ 395.791900][ T1238] to a SOFTIRQ-irq-unsafe lock: [ 395.798914][ T1238] (k-clock-AF_INET){+++.}-{2:2} [ 395.798940][ T1238] [ 395.798940][ T1238] ... which became SOFTIRQ-irq-unsafe at: [ 395.812000][ T1238] ... [ 395.812009][ T1238] lock_acquire+0x1e3/0x630 [ 395.819201][ T1238] _raw_write_lock+0x2e/0x40 [ 395.823895][ T1238] l2tp_tunnel_register+0x126/0x1210 [ 395.829362][ T1238] l2tp_nl_cmd_tunnel_create+0x3d6/0x8b0 [ 395.835098][ T1238] genl_family_rcv_msg_doit+0x228/0x320 [ 395.840796][ T1238] genl_rcv_msg+0x445/0x780 [ 395.845387][ T1238] netlink_rcv_skb+0x157/0x430 [ 395.850238][ T1238] genl_rcv+0x28/0x40 [ 395.854306][ T1238] netlink_unicast+0x547/0x7f0 [ 395.859157][ T1238] netlink_sendmsg+0x91b/0xe10 [ 395.864003][ T1238] sock_sendmsg+0xd3/0x120 [ 395.868549][ T1238] ____sys_sendmsg+0x712/0x8c0 [ 395.873400][ T1238] ___sys_sendmsg+0x110/0x1b0 [ 395.878164][ T1238] __sys_sendmsg+0xf7/0x1c0 [ 395.882747][ T1238] __do_fast_syscall_32+0x65/0xf0 [ 395.887859][ T1238] do_fast_syscall_32+0x33/0x70 [ 395.892796][ T1238] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 395.899213][ T1238] [ 395.899213][ T1238] other info that might help us debug this: [ 395.899213][ T1238] [ 395.909429][ T1238] Possible interrupt unsafe locking scenario: [ 395.909429][ T1238] [ 395.917734][ T1238] CPU0 CPU1 [ 395.923088][ T1238] ---- ---- [ 395.928441][ T1238] lock(k-clock-AF_INET); [ 395.932850][ T1238] local_irq_disable(); [ 395.939611][ T1238] lock(&tcp_hashinfo.bhash[i].lock); [ 395.947594][ T1238] lock(k-clock-AF_INET); [ 395.954520][ T1238] [ 395.957962][ T1238] lock(&tcp_hashinfo.bhash[i].lock); [ 395.963674][ T1238] [ 395.963674][ T1238] *** DEADLOCK *** [ 395.963674][ T1238] [ 395.971805][ T1238] 5 locks held by kworker/u4:6/1238: [ 395.977075][ T1238] #0: ffff88814a91c938 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 395.987351][ T1238] #1: ffffc900057c7da8 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 395.999529][ T1238] #2: ffff88807d7ca088 (&tc->t_conn_path_lock){+.+.}-{3:3}, at: rds_tcp_conn_path_connect+0x179/0x8b0 [ 396.010688][ T1238] #3: ffff88807cd60130 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: __inet_bind+0x8c3/0xc90 [ 396.020224][ T1238] #4: ffffc90001635568 (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2}, at: inet_csk_get_port+0xb30/0x2640 [ 396.031217][ T1238] [ 396.031217][ T1238] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 396.041631][ T1238] -> (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} { [ 396.048006][ T1238] HARDIRQ-ON-W at: [ 396.051999][ T1238] lock_acquire+0x1e3/0x630 [ 396.058260][ T1238] _raw_spin_lock_bh+0x33/0x40 [ 396.064674][ T1238] inet_csk_get_port+0x66a/0x2640 [ 396.071357][ T1238] __inet6_bind+0x625/0x1b20 [ 396.077684][ T1238] inet6_bind+0x177/0x220 [ 396.083675][ T1238] rds_tcp_listen_init+0x2a9/0x4e0 [ 396.090459][ T1238] rds_tcp_init_net+0x21d/0x4f0 [ 396.096972][ T1238] ops_init+0xb9/0x680 [ 396.102709][ T1238] register_pernet_operations+0x35a/0x850 [ 396.110102][ T1238] register_pernet_device+0x2a/0x80 [ 396.116951][ T1238] rds_tcp_init+0x65/0xd3 [ 396.122935][ T1238] do_one_initcall+0x141/0x780 [ 396.129348][ T1238] kernel_init_freeable+0x6ff/0x788 [ 396.136198][ T1238] kernel_init+0x1e/0x1d0 [ 396.142172][ T1238] ret_from_fork+0x1f/0x30 [ 396.148240][ T1238] IN-SOFTIRQ-W at: [ 396.152216][ T1238] lock_acquire+0x1e3/0x630 [ 396.158375][ T1238] _raw_spin_lock+0x2e/0x40 [ 396.164528][ T1238] __inet_inherit_port+0x297/0x14e0 [ 396.171383][ T1238] tcp_v4_syn_recv_sock+0xb5b/0x14c0 [ 396.178314][ T1238] tcp_check_req+0x632/0x1aa0 [ 396.184633][ T1238] tcp_v4_rcv+0x24b4/0x3980 [ 396.190781][ T1238] ip_protocol_deliver_rcu+0x9f/0x7c0 [ 396.197797][ T1238] ip_local_deliver_finish+0x2ec/0x4c0 [ 396.204903][ T1238] ip_local_deliver+0x1ae/0x200 [ 396.211399][ T1238] ip_sublist_rcv_finish+0x9a/0x2c0 [ 396.218418][ T1238] ip_sublist_rcv+0x533/0x980 [ 396.224739][ T1238] ip_list_rcv+0x31e/0x470 [ 396.230801][ T1238] __netif_receive_skb_list_core+0x548/0x8f0 [ 396.238435][ T1238] netif_receive_skb_list_internal+0x75f/0xd90 [ 396.246247][ T1238] napi_complete_done+0x1f5/0x890 [ 396.252923][ T1238] virtnet_poll+0xd08/0x1300 [ 396.259246][ T1238] __napi_poll+0xb8/0x770 [ 396.265226][ T1238] net_rx_action+0xa00/0xde0 [ 396.271467][ T1238] __do_softirq+0x1fb/0xadc [ 396.277647][ T1238] __irq_exit_rcu+0x123/0x180 [ 396.283998][ T1238] irq_exit_rcu+0x9/0x20 [ 396.289895][ T1238] common_interrupt+0xad/0xd0 [ 396.296232][ T1238] asm_common_interrupt+0x26/0x40 [ 396.302906][ T1238] acpi_idle_do_entry+0x1fd/0x2a0 [ 396.309575][ T1238] acpi_idle_enter+0x368/0x510 [ 396.315991][ T1238] cpuidle_enter_state+0x1af/0xd40 [ 396.322752][ T1238] cpuidle_enter+0x4e/0xa0 [ 396.328820][ T1238] do_idle+0x3f7/0x590 [ 396.334532][ T1238] cpu_startup_entry+0x18/0x20 [ 396.340939][ T1238] start_secondary+0x256/0x300 [ 396.347350][ T1238] secondary_startup_64_no_verify+0xce/0xdb [ 396.354896][ T1238] INITIAL USE at: [ 396.358784][ T1238] lock_acquire+0x1e3/0x630 [ 396.364938][ T1238] _raw_spin_lock_bh+0x33/0x40 [ 396.371295][ T1238] inet_csk_get_port+0x66a/0x2640 [ 396.377884][ T1238] __inet6_bind+0x625/0x1b20 [ 396.384038][ T1238] inet6_bind+0x177/0x220 [ 396.389928][ T1238] rds_tcp_listen_init+0x2a9/0x4e0 [ 396.396617][ T1238] rds_tcp_init_net+0x21d/0x4f0 [ 396.403041][ T1238] ops_init+0xb9/0x680 [ 396.408674][ T1238] register_pernet_operations+0x35a/0x850 [ 396.415962][ T1238] register_pernet_device+0x2a/0x80 [ 396.422740][ T1238] rds_tcp_init+0x65/0xd3 [ 396.428633][ T1238] do_one_initcall+0x141/0x780 [ 396.434963][ T1238] kernel_init_freeable+0x6ff/0x788 [ 396.441733][ T1238] kernel_init+0x1e/0x1d0 [ 396.447622][ T1238] ret_from_fork+0x1f/0x30 [ 396.453601][ T1238] } [ 396.456089][ T1238] ... key at: [] __key.1+0x0/0x40 [ 396.463195][ T1238] [ 396.463195][ T1238] the dependencies between the lock to be acquired [ 396.463203][ T1238] and SOFTIRQ-irq-unsafe lock: [ 396.476783][ T1238] -> (k-clock-AF_INET){+++.}-{2:2} { [ 396.482079][ T1238] HARDIRQ-ON-W at: [ 396.486052][ T1238] lock_acquire+0x1e3/0x630 [ 396.492212][ T1238] _raw_write_lock_bh+0x33/0x40 [ 396.498709][ T1238] dccp_close+0x4c8/0xd60 [ 396.504754][ T1238] inet_release+0x132/0x270 [ 396.510942][ T1238] sock_release+0x8b/0x1b0 [ 396.517098][ T1238] dccp_v4_exit_net+0x15a/0x2c0 [ 396.523676][ T1238] ops_exit_list+0xb0/0x170 [ 396.529839][ T1238] cleanup_net+0x4ee/0xb00 [ 396.535909][ T1238] process_one_work+0x9bf/0x1710 [ 396.542501][ T1238] worker_thread+0x669/0x1090 [ 396.548824][ T1238] kthread+0x2e8/0x3a0 [ 396.554532][ T1238] ret_from_fork+0x1f/0x30 [ 396.560601][ T1238] HARDIRQ-ON-R at: [ 396.564574][ T1238] lock_acquire+0x1e3/0x630 [ 396.570732][ T1238] _raw_read_lock_bh+0x3f/0x70 [ 396.577146][ T1238] sock_i_uid+0x1f/0xb0 [ 396.582972][ T1238] udp_lib_lport_inuse+0x32/0x490 [ 396.589648][ T1238] udp_lib_get_port+0x835/0x18c0 [ 396.596237][ T1238] __inet_bind+0x831/0xc90 [ 396.602308][ T1238] inet_bind+0x177/0x220 [ 396.608197][ T1238] udp_sock_create4+0x1d1/0x490 [ 396.614757][ T1238] rxe_setup_udp_tunnel.constprop.0+0xfc/0x220 [ 396.622661][ T1238] rxe_net_init+0x1f/0xd0 [ 396.628641][ T1238] rxe_module_init+0x10/0x49 [ 396.634967][ T1238] do_one_initcall+0x141/0x780 [ 396.641400][ T1238] kernel_init_freeable+0x6ff/0x788 [ 396.648285][ T1238] kernel_init+0x1e/0x1d0 [ 396.654274][ T1238] ret_from_fork+0x1f/0x30 [ 396.660345][ T1238] SOFTIRQ-ON-W at: [ 396.664316][ T1238] lock_acquire+0x1e3/0x630 [ 396.670475][ T1238] _raw_write_lock+0x2e/0x40 [ 396.676713][ T1238] l2tp_tunnel_register+0x126/0x1210 [ 396.683655][ T1238] l2tp_nl_cmd_tunnel_create+0x3d6/0x8b0 [ 396.690943][ T1238] genl_family_rcv_msg_doit+0x228/0x320 [ 396.698142][ T1238] genl_rcv_msg+0x445/0x780 [ 396.704289][ T1238] netlink_rcv_skb+0x157/0x430 [ 396.710709][ T1238] genl_rcv+0x28/0x40 [ 396.716336][ T1238] netlink_unicast+0x547/0x7f0 [ 396.722744][ T1238] netlink_sendmsg+0x91b/0xe10 [ 396.729151][ T1238] sock_sendmsg+0xd3/0x120 [ 396.735232][ T1238] ____sys_sendmsg+0x712/0x8c0 [ 396.741648][ T1238] ___sys_sendmsg+0x110/0x1b0 [ 396.747972][ T1238] __sys_sendmsg+0xf7/0x1c0 [ 396.754120][ T1238] __do_fast_syscall_32+0x65/0xf0 [ 396.760798][ T1238] do_fast_syscall_32+0x33/0x70 [ 396.767303][ T1238] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 396.775289][ T1238] INITIAL USE at: [ 396.779175][ T1238] lock_acquire+0x1e3/0x630 [ 396.785254][ T1238] _raw_write_lock_bh+0x33/0x40 [ 396.791774][ T1238] dccp_close+0x4c8/0xd60 [ 396.797669][ T1238] inet_release+0x132/0x270 [ 396.803741][ T1238] sock_release+0x8b/0x1b0 [ 396.809737][ T1238] dccp_v4_exit_net+0x15a/0x2c0 [ 396.816155][ T1238] ops_exit_list+0xb0/0x170 [ 396.822225][ T1238] cleanup_net+0x4ee/0xb00 [ 396.828313][ T1238] process_one_work+0x9bf/0x1710 [ 396.834832][ T1238] worker_thread+0x669/0x1090 [ 396.841103][ T1238] kthread+0x2e8/0x3a0 [ 396.846741][ T1238] ret_from_fork+0x1f/0x30 [ 396.852732][ T1238] INITIAL READ USE at: [ 396.857061][ T1238] lock_acquire+0x1e3/0x630 [ 396.863568][ T1238] _raw_read_lock_bh+0x3f/0x70 [ 396.870344][ T1238] sock_i_uid+0x1f/0xb0 [ 396.876506][ T1238] udp_lib_lport_inuse+0x32/0x490 [ 396.883538][ T1238] udp_lib_get_port+0x835/0x18c0 [ 396.890491][ T1238] __inet_bind+0x831/0xc90 [ 396.896921][ T1238] inet_bind+0x177/0x220 [ 396.903170][ T1238] udp_sock_create4+0x1d1/0x490 [ 396.910022][ T1238] rxe_setup_udp_tunnel.constprop.0+0xfc/0x220 [ 396.918175][ T1238] rxe_net_init+0x1f/0xd0 [ 396.924501][ T1238] rxe_module_init+0x10/0x49 [ 396.931113][ T1238] do_one_initcall+0x141/0x780 [ 396.937877][ T1238] kernel_init_freeable+0x6ff/0x788 [ 396.945080][ T1238] kernel_init+0x1e/0x1d0 [ 396.951405][ T1238] ret_from_fork+0x1f/0x30 [ 396.957822][ T1238] } [ 396.960334][ T1238] ... key at: [] af_kern_callback_keys+0x20/0x300 [ 396.968831][ T1238] ... acquired at: [ 396.972620][ T1238] lock_acquire+0x1e3/0x630 [ 396.977305][ T1238] _raw_read_lock_bh+0x3f/0x70 [ 396.982241][ T1238] sock_i_uid+0x1f/0xb0 [ 396.986579][ T1238] inet_bhash2_addr_any_conflict+0x2d/0x460 [ 396.992666][ T1238] inet_csk_get_port+0xbd7/0x2640 [ 396.997881][ T1238] __inet_bind+0x831/0xc90 [ 397.002496][ T1238] inet_bind+0x177/0x220 [ 397.006926][ T1238] rds_tcp_conn_path_connect+0x3ba/0x8b0 [ 397.012745][ T1238] rds_connect_worker+0x1a9/0x2c0 [ 397.018018][ T1238] process_one_work+0x9bf/0x1710 [ 397.023127][ T1238] worker_thread+0x669/0x1090 [ 397.027975][ T1238] kthread+0x2e8/0x3a0 [ 397.032211][ T1238] ret_from_fork+0x1f/0x30 [ 397.036816][ T1238] [ 397.039134][ T1238] [ 397.039134][ T1238] stack backtrace: [ 397.045026][ T1238] CPU: 1 PID: 1238 Comm: kworker/u4:6 Not tainted 6.1.0-rc6-syzkaller #0 [ 397.053496][ T1238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 397.063550][ T1238] Workqueue: krdsd rds_connect_worker [ 397.068938][ T1238] Call Trace: [ 397.072214][ T1238] [ 397.075140][ T1238] dump_stack_lvl+0xd1/0x138 [ 397.079731][ T1238] check_irq_usage.cold+0x4e4/0x761 [ 397.085055][ T1238] ? print_shortest_lock_dependencies_backwards+0x80/0x80 [ 397.092174][ T1238] ? write_profile+0x410/0x410 [ 397.096941][ T1238] ? check_path.constprop.0+0x24/0x50 [ 397.102330][ T1238] ? register_lock_class+0xbe/0x1120 [ 397.107622][ T1238] ? ret_from_fork+0x1f/0x30 [ 397.112220][ T1238] ? filter_irq_stacks+0x90/0x90 [ 397.117165][ T1238] __lock_acquire+0x2a5b/0x56d0 [ 397.122025][ T1238] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 397.128017][ T1238] lock_acquire+0x1e3/0x630 [ 397.132524][ T1238] ? sock_i_uid+0x1f/0xb0 [ 397.136858][ T1238] ? lock_release+0x810/0x810 [ 397.141544][ T1238] ? lock_release+0x810/0x810 [ 397.146223][ T1238] ? lockdep_hardirqs_on+0x7d/0x100 [ 397.151430][ T1238] _raw_read_lock_bh+0x3f/0x70 [ 397.156203][ T1238] ? sock_i_uid+0x1f/0xb0 [ 397.160532][ T1238] sock_i_uid+0x1f/0xb0 [ 397.164683][ T1238] inet_bhash2_addr_any_conflict+0x2d/0x460 [ 397.170603][ T1238] inet_csk_get_port+0xbd7/0x2640 [ 397.175641][ T1238] ? inet_csk_update_fastreuse+0xb30/0xb30 [ 397.181450][ T1238] ? mark_held_locks+0x9f/0xe0 [ 397.186220][ T1238] ? __local_bh_enable_ip+0xa4/0x130 [ 397.191501][ T1238] __inet_bind+0x831/0xc90 [ 397.195919][ T1238] inet_bind+0x177/0x220 [ 397.200168][ T1238] ? __inet_bind+0xc90/0xc90 [ 397.204755][ T1238] ? __sock_create+0xa1/0x790 [ 397.209439][ T1238] rds_tcp_conn_path_connect+0x3ba/0x8b0 [ 397.215080][ T1238] ? rds_tcp_state_change+0x240/0x240 [ 397.220455][ T1238] ? lock_release+0x810/0x810 [ 397.225138][ T1238] ? lock_downgrade+0x6e0/0x6e0 [ 397.229993][ T1238] ? do_raw_spin_lock+0x124/0x2b0 [ 397.235043][ T1238] rds_connect_worker+0x1a9/0x2c0 [ 397.240095][ T1238] process_one_work+0x9bf/0x1710 [ 397.245055][ T1238] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 397.250446][ T1238] ? rwlock_bug.part.0+0x90/0x90 [ 397.255382][ T1238] ? _raw_spin_lock_irq+0x45/0x50 [ 397.260509][ T1238] worker_thread+0x669/0x1090 [ 397.265192][ T1238] ? __kthread_parkme+0x163/0x220 [ 397.270220][ T1238] ? process_one_work+0x1710/0x1710 [ 397.275420][ T1238] kthread+0x2e8/0x3a0 [ 397.279484][ T1238] ? kthread_complete_and_exit+0x40/0x40 [ 397.285119][ T1238] ret_from_fork+0x1f/0x30 [ 397.289546][ T1238] [ 397.309263][ T3736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 21:56:21 executing program 3: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x8}, 0x10) 21:56:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x0, 0x40}, 0x8) [ 397.367075][ T3736] usb 1-1: Product: syz [ 397.425055][ T3736] usb 1-1: Manufacturer: syz 21:56:22 executing program 3: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x8}, 0x10) [ 397.477764][ T8988] batman_adv: batadv2: Interface deactivated: team0 [ 397.514759][ T3736] usb 1-1: SerialNumber: syz 21:56:22 executing program 1: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x8}, 0x10) [ 397.587644][ T8988] batman_adv: batadv2: Removing interface: team0 [ 397.604754][ T3736] usb 1-1: can't set config #1, error -71 21:56:22 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x88}, {0x6}]}) 21:56:22 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000000)={0x3211}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x5452, 0x20000000) dup2(r0, r1) 21:56:22 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000000)={0x3211}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x5452, 0x20000000) dup2(r0, r1) [ 397.661488][ T8988] batman_adv: batadv3: Adding interface: team0 [ 397.700956][ T3736] usb 1-1: USB disconnect, device number 24 [ 397.710835][ T8988] batman_adv: batadv3: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 21:56:22 executing program 2: getresgid(0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000003940)={0x0, 0x0, &(0x7f00000026c0)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001fff000000000100000000000000", @ANYRES32=r3, @ANYBLOB="eeffffff00000000140012800b000100626174616476"], 0x68}}, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xeb93acb922670253) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x413, 0x0, 0x0, {0x4, 0x64, 0xc00, r8}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) 21:56:22 executing program 1: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x8}, 0x10) 21:56:22 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000000)={0x3211}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x5452, 0x20000000) dup2(r0, r1) 21:56:22 executing program 3: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x8}, 0x10) 21:56:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001100)=[@text32={0x20, &(0x7f0000000300)="0fae49000f01c52e0fc71d08000000662e0f3066baf80cb861d1498bef66bafc0cec66baf80cb858c39e8def66bafc0cedb9120a00000f32660f388121c4c379179f0028000007ea00000100bd00", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) 21:56:22 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000000)={0x3211}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x5452, 0x20000000) dup2(r0, r1) [ 397.792867][ T8988] batman_adv: batadv3: Interface activated: team0 21:56:22 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000000)={0x3211}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x5452, 0x20000000) dup2(r0, r1) 21:56:22 executing program 1: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x8}, 0x10) 21:56:22 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000000)={0x3211}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x5452, 0x20000000) dup2(r0, r1) 21:56:22 executing program 3: keyctl$restrict_keyring(0x6, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='fscrypt:', 0x0) 21:56:22 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000000)={0x3211}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x5452, 0x20000000) dup2(r0, r1) 21:56:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$rds(0x15, 0x5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 397.996111][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 398.035963][ T9036] device batadv4 entered promiscuous mode [ 398.059090][ T9036] batman_adv: batadv3: Interface deactivated: team0 [ 398.068615][ T9036] batman_adv: batadv3: Removing interface: team0 [ 398.088339][ T9036] batman_adv: batadv4: Adding interface: team0 21:56:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000018c0)=""/86, 0x56}], 0x1}}], 0x1, 0x0, 0x0) 21:56:22 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x87}, {0x6}]}) 21:56:22 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) r3 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0x5001, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 21:56:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001100)=[@text32={0x20, &(0x7f0000000300)="0fae49000f01c52e0fc71d08000000662e0f3066baf80cb861d1498bef66bafc0cec66baf80cb858c39e8def66bafc0cedb9120a00000f32660f388121c4c379179f0028000007ea00000100bd00", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) [ 398.100788][ T9036] batman_adv: batadv4: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.128626][ T9036] batman_adv: batadv4: Interface activated: team0 21:56:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001100)=[@text32={0x20, &(0x7f0000000300)="0fae49000f01c52e0fc71d08000000662e0f3066baf80cb861d1498bef66bafc0cec66baf80cb858c39e8def66bafc0cedb9120a00000f32660f388121c4c379179f0028000007ea00000100bd00", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) 21:56:22 executing program 0: r0 = syz_io_uring_setup(0x385, &(0x7f00000002c0), &(0x7f0000ff6000/0x4000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002740)=@IORING_OP_SENDMSG={0x9, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0xb0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xc000) [ 398.179330][ T27] audit: type=1326 audit(1669067782.759:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6a549 code=0x0 21:56:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(0xffffffffffffffff, 0x4, 0x3) syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 21:56:22 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 21:56:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 21:56:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001100)=[@text32={0x20, &(0x7f0000000300)="0fae49000f01c52e0fc71d08000000662e0f3066baf80cb861d1498bef66bafc0cec66baf80cb858c39e8def66bafc0cedb9120a00000f32660f388121c4c379179f0028000007ea00000100bd00", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) 21:56:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001100)=[@text32={0x20, &(0x7f0000000300)="0fae49000f01c52e0fc71d08000000662e0f3066baf80cb861d1498bef66bafc0cec66baf80cb858c39e8def66bafc0cedb9120a00000f32660f388121c4c379179f0028000007ea00000100bd00", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) 21:56:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 21:56:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001100)=[@text32={0x20, &(0x7f0000000300)="0fae49000f01c52e0fc71d08000000662e0f3066baf80cb861d1498bef66bafc0cec66baf80cb858c39e8def66bafc0cedb9120a00000f32660f388121c4c379179f0028000007ea00000100bd00", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) 21:56:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001100)=[@text32={0x20, &(0x7f0000000300)="0fae49000f01c52e0fc71d08000000662e0f3066baf80cb861d1498bef66bafc0cec66baf80cb858c39e8def66bafc0cedb9120a00000f32660f388121c4c379179f0028000007ea00000100bd00", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) 21:56:23 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) r3 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0x5001, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 21:56:23 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$rds(0x15, 0x5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 21:56:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 21:56:23 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$rds(0x15, 0x5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 21:56:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 21:56:23 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(0xffffffffffffffff, 0x4, 0x3) syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 21:56:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 21:56:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = memfd_secret(0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$netlink(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000140)={0x28, 0x23, 0x300, 0x70bd28, 0x25dfdbfc, "", [@typed={0x16, 0x56, 0x0, 0x0, @str='/dev/snd/midiC#D#\x00'}]}, 0x28}], 0x2, 0x0, 0x0, 0x24000084}, 0x44890) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r5, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r3], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 21:56:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 21:56:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 21:56:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nicvf0\x00', 0x7d13}) io_setup(0x7, &(0x7f0000000180)=0x0) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="2002020008000000c1be0200", 0xc}]) 21:56:24 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$rds(0x15, 0x5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 21:56:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$rds(0x15, 0x5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 21:56:25 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) r3 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0x5001, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 21:56:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(0xffffffffffffffff, 0x4, 0x3) syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 21:56:25 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$rds(0x15, 0x5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 21:56:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = memfd_secret(0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$netlink(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000140)={0x28, 0x23, 0x300, 0x70bd28, 0x25dfdbfc, "", [@typed={0x16, 0x56, 0x0, 0x0, @str='/dev/snd/midiC#D#\x00'}]}, 0x28}], 0x2, 0x0, 0x0, 0x24000084}, 0x44890) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r5, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r3], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 21:56:26 executing program 5: bpf$PROG_LOAD_XDP(0xa, &(0x7f0000003080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:56:26 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r2, 0x2, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 21:56:26 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r2, 0x2, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 21:56:26 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r2, 0x2, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 21:56:26 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r2, 0x2, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 21:56:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000018105e04da07000000001e0109022400010000000009040000090349000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2cd06e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 21:56:26 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(0xffffffffffffffff, 0x4, 0x3) syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 21:56:26 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$rds(0x15, 0x5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 402.381831][ T4146] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 402.641822][ T4146] usb 6-1: Using ep0 maxpacket: 16 [ 402.762164][ T4146] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.818429][ T4146] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.850479][ T4146] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 21:56:27 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0xffffff54) r3 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r3, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0x5001, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 21:56:27 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = memfd_secret(0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$netlink(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000140)={0x28, 0x23, 0x300, 0x70bd28, 0x25dfdbfc, "", [@typed={0x16, 0x56, 0x0, 0x0, @str='/dev/snd/midiC#D#\x00'}]}, 0x28}], 0x2, 0x0, 0x0, 0x24000084}, 0x44890) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r5, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r3], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 21:56:27 executing program 1: r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x84, &(0x7f0000000300)={r2}, &(0x7f0000000140)=0xb0) 21:56:27 executing program 1: r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x84, &(0x7f0000000300)={r2}, &(0x7f0000000140)=0xb0) [ 402.952809][ T4146] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 402.965456][ T4146] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 402.979213][ T4146] usb 6-1: SerialNumber: syz [ 402.986952][ T4146] usb 6-1: config 0 descriptor?? 21:56:27 executing program 1: r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x84, &(0x7f0000000300)={r2}, &(0x7f0000000140)=0xb0) 21:56:27 executing program 1: r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x84, &(0x7f0000000300)={r2}, &(0x7f0000000140)=0xb0) 21:56:27 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/137, 0x89}], 0x1, 0x0, 0x0) 21:56:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, 0x6e) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x2000301e}) epoll_pwait(0xffffffffffffffff, &(0x7f0000001180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000100)={[0x60fd00000000000]}, 0x8) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000000), 0x0) dup3(r3, r0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000280)=[{r1, 0x1a29}, {r4}], 0x2, 0x2004) 21:56:28 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3000000) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 403.692544][ T4146] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 403.728046][ T4146] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 403.849514][ T4146] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0018/input/input38 [ 403.890183][ T4146] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 403.979433][ T4146] usb 6-1: USB disconnect, device number 23 21:56:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000018105e04da07000000001e0109022400010000000009040000090349000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2cd06e53f070d0000082a9000170900be0083"], 0x0}, 0x0) 21:56:29 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = memfd_secret(0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$netlink(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000140)={0x28, 0x23, 0x300, 0x70bd28, 0x25dfdbfc, "", [@typed={0x16, 0x56, 0x0, 0x0, @str='/dev/snd/midiC#D#\x00'}]}, 0x28}], 0x2, 0x0, 0x0, 0x24000084}, 0x44890) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r5, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r3], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 21:56:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\r'], 0x34}}, 0x0) 21:56:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x2}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) 21:56:29 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3000000) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 21:56:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3000000) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 21:56:29 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3000000) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 21:56:29 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 404.781851][ T4146] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 404.801826][ T3733] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 405.021797][ T4146] usb 6-1: Using ep0 maxpacket: 16 [ 405.051850][ T3733] usb 3-1: Using ep0 maxpacket: 32 [ 405.142354][ T4146] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.153576][ T4146] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.163952][ T4146] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 405.177351][ T3733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 405.282021][ T4146] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 405.302705][ T4146] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 405.357846][ T4146] usb 6-1: SerialNumber: syz 21:56:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3000000) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 405.388715][ T4146] usb 6-1: config 0 descriptor?? [ 405.395051][ T3733] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 405.418744][ T3733] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 405.459645][ T3733] usb 3-1: Product: syz [ 405.482514][ T3733] usb 3-1: Manufacturer: syz 21:56:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0x4b47, 0x0) [ 405.503806][ T3733] usb 3-1: SerialNumber: syz 21:56:30 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3000000) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0)