0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 18:09:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x2c}}, 0x0) 18:09:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:09:18 executing program 5: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, &(0x7f0000000200)='big_key\x00', &(0x7f0000000240)='/\x00') 18:09:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x8, 0x301}, 0x14}}, 0x0) 18:09:18 executing program 3: socketpair(0x1, 0x0, 0x0, &(0x7f0000000280)) 18:09:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "0e165a7f3c902384a0cfd3469d5c0c0f"}]}, 0x34}}, 0x0) [ 360.882274][T14398] xt_CT: You must specify a L4 protocol and not use inversions on it 18:09:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000003900)={0x1ec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0x12a1, 0x2a, [@random_vendor={0xdd, 0xe9, "883bf1ac7e5fdc16f2085fe42c17418987ba1caf7eefaea750bffcd88265636ce73f4af4c2e8a604314755516d03dc7ba0d5582f86ae8a8d4f096ff60d62e9ed45c94328ce9409718bb612bfdfe7af9f1cb048511acf886798d31c2b0064d80e62d5f18e92b665ff1f112d15d7a54f56339064abb9195ee0bbbc989a1484cb5de51c3e8cf86f2712f9c0f373b6de8e7a30e561c7f6d60f8e47911f919ec3d2e906885f635c20487d47f482011abcc0033108226f7cc0e404dbf11ed91abdfa2309914368b19f210a49ebe68adb792875355a77a425920a975a0fa1a32cac693475ddb4bd3c048c7640"}, @cf={0x4, 0x6}, @fast_bss_trans={0x37, 0x96, {0x0, 0x2, "53fbcd6ce7e240e36ec32c90ff383b92", "753964b41aa42d34bdb1d494543dfc0e6e14182434ef19cd90aa3552e05e2256", "e80ce9509fd296e00fe4026d6ef74be84b904a6750a897973d4aff4884d2ce4b", [{0x0, 0x1d, "7271b1bf35315c0b2f10495ab43d4c9923ea622fbd05774e4119d6f60e"}, {0x0, 0x23, "c1819d6b57d8193b929ba1437f0f7e2fdcd7e91b4c616629318d854b5a20dab5beede4"}]}}, @erp={0x2a, 0x1}, @perr={0x84, 0x109, {0x0, 0x11, [@not_ext={{}, @broadcast}, @not_ext={{}, @broadcast}, @not_ext={{}, @broadcast}, @not_ext, @ext={{}, @device_b}, @not_ext, @not_ext={{}, @device_b}, @not_ext={{}, @device_b}, @not_ext={{}, @device_b}, @not_ext={{}, @device_b}, @ext, @not_ext, @ext={{}, @device_b}, @ext, @ext={{}, @broadcast}, @ext={{}, @device_b, 0x0, @broadcast}, @ext={{}, @device_b, 0x0, @broadcast}]}}, @measure_req={0x26, 0x1002, {0x0, 0x0, 0x0, "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"}}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0xbd5, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @channel_switch={0x25, 0x3}, @dsss={0x3, 0x1}, @tim={0x5, 0xd4, {0x0, 0x0, 0x0, "2dcda3eecda2ed96deeb4efaf18d82028e2c66f14ba4e42c44666a5f3be2b8fa5b7e5c2fe782527a948807a2ee5bd11e3880231471c7350554ca125b5ffdeb1adbc129320117b8fd5cab2a55db1e4a6fef0066b8ea95314a0c3eb323cb95a9e1103abef20497055d396fc29370d0e49cb40d54659908e675a6e6a6aa3b5480ce0b86952e85401fa37e9d1ee1eafd884671acc993a6f3b21e7ff7bcaed1968efc8aa7663a8bf3068c62b88728b50fa850e037ecc3e2e8da9328b8d17ff07f4a03f8291999c5cd7c4f634ed59b09c40529ef"}}, @channel_switch={0x25, 0x3}, @channel_switch={0x25, 0x3}, @measure_req={0x26, 0xadf, {0x0, 0x0, 0x0, "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"}}]}]}, 0x1ec4}}, 0x0) 18:09:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 18:09:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:09:18 executing program 5: add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "a8223e5705e37943f9679407ad7bae5954648415eb167f65ec24d3a748c581b4d646d084110d506e315db4a26654624f8e9709eb8857cb57a5f1ee2d3c2343eb"}, 0x48, 0x0) [ 361.081632][T14413] xt_CT: You must specify a L4 protocol and not use inversions on it 18:09:21 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:09:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 18:09:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000003200)=ANY=[], 0xff0}], 0x1}, 0x0) 18:09:21 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x31b501, 0x0) 18:09:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:09:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) 18:09:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) [ 363.971269][T14439] xt_CT: You must specify a L4 protocol and not use inversions on it 18:09:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "ecac9c5c06dc1d2deb7a265d81652db5d4c1c088f2923ef1129365c0086f3bd9f0ad36887e45e4833c316a2da484b7fbdde270329f49ae6d3737681d7c7da20b71dcaf2dab041de844f4794712243f06"}, 0xd8) 18:09:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:09:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 18:09:21 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 18:09:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) [ 364.115827][T14447] xt_CT: You must specify a L4 protocol and not use inversions on it [ 364.259167][T14460] xt_CT: You must specify a L4 protocol and not use inversions on it 18:09:24 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:09:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x40}, 0x0) 18:09:24 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f000000ca40), 0x2, 0x0) pipe2(&(0x7f000000ca80), 0x0) select(0x40, &(0x7f00000000c0)={0xfd}, 0x0, 0x0, &(0x7f0000000180)) 18:09:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000b0701"], 0x14}}, 0x0) 18:09:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 18:09:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:09:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) [ 367.006830][T14479] xt_CT: You must specify a L4 protocol and not use inversions on it 18:09:24 executing program 5: r0 = socket(0xa, 0x3, 0x7) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 18:09:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @remote}, @can, @xdp}) 18:09:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 18:09:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) [ 367.111879][T14489] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.150660][T14492] xt_CT: You must specify a L4 protocol and not use inversions on it 18:09:24 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 367.287424][T14501] xt_CT: You must specify a L4 protocol and not use inversions on it 18:09:27 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:09:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:09:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 18:09:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}], 0x20}, 0x0) 18:09:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 18:09:27 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readahead(r0, 0x0, 0x0) [ 370.189707][T14571] xt_CT: You must specify a L4 protocol and not use inversions on it 18:09:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 18:09:27 executing program 0: r0 = socket(0x1, 0x1, 0x0) sendmsg$netlink(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x10}}], 0xa}, 0x0) 18:09:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @remote}, @can, @in={0x2, 0x0, @multicast2}}) 18:09:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @local}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x108) 18:09:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) [ 370.376345][T14578] xt_CT: You must specify a L4 protocol and not use inversions on it 18:09:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 370.527492][T14587] xt_CT: You must specify a L4 protocol and not use inversions on it 18:09:30 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:09:30 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xb, 0x4) 18:09:30 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$unlink(0x9, r1, r2) 18:09:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xff5c}}, 0x0) 18:09:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 18:09:30 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:09:30 executing program 5: syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080), 0x1003, 0x0) 18:09:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) [ 373.271318][T14612] xt_CT: You must specify a L4 protocol and not use inversions on it 18:09:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000740)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x1c, 0x0, "cd1cad817eecf06c164455ad141a28fa480d05724ff1c105ad09e74441bce997dc072483fbbe06e38401b0748f3c4d71aae9a55389db67ba2c428186940936c09ce81bc461a6e330cd2ed325c787f2e9"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "cd1cad817eecf06c164455ad141a28fa480d05724ff1c105ad09e74441bce997dc072483fbbe06e38401b0748f3c4d71aae9a55389db67ba2c428186940936c09ce81bc461a6e330cd2ed325c787f2e9"}, 0xd8) 18:09:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffffffffffff) 18:09:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) [ 373.449307][T14621] xt_CT: You must specify a L4 protocol and not use inversions on it 18:09:31 executing program 5: keyctl$link(0x8, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "166723fde349f63b9e925cfede96fe27b6aadc8d9e287b2a3b88bf5a953bc7e8d52f96208c5620a0a86fd7dcef1d0e0ff697ccf441e35b829abe91c6b0e6c674"}, 0x48, 0xfffffffffffffffd) [ 373.601896][T14631] xt_CT: You must specify a L4 protocol and not use inversions on it 18:09:33 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) unshare(0x20020400) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:09:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:09:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 18:09:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000010c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f00000012c0)=ANY=[@ANYBLOB=' '], 0x1020}}, 0x0) 18:09:33 executing program 0: r0 = socket(0x1, 0x1, 0x0) sendmsg$netlink(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 18:09:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000d80)=0x5, 0x4) 18:09:33 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 18:09:34 executing program 3: r0 = socket(0x1, 0x1, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x20}, 0x0) [ 376.387656][T14652] xt_CT: You must specify a L4 protocol and not use inversions on it 18:09:34 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) 18:09:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 18:09:34 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "3b3ef39c954b436d58e4ef388ca32e3fa3061e8c471058c66c5551b35701b927c441b642025e36b360209752cbee49c2933b31422e7cd1b1eefb4c81da00"}, 0x48, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, r0) 18:09:34 executing program 0: wait4(0x0, 0x0, 0x20000004, 0x0) [ 376.708715][T14667] xt_CT: You must specify a L4 protocol and not use inversions on it [ 379.181425][ T3250] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.187852][ T3250] ieee802154 phy1 wpan1: encryption failed: -22 18:09:36 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) unshare(0x20020400) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:09:36 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000240)=""/211) 18:09:36 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x2000000000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f000025c000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000025a000/0x1000)=nil) 18:09:36 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:09:36 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000001280), 0x4) 18:09:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) [ 379.478084][T14688] xt_CT: You must specify a L4 protocol and not use inversions on it 18:09:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 18:09:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) 18:09:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000040)=0xffffffffffffff6f) 18:09:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 18:09:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 18:09:37 executing program 0: syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x434802) 18:09:40 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) unshare(0x20020400) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:09:40 executing program 5: r0 = socket(0xa, 0x3, 0x7) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 18:09:40 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x50}}, 0x0) 18:09:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 18:09:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:09:40 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0) 18:09:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) 18:09:40 executing program 5: r0 = socket(0x11, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:09:40 executing program 0: socketpair(0x0, 0xd, 0x0, 0x0) 18:09:40 executing program 3: clock_gettime(0x0, &(0x7f0000000000)) r0 = fork() sched_rr_get_interval(r0, &(0x7f0000000040)) 18:09:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) 18:09:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) 18:09:43 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x0) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:09:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) 18:09:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000016c0)='setgroups\x00') write$cgroup_freezer_state(r0, 0x0, 0x0) 18:09:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r0, r0) 18:09:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 18:09:43 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:09:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 18:09:43 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 18:09:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 18:09:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000180)) 18:09:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 18:09:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 18:09:46 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x0) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:09:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="201000001a0013"], 0x1020}}, 0x0) 18:09:46 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) 18:09:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000740)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x38, 0x0, "bd73a4e41ea0e33abeec65e4e03ceebc21d837bf6af7948542584e9ca4fbdadde0421761a289fdb530a91b03098a725467b110da19c71fde06a97612600a258e5c9c360c10bdf939eabf16209012b101"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, 0x0, "28768eb17ab2956d152df97646ebd2e6345a62d121668fd440da8f113963712f9cf8fe1fbe7ff324045a6c626fba38bd3b00c21c9806784ced585915caf2122129cc5ed1af32793a09ae6af9a489d1c3"}, 0xd8) 18:09:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 18:09:46 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:09:46 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xa) 18:09:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 18:09:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, "aa4024bf5f7f1f6bc8b4ef2d65c3b142d40b97"}) 18:09:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:09:46 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:09:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@cpu={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) 18:09:49 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x0) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:09:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@cpu={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) 18:09:49 executing program 5: fork() modify_ldt$read_default(0x2, &(0x7f0000000380)=""/147, 0x93) 18:09:49 executing program 3: r0 = socket(0x2, 0xa, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:09:49 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) write$eventfd(r1, &(0x7f0000000000), 0x8) 18:09:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:09:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@cpu={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) 18:09:49 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, 0xffffffffffffffff, 0x0) 18:09:49 executing program 5: r0 = fork() get_robust_list(r0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) 18:09:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x7, 0x6, 0x101}, 0x14}}, 0x0) 18:09:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 18:09:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 18:09:52 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:09:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000280)) 18:09:52 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="02006855deefce"], 0x10}}, 0x0) 18:09:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x4000012, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x0, 0x200, 0x0, 0x0, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"a203"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 18:09:52 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000001080)) 18:09:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:09:52 executing program 1: r0 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmdt(r0) 18:09:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='H'], 0x14}}, 0x0) 18:09:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000bc0), 0x4) 18:09:52 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) 18:09:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) [ 395.196429][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 18:09:52 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, 0x0) 18:09:55 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:09:55 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:09:55 executing program 5: r0 = socket$inet(0x2, 0x80a, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) 18:09:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0xa0}}, 0x0) 18:09:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @remote}, {0x0, @random="d8ed790acee7"}, 0x0, {0x2, 0x0, @broadcast}}) 18:09:55 executing program 0: socketpair(0xa, 0x1, 0xd6, 0x0) 18:09:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) 18:09:55 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "3b3ef39c954b436d58e4ef388ca32e3fa3061e8c471058c66c5551b35701b927c441b642025e36b360209752cbee49c2933b3142f488152e7cd1b1eefb4c81da"}, 0x48, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "3b3ef39c954b436d58e4ef388ca32e3fa3061e8c471058c66c5551b35701b927c441b642025e36b360209752cbee49c2933b3142f488152e7cd1b1eefb4c81da"}, 0x48, 0xfffffffffffffffe) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) keyctl$link(0x8, r1, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "3b3ef39c954b436d58e4ef388ca32e3fa3061e8c471058c66c5551b357968bffa165e29bd05e36b360209752cbee49d8933b3142f488152e7cd1b1eefb4c81da"}, 0x48, 0xfffffffffffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000546c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000558c0)) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 18:09:55 executing program 5: r0 = fork() pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x0}) sched_rr_get_interval(r0, &(0x7f0000000140)) 18:09:55 executing program 3: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000040)=""/158) 18:09:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 18:09:55 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203000003"], 0x18}}, 0x0) 18:09:58 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:09:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 18:09:58 executing program 3: r0 = getpgrp(0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x1, 0x4, @tid=r0}, &(0x7f0000000040)) 18:09:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) 18:09:58 executing program 5: mq_open(&(0x7f00000002c0)='}\x00', 0x40, 0x0, &(0x7f0000000300)) 18:09:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:09:58 executing program 5: r0 = socket(0xa, 0x3, 0x7) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 18:09:58 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0) 18:09:58 executing program 0: r0 = socket(0x1, 0x1, 0x0) sendmsg$netlink(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x10}}], 0x10}, 0x1) 18:09:58 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000001880)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:09:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/68) write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:09:58 executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000ec0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000f40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) 18:10:01 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000002440)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000004580)=""/4094, 0xffe}, {&(0x7f0000001600)=""/163, 0xa3}], 0x2}}], 0x2, 0xc900, 0x0) shutdown(r0, 0x0) 18:10:01 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000028c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000002900)={0x0, 0x0, 0x0, {0x1, @sdr}}) 18:10:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$sock(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 18:10:01 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x0, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:10:01 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) 18:10:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) 18:10:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:01 executing program 5: syz_open_dev$video(&(0x7f0000001380), 0x0, 0x0) 18:10:01 executing program 3: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000680)) 18:10:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x4, 0x0) [ 404.448704][T15041] input: syz1 as /devices/virtual/input/input22 [ 404.519759][T15042] can: request_module (can-proto-0) failed. 18:10:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x4}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="03", 0x7ffff000, 0x40080, 0x0, 0x1f4) [ 404.579086][T15042] can: request_module (can-proto-0) failed. 18:10:02 executing program 3: pselect6(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0) 18:10:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) [ 404.911527][T15064] input: syz1 as /devices/virtual/input/input24 18:10:04 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x0, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:10:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) 18:10:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd2000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"}) 18:10:04 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_timeval(r0, 0x1, 0x3e, &(0x7f0000000000)={0x0, 0xea60}, 0x10) 18:10:04 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) sendfile(r4, r2, 0x0, 0x400) 18:10:05 executing program 3: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x161) close(r0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000840), &(0x7f0000000b00)=[&(0x7f0000000700)='}\'\x00', &(0x7f00000008c0)='}{$-]:^@/)\x00', &(0x7f0000000900)='\b', 0x0, 0x0, &(0x7f0000000140)='fu\x82\xb9U\xa1\xa4`\xc6gts1\r\xe1\b\x88\x80d\x1d\xe0\xb7\x88\\\xfe\xa6\xefC\xff\xcc\x93\xe1HJ\xfd1&V\x01\xba\xa0\xd4\xd8\x16k\xbc\xad\xef\x1b\xed\xe5\x94{W\x80s\xb0S9\xd8\xd3\x97\"\xe1D\xfd\x8a\xb2a\xa9\x80\xfa\xa5\x05:\x11\xd5\xfe\xe9c\xcd6\xcb\xe7\x103\xcd\xe7\xa1', &(0x7f0000000a80)='^$\'}$*+#{(\x00', &(0x7f0000000ac0)='-^\x00']) execve(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000600)=[&(0x7f0000000040)='^$\'}$*+#{(\x00', &(0x7f0000000500)='*)\xa2+]\xbc\x00', &(0x7f0000000580)='@\x00'], &(0x7f0000000740)=[0x0]) [ 407.393334][T15103] input: syz1 as /devices/virtual/input/input25 [ 407.457196][T15097] kvm [15096]: vcpu0, guest rIP: 0x0 disabled perfctr wrmsr: 0xc2 data 0x3ad6e37883b8e6ec 18:10:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 18:10:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:05 executing program 3: sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000240)={0x38, 0x6, 0x40}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x10, r1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="03", 0x7ffff000, 0x40080, 0x0, 0x1f4) [ 407.801913][T15127] input: syz1 as /devices/virtual/input/input26 18:10:05 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x401]}, 0x8}) [ 407.898002][T15134] input: syz1 as /devices/virtual/input/input27 18:10:08 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x0, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:10:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)) 18:10:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) 18:10:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 18:10:08 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f00000018c0), 0x20000, 0x0) 18:10:08 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 18:10:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000240)={0x38, 0x6, 0x40, 0x7fffffff, 0x0, 0x0, 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x101) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="03", 0x7ffff000, 0x40080, 0x0, 0x1f4) 18:10:08 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x4000, 0x0) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0xaa) sendfile(r2, r0, 0x0, 0x100000004) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 410.492722][T15161] input: syz1 as /devices/virtual/input/input29 18:10:08 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'syztnl0\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001640)={"658613fde6f5e35b7ae5e9dc1b668473", 0x0, 0x0, {}, {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3f]}) 18:10:08 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, 0x0) 18:10:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) fstat(r0, &(0x7f0000000080)) 18:10:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) fadvise64(r0, 0x0, 0x0, 0x0) 18:10:11 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:10:11 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/cgroup\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 18:10:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000002180)=0xfc, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) 18:10:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000003c0), 0x6, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1274, 0x0) 18:10:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x40049409, 0x0) 18:10:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)) 18:10:11 executing program 1: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x10000) sendfile(r0, r1, 0x0, 0xfffe) [ 413.549269][T15208] input: syz1 as /devices/virtual/input/input30 18:10:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x9}]}) 18:10:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x101080) read$FUSE(r0, 0x0, 0x0) 18:10:11 executing program 5: syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), 0xffffffffffffffff) fork() sched_rr_get_interval(0x0, &(0x7f0000000000)) 18:10:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, &(0x7f0000000440)) 18:10:11 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x440, 0x440, 0x120, 0x350, 0x210, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ip6gretap0\x00', 'wg1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_vlan\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv6=@private1}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'team_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x21}}}, {{@ipv6={@private1, @private2, [], [], 'geneve1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@remote}}}, {{@ipv6={@mcast1, @dev, [], [], 'veth1_to_bridge\x00', 'macvtap0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) [ 413.945111][T15232] x_tables: duplicate underflow at hook 1 18:10:14 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:10:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x0, 0x8}) 18:10:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000001000000f6ffffff0000000001000000000000fffffffffffffff3faff00f23cff0700000a000000eb"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20049, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xf0, &(0x7f0000000840)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0xba, 0x2c, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @remote, @remote, [@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaf2}, @fragment={0x0, 0x0, 0x0, 0x1}, @srh={0x0, 0xa, 0x4, 0x5, 0x0, 0x0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x3b}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2]}], "b8f87452160bcd2675235e613aee68bdcbed1fdf4522ec7c8575e5ed62a27937775c"}}}}}}}, 0x0) 18:10:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x440, 0x440, 0x120, 0x350, 0x210, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@private2, @empty, [], [0x0, 0xff000000], 'ip6gretap0\x00', 'wg1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_vlan\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv6=@private1}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'team_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@ipv4={'\x00', '\xff\xff', @private}}}}, {{@ipv6={@private1, @private2, [], [], 'geneve1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@remote}}}, {{@ipv6={@mcast1, @dev, [], [], 'veth1_to_bridge\x00', 'macvtap0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) 18:10:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)) 18:10:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x002\x00#'], 0x3c}}, 0x0) [ 416.624311][T15255] x_tables: duplicate underflow at hook 1 [ 416.646836][T15261] input: syz1 as /devices/virtual/input/input31 [ 416.695821][T15254] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 18:10:14 executing program 4: add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa) [ 416.800241][T15281] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 18:10:14 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1d, 0x0, 0x0) [ 416.901095][T15284] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 18:10:14 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6fff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 18:10:14 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4d, 0x0, 0x0) 18:10:14 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) 18:10:17 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x8000000000000000, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) 18:10:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000001000000f6ffffff0000000001000000000000fffffffffffffff3faff00f23cff0700000a000000eb"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20049, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:17 executing program 4: syz_open_dev$vcsn(&(0x7f00000001c0), 0x0, 0x22001) 18:10:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) fallocate(r1, 0x0, 0x0, 0x2000402) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 18:10:17 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:10:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20049, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 419.710774][T15328] input: syz1 as /devices/virtual/input/input32 18:10:17 executing program 4: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000006, 0xffffffffffffffff) [ 419.856184][T15331] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 420.018431][T15342] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 18:10:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000001000000f6ffffff0000000001000000000000fffffffffffffff3faff00f23cff0700000a000000eb"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20049, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:17 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1600bd7a, 0x0, 0x0) [ 420.329953][T15361] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 18:10:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x6, 0x0, [{0x40000001, 0x0, 0x8}, {0x4, 0x0, 0x0, 0x4, 0x8001}, {0x80000001, 0x0, 0x9, 0x0, 0xffffffff}, {0x0, 0x0, 0x9, 0x20, 0x4}, {0x0, 0x0, 0x33dd, 0x10001, 0x400}, {0xd}]}) 18:10:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x4c08, 0x0) 18:10:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000001000000f6ffffff0000000001000000000000fffffffffffffff3faff00f23cff0700000a000000eb"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20049, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:18 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x46, 0x0, 0x0) [ 420.817002][T15395] input: syz1 as /devices/virtual/input/input33 [ 420.862483][T15390] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 18:10:18 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="840000002c0001cdd63fe14b3b3d120000000000", @ANYRES32], 0x84}}, 0x0) [ 421.198618][T15408] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 421.239146][T15409] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. 18:10:20 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:10:20 executing program 5: pselect6(0x40, &(0x7f0000000000), &(0x7f00000004c0)={0x369e}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f00000005c0)={&(0x7f0000000580)={[0x80]}, 0x8}) 18:10:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 18:10:20 executing program 1: openat$vcsa(0xffffffffffffff9c, 0x0, 0x404440, 0x0) 18:10:20 executing program 3: setpriority(0x2, 0x0, 0x5a9) 18:10:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d29000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="740000002400fbc700"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x74}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="840000002c0001cdd63fe14b3b3d120000000000", @ANYRES32=r4, @ANYBLOB="000800800000000003000000080001007533320058000200140005"], 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xfffffffffffffc72, 0x0) [ 422.848873][T15431] input: syz1 as /devices/virtual/input/input34 18:10:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4a, 0x0, 0x0) 18:10:20 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x309141, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 423.002744][T15440] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:10:20 executing program 5: syz_open_dev$vcsn(&(0x7f0000000100), 0xfffffffffffffffd, 0x0) [ 423.075337][T15444] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 423.105042][T15440] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 423.118934][T15440] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 423.129971][T15440] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 423.156205][T15444] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:10:20 executing program 4: mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x6) [ 423.180746][T15440] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. 18:10:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x301, 0x0) 18:10:23 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:10:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d29000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="740000002400fbc700"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x74}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="840000002c0001cdd63fe14b3b3d120000000000", @ANYRES32=r4, @ANYBLOB="000800800000000003000000080001007533320058000200140005"], 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xfffffffffffffc72, 0x0) 18:10:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d29000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="740000002400fbc700"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x74}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="840000002c0001cdd63fe14b3b3d120000000000", @ANYRES32=r4, @ANYBLOB="000800800000000003000000080001007533320058000200140005"], 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xfffffffffffffc72, 0x0) 18:10:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0xe28, 0x5, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x54}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0x250, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x98}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x275}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x64, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf000}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}]}, {0x314, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x104, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x110, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x2c0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x94, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0x2e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x230, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x150, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x80, 0x5, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x78, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}]}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x1}, 0x0) 18:10:23 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000003c0), 0x6, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc01812f4, 0x0) 18:10:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 425.894948][T15476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 425.930056][T15480] input: syz1 as /devices/virtual/input/input35 [ 425.960604][T15477] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:10:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x1f, 0x8000000, 0x4e0, 0x3c0, 0x1f8, 0x2f0, 0x3c0, 0x100, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) [ 426.009583][T15485] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. 18:10:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d29000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="740000002400fbc700"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x74}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="840000002c0001cdd63fe14b3b3d120000000000", @ANYRES32=r4, @ANYBLOB="000800800000000003000000080001007533320058000200140005"], 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xfffffffffffffc72, 0x0) 18:10:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d29000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="740000002400fbc700"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x74}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="840000002c0001cdd63fe14b3b3d120000000000", @ANYRES32=r4, @ANYBLOB="000800800000000003000000080001007533320058000200140005"], 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xfffffffffffffc72, 0x0) 18:10:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d29000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="740000002400fbc700"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x74}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="840000002c0001cdd63fe14b3b3d120000000000", @ANYRES32=r4, @ANYBLOB="000800800000000003000000080001007533320058000200140005"], 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xfffffffffffffc72, 0x0) 18:10:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d29000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="740000002400fbc700"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x74}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="840000002c0001cdd63fe14b3b3d120000000000", @ANYRES32=r4, @ANYBLOB="000800800000000003000000080001007533320058000200140005"], 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xfffffffffffffc72, 0x0) 18:10:24 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x4c0c2, 0x0) 18:10:26 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:10:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xb4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x30, 0x2, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x0) 18:10:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3e, 0x0, 0x0) 18:10:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 429.064629][T15550] input: syz1 as /devices/virtual/input/input36 18:10:28 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x440, 0x440, 0x120, 0x350, 0x210, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ip6gretap0\x00', 'wg1\x00', {}, {}, 0x0, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_vlan\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv6=@private1}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'team_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@ipv4={'\x00', '\xff\xff', @private}}}}, {{@ipv6={@private1, @private2, [], [], 'geneve1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@remote}}}, {{@ipv6={@mcast1, @dev, [], [], 'veth1_to_bridge\x00', 'macvtap0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) 18:10:28 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000500)={0x4}, &(0x7f0000000540), 0x0) [ 432.051130][T15571] x_tables: duplicate underflow at hook 1 18:10:30 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000f80), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000180)="9b", &(0x7f0000000240)="ca"}, 0x48) 18:10:30 executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x48) 18:10:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0xe28, 0x5, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0x250, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x64, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}]}, {0x314, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x104, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x110, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x2c0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x94, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0x2e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x230, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x150, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x80, 0x5, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x78, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}]}]}]}, 0xec4}}, 0x0) 18:10:30 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:10:30 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000f80), 0x0, 0x0) timerfd_gettime(r0, 0x0) 18:10:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x8000000000000000, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x5460, 0x0) [ 433.149002][T15586] input: syz1 as /devices/virtual/input/input37 18:10:30 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) 18:10:30 executing program 5: socketpair(0x25, 0x3, 0x0, &(0x7f0000000600)) 18:10:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:30 executing program 1: socketpair(0x2, 0x801, 0x0, &(0x7f0000000600)) 18:10:31 executing program 4: socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)) 18:10:31 executing program 5: socketpair(0x25, 0x3, 0x2, &(0x7f0000000600)) [ 433.479594][T15605] input: syz1 as /devices/virtual/input/input38 18:10:31 executing program 1: pselect6(0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), &(0x7f00000005c0)={&(0x7f0000000580)={[0x80]}, 0x8}) 18:10:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0xe28, 0x5, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x54}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0x250, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x98}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x275}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x64, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf000}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x796d}]}]}, {0x314, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x172e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x104, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x110, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x2c0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x94, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x97}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0x2e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x230, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdb1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffe0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x12}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x150, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xeb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x80, 0x5, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x78, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}]}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x1}, 0x0) 18:10:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0352000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) [ 433.801374][T15621] __nla_validate_parse: 25 callbacks suppressed [ 433.801399][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:10:33 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:10:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:33 executing program 1: rseq(&(0x7f0000000100), 0x20, 0x1, 0x0) 18:10:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x421}, 0x14}}, 0x0) 18:10:33 executing program 5: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0xffffffffffffff88}, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x5]}, 0x8}) 18:10:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x127e, 0x0) [ 436.165092][T15645] input: syz1 as /devices/virtual/input/input39 18:10:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000422f69)=""/137, 0x7ffff008}], 0x1) dup3(r1, r2, 0x0) 18:10:33 executing program 1: migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x401, &(0x7f0000000040)=0x101) 18:10:33 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) pread64(r0, 0x0, 0x0, 0x103f00) 18:10:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000001000000f6ffffff0000000001000000000000fffffffffffffff3faff00f23cff0700000a000000eb"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20049, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:34 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x46043, 0x0) [ 436.521722][T15668] input: syz1 as /devices/virtual/input/input40 [ 436.625241][T15671] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 436.744976][T15682] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 18:10:36 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:10:36 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000001c0)) 18:10:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1277, 0x0) 18:10:36 executing program 5: perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000422f69)=""/137, 0x7ffff008}], 0x1) dup3(r1, r2, 0x0) 18:10:36 executing program 3: getitimer(0x0, &(0x7f0000000200)) 18:10:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000002100)) 18:10:36 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) [ 439.287948][T15713] input: syz1 as /devices/virtual/input/input41 18:10:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x224, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) 18:10:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x2}}, 0x24}}, 0x0) 18:10:37 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:10:37 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x401012fc, &(0x7f0000000780)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "0c7f70a167f6cc188cb61c00e740c14c32a9ab322fb8b57bba37c4d876ef58517c2cdde4c2a04a84ecfa7964b4f2f052f4a01d6fb697e016813b74913884da38", "941acb4e4d0917915e0930ccead6e91780ed6d9677f41336de09d52644d882c5"}) [ 440.628242][ T3250] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.634714][ T3250] ieee802154 phy1 wpan1: encryption failed: -22 18:10:39 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x0, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:10:39 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000600)) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 18:10:39 executing program 4: r0 = fork() ptrace(0x8, r0) 18:10:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:39 executing program 5: perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000422f69)=""/137, 0x7ffff008}], 0x1) dup3(r1, r2, 0x0) 18:10:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000003c0), 0x6, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x125f, 0x0) [ 442.370784][T15757] input: syz1 as /devices/virtual/input/input42 18:10:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x4c07, 0x0) 18:10:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 18:10:40 executing program 4: preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0) socket$inet6(0xa, 0x3, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000340)="c403292116deb8010000000f01c1480fc76e1e1ea1d1ec3500000000470f00d2440f785b5a6566400f3881352f000000c74424004e000000c744240257760000ff1c24b97e0300000f3266440f3a42e3c0", 0x51}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:10:40 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{}]}) 18:10:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 18:10:40 executing program 1: pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff}) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 18:10:42 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x0, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:10:42 executing program 5: perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000422f69)=""/137, 0x7ffff008}], 0x1) dup3(r1, r2, 0x0) 18:10:42 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) 18:10:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 445.462757][T15806] input: syz1 as /devices/virtual/input/input43 18:10:43 executing program 1: socketpair(0x2, 0xa, 0x0, &(0x7f0000000600)) 18:10:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x1fffffbf, 0x3c0, 0x1f8, 0x2f0, 0x3c0, 0x100, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@srh]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@set2]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv4=@loopback, [], @ipv6=@private0, [], @ipv6=@rand_addr=' \x01\x00'}}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x83) 18:10:43 executing program 1: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)) 18:10:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x11) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000140)=0x63a5b074, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) 18:10:46 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) r1 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x0, 0x0}, 0x30) 18:10:46 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x11) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000140)=0x63a5b074, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) 18:10:46 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x11) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000140)=0x63a5b074, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 18:10:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:46 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x0, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) [ 448.579418][T15842] input: syz1 as /devices/virtual/input/input44 18:10:46 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000000c0)={&(0x7f0000000200), 0xff2f, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000f703cb9728a408b2dd4096d192e2000329bd7000ffdbdf2507000000070000002e2f6669def1e1c5ee3438e2fe4ab39859f250f6b095d4a3b7c9ff1e38cf9fdf1533f3f1c0a1fe83fc67e8a7a8b1705ab6880447502d480561de123c09050c88dfed681a74727bde49dd52a8848cb80de987fc935c67e5d8ed4519"], 0x28}, 0x1, 0x0, 0x0, 0x200000d0}, 0x810) 18:10:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x3dc7, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d7000/0x1000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)=0x0) r4 = socket$alg(0x26, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) io_uring_enter(r1, 0xbf, 0x0, 0x0, 0x0, 0x0) 18:10:46 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x11) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000140)=0x63a5b074, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) 18:10:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x27, &(0x7f00000000c0)=""/39, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:10:51 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000900000000000921aeff0025e7"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0xa3, &(0x7f00000000c0)=""/163, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:10:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x11) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000140)=0x63a5b074, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x563, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) 18:10:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x80802) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) 18:10:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000003c0), 0x6, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x401012fc, 0x0) 18:10:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:51 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) [ 454.105074][T15886] input: syz1 as /devices/virtual/input/input45 18:10:51 executing program 5: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x0) 18:10:51 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, 0xfffffffffffffffc, 0x77a402d623e080) 18:10:51 executing program 4: futex(&(0x7f00000001c0)=0x2, 0x0, 0x2, &(0x7f0000000400)={0x77359400}, 0x0, 0x0) 18:10:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:10:51 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x188c5, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@isofs_parent={0x14}, &(0x7f0000002140), 0x0) 18:10:52 executing program 5: socketpair(0x0, 0x67238c53776f5e5a, 0x0, 0x0) 18:10:54 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f00000003c0)={{}, "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"}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="b9800000c03500400000665c0f5d0202f513559afff39aff35c5e17de7a54b49064900c42e660f3881b7c700000000f30fbcf726660f388077694f4f0f5c19db3af5f342d8868680000066b82001c6460d91854f4a4a66420fc73326650fae15fbffffffed", 0x65}], 0xe, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000300), 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000004400)={{0x0, 0x0, 0x80}, "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", "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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:10:54 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3a, 0x0, 0x0) 18:10:54 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x107382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='~', 0x1}], 0x1, 0x81805, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) 18:10:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xfffffffd}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x0, 0x8}) 18:10:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:54 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) [ 457.217285][T15929] input: syz1 as /devices/virtual/input/input46 [ 457.228225][T15932] loop0: detected capacity change from 0 to 1036 18:10:54 executing program 1: futex(&(0x7f00000001c0), 0xb, 0x0, 0x0, 0x0, 0x0) 18:10:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1261, 0x0) 18:10:55 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 18:10:55 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 18:10:55 executing program 5: add_key(&(0x7f0000000340)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 18:10:55 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 18:10:58 executing program 3: openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) 18:10:58 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 18:10:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x4c04, 0x0) 18:10:58 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x39, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x620, 0x3c0, 0x1f8, 0x2f0, 0x3c0, 0x100, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@srh]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@set2]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv4=@loopback, [], @ipv6=@private0, [], @ipv6=@rand_addr=' \x01\x00'}}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x83) 18:10:58 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:10:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:58 executing program 4: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e8, 0x3d8, 0x118, 0x118, 0x118, 0x0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@srh={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffffd2) 18:10:58 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x40, &(0x7f0000000000)={0x1}, &(0x7f0000000040)={0x7}, 0x0, &(0x7f0000000100)={r0}, 0x0) 18:10:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:10:58 executing program 1: syz_open_dev$loop(&(0x7f0000000400), 0x80, 0x4081) 18:10:58 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x15bb) 18:10:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0x1d, 0xcc, 0x4, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)="c3c36bb8bbbc494b461e9f72a085708970137e43914c89958b22bee8d475", &(0x7f00000000c0), 0x3, r0}, 0x38) 18:11:00 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000700)=ANY=[], 0x2a) 18:11:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:00 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0xaf02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) 18:11:00 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x125f, 0x0) 18:11:01 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:01 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000d00), 0x202, 0x0) 18:11:01 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f00000000c0)) 18:11:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:01 executing program 1: pselect6(0x0, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f00000005c0)={&(0x7f0000000580)={[0x80]}, 0x8}) 18:11:01 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000003c0), 0x6, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x127d, 0x0) 18:11:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:01 executing program 4: fork() waitid(0x0, 0x0, &(0x7f0000000300), 0xb, &(0x7f0000000380)) 18:11:01 executing program 1: symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 18:11:01 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:11:01 executing program 4: syz_open_dev$char_raw(&(0x7f0000000000), 0x1, 0x543c03) 18:11:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000007c0)={0x3fc, 0x0, 0x4, 0x70bd2c, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x390, 0x5, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x98}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x275}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x18, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}]}, {0x1e8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}]}, @NL80211_PMSR_ATTR_PEERS={0xc, 0x5, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x4}]}]}, @NL80211_PMSR_ATTR_PEERS={0x4}, @NL80211_PMSR_ATTR_PEERS={0x40, 0x5, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffff01}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={0x0, 0xc8}}, 0x800) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x844}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x673b83bb2bac100e) 18:11:04 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:04 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) 18:11:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000003c0), 0x6, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc05812fe, 0x0) 18:11:04 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x20}]}) 18:11:04 executing program 1: openat$vcsa(0xffffffffffffff9c, 0x0, 0xe95f63c4c7dd1428, 0x0) 18:11:04 executing program 4: syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x20200) 18:11:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKFRASET(r0, 0x407012ef, 0x0) 18:11:04 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 18:11:04 executing program 0: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:04 executing program 0: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:04 executing program 4: mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) 18:11:07 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:07 executing program 5: r0 = openat$proc_capi20(0xffffff9c, &(0x7f00000006c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000c, 0x11, r0, 0x0) 18:11:07 executing program 1: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000980)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x38) 18:11:07 executing program 0: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0)) 18:11:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="84e5143cbf14064914f6ff1e200c8e", 0xf}, {&(0x7f0000000140)="01", 0x1}], 0x2}, 0x0) 18:11:07 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x1, &(0x7f0000000280)=@raw=[@exit], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:11:07 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x0) 18:11:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}]}, @IPSET_ATTR_DATA={0x4}]}, 0x3c}}, 0x0) 18:11:07 executing program 4: bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) 18:11:07 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000380), 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x0) 18:11:10 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:10 executing program 5: openat$fb1(0xffffff9c, &(0x7f0000000080), 0x4902, 0x0) 18:11:10 executing program 4: ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000}) socketpair(0x1a, 0x0, 0x0, &(0x7f0000000100)) 18:11:10 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000440), 0x3, 0x20040) 18:11:10 executing program 3: socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f0000000380)={0xe}, 0x0, 0x0, 0x0, 0x0) 18:11:10 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000380), 0x0, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x79000) 18:11:10 executing program 4: socketpair(0x26, 0x0, 0x0, &(0x7f0000006fc0)) 18:11:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:10 executing program 1: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a00), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000b00)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x38) 18:11:10 executing program 4: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x2}) 18:11:10 executing program 5: openat$proc_capi20(0xffffff9c, &(0x7f0000000480), 0x8202, 0x0) 18:11:13 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:13 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000001500)) 18:11:13 executing program 4: openat$proc_capi20(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000004300), 0x4) 18:11:13 executing program 5: r0 = openat$proc_capi20(0xffffff9c, &(0x7f00000006c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x40010, r0, 0x0) 18:11:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 18:11:13 executing program 5: keyctl$dh_compute(0x17, &(0x7f0000000100), &(0x7f0000000140)=""/112, 0x70, &(0x7f0000000240)={&(0x7f00000001c0)={'blake2s-224-arm\x00'}}) 18:11:13 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000006a00), 0xffffffffffffffff) 18:11:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 18:11:14 executing program 4: syz_io_uring_setup(0x34d6, &(0x7f0000000000)={0x0, 0xd485, 0x8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000000c0)) 18:11:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 476.504962][T16232] could not allocate digest TFM handle blake2s-224-arm [ 476.565023][T16232] could not allocate digest TFM handle blake2s-224-arm 18:11:16 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:16 executing program 1: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0xebf42e5919300ee) 18:11:16 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x74}, 0x0) 18:11:16 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x1}, 0x10) 18:11:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:16 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000680), 0x4) 18:11:16 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000700)) 18:11:16 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) 18:11:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:16 executing program 1: socket(0x1e, 0x0, 0x7) 18:11:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_tos_u8={{0xd}}, @ip_tos_int={{0x10}}], 0x20}}], 0x1, 0x0) 18:11:17 executing program 1: syz_io_uring_setup(0x61e3, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 18:11:19 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:19 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$tipc(r0, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10) 18:11:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:19 executing program 4: getresgid(&(0x7f0000000000), 0x0, 0x0) getresgid(&(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000340)) 18:11:19 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) 18:11:19 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000100), &(0x7f0000000140)=""/169, 0xa9, &(0x7f00000002c0)={0x0, &(0x7f0000000240)="1516014595467aed09798e68cf513cf2c82e9596f3893ae9444fb265b5a9ac9730a858b0fba13042624ebdd7725b7b52aa21f4108c7e17682e0444d9cea1ec8e4d", 0x41}) 18:11:19 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 18:11:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x40, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}]}, @IPSET_ATTR_LINENO={0x8}]}, 0x40}}, 0x0) 18:11:19 executing program 5: prctl$PR_SET_TIMERSLACK(0x1d, 0xfff) 18:11:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x2c}}, 0x0) 18:11:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:22 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:22 executing program 4: socketpair(0x18, 0x0, 0x8, &(0x7f0000001500)) 18:11:22 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @loopback={0x11000000, 0x7ffff000}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="be", 0x1238c}], 0x1, 0x0, 0x0, 0x1238c}, 0x60) 18:11:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x40}}, 0x0) 18:11:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000130a01"], 0x40}}, 0x0) [ 485.315445][T16341] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 18:11:22 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000380), 0x0, 0x0) read$qrtrtun(r0, 0x0, 0x0) 18:11:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:23 executing program 1: r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000480), 0x8202, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 18:11:23 executing program 4: clock_gettime(0x7, &(0x7f0000000640)) 18:11:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000001040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 485.612327][T16361] input: syz1 as /devices/virtual/input/input62 18:11:23 executing program 4: r0 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc04c5609, &(0x7f0000000100)={0x0, 0x4, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "38247118"}, 0x0, 0x0, @planes=0x0}) 18:11:25 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:25 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mq_open(0x0, 0x0, 0x0, 0x0) 18:11:25 executing program 5: r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) read$fb(r0, &(0x7f0000000040)=""/172, 0xac) 18:11:25 executing program 4: openat$thread_pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) 18:11:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:25 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000002d40), 0x10) socket$can_raw(0x1d, 0x3, 0x1) 18:11:26 executing program 4: socketpair(0x2, 0x1, 0x1, &(0x7f0000000000)) [ 488.474906][T16392] input: syz1 as /devices/virtual/input/input63 18:11:26 executing program 5: syz_open_dev$audion(&(0x7f0000000380), 0x6effadf3, 0x0) 18:11:26 executing program 1: clock_gettime(0x3, &(0x7f0000000640)) 18:11:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000002c0)={{0x6, @remote, 0x0, 0x2, 'rr\x00'}, {@remote}}, 0x44) 18:11:26 executing program 5: keyctl$dh_compute(0x17, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={'sha224-ce\x00'}}) [ 488.909193][T16419] input: syz1 as /devices/virtual/input/input64 [ 489.102263][T16415] could not allocate digest TFM handle sha224-ce [ 489.172067][T16415] could not allocate digest TFM handle sha224-ce 18:11:29 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, 0x0, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000540)='#$:\x00', 0xfffffffffffffffb) 18:11:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0xd78d1c7a327ee70b}, 0x14}}, 0x0) 18:11:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [], [0xbf3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x18}, 0x40) [ 491.560467][T16458] input: syz1 as /devices/virtual/input/input65 18:11:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x0, 0x400, 0x1}, 0x40) 18:11:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x605}, 0x14}}, 0x0) 18:11:29 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x2000012f, 0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x81000) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x4) 18:11:29 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') 18:11:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:29 executing program 1: bpf$MAP_CREATE(0x14, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 18:11:29 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, 0x0, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) [ 491.866687][T16482] input: syz1 as /devices/virtual/input/input66 18:11:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000a780)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@delchain={0x24, 0x65, 0x11f}, 0x24}}, 0x0) 18:11:29 executing program 5: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @multicast2}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto(r0, &(0x7f00000003c0)="879d0ebf9cbb63fd9adcbe51b07b0429c3178dcd0c7a3926a73ce84de28ab0", 0xffc7, 0x8000, 0x0, 0x188) sendto$inet(r0, &(0x7f0000000100)="00dd", 0x2, 0x0, 0x0, 0x0) 18:11:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x605}, 0x14}}, 0x0) 18:11:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:29 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x9, @vbi}) 18:11:29 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, 0x0, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:29 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0x5421, &(0x7f0000000000)={0x5, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "59ab5a00"}}) [ 492.150965][T16502] input: syz1 as /devices/virtual/input/input67 18:11:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000004ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000011c0)={0x53, 0x0, 0x6, 0xe6, @buffer={0x0, 0xa9, &(0x7f0000000000)=""/169}, &(0x7f00000000c0)="d36cc4d37dd2", &(0x7f0000000180)=""/4096, 0x0, 0x0, 0x0, 0x0}) 18:11:30 executing program 5: clock_gettime(0xb, &(0x7f0000000800)) 18:11:30 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:30 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x2000012f, 0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x81000) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x4) 18:11:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x605}, 0x14}}, 0x0) 18:11:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:30 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x2000012f, 0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x81000) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x4) 18:11:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x300}, 0x0) 18:11:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000004ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2270, 0x0) 18:11:30 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040), 0xff, 0x0) 18:11:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 493.285399][T16558] input: syz1 as /devices/virtual/input/input71 18:11:30 executing program 1: bpf$BPF_PROG_DETACH(0x10, &(0x7f0000000140)={@map}, 0x10) 18:11:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 493.486917][T16570] input: syz1 as /devices/virtual/input/input72 18:11:33 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x15) ioctl$TCSETSF(r0, 0x804c4700, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "05e256e59a1970c5ac7c94cc334cf0731d08eb"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:11:33 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x2000012f, 0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x81000) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x4) 18:11:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:33 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x2000012f, 0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x81000) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x4) 18:11:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x605}, 0x14}}, 0x0) [ 495.832032][T16595] input: syz1 as /devices/virtual/input/input73 18:11:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 496.225190][T16688] input: syz1 as /devices/virtual/input/input74 18:11:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 496.512922][T16723] input: syz1 as /devices/virtual/input/input75 18:11:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:34 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x2000012f, 0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x81000) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x4) 18:11:34 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x2000012f, 0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x81000) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x4) [ 496.803404][T16756] input: syz1 as /devices/virtual/input/input76 18:11:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600), 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 497.258146][T16845] input: syz1 as /devices/virtual/input/input77 18:11:36 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600), 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:36 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local={0xa}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002000000e6050e02690c00001afaffff", @ANYRES32=0x0, @ANYBLOB="20000000000000008400000007000000ac1414aa000000000000000000000001200000000000000084000000020000003f0000000600000000000000", @ANYRES32=0x0, @ANYBLOB="18"], 0x78}, 0x0) 18:11:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000001400), 0xffffffffffffffff) process_vm_writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001440)={0x20, r1, 0x7, 0x0, 0x0, {0x2}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 18:11:36 executing program 4: socketpair(0x15, 0x0, 0x0, &(0x7f0000000100)) [ 498.947278][T16927] input: syz1 as /devices/virtual/input/input78 18:11:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x8, 0x101}, 0x14}}, 0x0) 18:11:36 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local={0xa}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002000000e6050e02690c00001afaffff", @ANYRES32=0x0, @ANYBLOB="20000000000000008400000007000000ac1414aa000000000000000000000001200000000000000084000000020000003f0000000600000000000000", @ANYRES32=0x0, @ANYBLOB="18"], 0x78}, 0x0) 18:11:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000004ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000011c0)={0x53, 0x0, 0x6, 0xe6, @buffer={0x0, 0xa9, &(0x7f0000000000)=""/169}, &(0x7f00000000c0)="d36cc4d37dd2", 0x0, 0x0, 0x0, 0x0, 0x0}) 18:11:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600), 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:36 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) 18:11:36 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local={0xa}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002000000e6050e02690c00001afaffff", @ANYRES32=0x0, @ANYBLOB="20000000000000008400000007000000ac1414aa000000000000000000000001200000000000000084000000020000003f0000000600000000000000", @ANYRES32=0x0, @ANYBLOB="18"], 0x78}, 0x0) [ 499.250977][T16948] input: syz1 as /devices/virtual/input/input79 18:11:36 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000140)={0x29}) 18:11:39 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:39 executing program 1: r0 = socket(0x1, 0x2, 0x0) getpeername$l2tp(r0, 0x0, 0x0) 18:11:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{0x0}], 0x1) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:39 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local={0xa}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002000000e6050e02690c00001afaffff", @ANYRES32=0x0, @ANYBLOB="20000000000000008400000007000000ac1414aa000000000000000000000001200000000000000084000000020000003f0000000600000000000000", @ANYRES32=0x0, @ANYBLOB="18"], 0x78}, 0x0) 18:11:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000080)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x81000000}]}, 0x28}}, 0x0) [ 502.053909][ T3250] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.060463][ T3250] ieee802154 phy1 wpan1: encryption failed: -22 18:11:39 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5bab5ab6"}, 0x0, 0x0, @planes=0x0}) [ 502.149174][T16977] input: syz1 as /devices/virtual/input/input80 18:11:39 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x4cf, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, 0x0) 18:11:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xae71, &(0x7f0000000100)) 18:11:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{0x0}], 0x1) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 502.417753][T16995] input: syz1 as /devices/virtual/input/input81 18:11:41 executing program 3: r0 = socket(0x2, 0x3, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg$unix(r0, &(0x7f0000001080)=[{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000140)="e8fb", 0x2}], 0x1, &(0x7f0000000740)=[@rights={{0x10}}], 0x10}], 0x1, 0x0) 18:11:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000300)={{0x2, 0x0, @dev}, {0x6, @remote}, 0x48, {0x2, 0x0, @local}, 'veth0_macvtap\x00'}) 18:11:41 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) 18:11:42 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{0x0}], 0x1) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}}, 0x0) 18:11:42 executing program 4: syz_open_dev$sg(&(0x7f0000004ac0), 0x0, 0x781) 18:11:42 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) 18:11:42 executing program 5: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xd5ec411f8ecb3652) 18:11:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x12, 0x0, 0x0, 0x7}, 0x40) 18:11:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x8208ae63, &(0x7f0000000100)) [ 505.304785][T17031] input: syz1 as /devices/virtual/input/input82 18:11:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, 0x0, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 505.608556][T17055] input: syz1 as /devices/virtual/input/input83 18:11:44 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000300)) 18:11:44 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 18:11:44 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10) 18:11:45 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:45 executing program 1: syz_open_dev$audion(&(0x7f00000001c0), 0x0, 0x509000) 18:11:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, 0x0, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:45 executing program 4: bpf$MAP_CREATE(0x12, &(0x7f00000003c0), 0x40) 18:11:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4070aea0, &(0x7f0000000100)) 18:11:45 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000002200)={0x60}, 0xfffffffffffffdef) [ 508.329864][T17092] input: syz1 as /devices/virtual/input/input84 18:11:46 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0x2, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5bab5ab6"}, 0x0, 0x0, @planes=0x0}) 18:11:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}) 18:11:46 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000140)) 18:11:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xae78, 0x0) 18:11:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, 0x0, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:46 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc0045878, 0x0) [ 508.846210][T17136] input: syz1 as /devices/virtual/input/input85 18:11:48 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000380)='r', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000080)={r1, 0x0, 0x0}) 18:11:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002000000e6050e02690c00001afaffff", @ANYRES32=0x0, @ANYBLOB="200000000000000084000000070000007f1414aa000000000000000000000001200000000000000084000000020000003f0000000600000000000000", @ANYRES32=0x0, @ANYBLOB="18"], 0x78}, 0x0) 18:11:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffe, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000b40)="6c532304f1f69890670625a32c5f4a5734d3caa217b119b9f1241799eba7a17caa", 0x0, 0xffff8000, 0x0, 0xffffffffffffffff, 0x0}) 18:11:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:48 executing program 3: get_mempolicy(0x0, &(0x7f0000000040), 0x80, &(0x7f0000ffe000/0x1000)=nil, 0x3) 18:11:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xc}) [ 511.435958][T17169] input: syz1 as /devices/virtual/input/input86 18:11:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 18:11:49 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x1}}, 0x2e) 18:11:49 executing program 1: clone(0xcc240900, 0x0, 0x0, 0x0, 0x0) 18:11:49 executing program 4: connect$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x4e24, @loopback}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x568, 0x1b8, 0x378, 0x378, 0xe8, 0x378, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9f1ff8f24a22cc97c80fccd00d06f06a91c77cffd4fed5d712121a600"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0xe0b}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x3}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @local, [], [], 'bond_slave_0\x00', 'vcan0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) [ 511.729335][ T2025] Bluetooth: hci6: sending frame failed (-49) 18:11:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x0) [ 511.933061][T17205] xt_CHECKSUM: unsupported CHECKSUM operation 3 [ 513.811341][ T8] Bluetooth: hci6: command 0x1003 tx timeout [ 513.820153][ T2025] Bluetooth: hci6: sending frame failed (-49) 18:11:52 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:11:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 18:11:52 executing program 3: r0 = socket(0x1, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000a40)={r0}) 18:11:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 514.508592][T17225] input: syz1 as /devices/virtual/input/input87 18:11:52 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0x5452, &(0x7f0000000240)={0x622, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5bab5ab6"}, 0x0, 0x0, @planes=0x0}) 18:11:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008000, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) [ 515.891265][ T8] Bluetooth: hci6: command 0x1001 tx timeout [ 515.908108][ T2025] Bluetooth: hci6: sending frame failed (-49) [ 517.971106][ T8] Bluetooth: hci6: command 0x1009 tx timeout 18:11:59 executing program 1: syz_open_dev$sg(&(0x7f00000001c0), 0x6, 0x341) 18:11:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@prinfo={0x18, 0x84, 0x5, {0x18}}], 0x18}, 0x0) 18:11:59 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0x80045300, &(0x7f0000000100)) 18:11:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:11:59 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:11:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 18:11:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8482f1b37af7d3c4649dfaac3167b9f2ae840c72fe05980c09569457e9a4f7d8"}}) [ 522.069511][T17304] input: syz1 as /devices/virtual/input/input88 18:11:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@deltaction={0x13, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x24}}, 0x0) [ 522.208458][T14549] Bluetooth: hci6: Frame reassembly failed (-84) 18:11:59 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0x4020940d, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5bab5ab6"}, 0x0, 0x0, @planes=0x0}) 18:12:00 executing program 4: r0 = gettid() process_vm_readv(r0, &(0x7f0000001700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) 18:12:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xd}, 0x40) 18:12:00 executing program 4: mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x80, &(0x7f0000ffe000/0x1000)=nil, 0x3) 18:12:00 executing program 1: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) 18:12:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae46, &(0x7f0000000000)) 18:12:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x2, 0x1, 0x101}, 0x14}}, 0x0) [ 524.210277][ T5] Bluetooth: hci6: command 0x1003 tx timeout [ 524.224925][ T2025] Bluetooth: hci6: sending frame failed (-49) 18:12:02 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$alg(r0, &(0x7f00000010c0)=""/4096, 0x1000) 18:12:02 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) [ 526.299822][ T5] Bluetooth: hci6: command 0x1001 tx timeout [ 526.307661][ T2025] Bluetooth: hci6: sending frame failed (-49) [ 528.369811][ T8] Bluetooth: hci6: command 0x1009 tx timeout 18:12:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 18:12:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:10 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001300)={0x1, @vbi={0x0, 0x40}}) 18:12:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000200)={0x0, @empty, 0x4e20, 0x0, 'none\x00'}, 0x2c) 18:12:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x44, 0x1, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}]}, 0x44}}, 0x0) 18:12:10 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) [ 532.933694][T17385] input: syz1 as /devices/virtual/input/input89 [ 532.948905][T17388] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 18:12:10 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) 18:12:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}) [ 533.053830][ T9] Bluetooth: hci6: Frame reassembly failed (-84) 18:12:10 executing program 1: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'tunl0\x00', 0x0}) 18:12:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc0189436, &(0x7f0000000080)={0x0, 0x0}) 18:12:11 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) 18:12:11 executing program 4: socket(0x1e, 0x0, 0x6) [ 535.089073][ T5] Bluetooth: hci6: command 0x1003 tx timeout [ 535.095584][ T2025] Bluetooth: hci6: sending frame failed (-49) [ 537.178845][ T5] Bluetooth: hci6: command 0x1001 tx timeout [ 537.186668][ T2025] Bluetooth: hci6: sending frame failed (-49) [ 539.248800][ T5] Bluetooth: hci6: command 0x1009 tx timeout 18:12:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 18:12:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={&(0x7f0000000240)={0x7}, 0xc, &(0x7f0000000940)={0x0}}, 0x0) 18:12:21 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x101082, 0x0) write$usbip_server(r0, &(0x7f00000001c0)=@ret_submit={{0x3, 0x8, 0x0, 0x1, 0x5}, 0x2, 0x0, 0x0, 0xab, 0x4, 0x0, "", [{0xb62d, 0x1, 0xff}, {0x9, 0x8591, 0x0, 0x2}, {0x4, 0x3, 0x40, 0x4}, {0xffffffc1, 0x5, 0x0, 0x40}, {0x8001, 0x400}, {0x0, 0x0, 0x7, 0x7a7}, {0x0, 0x0, 0x3, 0x9f6}, {0x5}, {0x0, 0x0, 0x7}, {0x7, 0x0, 0x6}, {0x10000, 0x0, 0x1f, 0xfffffff7}, {0x1000, 0x8001, 0x2, 0x7fff}, {0x6, 0x0, 0xffff8001, 0x2}, {0x0, 0x401}, {0x0, 0x200}, {0x5, 0x3, 0x3, 0xfffffdc5}, {0x0, 0x5, 0x6, 0x2}, {0x0, 0x0, 0x4, 0x4}, {0x0, 0x1, 0x8, 0x6}, {0x0, 0x0, 0x0, 0x6}, {0xfffffffd, 0x5, 0x2, 0x6}, {0x826c, 0x500000, 0x0, 0x4000000}, {0x1, 0x7, 0x0, 0x30000000}, {0x7, 0x0, 0x9, 0x9}, {0x0, 0x6, 0x1, 0xfffffff8}, {0x101, 0x0, 0x0, 0x3ff}, {0xda, 0x40, 0x0, 0x9}, {0x54, 0x80, 0x7}, {0x47, 0x40, 0x0, 0xffffffff}, {0x9, 0x9, 0x5, 0x1}, {0x0, 0x0, 0x8, 0x4ef4fee3}, {0x6, 0x200, 0x0, 0x3}, {0x3, 0x0, 0x7}, {0x3f, 0xff, 0xf2}, {0x3f, 0x7}, {0x100, 0x1ff, 0x8}, {0x80, 0x69, 0xa76}, {0x200, 0x200000}, {0x40, 0x0, 0x3}, {}, {0xff}, {0x2e6, 0x5}, {0x3, 0x0, 0x788}, {0x0, 0x0, 0x2f, 0x3}, {0x1, 0x80000000, 0x1, 0x8001}, {0x0, 0x0, 0x800}, {0x1, 0x0, 0x800, 0x6}, {0xfffffff9, 0x6}, {0x3, 0x0, 0x101, 0x1}, {0x0, 0x8001, 0x10000, 0x7}, {0x3, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x3}, {0x7fffffff, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x1e5f6bba, 0x14b20}, {0x1, 0x4, 0xed, 0x1}, {0x0, 0x8, 0xeda, 0x9}, {0x8, 0xfffffff9, 0xff, 0x80000001}, {0x80000000, 0x0, 0x0, 0x4}, {0x4, 0xcf, 0xfff, 0x8}, {0x314}, {0x6, 0x8000, 0x0, 0x8}, {0xd113, 0xfff, 0x80000001, 0x94}, {0xff, 0x8}, {0x0, 0x0, 0x7fff, 0x6}, {0x0, 0xfffffffc, 0xd84, 0x6}, {0x4, 0x6, 0x0, 0x1}, {0xffffc3c8, 0x6, 0x6}, {0x1, 0x0, 0x0, 0x9}, {0x80, 0x0, 0x0, 0x10000}, {0xcc, 0x10001, 0x0, 0x20}, {0x0, 0x0, 0x80, 0x55}, {0x1000, 0x5, 0x7ff}, {0x7, 0x101, 0x0, 0x6}, {0x0, 0x10001, 0x8}, {0x0, 0x0, 0xc8}, {}, {}, {0x7fff}, {0x401}, {0x8000, 0x1, 0x3}, {}, {0x3, 0xe5e, 0x20}, {0x1, 0x2, 0xffffffff, 0xfff}, {0x6}, {}, {}, {0x3, 0xc8fd}, {0x0, 0x0, 0xe8}, {0x0, 0x0, 0x3, 0x2}, {0x0, 0x10000, 0x5}, {0x6, 0x10001, 0x0, 0x4}, {0x0, 0x0, 0x5}, {}, {0x0, 0x7, 0x0, 0x3f}, {0x0, 0x0, 0x7}, {0x0, 0x3, 0x0, 0x2}, {0x1, 0x0, 0xda}, {0x9, 0x0, 0x9}, {0x0, 0x0, 0x1, 0x1f}, {0x401, 0x1000}, {0x7f, 0x0, 0x0, 0x80c}, {0x7fff, 0x9}, {0x8000, 0x0, 0xa57}, {}, {0x3}, {}, {0x800, 0x4, 0x1, 0x2}, {0x5, 0x8, 0x2, 0x2}, {0x0, 0x0, 0x7}, {0xfffffff7}, {0x0, 0x5, 0x200, 0x4}, {0x0, 0x1}, {0x9}, {0xc358, 0x0, 0x0, 0xf3}, {}, {0x6, 0x0, 0x0, 0xfff}, {0x0, 0x7ff}, {0x3, 0x4, 0x0, 0x100}, {0x0, 0x0, 0xcb, 0x9}, {0x8, 0x10000, 0x5a, 0x3}, {0x2, 0x0, 0x6, 0x80}, {0x2, 0x0, 0xfffffe00, 0x9}, {0x5eee, 0x1, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x1ff, 0x9}, {0x0, 0x53, 0x9, 0x401}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x8, 0x80}, {0x148, 0x5, 0x7, 0x10001}, {0x4, 0xffffffff, 0x1}, {0x0, 0x0, 0x5}, {0x0, 0x200, 0xffffffff, 0x8}, {0x0, 0x0, 0x7fff, 0x4c5a}, {0x0, 0x4, 0x7, 0x5}, {0xfffff800, 0xc6a, 0x5040, 0x1}, {0x100, 0xfffffffc, 0xd739}, {0x0, 0x0, 0x0, 0x3ff}, {0x9, 0x8, 0x0, 0x8001}, {0x1, 0x8}, {0x7, 0x1, 0x7fffffff, 0x6}, {0x0, 0x0, 0x3, 0x8000}, {0x0, 0x0, 0x8}, {0x7fff, 0x9}, {0x0, 0x1}, {0x99, 0x401, 0x921a, 0x1000}, {0x7, 0x2, 0x1, 0x8}, {0x99, 0x0, 0x0, 0xfffffffd}, {0xc2, 0x5}, {0x6, 0x3f, 0x0, 0x2}, {0x0, 0x23000000, 0x80, 0x2d3}, {0x5, 0x3}, {0x10001, 0x0, 0x0, 0xffffffff}, {0x0, 0x3, 0x80000001, 0xdb57}, {0x10001, 0x0, 0x4}, {0x2, 0x40}, {0x3, 0x3}, {0x0, 0x0, 0x0, 0x2}, {0x8, 0xffffffee}, {0x80, 0x2, 0x7}, {0x5, 0x3f, 0x0, 0x2f5}, {0x0, 0x8000, 0x0, 0x1e}, {0x36bd, 0x0, 0x3, 0xff}, {0x0, 0x7fffffff, 0x1, 0x1ff}, {0x9, 0x0, 0xd4f}, {0x3, 0x0, 0x141}, {0x7, 0x7, 0x0, 0x1}, {0x8f, 0x9}, {0x0, 0x0, 0x4, 0x81}, {0x0, 0x159800, 0x26, 0x401}, {0x3}, {0x3, 0x0, 0xffff, 0xfffffc01}]}, 0xae0) 18:12:21 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:12:21 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000005c0)={0x2, 0xd, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15}, @sadb_key={0x1, 0x8}, @sadb_x_sec_ctx={0x1}, @sadb_key={0x1, 0x8}]}, 0x30}}, 0x0) 18:12:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:21 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)={0x0, 0xd, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5bab5ab6"}, 0x0, 0x0, @planes=0x0}) 18:12:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4008ae61, &(0x7f0000000100)) [ 543.837516][T17460] input: syz1 as /devices/virtual/input/input90 [ 543.948924][ T9] Bluetooth: hci6: Frame reassembly failed (-84) 18:12:22 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0xf38055be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:12:22 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0xf38055be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fgetxattr(r0, &(0x7f0000000a80)=@random={'security.', '\x00'}, 0x0, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:12:22 executing program 1: clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x4000c300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000000)=""/191, &(0x7f0000000100)=0xbf) setitimer(0x0, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:12:22 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0xf38055be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) [ 545.967682][T17522] Bluetooth: hci6: command 0x1003 tx timeout [ 545.975798][ T2025] Bluetooth: hci6: sending frame failed (-49) [ 548.049181][T17522] Bluetooth: hci6: command 0x1001 tx timeout [ 548.057366][ T2025] Bluetooth: hci6: sending frame failed (-49) [ 550.127363][ T9497] Bluetooth: hci6: command 0x1009 tx timeout 18:12:32 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) clone(0xf38055be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x8108000, &(0x7f0000000040), &(0x7f00000000c0), 0x0, &(0x7f0000000140)="ca") sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:12:32 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0xf38055be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fgetxattr(r0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:12:32 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:12:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:32 executing program 3: clone(0xc0006300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800013, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180)={0x0, 0x100}, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r1, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:12:32 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0xf38055be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 554.678927][T17548] input: syz1 as /devices/virtual/input/input91 18:12:32 executing program 1: clone(0xc0006300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800013, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180)={0x0, 0x100}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:12:32 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x8100000a, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x0, &(0x7f0000000100)="72d0d6312db5bdead7d9d1703b5b60ae6959d4d3f46bec385d2b60eb01cf58e053c47d01a530", 0x0, 0x0, &(0x7f0000000240)) 18:12:32 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x8100000a, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 18:12:32 executing program 1: clone(0xc0006300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800013, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180)={0x0, 0x100}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:12:33 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:12:33 executing program 1: openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 18:12:33 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack\x00') r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x20) 18:12:33 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x4000012, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009032, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffff9c, &(0x7f0000000080), 0x10b000, 0x0) read$FUSE(r2, &(0x7f0000004440)={0x2020}, 0x2020) 18:12:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:12:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x80853, r0, 0x0) 18:12:35 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 18:12:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) 18:12:35 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x8100000a, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x0, &(0x7f0000000100)="72d0d6312db5bdead7d9d1703b5b60ae6959d4d3f46bec385d2b60eb01cf58e053c47d01a530", 0x0, 0x0, &(0x7f0000000240)) [ 557.803971][T17694] input: syz1 as /devices/virtual/input/input92 18:12:35 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 18:12:35 executing program 1: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x80, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000180), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x80002316}) 18:12:35 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/rt_cache\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) dup3(r1, r0, 0x0) 18:12:35 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x74, 0x60881) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000180)=@urb_type_interrupt={0x1, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:36 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {}, {}, {}, {r1}, {}], 0x6, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) 18:12:36 executing program 4: r0 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000280)='\n', 0x1}], 0x1) 18:12:36 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, 0x0) 18:12:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:36 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x8100000a, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x0, &(0x7f0000000100)="72d0d6312db5bdead7d9d1703b5b60ae6959d4d3f46bec385d2b60eb01cf58e053c47d01a530", 0x0, 0x0, &(0x7f0000000240)) 18:12:36 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x4}}) [ 558.799129][T17734] input: syz1 as /devices/virtual/input/input93 18:12:36 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0xa}}) 18:12:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000100005077da300a67603000000000000", @ANYRES32=0x0, @ANYBLOB="7fff0002810700001c0012000b0001006d616373656300e10b0002adb5000700010000000a0005403a000000000000000800"], 0x50}}, 0x0) 18:12:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000180)=@shmem={0xc, 0x1, {0xb00}}, 0x0) [ 559.387484][T17758] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 559.422126][T17758] device macsec1 entered promiscuous mode 18:12:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 559.435204][T17758] device macvlan1 entered promiscuous mode 18:12:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}]}}}]}, 0x44}}, 0x0) [ 559.563505][T17766] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) 18:12:37 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, 0x0) 18:12:37 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x8100000a, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x0, &(0x7f0000000100)="72d0d6312db5bdead7d9d1703b5b60ae6959d4d3f46bec385d2b60eb01cf58e053c47d01a530", 0x0, 0x0, &(0x7f0000000240)) 18:12:37 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'trusted.', '/dev/zero\x00'}, 0x0, 0x0, 0x0) 18:12:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000180)=@shmem={0xc, 0x1, {0x80}}, 0xb0441) [ 559.823131][T17778] input: syz1 as /devices/virtual/input/input94 18:12:37 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup3(r1, r0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x8) 18:12:37 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f0000002180)=[{&(0x7f0000002340)=""/165, 0xa5}], 0x1, 0xfffffffc, 0x0) 18:12:38 executing program 3: r0 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) lseek(r0, 0xffffffff, 0x1) 18:12:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x58}}, 0x0) 18:12:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001400)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001200)="53ea8c38654f", 0x0, 0x0, 0x10, 0x0, 0x0}) 18:12:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001f80)={0x4}, 0x75) 18:12:38 executing program 4: r0 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000000)='vegas\x00', 0x6) writev(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)='g', 0x1}], 0x2) 18:12:38 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, 0x0) 18:12:38 executing program 5: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x2e}}) 18:12:38 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x12, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x4}, {0x4}}}]}, 0x34}}, 0x0) 18:12:38 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x74, 0x60881) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0105502, 0x0) 18:12:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 560.865765][T17826] input: syz1 as /devices/virtual/input/input95 18:12:38 executing program 4: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800013, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r1, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180), 0x0) 18:12:38 executing program 5: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="eeda0d8ed55a16dc5964ba8e746060448df8f4285523851b4d0255080794be620013f052c24a0f96bde1868c39d48ca5b3e426013d21b5f65fe8001543acf6a043b3435cb8b2c946bbe0b455eb667676f89ec44b1839d7e4f2fb8ff3367862914c750ff8bfb63cf56098737930a8104b8b99ec03757ada492328a94849a6bcfe7c75d36d449ee99ddb20f8820b4f23dcae4f9262462598771ba95ada77c2253d884f41f126804650cc5c3cbd7bf4229814905167055fc426f8") rt_sigreturn() 18:12:39 executing program 3: r0 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="d0fddf8c0a", 0x5}], 0x1) 18:12:39 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x4000012, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009032, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002100)='net/mcfilter\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000008140)={0x2020}, 0x2020) 18:12:39 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x10}}) 18:12:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:39 executing program 5: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x31}}) 18:12:39 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x0, 0x0}) 18:12:39 executing program 5: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x3b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800013, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 561.887822][T17861] input: syz1 as /devices/virtual/input/input96 18:12:39 executing program 4: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800013, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) truncate(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180), 0x0) 18:12:39 executing program 4: io_setup(0x81, &(0x7f0000000040)=0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r0, 0x2, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}]) 18:12:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:39 executing program 5: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fork() ptrace(0x4207, r0) rt_sigreturn() 18:12:39 executing program 4: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0x8) prlimit64(0x0, 0x0, &(0x7f0000000180), 0x0) [ 562.199690][T17889] input: syz1 as /devices/virtual/input/input97 18:12:40 executing program 3: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000380), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800013, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180), 0x0) 18:12:40 executing program 1: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180), 0x0) 18:12:40 executing program 4: clone(0x19960b614a3045c3, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, &(0x7f0000000100)='ns\x00') rt_sigreturn() 18:12:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f0000000140)=""/164, &(0x7f0000000200)=0xa4) 18:12:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:40 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x0, 0x0}) 18:12:40 executing program 1: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/file1\x00', 0x0) readlink(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000001c0)=""/215, 0xd7) prlimit64(0x0, 0x0, &(0x7f0000000080), 0x0) 18:12:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f0000000140)=""/164, &(0x7f0000000200)=0xa4) [ 563.186503][T17920] input: syz1 as /devices/virtual/input/input98 18:12:40 executing program 1: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000003c0), &(0x7f00000000c0)=0x4) 18:12:40 executing program 4: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) prlimit64(0x0, 0x0, &(0x7f0000000180), 0x0) 18:12:41 executing program 1: r0 = getpgrp(0x0) ptrace$peeksig(0x4209, r0, 0x0, 0x0) 18:12:41 executing program 4: clone(0x46226100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x981000, &(0x7f00000001c0), 0x0, 0x0, 0x0) rt_sigreturn() clone(0x0, 0x0, &(0x7f00000013c0), 0x0, 0x0) [ 563.497153][ T3250] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.503735][ T3250] ieee802154 phy1 wpan1: encryption failed: -22 18:12:41 executing program 3: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800013, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(r1, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180), 0x0) 18:12:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f0000000140)=""/164, &(0x7f0000000200)=0xa4) 18:12:41 executing program 1: clone(0x4100, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) rt_sigreturn() 18:12:41 executing program 4: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x2a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800013, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:12:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:43 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x0, 0x0}) 18:12:43 executing program 1: clone(0x4100, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001480)='.\x00', 0x0, 0x0) flock(r0, 0x0) rt_sigreturn() 18:12:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f0000000140)=""/164, &(0x7f0000000200)=0xa4) 18:12:43 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x20) 18:12:43 executing program 3: chown(0x0, 0xffffffffffffffff, 0xee00) 18:12:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000004c0)) 18:12:43 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40010081) 18:12:43 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0xffffffff, 0x200000) [ 566.308613][T18058] input: syz1 as /devices/virtual/input/input99 18:12:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080), 0x4) 18:12:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002000000e6050e02690c00001afaffff", @ANYRES32=0x0, @ANYBLOB="20000000000000008400000007000000fc010000000000000000000000000001200000000000000084000000020000003f0000000600000000000000", @ANYRES32=0x0, @ANYBLOB="18"], 0x78}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000003c0), 0x4) 18:12:44 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6a4, 0x158, 0x5a8, 0x0, 0x0, 0x0, 0x6b4, 0x6b4, 0x6b4, 0x6b4, 0x6b4, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'netdevsim0\x00', 'veth1_to_team\x00'}, 0x0, 0x130, 0x158, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @private2}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@private2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'veth0\x00', 'xfrm0\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv6=@rand_addr=' \x01\x00'}}}, {{@ipv6={@private2, @dev, [], [], 'ipvlan0\x00', 'vlan1\x00'}, 0x0, 0xa4, 0x1cc}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:xconsole_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@mcast1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x700) 18:12:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:46 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, r0) 18:12:46 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x3ff, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffbbfbe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 18:12:46 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x0, &(0x7f0000000080)}) 18:12:46 executing program 5: io_setup(0x8, &(0x7f00000000c0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = inotify_init() io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) 18:12:46 executing program 3: socketpair(0x2, 0x3, 0x46, 0x0) 18:12:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x7fb, 0x4) [ 569.434682][T18100] input: syz1 as /devices/virtual/input/input100 18:12:47 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 18:12:47 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000080)) 18:12:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 18:12:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="d4000000020901"], 0xd4}}, 0x0) 18:12:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'\x00', @ifru_data=0x0}) [ 569.729981][T18125] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.5'. 18:12:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='cdg\x00', 0x4) 18:12:49 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x101001) 18:12:49 executing program 4: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000100)={0x1}, &(0x7f0000000180), 0x0) 18:12:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, @l2={0x1f, 0x0, @none}, @sco={0x1f, @fixed}, @nl}) 18:12:49 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x0, &(0x7f0000000080)}) 18:12:50 executing program 1: add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='\x00', 0x1, 0xfffffffffffffffb) 18:12:50 executing program 4: timer_create(0x0, 0x0, &(0x7f0000001140)) timer_gettime(0x0, &(0x7f0000001180)) 18:12:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @multicast1}, @ipx={0x4, 0x0, 0x0, "23d9d97a3a1a"}, @hci, 0xff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='bond_slave_1\x00'}) 18:12:50 executing program 1: openat$nvram(0xffffff9c, &(0x7f0000000040), 0x19d0109c3606859d, 0x0) [ 572.524928][T18151] input: syz1 as /devices/virtual/input/input101 18:12:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername(r0, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000300)=0x80) getsockopt$inet6_opts(r1, 0x29, 0x0, 0x0, 0x0) 18:12:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x6, 0x0, &(0x7f0000000100)) 18:12:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'batadv0\x00'}}}}, 0x2c}}, 0x0) [ 572.770896][T18173] input: syz1 as /devices/virtual/input/input102 18:12:50 executing program 5: r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4004700c, 0x1449) 18:12:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 18:12:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x3, 0x6, 0x101}, 0x14}}, 0x0) 18:12:50 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x0, &(0x7f0000000080)}) 18:12:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)) fcntl$lock(r0, 0x6, &(0x7f00000000c0)) 18:12:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 18:12:50 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 18:12:50 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x6, 0x4, 0x4, 0x4}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x6, 0x4, 0x4, 0x4}, 0x18) dup3(r1, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018170000", @ANYRES32=r1, @ANYBLOB="000000000000000018137c00", @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x74) [ 573.342460][T18204] input: syz1 as /devices/virtual/input/input103 18:12:51 executing program 1: io_setup(0x8, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 18:12:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000500)={@loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80205}) 18:12:51 executing program 4: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000001c0)={0x80000001}, 0x8) 18:12:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:51 executing program 4: r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) 18:12:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) [ 573.610741][T18224] input: syz1 as /devices/virtual/input/input104 18:12:51 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x50000}]}) 18:12:51 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040), 0x4) 18:12:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) 18:12:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000100)={'vlan1\x00', @ifru_data=0x0}) 18:12:51 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) 18:12:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) [ 574.417098][T18252] ptrace attach of "/root/syz-executor.3"[8770] was attempted by "/root/syz-executor.3"[18252] 18:12:52 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000002080)='./file0\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000004100)='./file0\x00', 0x0, 0x0, &(0x7f0000004140)) 18:12:52 executing program 5: socketpair(0x0, 0x100801, 0x0, 0x0) 18:12:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:52 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000029000504d25a80648c63940d0124fc6004000f400a003d005a00000037153e370a00018003000000d1bd", 0x2e}], 0x1}, 0x800000000000000) 18:12:52 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) sendmmsg(r0, &(0x7f0000003fc0)=[{{&(0x7f0000002740)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "33210512f370a3b622bf5077564868d91fc634feaef3f9fede3d848ce9f4466749f36581b04672c864f244beef27f733f132404c87207dc611e83d5141eb73"}, 0x80, &(0x7f0000004080)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0) 18:12:52 executing program 1: bpf$BPF_PROG_DETACH(0x21, &(0x7f0000000b80)={@cgroup, 0xffffffffffffffff, 0x5}, 0x10) [ 574.638052][T18266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.658124][T18266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.672515][T18268] input: syz1 as /devices/virtual/input/input105 18:12:52 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x50000}]}) 18:12:52 executing program 4: clock_adjtime(0x0, &(0x7f0000000000)={0x82, 0x0, 0xfffffffffffffff8, 0x5, 0x0, 0x0, 0x100000001, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) 18:12:52 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@generic={0x7}, @call]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xba, &(0x7f0000000100)=""/186, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:12:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x1}, 0x40) 18:12:52 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x20, r0, 0x3, 0x0, 0x0, {0x5}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 18:12:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x88, 0xb, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x1a8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'batadv_slave_1\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @local, [], [], 'macvlan0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 18:12:52 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfb, &(0x7f0000000080)=""/251, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:12:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001740)={0x14, r1, 0x1}, 0x14}}, 0x0) 18:12:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:53 executing program 4: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x80000001) 18:12:53 executing program 5: bpf$BPF_PROG_DETACH(0x22, &(0x7f0000000b80), 0x10) 18:12:53 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}, @generic, @generic], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xb1, &(0x7f00000000c0)=""/177, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 575.627493][T18310] input: syz1 as /devices/virtual/input/input106 18:12:53 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x50000}]}) 18:12:53 executing program 4: bpf$BPF_PROG_GET_FD_BY_ID(0x10, 0x0, 0x0) 18:12:53 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 18:12:53 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) bind(r0, &(0x7f0000000140)=@tipc, 0x80) 18:12:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x5, 0x0, 0x3ff}, 0x40) 18:12:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x88, 0x65, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x1a8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'batadv_slave_1\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @local, [], [], 'macvlan0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 18:12:53 executing program 5: r0 = fork() setpriority(0x0, r0, 0x8) 18:12:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'macvlan1\x00', {}, 0x3}) bpf$BPF_PROG_GET_FD_BY_ID(0x10, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) 18:12:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:54 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 18:12:54 executing program 4: bpf$BPF_PROG_DETACH(0x23, &(0x7f0000000b80)={@cgroup, 0xffffffffffffffff, 0x5}, 0x10) 18:12:54 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x85, &(0x7f0000000140)=""/133, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 576.640530][T18354] input: syz1 as /devices/virtual/input/input107 18:12:54 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:12:54 executing program 1: bpf$BPF_PROG_DETACH(0xe, &(0x7f0000000b80)={@cgroup, 0xffffffffffffffff, 0x5}, 0x10) 18:12:54 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0xffffffff, 0x2}) 18:12:54 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000080)={'bond_slave_1\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) 18:12:54 executing program 5: r0 = fork() migrate_pages(r0, 0x5, &(0x7f0000000000)=0x401, &(0x7f0000000040)=0x101) 18:12:54 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x34, r0, 0x3, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x0) 18:12:54 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x14, r0, 0x3, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 18:12:54 executing program 5: socket(0x29, 0x2, 0x1) 18:12:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:55 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x20, r0, 0x3, 0x0, 0x0, {0x2}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 18:12:55 executing program 1: bpf$BPF_PROG_DETACH(0x16, 0x0, 0x0) [ 577.527139][ T37] audit: type=1326 audit(1621015975.130:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18374 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=230 compat=0 ip=0x48a7a1 code=0x0 18:12:55 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@datasec={0x6, 0x1, 0x0, 0xf, 0x2, [{}], '8K'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "a0e5"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000240)=""/132, 0x48, 0x84, 0x1}, 0x20) 18:12:55 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 577.630636][T18395] input: syz1 as /devices/virtual/input/input108 [ 577.653065][ T37] audit: type=1326 audit(1621015975.130:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18374 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 18:12:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x7, 0x3, 0x2}, 0x40) 18:12:55 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}}], 0x1, 0x0) [ 577.768668][ T37] audit: type=1326 audit(1621015975.160:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18374 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 18:12:55 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x0, 0x1f}, 0x40) 18:12:55 executing program 3: wait4(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)) 18:12:55 executing program 4: fchmodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) 18:12:55 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x5, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6}]}) 18:12:55 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x2000000) [ 577.934461][ T37] audit: type=1326 audit(1621015975.160:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18374 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=72 compat=0 ip=0x4665d9 code=0x0 [ 578.022430][ T37] audit: type=1326 audit(1621015975.420:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18402 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 [ 578.095124][ T37] audit: type=1326 audit(1621015975.460:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18402 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=219 compat=0 ip=0x4665d9 code=0x0 [ 578.144416][ T37] audit: type=1326 audit(1621015975.460:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18402 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=72 compat=0 ip=0x4665d9 code=0x0 [ 578.188413][ T37] audit: type=1326 audit(1621015975.460:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18402 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=72 compat=0 ip=0x4665d9 code=0x0 [ 578.232085][ T37] audit: type=1326 audit(1621015975.770:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18418 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 [ 578.286159][ T37] audit: type=1326 audit(1621015975.820:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18418 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=219 compat=0 ip=0x4665d9 code=0x0 18:12:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:12:56 executing program 5: syz_usb_connect(0x0, 0x2f, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x67, 0xd2, 0x60, 0x10, 0xd64, 0x108, 0xaaa9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x92, 0xe8, 0xd5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x9}]}}]}}]}}]}}, 0x0) 18:12:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x80000001, 0x0, 0x1}, 0x40) 18:12:56 executing program 1: bpf$MAP_CREATE(0x23, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 18:12:56 executing program 2: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x8) socket(0x2b, 0x1, 0x0) 18:12:56 executing program 3: keyctl$chown(0x8, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 18:12:56 executing program 1: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000005140)) [ 578.589565][T18446] input: syz1 as /devices/virtual/input/input109 18:12:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x4020940d, &(0x7f0000000040)={'batadv_slave_0\x00'}) 18:12:56 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 18:12:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000009c0)="17", 0x1, 0x890, &(0x7f0000000a40)={0xa, 0x4e20, 0x0, @dev, 0x4}, 0x1c) 18:12:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000), 0x4) 18:12:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000006b40)={0x0, 0x0, &(0x7f0000006b00)={0x0, 0xec4}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 578.814187][T17522] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 579.054170][T17522] usb 6-1: Using ep0 maxpacket: 16 [ 579.174640][T17522] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 579.344632][T17522] usb 6-1: New USB device found, idVendor=0d64, idProduct=0108, bcdDevice=aa.a9 [ 579.364074][T17522] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.372276][T17522] usb 6-1: Product: syz [ 579.385256][T17522] usb 6-1: Manufacturer: syz [ 579.392483][T17522] usb 6-1: SerialNumber: syz [ 579.449530][T17522] usb 6-1: config 0 descriptor?? 18:12:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 579.516479][T17522] zr364xx 6-1:0.0: Zoran 364xx compatible webcam plugged [ 579.523661][T17522] zr364xx 6-1:0.0: model 0d64:0108 detected [ 579.553914][T17522] usb 6-1: 320x240 mode selected [ 579.570588][T17522] zr364xx 6-1:0.0: Could not find bulk-in endpoint [ 579.581613][T17522] zr364xx: probe of 6-1:0.0 failed with error -12 [ 579.648680][T18480] input: syz1 as /devices/virtual/input/input110 [ 579.719594][T17522] usb 6-1: USB disconnect, device number 7 [ 580.514144][ T36] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 580.793982][ T36] usb 6-1: Using ep0 maxpacket: 16 [ 580.924329][ T36] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 581.124007][ T36] usb 6-1: New USB device found, idVendor=0d64, idProduct=0108, bcdDevice=aa.a9 [ 581.133738][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.142432][ T36] usb 6-1: Product: syz [ 581.147215][ T36] usb 6-1: Manufacturer: syz [ 581.151940][ T36] usb 6-1: SerialNumber: syz [ 581.162430][ T36] usb 6-1: config 0 descriptor?? [ 581.216280][ T36] zr364xx 6-1:0.0: Zoran 364xx compatible webcam plugged [ 581.223402][ T36] zr364xx 6-1:0.0: model 0d64:0108 detected [ 581.240114][ T36] usb 6-1: 320x240 mode selected [ 581.245937][ T36] zr364xx 6-1:0.0: Could not find bulk-in endpoint [ 581.252748][ T36] zr364xx: probe of 6-1:0.0 failed with error -12 18:12:59 executing program 5: io_setup(0x8, &(0x7f00000000c0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000001400)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x6}]) 18:12:59 executing program 1: name_to_handle_at(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x0) 18:12:59 executing program 4: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf) 18:12:59 executing program 3: r0 = socket(0x11, 0xa, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 18:12:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x891b, &(0x7f0000000080)={'veth1_to_hsr\x00', @ifru_ivalue}) 18:12:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 581.424452][ T9622] usb 6-1: USB disconnect, device number 8 18:12:59 executing program 1: add_key$user(&(0x7f00000021c0), 0x0, 0x0, 0x0, 0xfffffffffffffff9) [ 581.563119][T18513] input: syz1 as /devices/virtual/input/input111 18:12:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f00000004c0)="b0e40656", 0x4) 18:12:59 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0xa040, 0x0) read$FUSE(r0, 0x0, 0x0) 18:12:59 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000e40)={0x80000000}, 0x8) 18:12:59 executing program 4: r0 = openat$pfkey(0xffffff9c, &(0x7f0000010180), 0x0, 0x0) inotify_rm_watch(r0, 0x0) 18:12:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000000)={'vlan1\x00', @ifru_data=0x0}) 18:12:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1ac, 0xffffffff, 0xffffffff, 0x1ac, 0xffffffff, 0x3, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve0\x00', 'ip_vti0\x00', {}, {}, 0x0, 0x0, 0x42}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x94, 0xd4, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x29c) 18:12:59 executing program 5: r0 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'exec ', ':S\x001\x00\x00\x00\xc4\xb2\xff\xf4\"O\x00\x00\xad\x00\xbdJ\x00\xea\xe9\xf1\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xca\xb05\x89\xee\x93\xfc\x10\xb1\xb3X Vy<\x7f;{\"\xf6\x10c\v\xb5G\x88/\xa0\xfeR\xda\xff\nn\x14\xe3\x9c'}, 0x4e) 18:12:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc) 18:12:59 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "a07083a6655ae9446c1ff8d75d7dd2a330e58b2423ce2f4c693b746b056514a2ab703d062ffbe1db722c9e11023bf45d0bfc34a6dd9f2376493f36c7767c358b"}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f0000000180)=""/140, 0x8c) 18:12:59 executing program 2: r0 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 18:13:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 18:13:00 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "a07083a6655ae9446c1ff8d75d7dd2a330e58b2423ce2f4c693b746b056514a2ab703d062ffbe1db722c9e11023bf45d0bfc34a6dd9f2376493f36c7767c358b"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 18:13:00 executing program 5: add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="a5", 0x1, 0xffffffffffffffff) 18:13:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000001080)={'vlan0\x00', @ifru_data=0x0}) 18:13:00 executing program 2: r0 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x1e9c01, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 18:13:00 executing program 3: prctl$PR_MCE_KILL(0x21, 0x1, 0xb642e4fc3c4fec36) 18:13:00 executing program 4: socket(0x1, 0x0, 0x7) 18:13:00 executing program 1: r0 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000001c0)={'exec ', '\x00'}, 0x6) 18:13:00 executing program 5: execveat(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0, 0x0) 18:13:00 executing program 2: io_setup(0x7c7f, &(0x7f0000002140)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000027c0)=[&(0x7f0000002280)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000002180)="036c7aaa23188713d1679c142edada7b", 0x10, 0x5}]) [ 582.529625][T18566] input: syz1 as /devices/virtual/input/input112 18:13:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8935, &(0x7f0000000100)={'ip6_vti0\x00', @ifru_addrs=@ax25={0x3, @default}}) 18:13:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000880), 0x7f, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000800)=[{&(0x7f0000000740)="db", 0x1}], 0x1, 0x81805, 0x0) sendfile(r0, r0, 0x0, 0x24000000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 582.822310][T18584] loop7: detected capacity change from 0 to 1036 18:13:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) 18:13:00 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x63c, 0x158, 0x5a8, 0x0, 0x0, 0x0, 0x6b4, 0x6b4, 0x6b4, 0x6b4, 0x6b4, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'netdevsim0\x00', 'veth1_to_team\x00'}, 0x0, 0xa4, 0xcc}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xc8, 0x10c, 0x0, {}, [@common=@ipv6header={{0x24}}]}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@private2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'veth0\x00', 'xfrm0\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv6=@rand_addr=' \x01\x00'}}}, {{@ipv6={@private2, @dev, [], [], 'ipvlan0\x00', 'vlan1\x00'}, 0x0, 0xa4, 0x1cc}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:xconsole_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@mcast1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x698) 18:13:00 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 18:13:00 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, 0x0}) 18:13:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f00000000c0)) 18:13:01 executing program 5: open$dir(&(0x7f0000000080)='.\x00', 0xa200, 0x0) 18:13:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/241) 18:13:01 executing program 2: socket$netlink(0x10, 0x3, 0x20) 18:13:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0xb2add92524d62510, 0x0, &(0x7f00000000c0)) 18:13:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'team_slave_0\x00', @ifru_names}) [ 583.555002][T18612] input: syz1 as /devices/virtual/input/input113 18:13:01 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) 18:13:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x5, 0x4) 18:13:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) 18:13:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x12, &(0x7f0000000100)="9d088031", 0x4) 18:13:02 executing program 1: r0 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xa) 18:13:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @multicast1}, @l2={0x1f, 0x0, @fixed}, @hci, 0xffff}) 18:13:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) 18:13:02 executing program 3: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) 18:13:02 executing program 4: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x9}, 0x0, 0x0, 0x0) 18:13:02 executing program 5: r0 = socket(0x2, 0xa, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) 18:13:02 executing program 2: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') uselib(&(0x7f00000000c0)='./file0\x00') [ 584.496815][T18648] input: syz1 as /devices/virtual/input/input114 18:13:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x28, r1, 0x209, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 18:13:02 executing program 2: clone3(&(0x7f00000009c0)={0x0, &(0x7f0000000740), 0x0, &(0x7f00000007c0), {0x25}, &(0x7f0000000800)=""/119, 0x77, &(0x7f0000000880)=""/213, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x8}, 0x58) 18:13:02 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0xc020660b, 0x0) 18:13:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) 18:13:02 executing program 1: socketpair(0x64, 0x0, 0x0, &(0x7f0000000000)) 18:13:02 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001dc0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001d00)="bc", 0x1}, 0x68) 18:13:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x52, &(0x7f0000000240)="c4009c0c157852b332e308ac20ed0cd96695f555161bcf0f78eb4fab98a907004dbb28fb13487940192aa94598c209000000000000009aa94a4c37cbc61cb9af803f693616b53e23f0d6c351013888b864c1"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:13:02 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x8919, 0x0) 18:13:02 executing program 2: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 585.422333][T18696] input: syz1 as /devices/virtual/input/input115 18:13:03 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x92}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:13:03 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xb6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x9d}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x4, 0x1}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x6, 0x8, 0xf4}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}]}) 18:13:03 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x2, 0x0) 18:13:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:13:03 executing program 3: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz0\x00', 0x200002, 0x0) getpid() 18:13:03 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x151040, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001640)) [ 585.853656][ T9622] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 586.157346][ T9622] usb 3-1: Using ep0 maxpacket: 16 18:13:03 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x200080) 18:13:03 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x1609, &(0x7f0000000040)={0x0, 0x9a7d, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:13:03 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x40000}, 0x20) [ 586.284186][ T9622] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 182, changing to 11 [ 586.323325][ T9622] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.369255][ T9622] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 586.405065][ T9622] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 586.430196][ T9622] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 586.753574][ T9622] usb 3-1: string descriptor 0 read error: -22 [ 586.759972][ T9622] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 586.769865][ T9622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.063715][ T9622] cdc_ncm 3-1:1.0: bind() failure [ 587.085533][ T9622] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 587.092602][ T9622] cdc_ncm 3-1:1.1: bind() failure [ 587.123592][ T9622] usb 3-1: USB disconnect, device number 2 [ 587.803487][T17522] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 588.043386][T17522] usb 3-1: Using ep0 maxpacket: 16 [ 588.164020][T17522] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 182, changing to 11 [ 588.175281][T17522] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.186474][T17522] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 588.197381][T17522] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 588.208083][T17522] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 18:13:05 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:13:05 executing program 0: mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x20000}, 0x20) 18:13:05 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000001280), 0xce000, 0x0) 18:13:05 executing program 5: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001300), 0x6, 0x0) [ 588.453416][T17522] usb 3-1: string descriptor 0 read error: -22 [ 588.461011][T17522] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 588.507208][T17522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 18:13:06 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:13:06 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], &(0x7f0000000100)=""/169, 0x1a, 0xa9, 0x1}, 0x20) 18:13:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 18:13:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, @in={0x2, 0x0, @multicast2}, @can, @sco, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='vcan0\x00'}) 18:13:06 executing program 4: r0 = socket(0x2, 0xa, 0x0) recvmsg$can_raw(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x1) 18:13:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) [ 588.583440][T17522] usb 3-1: can't set config #1, error -71 [ 588.604894][T17522] usb 3-1: USB disconnect, device number 3 18:13:06 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4801) 18:13:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x19}, @val={0x8}, @void}}}, 0x24}}, 0x0) 18:13:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf251300000008"], 0x34}, 0x1, 0x0, 0x0, 0x4040094}, 0x0) 18:13:06 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) get_mempolicy(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000dee000/0x2000)=nil, 0x4) 18:13:06 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c0f493c3", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002bc0)={0x2c, &(0x7f0000002ac0)={0x0, 0x0, 0x4, "99dd24fc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:13:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0xaea2, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 588.858548][T18791] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 588.923465][T18796] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:13:06 executing program 0: clone3(&(0x7f00000001c0)={0x200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:13:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) [ 589.284041][T17753] usb 2-1: new high-speed USB device number 2 using dummy_hcd 18:13:07 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x15, &(0x7f0000000240)="c4009c0c157852b332e308ac20ed0cd96695f55516"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:13:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x34}}, 0x0) 18:13:07 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x3, 0x4}}}}}}}]}}, 0x0) 18:13:07 executing program 0: clone3(&(0x7f00000009c0)={0x0, &(0x7f0000000740), 0x0, 0x0, {0x25}, &(0x7f0000000800)=""/119, 0x77, &(0x7f0000000880)=""/213, &(0x7f0000000980)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58) 18:13:07 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FBIO_WAITFORVSYNC(r0, 0x4605, 0x0) [ 589.563123][T17753] usb 2-1: Using ep0 maxpacket: 16 18:13:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 18:13:07 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000080)) [ 589.703954][T17753] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 589.740466][T17753] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 589.783133][T17753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.834065][T17753] usb 2-1: config 0 descriptor?? 18:13:07 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x8918, 0x0) [ 589.886215][T17753] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 589.893083][ T9497] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 589.894258][T18850] tipc: Started in network mode [ 590.042771][T18850] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 590.059777][T18850] tipc: Enabled bearer , priority 0 [ 590.083445][T18857] tipc: Enabling of bearer rejected, already enabled [ 590.097162][T17753] usb 2-1: USB disconnect, device number 2 [ 590.143229][ T9497] usb 5-1: Using ep0 maxpacket: 16 [ 590.263445][ T9497] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.282490][ T9497] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.305354][ T9497] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 590.328318][ T9497] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 590.348638][ T9497] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 590.362405][ T9497] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 590.543376][ T9497] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 590.553663][ T9497] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.561884][ T9497] usb 5-1: Product: syz [ 590.568742][ T9497] usb 5-1: Manufacturer: syz [ 590.574367][ T9497] usb 5-1: SerialNumber: syz [ 590.736391][T17753] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 590.863085][ T9497] cdc_ncm 5-1:1.0: bind() failure [ 590.899091][ T9497] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 590.930601][ T9497] cdc_ncm 5-1:1.1: bind() failure [ 590.987163][ T9497] usb 5-1: USB disconnect, device number 5 [ 591.023035][T17753] usb 2-1: Using ep0 maxpacket: 32 [ 591.066235][ T9622] tipc: Node number set to 11578026 [ 591.163328][T17753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.174316][T17753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.186519][T17753] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 591.196783][T17753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.208417][T17753] usb 2-1: config 0 descriptor?? [ 591.264359][T17753] hub 2-1:0.0: USB hub found [ 591.483222][T17753] hub 2-1:0.0: 1 port detected [ 591.602915][ T9497] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 591.843435][ T9497] usb 5-1: Using ep0 maxpacket: 16 [ 591.963349][ T9497] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.974664][ T9497] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.985970][ T9497] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 591.996825][ T9497] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 592.008237][ T9497] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 592.019196][ T9497] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 592.123162][T17753] hub 2-1:0.0: activate --> -90 [ 592.183088][ T9497] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 592.192468][ T9497] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.201184][ T9497] usb 5-1: Product: syz [ 592.205909][ T9497] usb 5-1: Manufacturer: syz [ 592.210674][ T9497] usb 5-1: SerialNumber: syz [ 592.496276][ T9497] cdc_ncm 5-1:1.0: bind() failure [ 592.512943][ T9497] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 592.523604][ T9497] cdc_ncm 5-1:1.1: bind() failure [ 592.544180][ T9497] usb 5-1: USB disconnect, device number 6 [ 592.573067][ T9622] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 592.580684][ T9622] hub_port_connect: 3 callbacks suppressed [ 592.580705][ T9622] usb 2-1-port1: connect-debounce failed [ 592.588735][ T8] usb 2-1: USB disconnect, device number 3 [ 593.322890][ T9497] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 593.562852][ T9497] usb 2-1: Using ep0 maxpacket: 16 [ 593.683298][ T9497] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 593.701657][ T9497] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 593.717827][ T9497] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.728383][ T9497] usb 2-1: config 0 descriptor?? [ 593.775133][ T9497] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 18:13:11 executing program 1: perf_event_open(&(0x7f0000002b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) 18:13:11 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{}], 0x20) 18:13:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 18:13:11 executing program 5: syz_open_dev$usbfs(&(0x7f00000000c0), 0x5, 0x0) 18:13:11 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4400ae8f, &(0x7f0000000140)) 18:13:11 executing program 4: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x1000f0}, 0x20) [ 593.863559][ T9497] usb 2-1: USB disconnect, device number 4 [ 593.950880][T18931] tipc: Enabling of bearer rejected, already enabled 18:13:11 executing program 0: waitid(0x2, 0x0, &(0x7f0000000040), 0x8, 0x0) 18:13:11 executing program 5: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0xc4}, 0x0) 18:13:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x700}, 0x0) 18:13:11 executing program 2: sched_setattr(0x0, &(0x7f0000000000)={0x38}, 0x0) 18:13:11 executing program 1: openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) clone3(&(0x7f0000002a40)={0x120100, 0x0, &(0x7f0000002880), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002a00)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 18:13:11 executing program 4: syz_open_dev$sndpcmc(0x0, 0x0, 0x0) clone3(&(0x7f0000002a40)={0x120100, 0x0, 0x0, &(0x7f00000028c0), {}, &(0x7f0000002900)=""/82, 0x52, 0x0, &(0x7f0000002a00)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000002ac0), 0x500, 0x0) 18:13:11 executing program 2: clone3(&(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0], 0x1}, 0x58) 18:13:11 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000079a457404b0c0001e6da0000000109021b0001000000050302"], 0x0) 18:13:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000280)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x7ff, 0x13, &(0x7f0000000300)=""/19, 0x41000, 0xc, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xbffffeffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000000), 0x220000) 18:13:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf2502"], 0x34}}, 0x0) [ 594.396619][T18963] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 594.427486][T18964] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 594.632713][ T36] usb 6-1: new high-speed USB device number 9 using dummy_hcd 18:13:12 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:13:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e) 18:13:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:13:12 executing program 4: socketpair(0x32, 0x0, 0x0, &(0x7f0000000040)) 18:13:12 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x14800, 0x0) [ 595.043475][ T36] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 595.059050][ T36] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 18:13:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0x4, 0x4, 0x410, 0x220, 0x0, 0x0, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'geneve0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @rand_addr, 0x8}}}, {{@arp={@remote, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x2, {@mac=@dev, @empty, @rand_addr, @dev}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) 18:13:12 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f0000001080), 0x80002, 0x0) [ 595.085541][ T36] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 595.112976][ T36] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=da.e6 18:13:12 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x49b582, 0x0) [ 595.146175][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.205380][ T36] usb 6-1: config 0 descriptor?? 18:13:12 executing program 4: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f00000002c0)={'filter\x00', 0x11, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x2, {@mac=@local, @empty, @rand_addr, @dev}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2e0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) [ 595.404117][T19014] x_tables: unsorted underflow at hook 4 [ 595.421025][T19017] x_tables: unsorted underflow at hook 4 [ 595.486795][T17753] usb 6-1: USB disconnect, device number 9 [ 596.272457][ T8] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 596.632610][ T8] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 596.641354][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.652358][ T8] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 596.661949][ T8] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=da.e6 [ 596.671768][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.681790][ T8] usb 6-1: config 0 descriptor?? 18:13:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x57, &(0x7f0000000240)="c4009c0c157852b332e308ac20ed0cd96695f555161bcf0f78eb4fab98a907004dbb28fb13487940192aa94598c209000000000000009aa94a4c37cbc61cb9af803f693616b53e23f0d6c351013888b864c1b64a6e1b2e"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:13:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002bc0)={0x2c, &(0x7f0000002ac0)={0x0, 0x0, 0x4, "99dd24fc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 18:13:14 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000340), 0x10, &(0x7f0000000400)={0x0}}, 0x0) 18:13:14 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x8915, 0x0) 18:13:14 executing program 4: syz_io_uring_setup(0x7d4, &(0x7f0000000000)={0x0, 0x7def, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:13:14 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x3a9401, 0x0) [ 596.940603][T17754] usb 6-1: USB disconnect, device number 10 18:13:14 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001300), 0x301401, 0x0) 18:13:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:13:14 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) 18:13:14 executing program 4: getresuid(&(0x7f0000000200), 0x0, 0x0) 18:13:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, &(0x7f00000000c0)) 18:13:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r1, 0x209, 0x0, 0x0, {{}, {@val={0x5}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x2c}}, 0x0) [ 597.302323][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 597.380929][T19068] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 597.393371][T19069] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 597.562328][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 597.683165][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 597.704439][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 597.726359][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.748496][ T8] usb 2-1: config 0 descriptor?? [ 597.801640][ T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 598.006801][ T8] usb 2-1: USB disconnect, device number 5 [ 598.572245][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 598.812347][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 598.933050][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.944256][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.957791][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 598.967914][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.978251][ T8] usb 2-1: config 0 descriptor?? [ 599.024676][ T8] hub 2-1:0.0: USB hub found [ 599.242446][ T8] hub 2-1:0.0: 1 port detected [ 599.872199][ T9497] hub 2-1:0.0: activate --> -90 18:13:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 600.114728][ T36] usb 2-1: USB disconnect, device number 6 [ 600.132654][ T9497] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 600.892003][ T9497] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 601.132136][ T9497] usb 2-1: Using ep0 maxpacket: 16 [ 601.252103][ T9497] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 601.265536][ T9497] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 601.276571][ T9497] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.287397][ T9497] usb 2-1: config 0 descriptor?? [ 601.334677][ T9497] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 18:13:19 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000001900)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001780)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x10140) 18:13:19 executing program 4: perf_event_open(&(0x7f0000002b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:13:19 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0xffffffffffffffff) 18:13:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x28, r1, 0x209, 0x0, 0x0, {{}, {@val={0x8, 0x10}, @val={0xc}}}}, 0x28}}, 0x0) 18:13:19 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 18:13:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="001500000000652067072b3083bd922eb45482236e02b135b6980948165387241b52eb4b9ad9c415e21686664b4958b49189179f55d64536ca1d470e57dac933f626ae8c92b33a8eb96eff149752a98891361e00a62d5e292ee0457c738383c1b766ae0f61a0cdfa4122d0f982230975ea79bc18cba29e5d87586e0bb1b886"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 601.436981][T17754] usb 2-1: USB disconnect, device number 7 18:13:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x81a0ae8c, &(0x7f0000000140)) 18:13:19 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:13:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 18:13:19 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 18:13:19 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x2, &(0x7f0000000000)=@raw=[@initr0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 601.734353][T19142] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 601.749115][T19155] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 18:13:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x10, r1, 0x209, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x2c}}, 0x0) 18:13:19 executing program 2: r0 = socket(0x2, 0xa, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) 18:13:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000080)={&(0x7f0000001dc0), 0x2, &(0x7f0000000180)={0x0}}, 0x0) 18:13:19 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x20480, 0x0) 18:13:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 18:13:19 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 601.982047][ T36] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 602.002203][T17754] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 602.252034][T17754] usb 2-1: Using ep0 maxpacket: 16 [ 602.257342][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 602.402195][T17754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.414262][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 602.451970][T17754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.465054][ T36] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 602.482100][T17754] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 602.493583][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.512625][T17754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.533915][ T36] usb 5-1: config 0 descriptor?? [ 602.553519][T17754] usb 2-1: config 0 descriptor?? [ 602.574498][ T36] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 602.782690][ T9622] usb 5-1: USB disconnect, device number 7 [ 603.043737][T17754] hid (null): global environment stack underflow [ 603.050785][T17754] hid (null): unknown global tag 0xae [ 603.071509][T17754] hid (null): report_id 0 is invalid [ 603.168781][T17754] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5019.0001/input/input116 [ 603.259083][T17754] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5019.0001/input/input117 [ 603.381827][ T9622] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 603.390596][T17754] kye 0003:0458:5019.0001: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 603.429246][T17754] usb 2-1: USB disconnect, device number 8 [ 603.651935][ T9622] usb 5-1: Using ep0 maxpacket: 32 [ 603.802548][ T9622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.813574][ T9622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.826564][ T9622] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 603.836858][ T9622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.852809][ T9622] usb 5-1: config 0 descriptor?? [ 603.902956][ T9622] hub 5-1:0.0: USB hub found [ 604.031686][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 604.112020][ T9622] hub 5-1:0.0: 9 ports detected [ 604.139947][ T9622] hub 5-1:0.0: insufficient power available to use all downstream ports [ 604.271770][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 604.392497][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.409375][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.419548][ T8] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 604.434100][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.457741][ T8] usb 2-1: config 0 descriptor?? [ 604.734797][ T9622] usb 5-1: USB disconnect, device number 8 [ 604.763323][ T8] hid (null): global environment stack underflow [ 604.769746][ T8] hid (null): unknown global tag 0xae 18:13:22 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="001500000000652067072b3083bd922eb45482236e02b135b6980948165387241b52eb4b9ad9c415e21686664b4958b49189179f55d64536ca1d470e57dac933f626ae8c92b33a8eb96eff149752a98891361e00a62d5e292ee0457c738383c1b766ae0f61a0cdfa4122d0f982230975ea79bc18cba29e5d87586e0bb1b886"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 18:13:22 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000300)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 604.789067][ T8] hid (null): report_id 0 is invalid [ 604.880515][ T8] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5019.0002/input/input118 [ 604.919213][ T8] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5019.0002/input/input119 [ 605.003775][ T8] kye 0003:0458:5019.0002: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 605.036014][ T8] usb 2-1: USB disconnect, device number 9 [ 605.351609][ T3156] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 605.501605][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 605.592472][ T3156] usb 5-1: Using ep0 maxpacket: 16 [ 605.712753][ T3156] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 605.732458][ T3156] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 605.745967][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 605.751319][ T3156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.769763][ T3156] usb 5-1: config 0 descriptor?? [ 605.814362][ T3156] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 605.861759][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.873386][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.883667][ T8] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 605.892872][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.907330][ T8] usb 2-1: config 0 descriptor?? [ 606.018712][ T3156] usb 5-1: USB disconnect, device number 9 18:13:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:13:23 executing program 3: mq_open(&(0x7f0000000080)='+%%@%\x00', 0x0, 0x0, 0x0) 18:13:23 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x8916, 0x0) 18:13:23 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x8934, 0x0) 18:13:23 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000001ec0), 0x40080, 0x0) 18:13:23 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x89a1, 0x0) 18:13:23 executing program 2: r0 = socket(0x25, 0x5, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 18:13:23 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000bc0)='ns/cgroup\x00') 18:13:23 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) 18:13:23 executing program 2: syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) [ 606.513054][ T8] hid (null): global environment stack underflow [ 606.519478][ T8] hid (null): unknown global tag 0xae [ 606.542320][ T8] hid (null): report_id 0 is invalid [ 606.566741][ T8] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5019.0003/input/input120 [ 606.594097][ T8] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5019.0003/input/input121 [ 606.641723][ T3156] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 606.680461][ T8] kye 0003:0458:5019.0003: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 606.747209][ T3713] usb 2-1: USB disconnect, device number 10 [ 606.901534][ T3156] usb 5-1: Using ep0 maxpacket: 16 [ 607.021776][ T3156] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 607.040747][ T3156] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 607.059859][ T3156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.080468][ T3156] usb 5-1: config 0 descriptor?? [ 607.129667][ T3156] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 18:13:24 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) 18:13:24 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 607.420372][ T3713] usb 5-1: USB disconnect, device number 10 [ 608.031351][ T3713] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 608.271400][ T3713] usb 5-1: Using ep0 maxpacket: 32 [ 608.401716][ T3713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.417594][ T3713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.427671][ T3713] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 608.438737][ T3713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.454739][ T3713] usb 5-1: config 0 descriptor?? [ 608.504519][ T3713] hub 5-1:0.0: USB hub found [ 608.721515][ T3713] hub 5-1:0.0: 9 ports detected [ 608.751448][ T3713] hub 5-1:0.0: insufficient power available to use all downstream ports [ 609.377026][ T3713] usb 5-1: USB disconnect, device number 11 18:13:27 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002bc0)={0x2c, &(0x7f0000002ac0)={0x0, 0x0, 0x4, "99dd24fc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 18:13:27 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) 18:13:27 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}]}) 18:13:27 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100}) 18:13:27 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:13:27 executing program 5: getresuid(&(0x7f0000004bc0), &(0x7f0000004c00), &(0x7f0000004c40)) 18:13:27 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x8903, 0x0) 18:13:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x33fe0}}, 0x0) 18:13:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f00000002c0)={'filter\x00', 0x4, 0x7fffffe, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x2, {@mac=@local, @empty, @rand_addr, @dev}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 18:13:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf2513000000080010007245"], 0x34}, 0x1, 0x0, 0x0, 0x4040094}, 0x0) [ 609.915743][T19412] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 609.955805][T19418] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 18:13:27 executing program 0: set_mempolicy(0x0, &(0x7f0000000080), 0x81) 18:13:27 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002bc0)={0x2c, &(0x7f0000002ac0)={0x0, 0x0, 0x4, "99dd24fc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001440)={0x2c, &(0x7f0000001240)={0x0, 0x0, 0x4, "603c88d8"}, 0x0, 0x0, 0x0, 0x0}) [ 610.071275][ T3156] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 610.331162][ T3156] usb 5-1: Using ep0 maxpacket: 16 [ 610.411560][ T5] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 610.451857][ T3156] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 610.481667][ T3156] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 610.504416][ T3156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.526991][ T3156] usb 5-1: config 0 descriptor?? [ 610.593593][ T3156] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 610.717927][ T5] usb 6-1: Using ep0 maxpacket: 16 [ 610.855236][ T3713] usb 5-1: USB disconnect, device number 12 [ 610.872396][ T5] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 610.911321][ T5] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 610.920510][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.967857][ T5] usb 6-1: config 0 descriptor?? [ 611.024498][ T5] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 611.141183][ T3156] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 611.227254][ T5] usb 6-1: USB disconnect, device number 11 [ 611.421047][ T3156] usb 4-1: Using ep0 maxpacket: 16 [ 611.424736][ T3713] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 611.541199][ T3156] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 611.562018][ T3156] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 611.583597][ T3156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.610268][ T3156] usb 4-1: config 0 descriptor?? [ 611.671232][ T3713] usb 5-1: Using ep0 maxpacket: 32 [ 611.673292][ T3156] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 611.795540][ T3713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.817218][ T3713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.828930][ T3713] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 611.841073][ T5] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 611.846222][ T3713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.875565][ T3713] usb 5-1: config 0 descriptor?? [ 611.933003][ T3713] hub 5-1:0.0: USB hub found [ 612.100967][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 612.151005][ T3713] hub 5-1:0.0: 9 ports detected [ 612.171290][ T3713] hub 5-1:0.0: insufficient power available to use all downstream ports [ 612.180643][ T9622] usb 4-1: USB disconnect, device number 4 [ 612.231397][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.255344][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.274157][ T5] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 612.297860][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.316113][ T5] usb 6-1: config 0 descriptor?? [ 612.388795][ T5] hub 6-1:0.0: USB hub found [ 612.591030][ T5] hub 6-1:0.0: 1 port detected [ 612.711138][ T9622] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 612.754766][ T3713] usb 5-1: USB disconnect, device number 13 [ 612.960969][ T9622] usb 4-1: Using ep0 maxpacket: 32 [ 613.081765][ T9622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.095349][ T9622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.105496][ T9622] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 613.114966][ T9622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.142517][ T9622] usb 4-1: config 0 descriptor?? [ 613.181995][ T9622] hub 4-1:0.0: USB hub found [ 613.231260][ T5] hub 6-1:0.0: activate --> -90 [ 613.505106][ T9622] hub 4-1:0.0: 1 port detected [ 613.644229][ T3156] usb 6-1: USB disconnect, device number 12 [ 613.911706][ T5] usb 6-1-port1: config error [ 614.208974][ T9622] hub 4-1:0.0: activate --> -90 [ 614.501229][T17522] usb 4-1: USB disconnect, device number 5 [ 614.510844][ T9622] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 614.531084][ T3156] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 614.790652][ T3156] usb 6-1: Using ep0 maxpacket: 16 [ 614.916655][ T3156] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 614.929761][ T3156] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 614.942070][ T3156] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.953023][ T3156] usb 6-1: config 0 descriptor?? [ 614.993631][ T3156] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 615.105351][ T9622] usb 6-1: USB disconnect, device number 13 [ 615.280709][ T3156] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 615.521242][ T3156] usb 4-1: Using ep0 maxpacket: 16 [ 615.641107][ T3156] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 615.654205][ T3156] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 615.666083][ T3156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.682938][ T3156] usb 4-1: config 0 descriptor?? 18:13:33 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002bc0)={0x2c, &(0x7f0000002ac0)={0x0, 0x0, 0x4, "99dd24fc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 18:13:33 executing program 1: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000011c0)={0x48, r0, 0x217, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x48}}, 0x0) 18:13:33 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:13:33 executing program 0: memfd_create(&(0x7f0000000000)='/dev/cachefiles\x00', 0x0) 18:13:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xef4f]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:13:33 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000001b80)={&(0x7f0000001780)=@xdp, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001800)=""/122, 0x7a}, {&(0x7f0000001880)=""/87, 0x57}, {&(0x7f0000001900)=""/252, 0xfc}, {&(0x7f0000001a00)=""/86, 0x56}], 0x10000000000002d4, &(0x7f0000001ac0)=""/162, 0xa2}, 0x0) [ 615.750647][ T3156] usb 4-1: can't set config #0, error -71 [ 615.758524][ T3156] usb 4-1: USB disconnect, device number 6 18:13:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x28, r1, 0x209, 0x0, 0x0, {{}, {@val={0x8, 0xb}, @val={0xc}}}}, 0x28}}, 0x0) [ 615.867850][T19549] debugfs: Directory '19549-4' with parent 'kvm' already present! 18:13:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x301, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 18:13:33 executing program 1: syz_io_uring_setup(0x44ee, &(0x7f0000000480), &(0x7f0000fed000/0x12000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 18:13:33 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001dc0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) 18:13:33 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x18) 18:13:33 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x891a, 0x0) [ 616.070693][T17522] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 616.320519][T17522] usb 5-1: Using ep0 maxpacket: 16 [ 616.442175][T17522] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 616.474051][T17522] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 616.494199][T17522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.514791][T17522] usb 5-1: config 0 descriptor?? [ 616.583054][T17522] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 616.610632][T17753] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 616.828769][T17522] usb 5-1: USB disconnect, device number 14 [ 616.900546][T17753] usb 4-1: Using ep0 maxpacket: 16 [ 617.030651][T17753] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 617.045513][T17753] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 617.056165][T17753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.067369][T17753] usb 4-1: config 0 descriptor?? [ 617.153083][T17753] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 617.368129][ T3713] usb 4-1: USB disconnect, device number 7 [ 617.407189][T17522] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 617.650708][T17522] usb 5-1: Using ep0 maxpacket: 32 [ 617.770818][T17522] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.781837][T17522] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.793688][T17522] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 617.803908][T17522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.814503][T17522] usb 5-1: config 0 descriptor?? [ 617.861483][T17522] hub 5-1:0.0: USB hub found [ 617.970438][ T3713] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 618.080627][T17522] hub 5-1:0.0: 9 ports detected [ 618.100486][T17522] hub 5-1:0.0: insufficient power available to use all downstream ports [ 618.230427][ T3713] usb 4-1: Using ep0 maxpacket: 32 [ 618.372661][ T3713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.384110][ T3713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.394546][ T3713] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 618.404226][ T3713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.414924][ T3713] usb 4-1: config 0 descriptor?? [ 618.451698][ T3713] hub 4-1:0.0: USB hub found [ 618.675511][ T3713] hub 4-1:0.0: 1 port detected [ 618.682601][T17522] usb 5-1: USB disconnect, device number 15 [ 619.320411][ T3713] hub 4-1:0.0: activate --> -90 [ 619.622648][T17522] usb 4-1: USB disconnect, device number 8 [ 619.641777][ T3713] hub 4-1:0.0: hub_ext_port_status failed (err = -71) 18:13:37 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 18:13:37 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x3, 0x410440) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059d80)={0x0, [], 0x0, "42eb6aa03d069c"}) syz_io_uring_setup(0x44ee, &(0x7f0000000480), &(0x7f0000fed000/0x12000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 18:13:37 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x40}}, 0x0) 18:13:37 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:13:37 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 18:13:37 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) 18:13:37 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:13:37 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x5) 18:13:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf2507"], 0x34}}, 0x0) 18:13:38 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:13:38 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) [ 620.464220][T19670] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 620.508740][T19672] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 620.520406][ T5] usb 2-1: new high-speed USB device number 11 using dummy_hcd 18:13:38 executing program 2: clone3(&(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0, 0x0], 0x2}, 0x58) [ 620.552109][ T9622] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 620.780191][ T5] usb 2-1: Using ep0 maxpacket: 16 18:13:38 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000140)) tkill(0x0, 0x0) 18:13:38 executing program 5: clone3(&(0x7f00000006c0)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:13:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) [ 620.860101][ T9622] usb 5-1: Using ep0 maxpacket: 16 [ 620.908456][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 620.935951][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 620.971785][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.004867][ T5] usb 2-1: config 0 descriptor?? [ 621.018993][ T9622] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 621.042042][ T9622] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 621.058581][ T9622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.062646][ T5] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 621.072826][ T9622] usb 5-1: config 0 descriptor?? [ 621.132786][ T9622] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 621.266727][ T5] usb 2-1: USB disconnect, device number 11 [ 621.335399][T17522] usb 5-1: USB disconnect, device number 16 [ 621.820244][ T5] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 621.890170][T17522] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 622.060079][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 622.130048][T17522] usb 5-1: Using ep0 maxpacket: 32 [ 622.180304][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.196535][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.208695][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 622.226358][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.239557][ T5] usb 2-1: config 0 descriptor?? [ 622.264866][T17522] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.285582][T17522] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.298866][ T5] hub 2-1:0.0: USB hub found [ 622.312118][T17522] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 622.336186][T17522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.357950][T17522] usb 5-1: config 0 descriptor?? [ 622.411084][T17522] hub 5-1:0.0: USB hub found [ 622.510123][ T5] hub 2-1:0.0: 9 ports detected [ 622.530045][ T5] hub 2-1:0.0: insufficient power available to use all downstream ports [ 622.630109][T17522] hub 5-1:0.0: 9 ports detected [ 622.650123][T17522] hub 5-1:0.0: insufficient power available to use all downstream ports [ 622.850134][T17522] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 622.856982][T17522] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 622.880408][T17522] usbhid 5-1:0.0: can't add hid device: -22 [ 622.886568][T17522] usbhid: probe of 5-1:0.0 failed with error -22 [ 622.924803][T17522] usb 5-1: USB disconnect, device number 17 [ 623.112493][ T5] usb 2-1: USB disconnect, device number 12 [ 623.709904][ T9622] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 623.960049][ T9622] usb 2-1: Using ep0 maxpacket: 16 [ 624.109904][ T9622] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 624.123854][ T9622] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 624.134676][ T9622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.150438][ T9622] usb 2-1: config 0 descriptor?? [ 624.209316][ T9622] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 624.402582][ T3713] usb 2-1: USB disconnect, device number 13 18:13:42 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="990458cdb2d2c4b21e452ec1c5e057d68048bcb683eaaadc1cacb79ae59283a629a7", 0x22, 0x0, 0x0, 0x0) 18:13:42 executing program 5: r0 = syz_io_uring_setup(0x158f, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) set_mempolicy(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000080), 0x0, 0x4) 18:13:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:13:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) 18:13:42 executing program 3: r0 = syz_io_uring_setup(0x489c, &(0x7f0000000140), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x5, 0x0, 0x0) 18:13:42 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) 18:13:42 executing program 1: r0 = semget$private(0x0, 0x7, 0x0) semtimedop(r0, &(0x7f0000000280)=[{0x0, 0x3}, {}], 0x2, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000012c0)=""/4096) 18:13:42 executing program 5: rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) writev(0xffffffffffffffff, 0x0, 0x0) 18:13:42 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x15, r0, 0x0, 0x0, 0x0) 18:13:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) [ 624.814806][ T37] audit: type=1326 audit(1621016022.415:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19798 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 624.838863][ T5] usb 5-1: new high-speed USB device number 18 using dummy_hcd 18:13:42 executing program 2: r0 = syz_io_uring_setup(0x489c, &(0x7f0000000140), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x5, 0x2, 0x0) [ 624.921127][ T3250] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.924990][ T37] audit: type=1326 audit(1621016022.415:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19798 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=20 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 624.927527][ T3250] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.994363][ T37] audit: type=1326 audit(1621016022.415:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19798 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 18:13:42 executing program 5: pselect6(0x40, &(0x7f0000000040)={0x3}, &(0x7f00000001c0)={0x5}, 0x0, 0x0, 0x0) 18:13:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) [ 625.048396][ T37] audit: type=1326 audit(1621016022.415:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19798 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=334 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 625.100364][ T5] usb 5-1: Using ep0 maxpacket: 16 18:13:42 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000140)) [ 625.142109][ T37] audit: type=1326 audit(1621016022.415:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19798 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 18:13:42 executing program 2: r0 = syz_io_uring_setup(0x158f, &(0x7f00000001c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQES(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x50cc, &(0x7f0000000000)={0x0, 0xb172}, &(0x7f00005d4000/0x3000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 625.230665][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 625.258075][ T37] audit: type=1326 audit(1621016022.415:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19798 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=157 compat=0 ip=0x4665d9 code=0x7ffc0000 18:13:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 625.293466][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 625.328263][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.385334][ T5] usb 5-1: config 0 descriptor?? [ 625.392490][ T37] audit: type=1326 audit(1621016022.465:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19798 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 625.443024][ T5] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 625.452537][ T37] audit: type=1326 audit(1621016022.465:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19798 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 18:13:43 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000180)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) [ 625.644496][ T5] usb 5-1: USB disconnect, device number 18 [ 626.209692][ T5] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 626.459685][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 626.579798][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.607364][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.627956][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 626.637807][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.662638][ T5] usb 5-1: config 0 descriptor?? [ 626.706754][ T5] hub 5-1:0.0: USB hub found [ 626.909722][ T5] hub 5-1:0.0: 9 ports detected [ 626.933809][ T5] hub 5-1:0.0: insufficient power available to use all downstream ports [ 627.127447][ T5] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 627.134384][ T5] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 627.154574][ T5] usbhid 5-1:0.0: can't add hid device: -22 [ 627.166626][ T5] usbhid: probe of 5-1:0.0 failed with error -22 [ 627.200523][ T5] usb 5-1: USB disconnect, device number 19 18:13:45 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) 18:13:45 executing program 2: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 18:13:45 executing program 5: rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:13:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 18:13:45 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, @val, {@ipv4}}, 0x0) 18:13:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}]}, 0x28}}, 0x0) [ 627.667723][ T37] audit: type=1326 audit(1621016025.265:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19871 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 18:13:45 executing program 1: r0 = syz_io_uring_setup(0x489c, &(0x7f0000000140), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x8, 0x0, 0x0) 18:13:45 executing program 5: r0 = syz_io_uring_setup(0x489c, &(0x7f0000000140), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x2, 0x0) 18:13:45 executing program 2: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000020c0), 0x80000, 0x0) 18:13:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 627.811697][ T37] audit: type=1326 audit(1621016025.305:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19871 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 18:13:45 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FBIO_WAITFORVSYNC(r0, 0x4604, 0x0) 18:13:45 executing program 5: syz_io_uring_setup(0x2c50, &(0x7f0000000480), &(0x7f0000bff000/0x400000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) [ 628.029594][ T9497] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 628.277944][ T9497] usb 5-1: Using ep0 maxpacket: 16 [ 628.399820][ T9497] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 628.420848][ T9497] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 628.442879][ T9497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.457905][ T9497] usb 5-1: config 0 descriptor?? [ 628.512797][ T9497] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 628.724192][ T9497] usb 5-1: USB disconnect, device number 20 [ 629.289593][ T9497] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 629.529513][ T9497] usb 5-1: Using ep0 maxpacket: 32 [ 629.656385][ T9497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.667613][ T9497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.683274][ T9497] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 629.693789][ T9497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.713377][ T9497] usb 5-1: config 0 descriptor?? [ 629.750144][ T9497] hub 5-1:0.0: USB hub found [ 629.969449][ T9497] hub 5-1:0.0: 9 ports detected [ 629.989545][ T9497] hub 5-1:0.0: insufficient power available to use all downstream ports [ 630.179475][ T9497] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 630.185892][ T9497] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 630.218346][ T9497] usbhid 5-1:0.0: can't add hid device: -22 [ 630.233925][ T9497] usbhid: probe of 5-1:0.0 failed with error -22 [ 630.270414][ T9497] usb 5-1: USB disconnect, device number 21 18:13:48 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:13:48 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 18:13:48 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x21, 0x0, 0x0, &(0x7f0000000000)) 18:13:48 executing program 2: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000000)) 18:13:48 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002bc0)={0x2c, &(0x7f0000002ac0)={0x0, 0x0, 0x4, "99dd24fc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18:13:48 executing program 3: syz_io_uring_setup(0x7d4, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:13:48 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) 18:13:48 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x1}}}}}}]}}, 0x0) 18:13:48 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 18:13:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 18:13:48 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) [ 631.019508][T17522] usb 6-1: new high-speed USB device number 14 using dummy_hcd 18:13:48 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) [ 631.088153][ T5] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 631.209358][ T3156] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 631.260729][T17522] usb 6-1: Using ep0 maxpacket: 16 [ 631.358379][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 631.379821][T17522] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 631.400989][T17522] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 631.415570][T17522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.429772][T17522] usb 6-1: config 0 descriptor?? [ 631.459348][ T3156] usb 3-1: Using ep0 maxpacket: 16 [ 631.475401][T17522] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 631.484219][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 631.497949][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 631.527659][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.548919][ T5] usb 5-1: config 0 descriptor?? [ 631.590112][ T3156] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.603742][ T5] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 631.612983][ T3156] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.632202][ T3156] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 631.643427][ T3156] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 631.654726][ T3156] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 631.665953][ T3156] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 631.698020][ T5] usb 6-1: USB disconnect, device number 14 [ 631.805937][T17753] usb 5-1: USB disconnect, device number 22 [ 631.850010][ T3156] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 631.859725][ T3156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.868185][ T3156] usb 3-1: Product: syz [ 631.875864][ T3156] usb 3-1: Manufacturer: syz [ 631.883243][ T3156] usb 3-1: SerialNumber: syz [ 632.169420][ T3156] cdc_ncm 3-1:1.0: bind() failure [ 632.179446][ T3156] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 632.192610][ T3156] cdc_ncm 3-1:1.1: bind() failure [ 632.212171][ T3156] usb 3-1: USB disconnect, device number 4 [ 632.279198][ T5] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 632.379105][T17753] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 632.519201][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 632.639035][T17753] usb 5-1: Using ep0 maxpacket: 32 [ 632.639207][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.666038][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.686309][ T5] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 632.698578][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.716087][ T5] usb 6-1: config 0 descriptor?? [ 632.770380][ T5] hub 6-1:0.0: USB hub found [ 632.772944][T17753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.796251][T17753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.817408][T17753] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 632.835882][T17753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.849497][T17753] usb 5-1: config 0 descriptor?? [ 632.910193][T17753] hub 5-1:0.0: USB hub found [ 632.915070][ T3713] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 632.989331][ T5] hub 6-1:0.0: 1 port detected [ 633.179176][T17753] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 633.199714][T17753] usbhid 5-1:0.0: can't add hid device: -22 [ 633.199889][T17753] usbhid: probe of 5-1:0.0 failed with error -22 [ 633.219217][ T3713] usb 3-1: Using ep0 maxpacket: 16 [ 633.249993][T17753] usb 5-1: USB disconnect, device number 23 [ 633.352892][ T3713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.364067][ T3713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.377014][ T3713] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 633.387934][ T3713] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 633.399144][ T3713] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 633.410768][ T3713] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 633.619165][ T3713] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 633.619205][ T3713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 18:13:51 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:13:51 executing program 1: clone3(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair(0x0, 0x0, 0x0, &(0x7f0000000840)) 18:13:51 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 18:13:51 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xb6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x4}}}}}}}]}}, 0x0) [ 633.619228][ T3713] usb 3-1: Product: syz [ 633.619248][ T3713] usb 3-1: Manufacturer: syz [ 633.619265][ T3713] usb 3-1: SerialNumber: syz [ 633.659149][ T8] hub 6-1:0.0: activate --> -90 [ 633.899208][ T3713] cdc_ncm 3-1:1.0: bind() failure [ 633.906308][T19965] usb 6-1: USB disconnect, device number 15 [ 633.919089][ T3156] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 633.928586][ T3713] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 633.967248][ T3713] cdc_ncm 3-1:1.1: bind() failure [ 634.005094][ T3713] usb 3-1: USB disconnect, device number 5 [ 634.049255][ T5] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 634.289190][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 634.323580][T17754] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 634.410476][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 634.431441][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 634.449409][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.466311][ T5] usb 5-1: config 0 descriptor?? [ 634.511882][ T5] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 634.578902][T17754] usb 4-1: Using ep0 maxpacket: 16 [ 634.678942][T19965] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 634.713922][ T3156] usb 5-1: USB disconnect, device number 24 [ 634.733467][T17754] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 182, changing to 11 [ 634.755021][T17754] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 634.770258][T17754] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 634.785045][T17754] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 634.797815][T17754] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 634.918988][T19965] usb 6-1: Using ep0 maxpacket: 16 [ 634.993578][T17754] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 635.003652][T17754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.013615][T17754] usb 4-1: Product: syz [ 635.017820][T17754] usb 4-1: Manufacturer: syz [ 635.023748][T17754] usb 4-1: SerialNumber: syz [ 635.039361][T19965] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 635.063342][T19965] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 635.078257][T19965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.092466][T19965] usb 6-1: config 0 descriptor?? [ 635.131683][T19965] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 18:13:52 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) 18:13:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1, 0x11a, 0x0) 18:13:52 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 18:13:52 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x105042, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) msgsnd(0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) [ 635.226711][ T3713] usb 6-1: USB disconnect, device number 16 [ 635.269010][ T3156] usb 5-1: new high-speed USB device number 25 using dummy_hcd 18:13:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) 18:13:53 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x3c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfe9c) splice(r0, 0x0, r2, 0x0, 0x10000005c, 0x0) 18:13:53 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0x16, &(0x7f0000000080)={0xffffffffffffffff}, 0xc) [ 635.509040][ T3156] usb 5-1: Using ep0 maxpacket: 32 18:13:53 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x105042, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) msgsnd(0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) [ 635.586114][T20120] netlink: 'syz-executor.5': attribute type 7 has an invalid length. [ 635.629328][ T3156] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.634980][T20124] netlink: 'syz-executor.5': attribute type 7 has an invalid length. [ 635.650694][ T3156] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.699102][ T3156] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 635.750861][ T3156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.771115][ T3156] usb 5-1: config 0 descriptor?? [ 635.789012][T17754] cdc_ncm 4-1:1.0: bind() failure [ 635.808884][T17754] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 635.815785][T17754] cdc_ncm 4-1:1.1: bind() failure [ 635.817222][ T3156] hub 5-1:0.0: USB hub found [ 635.868229][T17754] usb 4-1: USB disconnect, device number 9 [ 636.058985][ T3156] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 636.087029][ T3156] usbhid 5-1:0.0: can't add hid device: -22 [ 636.101716][ T3156] usbhid: probe of 5-1:0.0 failed with error -22 [ 636.153444][ T3156] usb 5-1: USB disconnect, device number 25 18:13:54 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:13:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) 18:13:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}]}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000140)) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 636.608891][T19965] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 636.849943][T19965] usb 4-1: Using ep0 maxpacket: 16 [ 636.931544][ T3156] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 636.968826][T19965] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 182, changing to 11 [ 636.980606][T19965] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 636.992909][T19965] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 637.004863][T19965] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 637.015705][T19965] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 637.178913][T19965] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 637.188005][T19965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.196288][ T3156] usb 5-1: Using ep0 maxpacket: 16 [ 637.201598][T19965] usb 4-1: Product: syz [ 637.206382][T19965] usb 4-1: Manufacturer: syz [ 637.211185][T19965] usb 4-1: SerialNumber: syz 18:13:54 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951d60a", 0xbe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x44}, 0x78) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 18:13:54 executing program 5: semget(0x2, 0x0, 0x210) 18:13:54 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x105042, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) msgsnd(0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) 18:13:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) 18:13:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}]}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000140)) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 637.278924][T19965] usb 4-1: can't set config #1, error -71 [ 637.288390][T19965] usb 4-1: USB disconnect, device number 10 [ 637.319168][ T3156] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 18:13:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) [ 637.365893][ T3156] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 637.395927][ T3156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.441322][ T3156] usb 5-1: config 0 descriptor?? 18:13:55 executing program 5: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x9cf3ccb187a543d2}, 0x18) 18:13:55 executing program 2: r0 = semget(0x0, 0x1, 0x242) semctl$IPC_RMID(r0, 0x0, 0x0) [ 637.501519][ T3156] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 18:13:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) [ 637.707511][ T3156] usb 5-1: USB disconnect, device number 26 [ 637.765581][T20204] ptrace attach of "/root/syz-executor.3"[20203] was attempted by "/root/syz-executor.3"[20204] [ 638.278736][ T3156] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 638.538560][ T3156] usb 5-1: Using ep0 maxpacket: 32 [ 638.658791][ T3156] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.669865][ T3156] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.681971][ T3156] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 638.691869][ T3156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.705469][ T3156] usb 5-1: config 0 descriptor?? [ 638.749538][ T3156] hub 5-1:0.0: USB hub found [ 639.008672][ T3156] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 639.018112][ T3156] usbhid 5-1:0.0: can't add hid device: -22 [ 639.032095][ T3156] usbhid: probe of 5-1:0.0 failed with error -22 [ 639.069977][ T3156] usb 5-1: USB disconnect, device number 27 18:13:57 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:13:57 executing program 1: getresgid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f00000036c0)) 18:13:57 executing program 2: r0 = semget(0x0, 0x1, 0x242) semctl$IPC_RMID(r0, 0x0, 0x0) 18:13:57 executing program 5: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 18:13:57 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 18:13:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc}]}}]}, 0x40}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 18:13:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900010000000000000000007f000001000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b76b6e000000000000000000"], 0xb8}}, 0x0) 18:13:57 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) read$qrtrtun(r0, &(0x7f00000001c0)=""/24, 0x18) 18:13:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 18:13:57 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x105042, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) msgsnd(0x0, 0x0, 0x0, 0x0) 18:13:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0xc0010005]}) 18:13:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x74}, {0x6}]}) [ 639.868431][T17754] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 639.910543][T20261] kvm [20259]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010005 data 0x0 [ 639.993088][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 639.993107][ T37] audit: type=1326 audit(1621016037.596:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20262 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 [ 640.118576][T17754] usb 5-1: Using ep0 maxpacket: 16 [ 640.239071][T17754] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 640.261188][T17754] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 640.275150][T17754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.287622][T17754] usb 5-1: config 0 descriptor?? [ 640.353162][T17754] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 640.568605][ T5] usb 5-1: USB disconnect, device number 28 18:13:58 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:13:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 18:13:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000036c0)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000003700)={0x54, 0x0, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_MASTER={0x1e, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE]}, @CTA_MARK_MASK, @CTA_TUPLE_ORIG={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO, @CTA_TUPLE_PROTO]}, @CTA_LABELS={0x0, 0x16, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @CTA_TUPLE_ORIG={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE]}]}, 0x54}}, 0x0) 18:13:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)) 18:13:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) pipe(&(0x7f0000000100)) write(r3, &(0x7f0000000340), 0xfffffd82) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000008, 0x11, r1, 0xa7bd9000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200), 0x175d900f) 18:13:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc}]}}]}, 0x40}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 641.346670][T20302] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 18:13:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}]}, 0x34}}, 0x0) 18:13:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 18:13:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000003680)={0x2, 'ip6gre0\x00', 0x2}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000036c0)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000003700)={0x54, 0x0, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_MASTER={0x6a, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x0, 0x15, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0xba}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x99}}]}, @CTA_LABELS={0x0, 0x16, 0x1, 0x0, [0x7ff, 0x1000, 0x0, 0x0, 0x0, 0x7ff, 0x3]}, @CTA_TUPLE_ORIG={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}]}]}, 0x54}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000020205000000000000000000000000000900060073797a30000000009f084bbef68d19c58a63c5556ac1e8b06c7db00c7e14fffda3da215044f8610a11fe1bb9396013161c79d2bc3ca930f37b35d72063eeaf70e4cceb32eeddad3d102ebd8c2fb639151cfd017eb0677c07067017b761a0b3ef7f2ac56e7bd56171"], 0x20}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) 18:13:59 executing program 5: ioprio_set$uid(0x0, 0x0, 0x2007) 18:13:59 executing program 1: fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 641.560503][T20318] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 641.610132][T20324] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 18:13:59 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x6, 0x204000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 641.658507][T17754] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 641.928378][T17754] usb 5-1: Using ep0 maxpacket: 16 [ 642.048615][T17754] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 642.070715][T17754] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 642.099508][T17754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.121892][T17754] usb 5-1: config 0 descriptor?? [ 642.180861][T17754] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 642.382746][ T5] usb 5-1: USB disconnect, device number 29 18:14:00 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) 18:14:00 executing program 1: bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000007680)={0x0, 0x0, 0x0, 0x0}, 0x38) 18:14:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x405}, 0x40) 18:14:00 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000040)) 18:14:00 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x107d40, 0x0) 18:14:00 executing program 2: r0 = openat$uinput(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) unshare(0x20400) ioctl$UI_END_FF_UPLOAD(r0, 0x4020940d, &(0x7f0000000180)={0x10, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) 18:14:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) 18:14:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d00, 0x0, 0x49]}) 18:14:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) 18:14:01 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18:14:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 643.498223][T19965] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 643.778433][T19965] usb 5-1: Using ep0 maxpacket: 16 [ 643.899571][T19965] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 643.920759][T19965] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 643.937176][T19965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.956018][T19965] usb 5-1: config 0 descriptor?? [ 644.011414][T19965] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 644.215078][T17754] usb 5-1: USB disconnect, device number 30 18:14:02 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:02 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x181201, 0x0) 18:14:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) 18:14:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:14:02 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 18:14:02 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') 18:14:02 executing program 2: request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0) 18:14:02 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x13) 18:14:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x200000000000039c, &(0x7f0000001680)=[{}]}) 18:14:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 18:14:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x18, &(0x7f0000000040)="98f64734", 0x4) 18:14:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="e901d5405e197d14d2eab6a38906", 0xe, 0x0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 645.338008][T17754] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 645.587948][T17754] usb 5-1: Using ep0 maxpacket: 16 [ 645.711157][T17754] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 645.731978][T17754] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 645.751520][T17754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.762380][T17754] usb 5-1: config 0 descriptor?? [ 645.810737][T17754] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 646.021999][T20441] udc-core: couldn't find an available UDC or it's busy [ 646.033857][T20441] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 646.094370][ T3156] usb 5-1: USB disconnect, device number 31 18:14:04 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 18:14:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 18:14:04 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) 18:14:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)="adddcc3f47086611ea14433d98b375f89a8eefec74193d753d4bad4f0c03e4f7bfd0550f6ecd9d08fdf3e8092452d43f7f03d48b749f666f3e38fe5568e7915085857bdc73cc1a8774fdfb959d886b0e4db9213ee46af989d0790f7f3dfb2ba4039d45ecb3e0bbfdddc67d3d9980cc44d488b4b1a2389403c4790f3bd597f9332dd7bfcbbc1761eb57be9f24", 0x8c) 18:14:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'vlan1\x00', &(0x7f0000000400)=@ethtool_per_queue_op={0x4b, 0xe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}) 18:14:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c00000000406ffff39010001000000000070ffff05000486000400000900020073797a3000f200000500010006"], 0x54}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x447fe5, 0x0) 18:14:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'veth1\x00', @ifru_map}) 18:14:04 executing program 5: getpid() creat(&(0x7f0000000140)='./file0/file1\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @xdp, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, @nl=@proc, 0x700}) listen(0xffffffffffffffff, 0x0) 18:14:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 18:14:04 executing program 2: r0 = openat$random(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000280)={0x0, 0x41, "d6e1926433794327b26faacd1de2c848eebff1126155f03b1f581828aee178b1a6a6b6484a5afc2a4ac85b5ef92195cc80684d41877d637dafdbd34ec229c5b0c6"}) 18:14:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8919, &(0x7f0000000000)={'veth1\x00', @ifru_map}) [ 646.987922][T17754] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 647.238121][T17754] usb 5-1: Using ep0 maxpacket: 16 [ 647.358274][T17754] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 647.371810][T17754] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 647.381459][T17754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.389999][T20530] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. [ 647.402344][T17754] usb 5-1: config 0 descriptor?? [ 647.450338][T17754] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 647.651165][T20501] udc-core: couldn't find an available UDC or it's busy [ 647.679328][T20501] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.713962][T17753] usb 5-1: USB disconnect, device number 32 18:14:05 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect(r0, &(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80) 18:14:05 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a1c, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) lseek(r0, 0x0, 0x0) 18:14:05 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 18:14:05 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) 18:14:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x490, 0xffffffff, 0x2f0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'bridge_slave_1\x00', 'vlan1\x00'}, 0x0, 0x1d8, 0x220, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}, @common=@unspec=@devgroup={{0x38}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'veth0_vlan\x00'}}}, {{@ipv6={@empty, @empty, [], [], 'vxcan1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x484c0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040), 0x4) [ 648.296843][T20558] x_tables: duplicate underflow at hook 2 18:14:05 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)) 18:14:06 executing program 5: syz_emit_ethernet(0x1e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "76a58523a59bc77e"}}}}, 0x0) 18:14:06 executing program 0: munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x60f0, &(0x7f0000000ac0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) [ 648.350320][T20558] x_tables: duplicate underflow at hook 2 18:14:06 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`'], 0x20}}, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000080)={0x0, 0x5af9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:14:06 executing program 5: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xa8, 0x10, 0x401, 0x0, 0x8e030000, {}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x80}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xa8}}, 0x810) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) 18:14:06 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0), 0x20) [ 648.598705][ T8] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 648.816556][T20577] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 648.857904][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 648.978050][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 648.997004][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 649.006790][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.023033][ T8] usb 5-1: config 0 descriptor?? [ 649.081470][ T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 649.282793][T20561] udc-core: couldn't find an available UDC or it's busy [ 649.295668][T20561] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 649.342239][ T5] usb 5-1: USB disconnect, device number 33 18:14:07 executing program 4: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:07 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 18:14:07 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 18:14:07 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000004c0)=@name={0x1e, 0x2, 0x2}, 0x10) 18:14:07 executing program 1: socket(0x25, 0x1, 0x1) 18:14:07 executing program 3: socket(0x23, 0x0, 0x9) 18:14:07 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000100)={0x6, 'netdevsim0\x00'}) [ 649.942151][T20613] tipc: Can't bind to reserved service type 0 18:14:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000000)=""/243, &(0x7f0000000100)=0xf3) 18:14:07 executing program 2: futex(0x0, 0x89, 0x0, 0x0, 0x0, 0x0) 18:14:07 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1}}}}) 18:14:07 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)) 18:14:07 executing program 5: sync() openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 650.487624][ T3713] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 650.757735][ T3713] usb 5-1: Using ep0 maxpacket: 32 [ 650.887632][ T3713] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.897985][ T3713] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 650.913653][ T3713] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 650.925179][ T3713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.942614][ T3713] usb 5-1: config 0 descriptor?? [ 650.990180][ T3713] hub 5-1:0.0: bad descriptor, ignoring hub [ 650.996233][ T3713] hub: probe of 5-1:0.0 failed with error -5 18:14:10 executing program 4: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:10 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'vlan1\x00', {0x2, 0x0, @dev}}) 18:14:10 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='/dev/rtc0\x00') 18:14:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'hsr0\x00'}) 18:14:10 executing program 5: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 18:14:10 executing program 3: fork() prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) [ 653.002745][T20663] 8021q: VLANs not supported on hsr0 18:14:10 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 18:14:10 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002480), 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000000640), 0x0, 0x8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'vlan0\x00', {0x1}, 0x100}) 18:14:10 executing program 2: kexec_load(0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0) [ 653.069053][T17754] usb 5-1: USB disconnect, device number 34 18:14:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) 18:14:10 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0xfffffffffffffffc) 18:14:10 executing program 2: r0 = memfd_create(&(0x7f0000000080)='\x00', 0x5) lseek(r0, 0x7fffffff, 0x0) [ 653.567363][T17754] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 653.827203][T17754] usb 5-1: Using ep0 maxpacket: 32 [ 653.947477][T17754] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.973029][T17754] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 654.007427][T17754] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 654.016608][T17754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.032658][T17754] usb 5-1: config 0 descriptor?? [ 654.078454][T17754] hub 5-1:0.0: bad descriptor, ignoring hub [ 654.084529][T17754] hub: probe of 5-1:0.0 failed with error -5 18:14:13 executing program 4: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:13 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf6, 0xbe, 0xd8, 0x8, 0xc72, 0xd, 0x9bc9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9b, 0x10, 0x39}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d8, 0xf002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001380)={0x2c, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:14:13 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@generic]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x81, &(0x7f0000000280)=""/129, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:14:13 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0154fc60100002400c00020005", 0x1d}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe28, 0xfffffe6f, &(0x7f0000000100)="280e003f4305607e5bc5795e6558000800ffffffba0e7231ffff81", 0x0, 0x100, 0xf2ffffff, 0xffffffffffffffb4, 0x212, &(0x7f0000000940)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) 18:14:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@mcast2, 0x0, 0x33}, 0x2, @in6=@private2, 0x0, 0x1}}, 0xe8) 18:14:13 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 18:14:13 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000040)="36c58f0f000f20e06635010000000f22e00f20c06635100000000f22c00f01c8660f2b9e00903e2b43440f01c40f793a66b9800000c00f326635004000000f30dce7", 0x42}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:14:13 executing program 2: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, 0x0, 0x0, 0x0) 18:14:13 executing program 5: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f00000002c0)={0x40800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 656.178387][ T9622] usb 5-1: USB disconnect, device number 35 18:14:13 executing program 2: socketpair(0xa, 0xa, 0x2e, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f00000002c0)={0x40800000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 656.417380][ T3156] usb 1-1: new high-speed USB device number 4 using dummy_hcd 18:14:14 executing program 5: request_key(&(0x7f0000000080)='rxrpc\x00', 0x0, 0x0, 0x0) 18:14:14 executing program 5: semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semop(0x0, &(0x7f0000000140)=[{0x0, 0x1, 0x1000}], 0x1) [ 656.629641][ T9622] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 656.658419][ T3156] usb 1-1: Using ep0 maxpacket: 8 [ 656.778102][ T3156] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=9b.c9 [ 656.797779][ T3156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.864725][ T3156] usb 1-1: config 0 descriptor?? [ 656.917665][ T9622] usb 5-1: Using ep0 maxpacket: 32 [ 657.057558][ T9622] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.071789][ T9622] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.094714][ T9622] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 657.110456][ T9622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.127146][ T9622] usb 5-1: config 0 descriptor?? [ 657.127516][ T3156] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 657.164332][ T3156] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 657.178734][ T9622] hub 5-1:0.0: bad descriptor, ignoring hub [ 657.184786][ T9622] hub: probe of 5-1:0.0 failed with error -5 [ 657.312765][ T3156] peak_usb: probe of 1-1:0.0 failed with error -71 [ 657.344128][ T3156] usb 1-1: USB disconnect, device number 4 [ 657.767635][ T3156] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 658.017198][ T3156] usb 1-1: Using ep0 maxpacket: 8 [ 658.137673][ T3156] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=9b.c9 [ 658.175629][ T3156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.218930][ T3156] usb 1-1: config 0 descriptor?? [ 658.946952][ T3156] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 659.027331][ T3156] peak_usb: probe of 1-1:0.0 failed with error -71 [ 659.057688][ T3156] usb 1-1: USB disconnect, device number 5 18:14:16 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) [ 659.287367][ T9622] usb 5-1: USB disconnect, device number 36 [ 659.737099][ T3713] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 659.747017][ T9622] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 659.986918][ T3713] usb 1-1: Using ep0 maxpacket: 8 [ 660.017678][ T9622] usb 5-1: Using ep0 maxpacket: 32 [ 660.138696][ T3713] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=9b.c9 [ 660.152590][ T3713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.161342][ T9622] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.177685][ T9622] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 660.199161][ T3713] usb 1-1: config 0 descriptor?? [ 660.213709][ T9622] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 660.228590][ T9622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.248385][ T9622] usb 5-1: config 0 descriptor?? [ 660.300297][ T9622] hub 5-1:0.0: bad descriptor, ignoring hub [ 660.306435][ T9622] hub: probe of 5-1:0.0 failed with error -5 18:14:18 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000400), 0x10) 18:14:18 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x32165) 18:14:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000180), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:14:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) 18:14:18 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x127900) [ 660.421624][ T3713] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 660.450689][ T3713] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) 18:14:18 executing program 5: syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x68, 0x1, 0x7, 0x1, 0x1, 0x5d, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x1}}}}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) 18:14:18 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x128040, 0x0) 18:14:18 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x127900) 18:14:18 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x80000101005, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000300)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000140)=0x5c5064) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000004c0)="0021490000ff10fffa000006fbff000036d30aba0010", 0x16}], 0x2, 0x0, 0x0) [ 660.587296][ T3713] peak_usb: probe of 1-1:0.0 failed with error -71 [ 660.610306][ T3713] usb 1-1: USB disconnect, device number 6 18:14:18 executing program 1: unshare(0x4000400) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x80045400, &(0x7f0000000040)) 18:14:18 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x127900) [ 661.016934][T19965] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 661.256745][T19965] usb 6-1: Using ep0 maxpacket: 32 [ 661.457054][T19965] usb 6-1: config 1 interface 0 altsetting 104 bulk endpoint 0x1 has invalid maxpacket 32 [ 661.473258][T19965] usb 6-1: config 1 interface 0 has no altsetting 0 [ 661.646917][T19965] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 661.663998][T19965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.688151][T19965] usb 6-1: Product: syz [ 661.698049][T19965] usb 6-1: Manufacturer: syz [ 661.707319][T19965] usb 6-1: SerialNumber: syz [ 661.737119][T20944] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 662.096189][T19965] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 104 proto 1 vid 0x0525 pid 0xA4A8 [ 662.158785][T19965] usb 6-1: USB disconnect, device number 17 [ 662.208168][T19965] usblp0: removed 18:14:19 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:19 executing program 1: futex(0x0, 0x8c, 0x0, 0x0, &(0x7f0000000140), 0x0) 18:14:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f0000001500)=@sco={0x1f, @none}, 0x80, &(0x7f0000000440)}, 0x4}, {{&(0x7f0000000800)=@sco, 0x80, &(0x7f0000000c00)=[{&(0x7f0000002b40)=""/4107, 0x100b}, {0x0}, {&(0x7f0000000b40)=""/136, 0x88}], 0x3}, 0xfffffffa}, {{&(0x7f0000000640)=@qipcrtr, 0x80, &(0x7f0000000740)}, 0x5}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000003b80)=""/102386, 0x18ff2}, {&(0x7f0000002a00)=""/192, 0xc0}, {&(0x7f0000000e00)=""/91, 0x5b}, {&(0x7f0000000e80)=""/171, 0xab}, {&(0x7f0000000d40)=""/118, 0x76}], 0x5, &(0x7f0000000f80)=""/4, 0x4}, 0x1}, {{&(0x7f0000000fc0)=@nfc, 0x80, &(0x7f0000002780)=[{&(0x7f0000001040)=""/158, 0x9e}, {&(0x7f0000001180)}, {&(0x7f00000011c0)=""/51, 0x33}, {&(0x7f0000001200)=""/56, 0x38}, {&(0x7f0000002500)=""/215, 0xd7}, {&(0x7f0000001240)=""/45, 0x2d}, {&(0x7f0000002700)=""/94, 0x5e}], 0x7, &(0x7f0000000880)=""/105, 0x69}, 0x80000000}], 0x5, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000007c0)="30eb2297b18c0a2ada6f46f8341ce63ccdab668e820dabde", 0x41395563) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3, 0x100000000}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) rt_tgsigqueueinfo(0x0, r0, 0x30, &(0x7f0000000340)={0xd, 0x6, 0x1f}) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) fgetxattr(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000980)=""/80, 0x50) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9", 0x89}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a", 0x8c}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="1a268a927f1f6588b967480241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:14:19 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x127900) [ 662.426831][ T8] usb 5-1: USB disconnect, device number 37 [ 662.755073][ T5] usb 6-1: new high-speed USB device number 18 using dummy_hcd 18:14:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x58, r1, 0x1473a06d053c7d6f, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x58}}, 0x0) 18:14:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0x5460, 0x0) [ 662.886571][ T3713] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 663.016429][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 663.166593][ T3713] usb 5-1: Using ep0 maxpacket: 32 [ 663.216892][ T5] usb 6-1: config 1 interface 0 altsetting 104 bulk endpoint 0x1 has invalid maxpacket 32 [ 663.251214][ T5] usb 6-1: config 1 interface 0 has no altsetting 0 [ 663.309426][ T3713] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.328311][ T3713] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 663.347115][ T3713] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 663.356627][ T3713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.367526][ T3713] usb 5-1: config 0 descriptor?? [ 663.408165][ T3713] hub 5-1:0.0: bad descriptor, ignoring hub [ 663.422675][ T3713] hub: probe of 5-1:0.0 failed with error -5 [ 663.436539][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 663.449826][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.468223][ T5] usb 6-1: Product: syz [ 663.476542][ T5] usb 6-1: Manufacturer: syz [ 663.485676][ T5] usb 6-1: SerialNumber: syz [ 663.572769][T20944] raw-gadget gadget: fail, usb_ep_enable returned -22 18:14:21 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f00000013c0), 0x8) 18:14:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newchain={0x24, 0x64, 0x4}, 0x24}}, 0x0) 18:14:21 executing program 1: io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}) 18:14:21 executing program 2: unshare(0x4000400) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0xc0f85403) 18:14:21 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x348, 0x348, 0xf8, 0xffffffff, 0xffffffff, 0x440, 0x440, 0x440, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'ip6_vti0\x00', 'rose0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @mcast1, [], [], 'veth0_to_batadv\x00', 'macvlan0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) [ 663.830209][ T5] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 104 proto 1 vid 0x0525 pid 0xA4A8 18:14:21 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2b, &(0x7f0000000000), 0x4) [ 663.881421][ T5] usb 6-1: USB disconnect, device number 18 [ 663.953508][ T5] usblp0: removed 18:14:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000006c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000080)="c3", 0x1}], 0x1, &(0x7f0000000780)=[@dstaddrv6={0x1c, 0x84, 0xa, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}}, @prinfo={0x14}], 0x30}, 0x80) 18:14:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f00000013c0), 0x8) 18:14:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000000), 0xc) 18:14:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000840)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x58}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x800}, 0x10) 18:14:23 executing program 3: poll(0x0, 0x0, 0x1297) r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) select(0x0, 0x0, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000280)={0xa6c}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001800)=""/4082, 0xff2}, {0x0}, {0x0}], 0x3}, 0x40002) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xffc2, 0x0, 0x0, 0x800e00778) shutdown(r2, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0x1, 0x0, &(0x7f0000000300), 0x8) shutdown(r3, 0x0) 18:14:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f00000013c0), 0x8) 18:14:23 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 18:14:23 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) fcntl$setflags(r2, 0x4, 0x754000) [ 665.496591][ T3713] usb 5-1: USB disconnect, device number 38 18:14:23 executing program 1: semget(0x3, 0x0, 0x1a5) 18:14:23 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x20007) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept$unix(r1, 0x0, 0x0) write$binfmt_aout(r2, 0x0, 0x0) 18:14:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f00000013c0), 0x8) [ 665.967289][ T5] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 666.226286][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 666.350141][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.373145][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 666.388971][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 666.399384][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.411458][ T5] usb 5-1: config 0 descriptor?? [ 666.457458][ T5] hub 5-1:0.0: bad descriptor, ignoring hub [ 666.463527][ T5] hub: probe of 5-1:0.0 failed with error -5 18:14:26 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup2(r1, r0) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x3) 18:14:26 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) recvfrom$unix(r1, &(0x7f0000000000)=""/38, 0x26, 0x0, 0x0, 0x0) 18:14:26 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$KDSKBENT(r0, 0x4b47, 0x0) 18:14:26 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) 18:14:26 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:26 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) 18:14:26 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 18:14:26 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x101101, 0x0) r1 = dup(r0) write$FUSE_NOTIFY_DELETE(r1, 0x0, 0x0) 18:14:26 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) [ 668.576323][ T3713] usb 5-1: USB disconnect, device number 39 18:14:26 executing program 5: syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0xa9c33aae9b1ea10d) 18:14:26 executing program 1: syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x40000) 18:14:26 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1ad923610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200007e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 18:14:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x20, 0x2) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0x0, 0x7fffffff]) [ 668.955974][ T3713] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 669.126086][T17754] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 669.146037][ T3713] usb 5-1: device descriptor read/64, error 18 [ 669.366096][T17754] usb 3-1: Using ep0 maxpacket: 8 18:14:27 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xbb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000780)=@string={0x2}}, {0x2, &(0x7f00000008c0)=@string={0x2}}]}) 18:14:27 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a8f30708cd060601e004000000010902120001000000000904"], 0x0) 18:14:27 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) [ 669.426737][ T3713] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 669.487570][T17754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 669.511995][T17754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 669.537392][T17754] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 669.549860][T17754] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 669.563623][T17754] usb 3-1: New USB device found, idVendor=ee8d, idProduct=d91a, bcdDevice=61.23 [ 669.575011][T17754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.587336][T17754] usb 3-1: config 0 descriptor?? [ 669.615962][ T3713] usb 5-1: device descriptor read/64, error 18 [ 669.726022][ T5] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 669.736079][ T3713] usb usb5-port1: attempt power cycle [ 669.755957][ T9622] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 669.775931][T17753] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 669.846093][T17754] usb 3-1: usb_control_msg returned -32 [ 669.852008][T17754] usbtmc 3-1:0.0: can't read capabilities [ 669.915908][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 669.935832][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 669.955868][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 669.975876][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 669.995975][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.006162][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 670.006267][ T9622] usb 6-1: Using ep0 maxpacket: 32 [ 670.016451][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.025989][T17753] usb 1-1: Using ep0 maxpacket: 32 [ 670.035899][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.055840][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.075844][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.095829][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.115833][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.127826][ T5] usb 2-1: New USB device found, idVendor=06cd, idProduct=0106, bcdDevice= 4.e0 [ 670.135920][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.142075][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.146313][T17753] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 670.164202][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.170626][ T9622] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 670.182019][ T5] usb 2-1: config 0 descriptor?? [ 670.183624][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.195931][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.202819][ T3713] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 670.215835][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.235899][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.247782][T17753] usb 1-1: language id specifier not provided by device, defaulting to English [ 670.256923][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.267628][ T5] keyspan 2-1:0.0: Keyspan - (without firmware) converter detected [ 670.275947][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.295934][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.315983][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.316003][T21216] usbtmc 3-1:0.0: usb_bulk_msg returned -71 [ 670.335842][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.356063][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.366282][ T9622] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 670.375788][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.383431][ T3713] usb 5-1: device descriptor read/8, error -61 [ 670.390609][T17753] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 670.399827][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.406529][ T9622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.414755][ T9622] usb 6-1: Product: syz [ 670.419103][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.425904][T17753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.434106][ T9622] usb 6-1: Manufacturer: syz [ 670.439067][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.445619][ T9622] usb 6-1: SerialNumber: syz [ 670.450500][T17753] usb 1-1: Product: syz [ 670.455640][T17753] usb 1-1: SerialNumber: syz [ 670.460536][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.475811][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.488966][T21197] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 670.495947][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.499774][ T5] usb 2-1: USB disconnect, device number 14 [ 670.515841][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.527328][ T9622] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 670.529740][ T5] keyspan 2-1:0.0: device disconnected [ 670.535818][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.555783][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.575774][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.595821][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.615778][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.622948][ T8] usb 3-1: USB disconnect, device number 6 [ 670.635877][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 670.642091][ C1] usbtmc 3-1:0.0: usb_submit_urb failed: -19 [ 670.696079][ T3713] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 670.737421][ T9622] usb 6-1: USB disconnect, device number 19 [ 670.747228][T17753] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 670.772977][T17753] usb 1-1: USB disconnect, device number 7 [ 670.866268][ T3713] usb 5-1: device descriptor read/8, error -61 [ 670.986860][ T3713] usb usb5-port1: unable to enumerate USB device [ 671.255884][ T9622] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 671.285788][ T3713] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 671.485783][T17753] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 671.496749][ T9622] usb 2-1: Using ep0 maxpacket: 8 [ 671.516411][T17754] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 671.525852][ T3713] usb 3-1: Using ep0 maxpacket: 8 18:14:29 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:29 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) [ 671.618139][ T9622] usb 2-1: New USB device found, idVendor=06cd, idProduct=0106, bcdDevice= 4.e0 [ 671.633710][ T9622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.646774][ T3713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.658665][ T9622] usb 2-1: config 0 descriptor?? [ 671.664024][ T3713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 671.674489][ T3713] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 671.685131][ T3713] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 671.698086][ T3713] usb 3-1: New USB device found, idVendor=ee8d, idProduct=d91a, bcdDevice=61.23 [ 671.710676][ T9622] keyspan 2-1:0.0: Keyspan - (without firmware) converter detected [ 671.718957][ T3713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.733637][T17753] usb 1-1: Using ep0 maxpacket: 32 [ 671.762807][ T3713] usb 3-1: config 0 descriptor?? [ 671.768173][T17754] usb 6-1: Using ep0 maxpacket: 32 [ 671.857149][T17753] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 671.886874][T17754] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 671.905891][T17753] usb 1-1: language id specifier not provided by device, defaulting to English [ 671.943122][T17751] usb 2-1: USB disconnect, device number 15 18:14:29 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1ad923610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200007e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 18:14:29 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a8f30708cd060601e004000000010902120001000000000904"], 0x0) [ 671.958639][T17751] keyspan 2-1:0.0: device disconnected [ 671.986188][ T3713] usb 3-1: usb_control_msg returned -71 [ 671.991907][ T3713] usbtmc 3-1:0.0: can't read capabilities [ 672.056147][T17754] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 672.065250][T17754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.073757][T17753] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 672.085164][T17753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.093680][ T9622] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 672.117076][ T3713] usb 3-1: USB disconnect, device number 7 [ 672.125842][ T5] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 672.128428][T17754] usb 6-1: Product: syz [ 672.138268][T17753] usb 1-1: Product: syz [ 672.149225][T17753] usb 1-1: SerialNumber: syz [ 672.165270][T17754] usb 6-1: Manufacturer: syz [ 672.174403][T17754] usb 6-1: SerialNumber: syz [ 672.206477][T21197] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 672.227481][T17754] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 672.316647][ T5] usb 5-1: device descriptor read/64, error 18 [ 672.362397][ T9622] usb 4-1: Using ep0 maxpacket: 32 18:14:30 executing program 0: syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x4d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x20, 0x20, 0xe4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x1f, 0x0, 0x1, {0x22, 0x665}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x80, 0x5, 0xcb}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x8, 0x6c}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x3, 0xa, 0x3, 0x0, 0x3f}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0xa, [{0x59, &(0x7f00000000c0)=@string={0x59, 0x3, "9b08679af9435c44720fe62cab1692975dbc92b11f143fa25dc2421e0a6db81f96b19a2c1c8050e5564e2b6ff2edbb97ca1d64122becb231b300d823ff48d03073dfeb5d0f554d5846ae2263150fc9f45d59b992afb2fa"}}, {0x3c, &(0x7f0000000140)=@string={0x3c, 0x3, "bdfd5b620a0f7c269ee4b8229718bf29d787c14a5268f58b8b9441d0a68b9b36cbd23c1abb351b9a82308d7d4c9896dc0f868d0cb22fee47ae49"}}, {0x37, &(0x7f0000000180)=@string={0x37, 0x3, "a195f537e85a0fcde95a3aed4d0a3d98aae3fe127a89ae300b6ba4dab2a14224540d879a99559de04c4c3eda2cdc11521c1b0bf576"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41a}}, {0x34, &(0x7f0000000240)=@string={0x34, 0x3, "fc01ada6daa42d599ff8b7d90d9cfe24429d11d78b43783673d6aff194717fe7c11b7d525343c01d521c2372b86c717cb068"}}, {0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="1603d3e2b81f53f3cce5d4331576235a51e06eccd23480f98d1e30c5b0cc8fae9a0597cd7c40321154903c0b337a84ac64e058000fee17d8f49e67bc8cafc5d399cd2cedab88b0ed73dc33333afffade82f17243ada47d9729ad0acc6680b9550d01c2ea5ce6ca3ad56fcdb9997bb1efa37d7f69d590c2c8f3da20f6e42e615600cac854cf61717f7cab2a8565e2f5fdd269"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0xfb, &(0x7f0000000300)=@string={0xfb, 0x3, "91182d2924a15e8408dcec1461e936ecc6991eff6c2a0dc56bae4cc872bbc59bdf5077ba6613ec7a0c45e10888f456582ec0d340ffc392b04b194338fe6f6c5f863fe52419ccf8ef6db5b71c6f0521d6f4542f788576843fa29c5ee11584632f8df29142a57613e9e1644bea5ca870abf2e20b8d3af3f5f74091c8c3979b33d9f17548d718ea75ec16b53e5d08cd530c0ba81f3c26ca4d8cb77507d5bacb8efcc2cf9e07f6060d1ce0b4be22e4b243e346d01e00eda7d40d42b170e775689738a70b957167cfc86db7cf286602516cc7343515a85c774a1cd995fb7a1ff696b6481532edd14157e4a9e958e7cfae4174fa1ef1ad13e887f63b"}}, {0xe2, &(0x7f0000000400)=@string={0xe2, 0x3, "fead1bebb51ae2684c6d0bd7600db9e9ec4f92862b1f09cb636acd1286feb311ddbebf234445de0c9f2faf4f4a54300cb408f724c387a093be030ca3a39e9b3a136a98d11d95821ece00696bb0f5d32b8bedb06c96345089bfe5ab0480d58182310d8825072f50a976cc10d2103ecc7293b97de6384064098c22b2d6c1a4a3ee5822a52cf9456183b1f353a39bd740bd3a1792130c609642c1fdad6108a7529359e74edb4eabd85d951fc9d2313df0544ebf8a401b379ed31594a9ec67ee112b608c84a204230a8f3dc9442a0c80b55ec3d126f416d30911b3c67f3259d7970d"}}]}) syz_open_dev$evdev(&(0x7f00000024c0), 0x0, 0xe41c3) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x3, 0x1f}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x200, 0x4, 0x6c, 0x5, 0xff, 0x5}, 0x2e, &(0x7f0000000640)={0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0xa, 0x6, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "9f535183996894df4998fa4786e2796c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x40, 0x7}]}, 0x4, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x3409}}, {0xbd, &(0x7f0000000740)=@string={0xbd, 0x3, "c0aeb2bcf7f8f5d7c39781d7536f8f2f3f17ff867d5a0ceea31ce838b5476ecb2fbd7ffdc97cbe8f61a4ea1ac8b9c223fe221a3e3c48be48a564e96804a32f7ce9494d0a3d1898426eee06e5bc42e2dbbb5b6e95cebb2bb6796ad691d7e4e7b9ac25dc07f92a3371fff41793f6ada8b3191640d5968dd6c7193eb0e7ac47346d12d9b9e62741f4079ba9fd331b86b6240b8ec7b52279d5302360b2be795971942252b523b7ed05625595b2d008a431fd9f863918dbda4896cdf29c"}}]}) [ 672.447243][T17753] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 672.496512][T17753] usb 1-1: USB disconnect, device number 8 18:14:30 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000380), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "423721b0771a8c001d44936825dc1fea4ec49a07bedeb47dca6dadb54593ea70"}) [ 672.541810][ T9622] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 672.578404][ T3713] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 672.587030][T17751] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 672.608737][T17754] usb 6-1: USB disconnect, device number 20 [ 672.615648][ T5] usb 5-1: new high-speed USB device number 45 using dummy_hcd 18:14:30 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x4, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) [ 672.775890][ T9622] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 672.785065][ T9622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.825714][ T5] usb 5-1: device descriptor read/64, error 18 [ 672.830444][ T9622] usb 4-1: Product: syz [ 672.839147][T17751] usb 2-1: Using ep0 maxpacket: 8 [ 672.844327][ T3713] usb 3-1: Using ep0 maxpacket: 8 [ 672.856869][ T9622] usb 4-1: Manufacturer: syz [ 672.861775][ T9622] usb 4-1: SerialNumber: syz [ 672.917941][ T9622] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 672.945975][ T5] usb usb5-port1: attempt power cycle [ 672.960597][T17751] usb 2-1: New USB device found, idVendor=06cd, idProduct=0106, bcdDevice= 4.e0 [ 672.976427][ T3713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 672.997721][T17751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.006850][ T3713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 673.017376][T17753] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 673.026891][ T3713] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 673.038678][T17751] usb 2-1: config 0 descriptor?? [ 673.045125][ T3713] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 673.066593][ T3713] usb 3-1: New USB device found, idVendor=ee8d, idProduct=d91a, bcdDevice=61.23 [ 673.077702][T17751] keyspan 2-1:0.0: Keyspan - (without firmware) converter detected [ 673.086412][ T3713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.108683][ T3713] usb 3-1: config 0 descriptor?? [ 673.155942][T17754] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 673.175427][ T8] usb 4-1: USB disconnect, device number 11 [ 673.265678][T17753] usb 1-1: Using ep0 maxpacket: 16 [ 673.305304][ T3156] usb 2-1: USB disconnect, device number 16 [ 673.312471][ T3156] keyspan 2-1:0.0: device disconnected [ 673.366507][ T3713] usb 3-1: usb_control_msg returned -32 [ 673.372133][ T3713] usbtmc 3-1:0.0: can't read capabilities [ 673.405540][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.405828][ T5] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 673.412839][T17754] usb 6-1: Using ep0 maxpacket: 32 [ 673.425623][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.445691][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.465548][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.475971][T17753] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 673.487804][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.502333][T17753] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 673.513364][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.525551][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.535039][T17753] usb 1-1: config 1 interface 0 has no altsetting 0 [ 673.545576][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.565629][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.585598][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.592110][T17754] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 673.605500][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.625618][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.626258][ T5] usb 5-1: device descriptor read/8, error -61 [ 673.645520][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.665578][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.685589][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.705574][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.716995][T17753] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.40 [ 673.726779][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.744920][T17753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.753195][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.762206][T17753] usb 1-1: Product: 閡㟵嫨촏嫩੍頽ዾ襺ギ欋ꆲ⑂ൔ骇喙䱌򟠬刑ᬜ [ 673.772614][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.780784][T17754] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 673.789964][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.805516][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.825518][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.831887][T17753] usb 1-1: Manufacturer: ﶽ扛༊♼⊸ᢗ⦿蟗䫁桒诵钋큁讦㚛틋ᨼ㖻騛も綍題蘏಍⾲䟮䦮 [ 673.845499][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.865507][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.875888][T17754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.883944][T17754] usb 6-1: Product: syz [ 673.888320][ C1] usbtmc 3-1:0.0: unknown status received: -71 18:14:31 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a8f30708cd060601e004000000010902120001000000000904"], 0x0) [ 673.894965][T17753] usb 1-1: SerialNumber: 䠊 [ 673.901465][T17754] usb 6-1: Manufacturer: syz [ 673.906204][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.912695][T21358] usbtmc 3-1:0.0: usb_bulk_msg returned -71 [ 673.924686][T17754] usb 6-1: SerialNumber: syz [ 673.929462][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.945515][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.945665][ T5] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 673.965512][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 673.977127][T17754] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 673.985531][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 674.005494][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 674.025491][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 674.045580][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 674.065495][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 674.085564][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 674.104988][T17751] usb 3-1: USB disconnect, device number 8 [ 674.111013][ C1] usbtmc 3-1:0.0: unknown status received: -71 [ 674.111045][ C1] usbtmc 3-1:0.0: usb_submit_urb failed: -19 [ 674.163978][T21320] udc-core: couldn't find an available UDC or it's busy [ 674.180999][T17522] usb 6-1: USB disconnect, device number 21 [ 674.187631][ T5] usb 5-1: device descriptor read/8, error -61 [ 674.205627][T17754] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 674.216015][T21320] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 674.315980][ T3156] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 674.324131][ T5] usb usb5-port1: unable to enumerate USB device [ 674.445638][T17753] usbhid 1-1:1.0: can't add hid device: -71 [ 674.451921][T17753] usbhid: probe of 1-1:1.0 failed with error -71 [ 674.463933][T17754] usb 4-1: Using ep0 maxpacket: 32 [ 674.477244][T17753] usb 1-1: USB disconnect, device number 9 18:14:32 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) [ 674.585713][T17754] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 674.605767][ T3156] usb 2-1: Using ep0 maxpacket: 8 18:14:32 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1ad923610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200007e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) [ 674.746443][ T3156] usb 2-1: New USB device found, idVendor=06cd, idProduct=0106, bcdDevice= 4.e0 [ 674.758805][ T3156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.770620][ T3156] usb 2-1: config 0 descriptor?? [ 674.845967][ T3156] keyspan 2-1:0.0: Keyspan - (without firmware) converter detected 18:14:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, 0x0) [ 674.925565][T17754] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 674.946860][T17754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.973918][ T5] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 674.989557][T17754] usb 4-1: Product: syz [ 675.005536][T17753] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 675.018102][T17754] usb 4-1: Manufacturer: syz [ 675.055766][T19965] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 675.075764][T17754] usb 4-1: can't set config #1, error -71 [ 675.087639][T17754] usb 4-1: USB disconnect, device number 12 [ 675.122324][T17751] usb 2-1: USB disconnect, device number 17 [ 675.130194][T17751] keyspan 2-1:0.0: device disconnected [ 675.215539][ T8] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 675.255561][T17753] usb 1-1: Using ep0 maxpacket: 16 [ 675.283640][ T5] usb 6-1: Using ep0 maxpacket: 32 18:14:32 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x27, 0x303, &(0x7f0000000040)="b90103600000f000009e0ff088641fffffe10e000021633a77fbac141441e0002001be3e7d2a182fff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7", &(0x7f0000000100)}, 0x28) [ 675.310761][T19965] usb 3-1: Using ep0 maxpacket: 8 [ 675.434373][ T5] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 675.449377][ T8] usb 5-1: device descriptor read/64, error 18 [ 675.455793][T19965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 675.456405][T17753] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 675.467644][T19965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 675.501760][T19965] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 675.503301][T17753] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 675.517410][T19965] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 675.525663][T17753] usb 1-1: config 1 interface 0 has no altsetting 0 [ 675.541640][T19965] usb 3-1: New USB device found, idVendor=ee8d, idProduct=d91a, bcdDevice=61.23 [ 675.557325][T19965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.577185][T19965] usb 3-1: config 0 descriptor?? 18:14:33 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a8f30708cd060601e004000000010902120001000000000904"], 0x0) [ 675.675464][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 675.684566][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.712981][ T5] usb 6-1: Product: syz [ 675.715874][T17753] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.40 [ 675.717955][ T5] usb 6-1: Manufacturer: syz [ 675.754170][T17753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.755601][ T5] usb 6-1: SerialNumber: syz [ 675.767524][ T8] usb 5-1: new high-speed USB device number 49 using dummy_hcd 18:14:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x4, 0x4) 18:14:33 executing program 5: timer_create(0x1, 0x0, &(0x7f00000011c0)) timer_settime(0x0, 0x1, &(0x7f0000001200)={{0x77359400}, {0x77359400}}, &(0x7f0000001240)) [ 675.791233][T17753] usb 1-1: Product: 閡㟵嫨촏嫩੍頽ዾ襺ギ欋ꆲ⑂ൔ骇喙䱌򟠬刑ᬜ [ 675.835854][T17753] usb 1-1: Manufacturer: ﶽ扛༊♼⊸ᢗ⦿蟗䫁桒诵钋큁讦㚛틋ᨼ㖻騛も綍題蘏಍⾲䟮䦮 [ 675.836509][ T5] usb 6-1: can't set config #1, error -71 [ 675.865452][T19965] usb 3-1: usb_control_msg returned -32 [ 675.871325][T19965] usbtmc 3-1:0.0: can't read capabilities [ 675.885448][T17753] usb 1-1: SerialNumber: 䠊 [ 675.914732][ T5] usb 6-1: USB disconnect, device number 22 [ 675.920871][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 675.935663][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 675.936180][T17753] usb 1-1: can't set config #1, error -71 [ 675.955468][ C0] usbtmc 3-1:0.0: unknown status received: -71 18:14:33 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000004c0)=""/4096, 0x26, 0x1000, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0}}, 0x10) r3 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x3, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x86}], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x2a, &(0x7f0000000280)=""/42, 0x41100, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x1f, 0x58, 0x2}, 0x10, 0x0, r3}, 0x78) accept$packet(r3, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002b40)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000002b80), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x27, 0x303, &(0x7f0000000040)="b90103600000f000009e0ff088641fffffe10e000021633a77fbac141441e0002001be3e7d2a182fff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28) [ 675.985337][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.005356][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.006843][T17753] usb 1-1: USB disconnect, device number 10 [ 676.011832][ T8] usb 5-1: device descriptor read/64, error 18 [ 676.035354][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.055345][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.075448][ C0] usbtmc 3-1:0.0: unknown status received: -71 18:14:33 executing program 0: getitimer(0x1, &(0x7f0000000140)) [ 676.095424][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.116814][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.135409][ C0] usbtmc 3-1:0.0: unknown status received: -71 18:14:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01020000000000efffff1100000008000300", @ANYRES32=r2, @ANYBLOB="0500e400000000000a000600080211000001"], 0x30}}, 0x0) [ 676.143442][ T8] usb usb5-port1: attempt power cycle [ 676.165319][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.185404][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.205647][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.225444][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.245362][ C0] usbtmc 3-1:0.0: unknown status received: -71 18:14:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002a40)={0xc8, 0x13, 0xc0d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4e20, [0x0, 0x0, 0xa4]}}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "e4f67381834227d8de13d2009eec888fb9d3daab5b99c255e1ab81ba3af6becc94"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "99ee1ede3a5c0c9bd499ecdba85ba5486b87d5e1980adea46ba8828b23cefadc76cc5da420d4244e72d1fe53483a4220e825afcc8c657e4e5b1df33704940a8420ab39b46b74c7fd42c3bc5db1"}]}, 0xc8}}, 0x0) [ 676.245700][T17754] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 676.265436][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.285413][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.305414][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.325421][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.345074][T21477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:14:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01020000000000efffff1100000008000300", @ANYRES32=r2, @ANYBLOB="0500e400000000000a000600080211000001"], 0x30}}, 0x0) [ 676.354690][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.375300][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.395361][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.425446][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.445451][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.465385][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.485400][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.505440][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.525407][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.545396][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.565468][T17754] usb 2-1: Using ep0 maxpacket: 8 [ 676.575338][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.583844][ T8] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 676.595349][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.615404][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.635446][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.655348][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.675373][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.690688][T17754] usb 2-1: New USB device found, idVendor=06cd, idProduct=0106, bcdDevice= 4.e0 [ 676.705265][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.711442][T17754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.721446][T17754] usb 2-1: config 0 descriptor?? [ 676.735341][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.755349][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.776930][T17754] keyspan 2-1:0.0: Keyspan - (without firmware) converter detected [ 676.785383][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.805271][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.812202][ T8] usb 5-1: device descriptor read/8, error -61 [ 676.835274][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.855319][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.875285][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.905266][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.925331][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.945289][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 676.975256][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.005272][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.025331][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.045518][ T9622] usb 2-1: USB disconnect, device number 18 [ 677.054383][ T9622] keyspan 2-1:0.0: device disconnected [ 677.055234][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.085344][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.105284][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.111936][ T8] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 677.135246][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.155309][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.175260][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.205284][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.225263][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.245482][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.265243][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.285344][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.315246][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.322278][ T8] usb 5-1: device descriptor read/8, error -61 [ 677.345225][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.365404][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.395218][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.415317][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.445210][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.461613][ T8] usb usb5-port1: unable to enumerate USB device [ 677.468141][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.495202][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.515235][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.545193][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.565359][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.595194][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.615261][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.635244][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.655233][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.675227][ C0] usbtmc 3-1:0.0: unknown status received: -71 18:14:35 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) [ 677.705195][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.725258][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.745240][ C0] usbtmc 3-1:0.0: unknown status received: -71 18:14:35 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(r0, 0x0, 0x0) 18:14:35 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x161804, 0x0) 18:14:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01020000000000efffff1100000008000300", @ANYRES32=r2, @ANYBLOB="0500e400000000000a000600080211000001"], 0x30}}, 0x0) 18:14:35 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x6, 0x0, 0x20, 0x0, 0x0, 0x3, 0x84010, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x225, 0x4, @perf_bp={0x0}, 0x4005, 0x1, 0x3f, 0x2, 0x4, 0x840, 0x0, 0x0, 0x2, 0x0, 0x400006}, 0x0, 0x4, r0, 0xa) fcntl$setpipe(r0, 0x407, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x2, 0xf8, 0x2, 0x0, 0x4, 0x1, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8000}, 0x1000, 0x81, 0xb7f3, 0x9, 0x1, 0x200, 0x9, 0x0, 0x10000000, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0xa) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ftruncate(0xffffffffffffffff, 0x800) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0xd38c, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2, 0xff, 0x2000}, [{0x0, 0xf1, 0x5dd, 0x0, 0xa3f, 0x3, 0x0, 0x7}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x678) 18:14:35 executing program 1: [ 677.765183][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.795189][ C0] usbtmc 3-1:0.0: unknown status received: -71 [ 677.799304][T17754] usb 3-1: USB disconnect, device number 9 [ 677.801668][ C0] usbtmc 3-1:0.0: usb_submit_urb failed: -19 18:14:35 executing program 1: 18:14:35 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) ftruncate(r0, 0x8208200) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x200, 0x0) 18:14:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01020000000000efffff1100000008000300", @ANYRES32=r2, @ANYBLOB="0500e400000000000a000600080211000001"], 0x30}}, 0x0) 18:14:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) 18:14:35 executing program 1: 18:14:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 678.205363][ T9622] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 678.317238][ T37] audit: type=1326 audit(1621016075.929:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21542 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 [ 678.405322][ T9622] usb 5-1: device descriptor read/64, error 18 [ 678.675192][ T9622] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 678.869739][ T9622] usb 5-1: device descriptor read/64, error 18 [ 678.998273][ T9622] usb usb5-port1: attempt power cycle [ 679.405313][ T9622] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 679.595299][ T9622] usb 5-1: device descriptor read/8, error -61 [ 679.865237][ T9622] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 680.036282][ T9622] usb 5-1: device descriptor read/8, error -61 [ 680.165633][ T9622] usb usb5-port1: unable to enumerate USB device 18:14:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2, 0x0, 0x0) 18:14:38 executing program 1: syz_usb_connect(0x0, 0x24, 0x0, 0x0) 18:14:38 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mreqsrc(r0, 0x0, 0xd, 0x0, &(0x7f0000000140)) 18:14:38 executing program 3: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb5, 0xb5, 0x5, [@func, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "82"}, @volatile, @ptr, @fwd, @union={0x0, 0x8, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0xd5}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 18:14:38 executing program 5: mknodat$null(0xffffffffffffffff, 0x0, 0xb02c, 0x103) 18:14:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x5, 0x5, &(0x7f0000000040)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}]}, &(0x7f0000000a00)='syzkaller\x00', 0x3, 0xb6, &(0x7f0000000a40)=""/182, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:14:38 executing program 5: syz_io_uring_setup(0x3a00, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) 18:14:38 executing program 0: io_setup(0x5, &(0x7f0000000140)=0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) io_cancel(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_submit(r0, 0x1, &(0x7f0000001700)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000400)}]) 18:14:38 executing program 2: syz_io_uring_setup(0x3a5a, &(0x7f0000001300)={0x0, 0x0, 0x2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001380), &(0x7f00000013c0)) 18:14:38 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 18:14:38 executing program 5: r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) [ 681.054430][T21588] ptrace attach of "/root/syz-executor.3"[21586] was attempted by "/root/syz-executor.3"[21588] [ 681.265181][ T3156] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 681.454915][ T3156] usb 5-1: device descriptor read/64, error 18 [ 681.532982][T19965] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 681.735055][ T3156] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 681.784937][T19965] usb 4-1: Using ep0 maxpacket: 8 [ 681.905077][T19965] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.921543][T19965] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.932831][ T3156] usb 5-1: device descriptor read/64, error 18 [ 681.944053][T19965] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 682.075579][ T3156] usb usb5-port1: attempt power cycle [ 682.115246][T19965] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.40 [ 682.130342][T19965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.139730][T19965] usb 4-1: Product: syz [ 682.143909][T19965] usb 4-1: Manufacturer: syz [ 682.153615][T19965] usb 4-1: SerialNumber: syz [ 682.435845][T19965] usbhid 4-1:1.0: can't add hid device: -22 [ 682.442230][T19965] usbhid: probe of 4-1:1.0 failed with error -22 [ 682.451825][T19965] usb 4-1: USB disconnect, device number 13 [ 682.495845][ T3156] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 682.665517][ T3156] usb 5-1: device descriptor read/8, error -61 [ 682.934856][ T3156] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 683.109790][ T3156] usb 5-1: device descriptor read/8, error -61 [ 683.189554][ T5] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 683.235186][ T3156] usb usb5-port1: unable to enumerate USB device [ 683.434822][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 683.558139][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.573786][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.587533][ T5] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.769663][ T5] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.40 [ 683.778959][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.791775][ T5] usb 4-1: Product: syz [ 683.797326][ T5] usb 4-1: Manufacturer: syz [ 683.801960][ T5] usb 4-1: SerialNumber: syz 18:14:41 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:41 executing program 2: sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) 18:14:41 executing program 5: io_setup(0xcee, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_destroy(r0) 18:14:41 executing program 0: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) 18:14:41 executing program 1: syz_usb_connect(0x0, 0x24, 0x0, 0x0) 18:14:41 executing program 2: openat$binder_debug(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 18:14:41 executing program 5: io_setup(0x200, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 18:14:41 executing program 2: io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) getitimer(0x0, &(0x7f0000001d00)) [ 684.112673][ T5] usbhid 4-1:1.0: can't add hid device: -22 [ 684.141451][ T5] usbhid: probe of 4-1:1.0 failed with error -22 18:14:41 executing program 0: syz_open_dev$vcsu(&(0x7f00000012c0), 0x9, 0x0) [ 684.180043][ T5] usb 4-1: USB disconnect, device number 14 18:14:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f9ffff7f00000000000001"], 0x38}}, 0x0) [ 684.334763][ T9622] usb 5-1: new high-speed USB device number 60 using dummy_hcd 18:14:42 executing program 0: semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000000)=""/184) 18:14:42 executing program 5: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) [ 684.534890][ T9622] usb 5-1: device descriptor read/64, error 18 [ 684.810001][ T9622] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 685.044736][ T9622] usb 5-1: device descriptor read/64, error 18 [ 685.164946][ T9622] usb usb5-port1: attempt power cycle [ 685.584863][ T9622] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 685.774768][ T9622] usb 5-1: device descriptor read/8, error -61 [ 686.064597][ T9622] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 686.254802][ T9622] usb 5-1: device descriptor read/8, error -61 [ 686.356245][ T3250] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.362619][ T3250] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.374870][ T9622] usb usb5-port1: unable to enumerate USB device 18:14:44 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:44 executing program 3: write$eventfd(0xffffffffffffffff, &(0x7f00000000c0)=0x1, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xa4) 18:14:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) 18:14:44 executing program 1: syz_usb_connect(0x0, 0x24, 0x0, 0x0) 18:14:44 executing program 0: ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x6c, 0x0, 0x4, 0x70bd27, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd8a}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x6c}}, 0x24008080) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) 18:14:44 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000140), 0x8) 18:14:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, 0x0, 0x0) 18:14:44 executing program 2: r0 = epoll_create1(0x0) r1 = syz_open_dev$media(&(0x7f0000000180), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 18:14:44 executing program 0: getpid() sched_rr_get_interval(0x0, &(0x7f0000000000)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x4, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x200000, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6, 0x64, 0x1, 0x9}]}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x200000, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x200000, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x200000, 0x0) 18:14:44 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001240)={0x8, 0x0, &(0x7f0000001100)=[@decrefs], 0x1, 0x0, &(0x7f0000001180)='0'}) 18:14:44 executing program 3: socket$inet(0x2, 0x0, 0x54ac) 18:14:44 executing program 2: linkat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) [ 687.204140][ T37] audit: type=1326 audit(1621016084.810:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21689 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 [ 687.419507][T17751] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 687.694467][T17751] usb 5-1: Using ep0 maxpacket: 16 [ 687.824588][T17751] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.824651][T17751] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 687.824694][T17751] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 687.824723][T17751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.845762][T17751] usb 5-1: config 0 descriptor?? [ 688.020063][ T37] audit: type=1326 audit(1621016085.630:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21689 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 [ 688.156437][ T8] usb 5-1: USB disconnect, device number 64 [ 688.724387][ T8] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 688.984464][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 689.116322][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.126722][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 689.141336][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 689.151006][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.161178][ T8] usb 5-1: config 0 descriptor?? [ 689.215788][ T8] hub 5-1:0.0: bad descriptor, ignoring hub [ 689.222643][ T8] hub: probe of 5-1:0.0 failed with error -5 18:14:48 executing program 2: r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 18:14:48 executing program 5: munmap(&(0x7f0000ffa000/0x6000)=nil, 0x6000) munmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000) 18:14:48 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x21, 0x0, 0x0) 18:14:48 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 18:14:48 executing program 0: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 18:14:48 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:48 executing program 2: bind$unix(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 18:14:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "b72ab1fdb0df494d2f0a8a29c1d492d24ff0e32eabfe19893f1e520e51a43869a3cb8ee784ac105f7f93359c85f670cea6aa55b572039a02cb219763a75a28e0", "8cf93ccff936ccd47f22676aa6845df4b26af735581d5a659b8aa63dfb0cd841"}) 18:14:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0xa0, 0xffffffff, 0xffffffff, 0xa0, 0xffffffff, 0x168, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) [ 690.555343][ T8] usb 5-1: USB disconnect, device number 65 18:14:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x101}, 0x14}}, 0x0) 18:14:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000600)) [ 690.680792][T21756] x_tables: duplicate underflow at hook 3 [ 690.709577][T21756] x_tables: duplicate underflow at hook 3 18:14:48 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000040)={'fscrypt:', @auto=[0x32, 0x33, 0x33, 0x32, 0x33, 0x58, 0x37, 0x32, 0x63, 0x65, 0x38, 0x64, 0x63, 0x66, 0x35, 0x35]}, &(0x7f0000000080)={0x0, "d61a4158427168b8eef41a446abe54ce1d7cde45def3482754ab14ccb0811b998d8947b96018435dca6c50245426606af357386c1bfd0973f4f0830e0ed2839f", 0x20}, 0x5f, 0xffffffffffffffff) request_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='e355a76a11a1be18', r0) [ 690.784345][ T5] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 690.907024][T17754] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 690.974156][ T5] usb 2-1: device descriptor read/64, error 18 [ 691.184235][T17754] usb 5-1: Using ep0 maxpacket: 16 [ 691.244357][ T5] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 691.334316][T17754] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.354087][T17754] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 691.363113][T17754] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 691.394097][T17754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.415126][T17754] usb 5-1: config 0 descriptor?? [ 691.435058][ T5] usb 2-1: device descriptor read/64, error 18 [ 691.554761][ T5] usb usb2-port1: attempt power cycle [ 691.685781][ T8] usb 5-1: USB disconnect, device number 66 [ 691.964133][ T5] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 692.134799][ T5] usb 2-1: device descriptor read/8, error -61 [ 692.244139][ T8] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 692.404018][ T5] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 692.484079][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 692.575174][ T5] usb 2-1: device descriptor read/8, error -61 [ 692.604304][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.618552][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 692.633094][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 692.643237][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.657794][ T8] usb 5-1: config 0 descriptor?? [ 692.695269][ T8] hub 5-1:0.0: bad descriptor, ignoring hub [ 692.701740][ T8] hub: probe of 5-1:0.0 failed with error -5 [ 692.714360][ T5] usb usb2-port1: unable to enumerate USB device 18:14:51 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="ce", 0x1, 0xfffffffffffffffe) keyctl$unlink(0x9, r1, 0xfffffffffffffffd) 18:14:51 executing program 0: getrusage(0x1, &(0x7f0000000500)) 18:14:51 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'changehat ', 0x2}, 0x1d) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) 18:14:51 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) 18:14:51 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 18:14:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffd}, 0x0) [ 693.992810][ T37] audit: type=1400 audit(1621016091.600:51): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=21805 comm="syz-executor.5" [ 694.027780][ T9622] usb 5-1: USB disconnect, device number 67 18:14:51 executing program 0: r0 = socket(0x2, 0x3, 0x1f) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0xfffffffffffffffe, r0) 18:14:51 executing program 5: r0 = socket(0xa, 0x3, 0x1f) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x22004001) [ 694.085762][ T37] audit: type=1400 audit(1621016091.630:52): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=21805 comm="syz-executor.5" 18:14:51 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r0) 18:14:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000009d9481"], 0x14}}, 0x0) 18:14:51 executing program 5: open$dir(&(0x7f0000000280)='./file0\x00', 0x40, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x800, 0x0, &(0x7f00000009c0)) [ 694.264132][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 694.354182][ T9622] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 694.460308][ T8] usb 2-1: device descriptor read/64, error 18 [ 694.623927][ T9622] usb 5-1: Using ep0 maxpacket: 16 [ 694.734067][ T8] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 694.764279][ T9622] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.791042][ T9622] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 694.813944][ T9622] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 694.824591][ T9622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.850639][ T9622] usb 5-1: config 0 descriptor?? [ 694.924044][ T8] usb 2-1: device descriptor read/64, error 18 [ 695.050448][ T8] usb usb2-port1: attempt power cycle [ 695.108218][ T5] usb 5-1: USB disconnect, device number 68 [ 695.464249][ T8] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 695.634115][ T8] usb 2-1: device descriptor read/8, error -61 [ 695.664084][ T5] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 695.903788][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 695.913981][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 696.034131][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.045511][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 696.058801][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 696.068565][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.083950][ T8] usb 2-1: device descriptor read/8, error -61 [ 696.090546][ T5] usb 5-1: config 0 descriptor?? [ 696.154790][ T5] hub 5-1:0.0: bad descriptor, ignoring hub [ 696.160817][ T5] hub: probe of 5-1:0.0 failed with error -5 [ 696.204864][ T8] usb usb2-port1: unable to enumerate USB device 18:14:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') read$char_raw(r0, 0x0, 0x0) 18:14:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x30) 18:14:55 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) 18:14:55 executing program 5: timerfd_create(0x0, 0x1c00) 18:14:55 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 18:14:55 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') fork() syz_open_dev$dri(&(0x7f00000026c0), 0x80, 0x0) 18:14:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="280000000000000029000000370000002b01000000000000040109000100000100c204000000090038000000000000002900000037000000da03000000000000010a0000000000000000000005000105000000000005020400c20400000fdd00580000000000000029"], 0x158}, 0x0) 18:14:55 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x600580, 0x0) 18:14:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) [ 697.668091][ T9622] usb 5-1: reset high-speed USB device number 69 using dummy_hcd 18:14:55 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001480)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="96be56ec79eeb9fb1a538fabb834cbda776ac2dfa836d026", 0x18}, {&(0x7f00000010c0)="449b545f57c6451219eab2bb843998c12054b6245c2fb5197211d2443b58f65b3860f82fb54a0aa8ba4cfc5b4a83aaac0859b74d4fedc1392dbae6db4993a1c00c1a11e1e558f800016a9714134f1963688190174d3b35d440b71d7d49e8dc41f82593956e2d00a7d26433761447f44a459a0f5a0c7cd12330b580", 0x7b}, {&(0x7f0000001140)="11f08a593c364e7c29a545f2d4cbe5f4ee448a308f30142b251f3ce8807c21dc88dc81d44f5008c75c937c4b5a2e29294c2ec307bb5d2f1b690a4d4872a5ae95f0248238c0f9bb00960314890cdf21dc3eb87de1feb6e07ff8fe23e8fbe9", 0x5e}], 0x4}, 0x0) 18:14:55 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x67, 0xd2, 0x60, 0x10, 0xd64, 0x108, 0xaaa9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2e, 0xc6, 0x69, 0x0, [], [{{0x9, 0x5, 0xc, 0x2}}, {{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) [ 697.717225][T17751] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 697.813461][T21901] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 697.925526][T17751] usb 2-1: device descriptor read/64, error 18 [ 697.943657][ T9622] usb 5-1: Using ep0 maxpacket: 16 [ 697.997784][ T9622] usb 5-1: device firmware changed [ 698.024436][ T9622] usb 5-1: USB disconnect, device number 69 [ 698.080361][T17754] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 698.199443][T17751] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 698.323554][T17754] usb 6-1: Using ep0 maxpacket: 16 [ 698.404234][ T9622] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 698.419414][T17751] usb 2-1: device descriptor read/64, error 18 [ 698.444049][T17754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 698.459997][T17754] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 698.474142][T17754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 698.553854][T17751] usb usb2-port1: attempt power cycle [ 698.643916][T17754] usb 6-1: New USB device found, idVendor=0d64, idProduct=0108, bcdDevice=aa.a9 [ 698.652999][T17754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.662928][ T9622] usb 5-1: Using ep0 maxpacket: 16 [ 698.668474][T17754] usb 6-1: Product: syz [ 698.672638][T17754] usb 6-1: Manufacturer: syz [ 698.680744][T17754] usb 6-1: SerialNumber: syz [ 698.693726][T17754] usb 6-1: config 0 descriptor?? [ 698.735176][T17754] zr364xx 6-1:0.0: Zoran 364xx compatible webcam plugged [ 698.747927][T17754] zr364xx 6-1:0.0: model 0d64:0108 detected [ 698.766281][T17754] usb 6-1: 320x240 mode selected [ 698.771394][T17754] zr364xx 6-1:0.0: Could not find bulk-in endpoint [ 698.784694][ T9622] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.797784][T17754] zr364xx: probe of 6-1:0.0 failed with error -12 [ 698.804746][ T9622] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 698.818652][ T9622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.829055][ T9622] usb 5-1: config 0 descriptor?? [ 698.875975][ T9622] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 698.939617][ T5] usb 6-1: USB disconnect, device number 23 [ 698.963633][T17751] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 699.079383][ T9622] usb 5-1: USB disconnect, device number 70 [ 699.134507][T17751] usb 2-1: device descriptor read/8, error -61 [ 699.403553][T17751] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 699.574155][T17751] usb 2-1: device descriptor read/8, error -61 [ 699.633628][ T9622] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 699.693769][T17751] usb usb2-port1: unable to enumerate USB device [ 699.723739][T21407] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 699.873879][ T9622] usb 5-1: Using ep0 maxpacket: 32 [ 699.993834][ T9622] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.003512][T21407] usb 6-1: Using ep0 maxpacket: 16 [ 700.010761][ T9622] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 700.029722][ T9622] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 700.041099][ T9622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.057002][ T9622] usb 5-1: config 0 descriptor?? [ 700.094542][ T9622] hub 5-1:0.0: bad descriptor, ignoring hub [ 700.100833][ T9622] hub: probe of 5-1:0.0 failed with error -5 [ 700.117141][ T9622] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 700.133986][T21407] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 700.154421][T21407] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 700.166369][T21407] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 700.333620][T21407] usb 6-1: New USB device found, idVendor=0d64, idProduct=0108, bcdDevice=aa.a9 [ 700.343010][T21407] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.353273][T21407] usb 6-1: Product: syz [ 700.362732][T21407] usb 6-1: Manufacturer: syz [ 700.369911][T21407] usb 6-1: SerialNumber: syz [ 700.378646][T21407] usb 6-1: config 0 descriptor?? [ 700.440180][T21407] zr364xx 6-1:0.0: Zoran 364xx compatible webcam plugged [ 700.463139][T21407] zr364xx 6-1:0.0: model 0d64:0108 detected [ 700.494858][T21407] usb 6-1: 320x240 mode selected [ 700.506020][T21407] zr364xx 6-1:0.0: Could not find bulk-in endpoint [ 700.521207][T21407] zr364xx: probe of 6-1:0.0 failed with error -12 [ 700.644642][T17754] usb 6-1: USB disconnect, device number 24 18:14:58 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:14:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f000002f040)={0x7, 0x0, 0x0, 0x2}, 0x40) 18:14:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x1) 18:14:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000017740)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4}, {}]}]}}, &(0x7f0000017680)=""/140, 0x36, 0x8c, 0x1}, 0x20) 18:14:58 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 18:14:58 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x1, 0x1, "c1"}], 0x18}, 0x0) 18:14:59 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffc6553532, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x8, 0x0, 0x7, 0x40, 0x0, 0x3, 0x400, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000280), 0x9}, 0x10, 0x1, 0x7ff, 0x7, 0x1f, 0x101, 0x38, 0x0, 0x7, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f0000000100), 0x12) ioctl$TUNSETLINK(r1, 0x400454cd, 0x304) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000380)='FROZEN\x00', 0xfdef) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) 18:14:59 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x5423) [ 701.433806][T21407] usb 5-1: USB disconnect, device number 71 18:14:59 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a0) 18:14:59 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8013a926a32426da50a12befd0b4c0f3a4e8ac", 0x0, 0x3}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x196, &(0x7f0000000440)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 18:14:59 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x80, 0x40002) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 18:14:59 executing program 2: r0 = socket(0x10, 0x2, 0x0) set_mempolicy(0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x4fd000, 0x30}, 0x0) [ 701.622343][T21999] ptrace attach of "/root/syz-executor.0"[21998] was attempted by "/root/syz-executor.0"[21999] [ 701.644107][T19965] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 701.743355][T21407] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 701.833492][T19965] usb 2-1: device descriptor read/64, error 18 [ 701.988642][T21407] usb 5-1: Using ep0 maxpacket: 16 [ 702.119367][T21407] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.129635][T19965] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 702.147623][T21407] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 702.170917][T21407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.191779][T21407] usb 5-1: config 0 descriptor?? [ 702.245975][T21407] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 702.339931][T19965] usb 2-1: device descriptor read/64, error 18 [ 702.453793][ T9622] usb 5-1: USB disconnect, device number 72 [ 702.463679][T19965] usb usb2-port1: attempt power cycle [ 702.873348][T19965] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 703.044018][T19965] usb 2-1: device descriptor read/8, error -61 [ 703.083294][ T9622] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 703.313305][T19965] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 703.363197][ T9622] usb 5-1: Using ep0 maxpacket: 32 [ 703.483483][ T9622] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.484539][T19965] usb 2-1: device descriptor read/8, error -61 [ 703.500717][ T9622] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 703.518555][ T9622] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 703.528146][ T9622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.543769][ T9622] usb 5-1: config 0 descriptor?? [ 703.591757][ T9622] hub 5-1:0.0: bad descriptor, ignoring hub [ 703.599318][ T9622] hub: probe of 5-1:0.0 failed with error -5 [ 703.613489][T19965] usb usb2-port1: unable to enumerate USB device [ 703.616236][ T9622] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 18:15:02 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:15:02 executing program 0: r0 = socket(0x10, 0x2, 0x9) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 18:15:02 executing program 2: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000140), 0x74) 18:15:02 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f00005b0000/0x1000)=nil, &(0x7f0000b53000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2faf, &(0x7f0000000000), &(0x7f0000506000/0x1000)=nil, &(0x7f0000a81000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:15:02 executing program 5: mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4919df08ddcaf2f1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2d2a, &(0x7f0000000000), &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:15:02 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 18:15:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000400)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x210) 18:15:02 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x7, 0x5fd) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x3}}) 18:15:02 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "9030f1aa22144014cd3a0fc78ce044f2cfcfbd1f587dbed362411f2951487066feeb5ea5eae076634723ac223576367b6e597d35aa84b64681cd96dee04753da"}, 0x48, 0xfffffffffffffffe) keyctl$unlink(0x6, r0, 0xfffffffffffffffc) 18:15:02 executing program 2: r0 = add_key$keyring(&(0x7f0000000480), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='&', 0x1, r0) [ 705.077444][T17753] usb 5-1: reset high-speed USB device number 73 using dummy_hcd 18:15:02 executing program 5: syz_open_dev$vcsn(&(0x7f0000000040), 0x5006, 0x147201) 18:15:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0xf}, 0x0) [ 705.170491][ T5] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 705.343209][T17753] usb 5-1: Using ep0 maxpacket: 16 [ 705.373079][ T5] usb 2-1: device descriptor read/64, error 18 [ 705.391237][T17753] usb 5-1: device firmware changed [ 705.398013][T17753] usb 5-1: USB disconnect, device number 73 [ 705.643145][ T5] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 705.793196][T17753] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 705.835849][ T5] usb 2-1: device descriptor read/64, error 18 [ 705.953760][ T5] usb usb2-port1: attempt power cycle [ 706.063026][T17753] usb 5-1: Using ep0 maxpacket: 16 [ 706.213464][T17753] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.228211][T17753] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 706.238863][T17753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.252585][T17753] usb 5-1: config 0 descriptor?? [ 706.305440][T17753] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 706.372993][ T5] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 706.509705][T17753] usb 5-1: USB disconnect, device number 74 [ 706.568165][ T5] usb 2-1: device descriptor read/8, error -61 [ 706.863112][ T5] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 707.062931][T17753] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 707.093839][ T5] usb 2-1: device descriptor read/8, error -61 [ 707.223181][ T5] usb usb2-port1: unable to enumerate USB device [ 707.302920][T17753] usb 5-1: Using ep0 maxpacket: 32 [ 707.423193][T17753] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.433759][T17753] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 707.448996][T17753] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 707.458640][T17753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.469884][T17753] usb 5-1: config 0 descriptor?? [ 707.514482][T17753] hub 5-1:0.0: bad descriptor, ignoring hub [ 707.521955][T17753] hub: probe of 5-1:0.0 failed with error -5 [ 707.539741][T17753] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 18:15:06 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:15:06 executing program 0: perf_event_open$cgroup(&(0x7f0000000900)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:15:06 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0xff) 18:15:06 executing program 5: r0 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00'}) 18:15:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xfffffffffffffc4a) 18:15:06 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 18:15:06 executing program 5: io_setup(0x2, &(0x7f0000000080)=0x0) io_setup(0x0, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x1c9000, 0x0) io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0]) 18:15:06 executing program 0: syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) [ 708.863098][T17753] usb 5-1: USB disconnect, device number 75 18:15:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x54}}, 0x0) 18:15:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x0, {0x0, 0x0, 0x1}}) 18:15:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='S'], 0x60}}, 0x0) 18:15:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x0, 0xc, &(0x7f0000000440)="d9", 0x1) [ 709.112837][ T9622] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 709.263289][T17753] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 709.315172][ T9622] usb 2-1: device descriptor read/64, error 18 [ 709.542807][T17753] usb 5-1: Using ep0 maxpacket: 16 [ 709.593307][ T9622] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 709.682924][T17753] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.694118][T17753] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 709.722812][T17753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.744481][T17753] usb 5-1: config 0 descriptor?? [ 709.805551][T17753] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 709.813150][ T9622] usb 2-1: device descriptor read/64, error 18 [ 709.933473][ T9622] usb usb2-port1: attempt power cycle [ 710.026558][T17753] usb 5-1: USB disconnect, device number 76 [ 710.342689][ T9622] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 710.532883][ T9622] usb 2-1: device descriptor read/8, error -61 [ 710.632777][T17753] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 710.812603][ T9622] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 710.883406][T17753] usb 5-1: Using ep0 maxpacket: 32 [ 711.003778][ T9622] usb 2-1: device descriptor read/8, error -61 [ 711.023037][T17753] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.040199][T17753] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 711.059433][T17753] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 711.069427][T17753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.084797][T17753] usb 5-1: config 0 descriptor?? [ 711.123038][ T9622] usb usb2-port1: unable to enumerate USB device [ 711.144899][T17753] hub 5-1:0.0: bad descriptor, ignoring hub [ 711.150949][T17753] hub: probe of 5-1:0.0 failed with error -5 [ 711.166606][T17753] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 18:15:09 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:15:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x400}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:15:09 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x1000) 18:15:09 executing program 5: sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x5495}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() ptrace$setopts(0xffffffffffffffff, r4, 0x0, 0x200068) r5 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) unlinkat(r5, &(0x7f0000000180)='./file0/file0\x00', 0x200) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) splice(0xffffffffffffffff, &(0x7f00000001c0)=0x1, r0, &(0x7f0000000240)=0x7, 0xffffd410, 0x1) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00', {}, {}, 0x16}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 18:15:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0, 0x54}}, 0x0) 18:15:09 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a8f30708cd060601e00400"], 0x0) 18:15:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x1}]}]}}, &(0x7f0000001840)=""/4096, 0x32, 0x1000, 0x1}, 0x20) [ 712.483228][ T5] usb 5-1: USB disconnect, device number 77 [ 712.488512][T22192] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 18:15:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000540)={0x0, 0x1f, 0x0}) 18:15:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x800}, {0x3, 0x6, 0x1000}, {0x3}], 0x3, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x1, 0xffff}, {0x0, 0x100}], 0x2, 0x0) semop(0x0, &(0x7f0000000000)=[{0x1, 0x3ff}], 0x1) [ 712.752594][T17754] usb 2-1: new high-speed USB device number 43 using dummy_hcd 18:15:10 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) 18:15:10 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x805}, {0x0, 0x0, 0x0, 0x0, 0x58}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) 18:15:10 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0/file0\x00', 0x4000100) [ 712.897126][ T5] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 713.060452][T17754] usb 2-1: Using ep0 maxpacket: 8 [ 713.111107][T17754] usb 2-1: no configurations [ 713.116012][T17754] usb 2-1: can't read configurations, error -22 [ 713.142500][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 713.262821][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.276970][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 713.282434][T17754] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 713.292487][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.316449][ T5] usb 5-1: config 0 descriptor?? [ 713.374776][ T5] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 713.562445][T17754] usb 2-1: Using ep0 maxpacket: 8 [ 713.578835][T17753] usb 5-1: USB disconnect, device number 78 [ 713.621392][T17754] usb 2-1: no configurations [ 713.626612][T17754] usb 2-1: can't read configurations, error -22 [ 713.641790][T17754] usb usb2-port1: attempt power cycle [ 714.072361][T17754] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 714.193095][T17754] usb 2-1: Using ep0 maxpacket: 8 [ 714.198323][T17753] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 714.243821][T17754] usb 2-1: no configurations [ 714.248458][T17754] usb 2-1: can't read configurations, error -22 [ 714.422709][T17754] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 714.492355][T17753] usb 5-1: Using ep0 maxpacket: 32 [ 714.543588][T17754] usb 2-1: Using ep0 maxpacket: 8 [ 714.593829][T17754] usb 2-1: no configurations [ 714.598604][T17754] usb 2-1: can't read configurations, error -22 [ 714.607295][T17754] usb usb2-port1: unable to enumerate USB device [ 714.632515][T17753] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.642856][T17753] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 714.658756][T17753] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 714.668802][T17753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.680729][T17753] usb 5-1: config 0 descriptor?? [ 714.724822][T17753] hub 5-1:0.0: bad descriptor, ignoring hub [ 714.745274][T17753] hub: probe of 5-1:0.0 failed with error -5 [ 714.761082][T17753] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 18:15:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:15:13 executing program 3: r0 = io_uring_setup(0x26c9, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:15:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x56, 0x1, 0x12, 0x0, "167d809387d7f98a4942af10f39451aad20489858f016384bee13eed812e23c00e448c384c8e010b3117cfed8b64f3d549c42e7f7fe2edee77de329cb693d18e", "71727e2cc59c63818073780af24b26370affbfc577a3c87be0855993195e3bc5"}) 18:15:13 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r1}, 0x50) mkdir(&(0x7f0000000000)='./file0/../file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f000000a680)="aedac972e6bc646639a57666547ef8d38e251ce343c2cee23fc268bfd12fdfc0d4f3df7af08b0a38495af3121915924474f82bc58624ee442d6cb05b9439ab33729af3ccf12c317035309e335087f601ca6d0f6d5a729ba53e3e9ce4220589f6b559ffd77405047732f8857571dae3dddf38e2cb92fe0eb5fb2ea96d51f1759f5debad2ba3546e5689a0d1e743679470b5fb74a25ffd8bc57eb5935a3281dd142a2e17722e430f4056afef255fc6b4d2aab048e36a0fc38d5ca563e15bb7bd70257e225a78438ba9caa42b1ab544bbaca0ce56bc8889e50557aa56c11f83dc27d9b7791b071519eb43aa34050a8e41fdfd042405e41db61347acb33af35668f6f4cea5983c2171cb6ee7318ca940b31d10074e8c7e17aae69fafe246cfb1e42ff12be8f1bb6fd77778185e8524baf454e3f8a06990791f00741e38a287c94d3c46386f474ebee02287c25a9809c0ac8c2976bf9da464ee053f4a8dffbbcf2e1b701176ef376ab73f2ba6b70b1180dc601a0af5485ec6d52ca78ac9e1cc26fb661b3a90da7f14fb027bb99362db655beb17b2ba15170f0b2858010de864c0705d35caef3ae3acb63a95617649af3fda5f462813248fc2669bca353798a56e4b5bf1cd1253cb476d79725c269f3da668b849037a05cd37aecd851c7ad49516fefcdca44092eb7bfa2b8291c21a8d07c4d6d637f0e026125569873daa8bbf959b600137626fa8e32a11cd06eb10e85cf4f1aa22079aba063595a717f0e96b65d9347129afec08f1003737b71ad6628f331a847a2cb1491d2b3168a1df1bbbaf4273973042aa951186c026b10594551c62ad04163304abc53eb0fea7b1755da4ad5a67f2e8a55a08cb27abb6b1e17db3a2bd418df4bab1054df7029366893af140b153f985e5d368ff1e879a9ce2f75e6a705f46ff16fe6d58296f2c14289c8698cd850a7fab41487f4058f7355d6f5bc23bcb44384aac7f51f5783246984e39368fb846ff882a943a99934faba972894c2a93d499a451d9fd68a81cc97891b246c5a3f62f1d5a3b8d386d5603be3c2987b3f851469f8f764178e116ecf59b6a1bef04eda91f233653ab1977620952736746114a1acd7f6c7086b730e746c8a6cc1a70cd7d7fde46b00039d232a62d27117a03c7e53776edf758e28e7839593fb70dd1fe9533c763096edc9ca6e9a9fcac4078bc3527c74c25cd6ddaebf9eabe13577baaaf6f251c91ac9730345ab510c2be62b57f66bd04ee6bd68dfc819362e394e8297eb029897cc60f60188b442e4624a9f462165ff269733dc03d24ac459bb0a9ce8d4ed5df8fe0ebc9c41ee94913c24444a823102f4ebf8ae6f6f12d9e76334c41346fb464be7d9c2f3d58192b99509aad8e5d4effc1e1245c3177cf6eef676524ae18b84ddb79213c7fa4deec9d5d785e0b472c6563e63a7b3e687ead87bc7ee78b2a4b45b0d6da585f9c3576c96217181139e28ad11de0510f08789ece5914239de515ece6e3e2ded024ed305e151eead24bb78d13361cb4a7c7bc2c23ed1e4359d0b270197ae9a5a905401e158d44c2debc461ccd90ab8628667e455dae77db2bde0af15df3d459ead455deb0bd7a83446a765bb238c488199fbf8f4533e711a28758be3c2622f1645f10c77c670e14dbc8cd55bae567ef7bd43a86a2de54ec9ef828e5b39025425493400ef2a0c7dcd33914138f8e879d3f22c396a37ab52dea022cdc57f9753cc874a4d05cb7c040fce674025bc01002b9784a5adced491f9362c64d1e487cc03f28d53adf4fae643aad8510774ba536641c2b77ba2368f7094d8faca5bcdd6fd9aec341e85301b73138a99d3b280821f1aed56b0582a917a03cce1c23646d8bfa8292c4c8622dadc7efbf12548e00ac5661d733f6020c4d082d8644c5818d2073e3f044df1b3e64e3e847f3e9fa90d59a45705c0d1a7aeee101f299c7e7080e907bd9e68b6ff991a9ab4b7a781523bba0b27b21f9208af70322b0275bec0bf62e47c7d10948facd4919754f161eb59b2abd9fc8d44d65a448a22cd6c497810ed825d0e7c61b9a8a1366444db3206a113b3f5153666e4a774cf855a5c026bfbbf7f4328555062f3494a7071a482d8771bd5bd7886444e03ff0266ff1c96b20298efda7907e85e2ac36f2542fc15b09b9e5eb6e71eb881e3cb3108c15f062146a544d653e39ff67101b1a7cde6b30a2d460064d3a7435953526e69c681ad75845790ad96fbc9f303774ef3b8ffd47c19e02caf1822c2d86dbc6803d9b8b76cb7f50354e75916e6017943592ea2afffccb88f29178005e03ca8f2f2ef7c9c453ef72d0bb3abe25328c28c38cc4b7a83818170819a83fa0929777be97315e5bf3f3e08de3d937170b5d43baafc35d78a0b2bdeb73eabe278c539efc898ec9ffc35ea16bdbb555191043618fbffa666f1eaa74576b2e963ef6c5691d58a240877955e5901e0111e0f28ee1c25307de84afd95bb78478b83c17d1bcec6543416b1eebd1cd2253ef7359bb08bd7b29d6305a9cfdc984496ed37281a55ed708bfe69d5d4d26fa6011b365f175c7231ba47700548c17e409b8ee2c521347f7d4d8e06c6a4805d6a9f13576911b9be9f8282bda12bec465b55d06bfc3993b3d5ad8790800c7d804d1d1db92c1894c90b4e631ac2f9c7bac0898f9666a6524e138a7086fd67a4c3379cb0115350339cd6920d2e5449d473bc1bd673cd3c8f6e0af292533339ba9cde10b6d4d5a8736d1ecc05e074a55b8c1d9dc4364148acaff7445ea981496ae2f5306fd8c703ce5f073895ad55ea412c7e9cfd007f245542886e16f7eae254e3ef79d8fd0a071b498d1b86443190860b217229bd8f5b191e9aff3e97add2022888dc1b30a61ea313c7c62f60649a97096f7a15518a25e35943fc1583e33c2ceb04b64085d85e8eaac8b282af8d99c9e7a60cf5b2ab2e9ca6de3426333f749bf9d390fe822c0fa1a623f0160522ac6208d3bedd27466b78a8cb363495468106554e33b3fb2f6b6ee6afeb5e133edec3549f05aef1745d215618117fb9c017d02b9e508000a8185e2034c694adccfdcc786a7af60373c1c9fa1e84179185f4f76b7f860ed9fb1c20486def6eac436fd8c2bfa0f924814dac4d15d638bde577fa32d53483d5bf9491db42a7442b62106272730b10ac81b9f6addba37dc4a472f5f4c860e025d30b6d118e02f1a8795b73ff77d973027485e08e6f72cab5824a7eb3aea2e2df81bb061554728949c38c9930c47b44e07a85d74bf067b2655a8b58525eb10b19879311d2ffaafdf03b38b2dfc47895bcec6a3418ded12a27fdd6abaa08b41c1ea0b743dd24b67f23c8eaecd37557627b9dfac605ea3aa204c23f7e9737daf478e7d2433b463e3bde6513194afc3b7adc158548ef62ae5533f8013e7965aa3bfe08d0cf53106f8174f2819620b72d334521dc97db6db2dd6b525d5b37078dc25f253d70698c9131b8bd623b52c14fe20b139ecff5e5f57feeb8c0f025dfcd5a154d1606b78b88e10bb7ad32bacc54caea8c01e2b555c32e318306d39a1f231c740cb556dd4fe8c1d21e88f6b2009ee4bd6262796804105634d223f852103eae48bae7e30f5a65533f6addc68c5172d934282e5afd69a31c1a832e6f8e7134541be438e4de848605185f9ba7d6ff5bc18a4dece5aa4106a2e8d2901c9249ad759fb3f7b3c12455256bc873e1cd2c22619b69b9d5eedc635e2d05db1375af9088089a410e9dcc19ab16af5938ee015d2c7e9ecb2b87375bb22f1a81fe2df14cc1432a94201191f54dd2cdc1f8d4765b6cd71ca5879d973692c0e98e8b69c1b5af6f44c382bbdb73b7f007b4563ef5e4a518caadd64b9fb1368839b3c78986753b116672756fe13408becd8c158f2b7ecede726e7c2ec8fb32a11397c8d11b4c557302ea22177bfa60eb3f5f7f4e0505369035d6bf6551577a47c715f466381f78dfc982aad74772cc9994baf6b7f309533f96672508d5832338b755009bb0d55898d8ba09ad94adde7e2ae590e28981e0d5d5eae6c072025aa99b45907037df81a485ab0e63ad32bf1c44568f846bbcafea15a4861333ef0aa7a6373780600f01f3467fdf3a5155ad11a99f0be7e0f470f29e619cfef57e7ef591f7bb87af0c76b411a0ae2b32354bfd67cd51c29696f9bdbd6eacfee2cc1d4bb9697bf188927a0d9e6082ac54165a6babd65200c124314d5a1ac96ce68d887a2f864b8e09ea5d8ceb1dd92c79db9f9bab430eb3c501515096bf61e80e467800cffbf58b39577cc7af41c18c8e5a703532b9b88ffe4e81774f9ab58fda5955b3388a8686cbd7546bcda6303c06930027ba0268b5a61a2a8c7e898880ccc761855a84e0d6855d2ea0559d1eb091c68eeae5ea1fdce08bcfe49abb6f6f60c2ef51850e7fa015a5f5ed9b2cb836a943e4692281f7a10f2c9ce406ff031284037791403cb89fb31a056ac208b3d088871e65856cc3890349432a21a16d38ed7d702030192d8d1c3500553b83402184fa96de9149deaae36096b490f75aff21e51e2e8d745f9b600c36bdb5612fd1440827e5bf9b369823fa2dd3c7645f6f0fa2335036bf5bf191593ccb9e68b88586819437d368644ceb2658fc58169500783c0aaa1da970fff086448be4c6d0f3dd5c1935c2b8d07be6963e997d26ef58c3111b69b3be237a359dbdd64ad246910392495d679eb97c6b60e02f09a3f1dffd3d1b49eb718bff3ae12b910ef3e969c4d5763f0170140c55442ba10ed1bbd7abc467a272aebb2b1945fec2ceccd2eb59c1ae1eb0f45c84b54c463bb44a82199e138bab8f16e82fb087fc5676a1d65a8550ad0c5c46f4aba916599bc1e7118963bbcfc5ca8608846e5bd21be42b4f01e6bbfb9b15d0fba70efd1ae6402243c233efa4221431ba068a65051c5f9f6b0831e0f152850d08cb581ff65c623b8453b05ebfde2ce72ba6a735ed745396aeb0c4bcc3ecff42a73cf6125bdb3d3b67ae040587362f8ee0035951da6a9d0631d735c42962677f6c0796fa4401ea91c5b3cffa97d2af3eba690e5093dd09ffd3337f2d7cc73015cee4ae66eb17f1043f3d1e9c1c68d3b31cb366b8fddb3cd2c07bbb8cd8c69cea2540f08c31c25060dbf7b03cd6363b070b4d63d21bdae2d05e4a322bf9aa5c3b3eb969aabd4e6d845cad44af84e699478b185c19a803e1f48698bc9e4b45bde7dc9e49eb147adfff329311f6e607913d1d7a08d7b6bf38d097a34fe2a6a5bfda62e9102e407cc7538abfc4c61d70a99581015d04eaa6130858fd061848d6a41bd2c92317490c1b62a1ff0ba972419f3daccbe55d7ab865161c1ceacec4353af0703effea600f15b0cf8c2e34ed04061ccfb3720677875e7d5ceca89ad428800e29c363f0067b51f7f563bc53f2b6d6c71adc13ddb7f9731a6309cbf7e0576dd5d6ee533c345b31595ee2e5b27da3869c17504ddb327970a999c5cea2c3efd1380007e9bfa555f1d1e348b7b626f6600dea25d7450826892164b953c972a8ff0b72f1d3a27b88f1c229215b4d85bd588fa574572780f810a415503f8e0cfc7542c3e6894c38b1a7d3d473c5d7e836b749d7077f657c136ec96907789825f787a54972be3478c590f4b84377b79519546af57c3f0ef10f39aa4ed47172d4ce74f61a365d93409ef09511e71091b3d7ed9c3b93412f6dbfbde1bd374fb8a5ce8883e945d24ee93caf769f7fd8aa948ecb4374de8ac1f6442a64c2b63829dff2d501c3ceb08cecb7a9a24f80cc4cccf85a3a04b438790c560accf02754bdb677b3ef8262ec0a2a1a34f76e23687bc60d4e997c7e1440a087f1d01a139fa99f7ce62dc90d6299a66fa4d8579dcb55e8f37eb14b6959b42a425c23a9290cd1189e65cc1571101b46e2c84ed534b3ebac11e7b9748142777f7588d505984ed804c5c3276443db323f820c5fe123ec4bf6e0af92062aaf77176584785f8000ae9e7510ec8ad783a137cc844ac119445ede50fe92e2ad44da0f6b95ff3eea7f6151e14493246f26ec5d5e938647838406596e05f01e764005a72293772dce855be771bfca2a757e65aa3dbee084cf2e25b0470ba5fde22d990e221d4729ef627f5044692e2c850ccb4ecda7a514977c459a7988561310d39b22ffb0029f5599151371042d0337cb718527c8bcbc0bd0c70f45a560ab67b056c28f30411458f22cb100fdbec87c68745fc648c16c38587cada589a5d14b03da2104dcf1c4f0389f7e68f1a884bf59502f8c4a4197658cff87ff5580a8394ed814b9fd3b58a12c944319e7be97d7bd86c2b0dee7b7eb4acc8b9b51da77a22f0daba02b9615bfd6b03bc828bf99efda54dd193777b107463794fe82fb02621c9bd7b0fdf8f414e2b6f7cd6c7184b65fb053013dcf109a37f52eba60fa077b86a7e47e02b8e6870190f2ceb0c9d697c288b75f0677faf3966d829ebb96c1a9eafa7908f717f80d57542d47ec4528bc16a66e9f16c59a9196f788b4bf5eaa5b93fdda7867e689960a41041f7fa29c70b4143a1394c1e9aff75ced011d4fb054672931430975e40bb4869597d98eb68db6a9936205dfc0ed0386bb7c44629d533e5ec87a2b0b779462287f82a74d7491c7f091caa72c82913d0587c8a3065cbd2855b63a493a78ec2333674beee7e3843378e249b16b5eb12cf29181a3643cbc186e1ec490e90b4794ea3971b92ad7ea4bc56d50887333e105cfa3aa896418e3a3f497293ce0a0cdd86ec60aca987c228d538e900fc33db8008ed8df76d0f2d72dcf35ebd633675f724cbae1d1d54de2adc629f0ddf3ecd2d30871a250c6e4861ed9ee4bc755f7fb9224e2a37b467e555b12c70d53c8313c5c25b51bdadef27d862602048e45b00a02f8e8dd47d3bdc147f15c7e0ebf6a1d9c53af1a0f9e28ec765b46cd9ac2907f0bdeceaccb47c53eba1166e0339e35123174cda14dd770d426b4cba0b93fbf335c53db14aa70f79a2e8d2c602f4f92e3e9fc91f7e8ba6e582cfaf041dd46722ba650769be5a64e183ebd8d8ee6f53659b332891cac8a5f93eb0608229ac5b440edddf38f306bd0952068245785fd2153c4428fb3279a65ebc46cca4a424d737c807438a5530e136243d370d17ad4562dbd606e2b8b62c1cafaa21d8bcb68746a4c4398c09e1ea8b06df07004d39e2ea22bfdd81cbc59876ce059765596f3a3b3830ec09a61faa6bedaebf325c3885d4e233723759e7da88ae122d3b50657dd23f343f3118d6f95422de9273fc39edff80f21b359d74f5f44693c6f5f26e5467bae9f226fd3e635eb653dba4d3585c636ec9e6d8a438ce1a029331a6e082b9b9c765ebcb9e66693877a8543d27643c1562ae5188a7344dc9b87f8f59456b8d59d24fe1c11aa752b127c571e9513b6e66978935193dba5faa5416ff096f4daf0ead058ca529b6318064d8e780df26ba2b7d7a95a47f1cdcf1ee3f8e25f62fd91837c33c53700ac2c3ddc56377166d4dea072183cdbabbfcb4bc80a0dca1be3b0795124bc4d036ef70533ecebcee72a29915cddc54c24cacac12e7cc510eddee5b39c557f91379433c3325da9fed8cad4a98336b94a0e7aee5ab362153006744635acf931ee1e1aa035ee6fb2e388440fdda2cc2379f28036c31163c50d732afe4234ca03853f1521fd0a933d4d5303c8197410418326b86c54c5538971933d81686bcf41e8c0b1e23cc2e0307e263967f7c22b6a9788d8d419bd8c89d218365dd45f03b2506e2106248ce4770443b0c671f0d4081bafc351a17db324a957b435f24847401cdb90d4a4b6a850242539fd226f9dfa083a0c373ebb193f214da19f0f1ba2cdf4b8f967ed9c006911af05e17b801e3bbdf16f045928dca804b7e8f084f0f8a42281e9c809f94588f4bf423d73bbda4168d75302e20b3c0f8684ab6b176f506d05b8055ffb2942c44b0e1f22a9f62c18972bad7008300ca7fc4c4c37551dbbdc1c5811ed222e344380045c91f3a61b24bd50efd59ad7fbeb8e4bfcae4c114b8cb1889b4094b39168a89b91dd1a401cd6cfeeb682125670e8c430f6c74b2844baa37ddd773730b8795cf9e08bb49f8f44e066793cc35fa6a546c5f35d5b3bb53cf7f71e2b0202e4bc4d60f82e5d06026d99afbd756f50fc43adf99a3c65111343ec01d5aec6ef27f06a3f2deb1290b5c183a9bd410de7d106584fc0c663712c57d07ecd93b1b40eeba5751f07b9e4243d31398584efe691a4bfca749316799c3fd6332c7170b04761bbcbae527928428c8fd88c9f1969f9dc8ddfb03d1dcc763ceccbff6940607349f1e2376342b0b9986ed3772433e41ba227489f92aeedcb53194357db5c5e677e1ed11aecb96d5a8787cc235da53c3bfe5f73c4d5f3285268382c47e50977c3bad2a8658dfb29e697b17c436c6f0188a256778145697fbfae0e542289c470007fb18f15904a81e19eb92e5c283aa955e87fc1401638bdc17d52fb06af1b33128a2d8ad5d100276f2f2f783dd13c65d7e22f786f4a631709979cbed1ba70029e3996b1b1a3a08562a66a947e3a641a78a993a7c08646d1d29e92358bfa03fe285f2c91a7b8888eebb3d0b942d7413e4dd103ebd2e356cda6849b623fba11d45da5e86090f693ea81b7dfa994cdff33e4e0c96ff1a09ab0686f5810bd3155b1ca1e01b7cce29cbbb68e66e9032e14699fa487a371367ef58eae41683b54c0444d2d412d3a1b12bd1989448847b10428f67c3607c1afeda2118d1961942d56fac530bda1a13881dd79cb3f9b2f39f045874a4f7e037cfd4b96ec4fc6cc3e85b1d5d3a065aa2b4b858856d9bbc42ac9c127fcbc0dc66abe066dfdf6cb0b8e566efcd5ecdc5333cc43d27ece32c09187171e90d61a2911e25ba410b7cac8d294cdde708dc145898a7ffdd9765330f400f0eb527a8d790cdbf5300614481bb56b1c83c5a384237515c626c2f50b625f59aa936f151fff02f44dcbd3baeed444da35fa9b420c1a3fe9692b303448d7af1b0e17fb9f729d0607b73e6dc9b5485bbd27245f2fe75b04314081ec091551bb1926b8126dd27e3063b90396fd248cc4e22345451996bb3b2aa322bfe7d6ed2b4b61f8fcf7c5c04094beecffbc6109b8614b8ab237d45a3ac8302e91659600ad9740d743006ddecf05080a56973ef47f9a739f793c86e1563db6d405bfc6fb0022a1540d2c4008491916d8a1aa31871089214f46cdd6fa7fd8189de5ba1a28b0ca926d5c49a1b2566c2eac0a9b1627da194ad1f1394ba8244bd8e3659cfb2727d41d6024e80f06bef94a2e0c2da8ed05740170ace1802dc38ebd83f9347070466ec0f50386e39a6c22d73379be0bba8d826c34b0f9eae0ff2a637cfb5be8b010baa2282a03a1467d56f300c7ef160357a1a947aead41264d8b6a5da8f237efbc6625c0c7f6e06d91e613ef1411950f65a93185d4a4159b06bf4f7cd450300bddf32ff45930ec8a1208c137ce1217810eff9907d16d88bc643b1666cca9413ef8ec563c44223974e4fb209f76a212c7565f516ee90add407b7abb86614faa5d18d93a28172cadcd604bbc65256dfb1bbb546fdea53a566b2b0632902d29e1e29b497f9d754e9f76d811e9a5a7574e478fbb9fc31b0dfaea4423d5e9eb95ca40282f9095117f4cb8a56fd2c5332c6939bcd9b9e1109a823a4234819107b7f1c3a6d6ac0e2caaa7faebd9ecab7ac4400ec6b55b96e1efea2766a0055601ac8e9d3194a0fd0adb230cd35ade7424c614cb44de8922a5eb593ad0fd44cc871b200a04589cfbb23c265df232cb7071e11dfd5ac8f9eb744c2a5583680cd6d42f73e459104c909af4a3189f548b2327b32484e603fdbb46554b2c637b24017c16f9c69c0d0794a7540a9ec41b69742081e19cfc1010a56c3b7d3db6358d0ca89c03cdd08d1773ccbb790da4347e527395cc6f4f3c2e8f31bdd7e8e8137e7c4d0c5b16672d4d6cc67afa96ffd9f3224c9e33aa53e6c431d55998da3f18407b0b3d57fbded082d2d388dcb9ef4c2e2c811a8a39ea9bbf19c1985092f65c43d874fa17695c6e3db70d6092db53591d334b394f124cd825e2dbf39527c2f467d26594ecf0c96912b7d093923093855c1ff117d468b67c76923646834748bc4e34112fed3caf623eae0ab4f208241b2b40fa2ff8358e15c939dd3259f9dcafc6b4a4e261645c2bcdfd7267e686886aab8694efda0176c5450d9a85e5a242f2c1767f1073353f982c17cef7abc873667bfbe0821a41684544b641f88a581a3e79027668719e0311e0e89c4ca91f23da14a12e4d9b79770202fc27e2568fccf3a142a2b3a1aa627f2077c02e37e9e1b94b3c8e648d5a05f0252eda5f276ed20640cfdb8ddd2c96aa2318540ece8dd56fa7c72d1df4be4b303f6bdda0c95824aac29f7c2b77a31324b3d6367f65b0eeb2b179366015d2cdcc3cd2e153dbbdd185f94a5d2d2bda5bcc65ab216b7a7d49bcaa0f29b3dc7cac592c3db5db8dd664797f37b5cb57fc9847018811730f28b71b7181607a59aa1659435f489cff444ca5bc22f8ebe3af0c2a13e5e4852d35c3c95b3178f4e12819b7b2bfdd5c8f4d369dc0bd23237d0ba627b25fd8bd82c8fd1176e64c93dbc813b8bad20318227cb5b822f307109c2e9a0530f6e278467c9ae5aeeaf38455dc66fd0d6524c6a22c7730b0f8c0a231f489b3a2ade0cb0ae5d45816d905d73887be502a76dd0b4aab5515bac753882b29571d94dc82e4edfb8a3b8a7141bd2ac94cb74f8f53d14c84b3627c505330ebc53b52a40c2756be7d8c92fd4635389ab6df31b3f5940e584dc45d2f0e7591867cf01b38f34debfadb97d4b835d890d78fc1200e4af4ca45b9858a37a53c81afbb4d3f3bffb692856d2292a5f052400542985760c320621605850af3f67b87e3a608441050bfeb7842ad59d8f76c380e3077221cffe989ace03a2b9bc0d665e5ba913c6f93437f9d22c282adc1c5078c33881cb9f8a66c04db754b55880639c07b2a5266c596f5204697d0f92d130f462a34533f1e293c62132c519a53dd54e8a1f834fa7fcd0b4d2a9722b745d89aa3a8b9deb13d23d66d4dd8a5de95f9891c782fea77f96e78c3be01d101ab496dc9936eabc3d6c50d3d0829f34df0d9c35b3ddb3d9febcbfce0605ec8039aadeeaa62c74e4ecbee7de68b712de5aff9d6e2fd260fb97423dbf84a071f99bd6302eb8c7d254a0352754adce1d89483c3a5bd6e39f4485249c3481b193d4154c3214ffaeb8cab19a08feaba17f522122bc9e318675c3d97329622f4b836743a56915aa1723516f1b49b9959c896a4362488125a0cdccd3e5b63f6f6acd42ac574b2d29213bd6a256ec156019c31ca538d2cf4148a99a4cb7ba584bbf6f6ccb5f26fd3d6d47da1af6296396cfc43f3f20906ae4244584923a3567235ec87931348ce8d0269bae4d7dc5c4883c857dfea6955a659c07c2e99fab6af5a6f4f9c1b29c5412020dabc7b1180f5897634d418bbe59c6398af92a64f0b89c7edc8ee41753fafc23ad8a2b4b27e2967a10fc0d43cdfe3341679ec3f86f963cad38806fb77326e914d5076868f7e875d5fb1d6ed359e3c429a0201cce83060d5086c59e630fe6f0a2589739c338", 0x2000, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0}) 18:15:13 executing program 5: sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x5495}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() ptrace$setopts(0xffffffffffffffff, r4, 0x0, 0x200068) r5 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) unlinkat(r5, &(0x7f0000000180)='./file0/file0\x00', 0x200) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) splice(0xffffffffffffffff, &(0x7f00000001c0)=0x1, r0, &(0x7f0000000240)=0x7, 0xffffd410, 0x1) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00', {}, {}, 0x16}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 18:15:13 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a8f30708cd060601e00400"], 0x0) 18:15:13 executing program 2: syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x20080) 18:15:13 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b", 0x76}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) exit_group(0x0) 18:15:13 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0, 0xfffffeb5}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 18:15:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x2, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x0, 0x9, 0x200, 0x0, 0xfffffffffffffffb}) [ 716.205334][T22289] ptrace attach of "/root/syz-executor.2"[22288] was attempted by "/root/syz-executor.2"[22289] [ 716.222783][T17753] usb 5-1: reset high-speed USB device number 79 using dummy_hcd 18:15:13 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0x0, 0x0) [ 716.282410][T19965] usb 2-1: new high-speed USB device number 47 using dummy_hcd 18:15:14 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0x0, 0x0) [ 716.513487][T17753] usb 5-1: Using ep0 maxpacket: 16 [ 716.527302][T19965] usb 2-1: Using ep0 maxpacket: 8 [ 716.570652][T17753] usb 5-1: device firmware changed [ 716.572989][T19965] usb 2-1: no configurations [ 716.576810][T17753] usb 5-1: USB disconnect, device number 79 [ 716.580581][T19965] usb 2-1: can't read configurations, error -22 [ 716.753174][T19965] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 716.932322][T17753] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 716.993476][T19965] usb 2-1: Using ep0 maxpacket: 8 [ 717.033183][T19965] usb 2-1: no configurations [ 717.037848][T19965] usb 2-1: can't read configurations, error -22 [ 717.066073][T19965] usb usb2-port1: attempt power cycle [ 717.193032][T17753] usb 5-1: Using ep0 maxpacket: 16 [ 717.342564][T17753] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.352868][T17753] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 717.362598][T17753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.378992][T17753] usb 5-1: config 0 descriptor?? [ 717.425832][T17753] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 717.492139][T19965] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 717.582642][T19965] usb 2-1: Using ep0 maxpacket: 8 [ 717.622873][T19965] usb 2-1: no configurations [ 717.627680][T19965] usb 2-1: can't read configurations, error -22 [ 717.631140][T17754] usb 5-1: USB disconnect, device number 80 [ 717.792300][T19965] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 717.882420][T19965] usb 2-1: Using ep0 maxpacket: 8 [ 717.923120][T19965] usb 2-1: no configurations [ 717.927778][T19965] usb 2-1: can't read configurations, error -22 [ 717.935924][T19965] usb usb2-port1: unable to enumerate USB device [ 718.212053][T17754] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 718.472099][T17754] usb 5-1: Using ep0 maxpacket: 32 [ 718.602328][T17754] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.618364][T17754] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 718.633753][T17754] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 718.647511][T17754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.658815][T17754] usb 5-1: config 0 descriptor?? [ 718.723119][T17754] hub 5-1:0.0: bad descriptor, ignoring hub [ 718.729170][T17754] hub: probe of 5-1:0.0 failed with error -5 [ 718.754121][T17754] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 18:15:17 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:15:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x5460, 0x0) 18:15:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) 18:15:17 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a8f30708cd060601e00400"], 0x0) 18:15:17 executing program 5: sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x5495}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() ptrace$setopts(0xffffffffffffffff, r4, 0x0, 0x200068) r5 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) unlinkat(r5, &(0x7f0000000180)='./file0/file0\x00', 0x200) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) splice(0xffffffffffffffff, &(0x7f00000001c0)=0x1, r0, &(0x7f0000000240)=0x7, 0xffffd410, 0x1) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00', {}, {}, 0x16}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 18:15:17 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 18:15:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {0x16}}, 0x14}}, 0x0) [ 720.062905][T19965] usb 5-1: USB disconnect, device number 81 18:15:17 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) setpgid(0x0, 0xffffffffffffffff) 18:15:17 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "16affef6e0daa8d38f165133795e0ae019b7f5435b3558b74e8952f3dd7780db3ba5f208536074e5143d30bf31ad0b946eae9a508d1782b5e43810fe419a3f96"}, 0x48, r0) 18:15:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_MODE={0xa}]}, 0x30}}, 0x0) [ 720.256654][T22374] ptrace attach of "/root/syz-executor.2"[22373] was attempted by "/root/syz-executor.2"[22374] [ 720.272253][ T8] usb 2-1: new high-speed USB device number 51 using dummy_hcd 18:15:18 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x125d, 0x401000) 18:15:18 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) getsockname(r0, 0x0, &(0x7f0000000000)) [ 720.442058][T19965] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 720.521964][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 720.561999][ T8] usb 2-1: no configurations [ 720.566749][ T8] usb 2-1: can't read configurations, error -22 [ 720.701814][T19965] usb 5-1: Using ep0 maxpacket: 16 [ 720.742104][ T8] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 720.821987][T19965] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 720.850153][T19965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.879736][T19965] usb 5-1: config 0 descriptor?? [ 720.944440][T19965] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 720.981863][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 721.022689][ T8] usb 2-1: no configurations [ 721.027357][ T8] usb 2-1: can't read configurations, error -22 [ 721.049221][ T8] usb usb2-port1: attempt power cycle [ 721.145575][T17754] usb 5-1: USB disconnect, device number 82 [ 721.471879][ T8] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 721.562465][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 721.602674][ T8] usb 2-1: no configurations [ 721.607337][ T8] usb 2-1: can't read configurations, error -22 [ 721.761787][ T8] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 721.761807][T17754] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 721.861913][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 721.902006][ T8] usb 2-1: no configurations [ 721.906700][ T8] usb 2-1: can't read configurations, error -22 [ 721.914771][ T8] usb usb2-port1: unable to enumerate USB device [ 722.042513][T17754] usb 5-1: Using ep0 maxpacket: 32 [ 722.182216][T17754] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 722.198325][T17754] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 722.209550][T17754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.220134][T17754] usb 5-1: config 0 descriptor?? [ 722.273902][T17754] hub 5-1:0.0: bad descriptor, ignoring hub [ 722.279975][T17754] hub: probe of 5-1:0.0 failed with error -5 [ 722.297586][T17754] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 18:15:21 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a26622eb091f3a53"}) 18:15:21 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="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", 0xfa}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}}}, 0x78) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 18:15:21 executing program 2: syz_open_dev$loop(&(0x7f0000000000), 0x100000001, 0x81) 18:15:21 executing program 5: sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x5495}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() ptrace$setopts(0xffffffffffffffff, r4, 0x0, 0x200068) r5 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) unlinkat(r5, &(0x7f0000000180)='./file0/file0\x00', 0x200) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) splice(0xffffffffffffffff, &(0x7f00000001c0)=0x1, r0, &(0x7f0000000240)=0x7, 0xffffd410, 0x1) splice(r1, 0x0, r3, 0x0, 0x4ffe1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00', {}, {}, 0x16}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 18:15:21 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a8f30708cd060601e0040000000109021200"], 0x0) 18:15:21 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:15:21 executing program 0: process_madvise(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) [ 723.580257][T22430] ptrace attach of "/root/syz-executor.0"[22428] was attempted by "/root/syz-executor.0"[22430] 18:15:21 executing program 2: prctl$PR_SET_TSC(0x16, 0x0) 18:15:21 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "c8ca2e33ba112b8052114515e91c9df89231696ad8fe83047cb0e9583b653f80e62f6c02a49722d181ca9fcb4c76ccb8fa8f6dd3481b27248cbbc1085bd63a2a"}, 0x48, r0) keyctl$KEYCTL_MOVE(0x11, r0, r1, 0x0, 0x0) [ 723.782105][ T9622] usb 5-1: reset high-speed USB device number 83 using dummy_hcd 18:15:21 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8922, &(0x7f0000000080)={'vcan0\x00'}) [ 723.831830][ T5] usb 2-1: new high-speed USB device number 55 using dummy_hcd 18:15:21 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04dc1f56bb6e284f5fa35c66", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x1e8640, 0x0) 18:15:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000005e001f", 0x7) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) 18:15:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14) [ 724.075048][ T9622] usb 5-1: Using ep0 maxpacket: 16 [ 724.081612][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 724.112472][ T9622] usb 5-1: device firmware changed [ 724.119595][ T9622] usb 5-1: USB disconnect, device number 83 18:15:21 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000058c000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000172000/0x1000)=nil) mremap(&(0x7f0000c2f000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000040a000/0x4000)=nil) mremap(&(0x7f0000e3b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fe1000/0x4000)=nil) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='maps\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) [ 724.202396][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.218504][ T5] usb 2-1: config 0 has no interfaces? [ 724.232523][ T5] usb 2-1: New USB device found, idVendor=06cd, idProduct=0106, bcdDevice= 4.e0 [ 724.254731][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.279378][ T5] usb 2-1: config 0 descriptor?? 18:15:21 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) setreuid(0x0, 0x0) clone(0x20002804ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shmctl$IPC_RMID(r2, 0x0) 18:15:22 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "c8ca2e33ba112b8052114515e91c9df89231696ad8fe83047cb0e9583b653f80e62f6c02a49722d181ca9fcb4c76ccb8fa8f6dd3481b27248cbbc1085bd63a2a"}, 0x48, r0) keyctl$unlink(0x9, r0, r0) [ 724.525076][ T9622] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 724.538731][ T5] usb 2-1: USB disconnect, device number 55 [ 724.801656][ T9622] usb 5-1: Using ep0 maxpacket: 16 [ 724.951955][ T9622] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 724.961070][ T9622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.986068][ T9622] usb 5-1: config 0 descriptor?? [ 725.024049][ T9622] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 18:15:22 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a8f30708cd060601e0040000000109021200"], 0x0) [ 725.237255][T17753] usb 5-1: USB disconnect, device number 84 [ 725.482262][T17754] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 725.731480][T17754] usb 2-1: Using ep0 maxpacket: 8 [ 725.831465][T17753] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 725.876786][T17754] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.887923][T17754] usb 2-1: config 0 has no interfaces? [ 725.895235][T17754] usb 2-1: New USB device found, idVendor=06cd, idProduct=0106, bcdDevice= 4.e0 [ 725.905559][T17754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.917602][T17754] usb 2-1: config 0 descriptor?? [ 726.081496][T17753] usb 5-1: Using ep0 maxpacket: 32 [ 726.167257][T17754] usb 2-1: USB disconnect, device number 56 [ 726.221888][T17753] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 726.235799][T17753] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 726.245552][T17753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.256778][T17753] usb 5-1: config 0 descriptor?? [ 726.304319][T17753] hub 5-1:0.0: bad descriptor, ignoring hub [ 726.310389][T17753] hub: probe of 5-1:0.0 failed with error -5 [ 726.325192][T17753] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 18:15:25 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:15:25 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a8f30708cd060601e0040000000109021200"], 0x0) 18:15:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000980)={0x6}, 0x4) 18:15:25 executing program 3: unshare(0x0) unshare(0x40040000) 18:15:25 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "c8ca2e33ba112b8052114515e91c9df89231696ad8fe83047cb0e9583b653f80e62f6c02a49722d181ca9fcb4c76ccb8fa8f6dd3481b27248cbbc1085bd63a2a"}, 0x48, r0) keyctl$search(0xa, r1, &(0x7f0000000300)='logon\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0) 18:15:25 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000001c0)) 18:15:25 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2, 0x0, 0x0, 0xffffffff}) 18:15:25 executing program 5: r0 = io_uring_setup(0x26c9, &(0x7f0000000140)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) [ 727.641706][T19965] usb 5-1: USB disconnect, device number 85 18:15:25 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2023, 0x0) 18:15:25 executing program 0: syz_io_uring_setup(0x7984, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 18:15:25 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x3c}, @broadcast}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 18:15:25 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x0, 0x9, 0x3a7f5896657243ed}, 0x14}}, 0x0) [ 727.871435][T17753] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 728.041551][T19965] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 728.159530][T17753] usb 2-1: Using ep0 maxpacket: 8 [ 728.281330][T19965] usb 5-1: Using ep0 maxpacket: 16 [ 728.292138][T17753] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.318260][T17753] usb 2-1: config 0 has no interfaces? [ 728.331466][T17753] usb 2-1: New USB device found, idVendor=06cd, idProduct=0106, bcdDevice= 4.e0 [ 728.340566][T17753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.356352][T17753] usb 2-1: config 0 descriptor?? [ 728.408614][T19965] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 728.424068][T19965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.454782][T19965] usb 5-1: config 0 descriptor?? [ 728.493792][T19965] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 728.625237][T19965] usb 2-1: USB disconnect, device number 57 [ 728.719057][T17753] usb 5-1: USB disconnect, device number 86 [ 729.371295][T17753] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 729.631809][T17753] usb 5-1: Using ep0 maxpacket: 32 [ 729.772404][T17753] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 729.794453][T17753] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 729.811832][T17753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.829637][T17753] usb 5-1: config 0 descriptor?? [ 729.891169][T17753] hub 5-1:0.0: bad descriptor, ignoring hub [ 729.897209][T17753] hub: probe of 5-1:0.0 failed with error -5 [ 729.915242][T17753] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 18:15:28 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c2000000000001090224000100000000090400000003000000092100000001220000090581"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:15:28 executing program 2: capset(&(0x7f0000000080)={0x19980330}, 0xfffffffffffffffd) 18:15:28 executing program 5: prctl$PR_SET_IO_FLUSHER(0x2f, 0x1) 18:15:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) 18:15:28 executing program 3: prctl$PR_SET_TSC(0x2a, 0x0) 18:15:28 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a8f30708cd060601e004000000010902120001000000"], 0x0) [ 731.170310][T22620] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) 18:15:28 executing program 5: mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) [ 731.223144][ T37] audit: type=1326 audit(1621016128.833:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22618 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 [ 731.247919][T19965] usb 5-1: USB disconnect, device number 87 18:15:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 18:15:28 executing program 0: r0 = syz_io_uring_setup(0x31f, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x26c9, &(0x7f0000000140)={0x0, 0xa91e}) io_uring_enter(r0, 0x1734, 0x0, 0x0, 0x0, 0x0) 18:15:29 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8930, &(0x7f0000000080)={'vcan0\x00'}) 18:15:29 executing program 2: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) [ 731.481124][ T8] usb 2-1: new high-speed USB device number 58 using dummy_hcd 18:15:29 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x3c}, @broadcast, {[@noop]}}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) [ 731.626019][T19965] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 731.731189][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 731.858473][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.870210][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 731.879666][T19965] usb 5-1: Using ep0 maxpacket: 16 [ 731.894177][ T8] usb 2-1: New USB device found, idVendor=06cd, idProduct=0106, bcdDevice= 4.e0 [ 731.907866][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.926603][ T8] usb 2-1: config 0 descriptor?? [ 732.016024][T19965] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 732.047808][T19965] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 732.085110][T19965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.110057][T19965] usb 5-1: config 0 descriptor?? [ 732.173585][T19965] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 732.186206][T17754] usb 2-1: USB disconnect, device number 58 [ 732.381250][ T8] usb 5-1: USB disconnect, device number 88 [ 732.971032][ T8] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 733.211040][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 733.331028][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.341173][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 733.352376][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.370378][ T8] usb 5-1: config 0 descriptor?? [ 733.412071][ T8] hub 5-1:0.0: bad descriptor, ignoring hub [ 733.418152][ T8] hub: probe of 5-1:0.0 failed with error -5 [ 733.438913][ T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 18:15:32 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c2000000000001090224000100000000090400000003000000092100000001220000090581"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:15:32 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a8f30708cd060601e004000000010902120001000000"], 0x0) 18:15:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000fbdbdf250c00000024000380"], 0x38}}, 0x0) 18:15:32 executing program 5: get_mempolicy(0x0, &(0x7f0000000040), 0x9, &(0x7f0000ffd000/0x3000)=nil, 0x3) 18:15:32 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast1}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 18:15:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 18:15:32 executing program 0: r0 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='O', 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0) [ 734.751155][T19965] usb 5-1: USB disconnect, device number 89 18:15:32 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r0, 0x0) 18:15:32 executing program 2: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x3000)=nil) 18:15:32 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000140)=@rc, 0x80, 0x0}, 0x0) 18:15:32 executing program 2: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) syz_io_uring_setup(0x64fa, &(0x7f00000003c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:15:32 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8970, &(0x7f0000000080)={'vcan0\x00'}) [ 735.040721][T17754] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 735.138643][T19965] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 735.300914][T17754] usb 2-1: Using ep0 maxpacket: 8 [ 735.390854][T19965] usb 5-1: Using ep0 maxpacket: 16 [ 735.431820][T17754] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.447895][T17754] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 735.461662][T17754] usb 2-1: New USB device found, idVendor=06cd, idProduct=0106, bcdDevice= 4.e0 [ 735.481003][T17754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.501123][T17754] usb 2-1: config 0 descriptor?? [ 735.514110][T19965] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 735.527536][T19965] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 735.540096][T19965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.563999][T19965] usb 5-1: config 0 descriptor?? [ 735.613281][T19965] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 735.761486][T17754] usb 2-1: USB disconnect, device number 59 [ 735.819263][T17753] usb 5-1: USB disconnect, device number 90 [ 736.400834][T17753] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 736.640670][T17753] usb 5-1: Using ep0 maxpacket: 32 [ 736.760774][T17753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.770964][T17753] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 736.780008][T17753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.790779][T17753] usb 5-1: config 0 descriptor?? [ 736.835269][T17753] hub 5-1:0.0: bad descriptor, ignoring hub [ 736.850346][T17753] hub: probe of 5-1:0.0 failed with error -5 [ 736.874202][T17753] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 18:15:35 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c2000000000001090224000100000000090400000003000000092100000001220000090581"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:15:35 executing program 2: sched_getaffinity(0x0, 0x8, &(0x7f0000000000)) 18:15:35 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="66530700ae897094e71b0fa1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8ac396203784000400f573fbf000000000000000761f35e959f130dec95128ce7ec033dc0a38054", 0x9f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 18:15:35 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) 18:15:35 executing program 3: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\x00'/118, 0x0) r1 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\x00'/118, 0x0) write(r1, &(0x7f00000004c0)='1', 0x1) copy_file_range(r1, &(0x7f00000009c0), r0, 0x0, 0x6, 0x0) 18:15:35 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a8f30708cd060601e004000000010902120001000000"], 0x0) 18:15:35 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000140)='./file2\x00') 18:15:35 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/zoneinfo\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x13, r0, 0x0) [ 738.134811][T22773] ptrace attach of "/root/syz-executor.0"[22770] was attempted by "/root/syz-executor.0"[22773] 18:15:35 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x325901, 0x0) r1 = syz_io_uring_setup(0x31f, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[r0], 0x1) 18:15:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x105}, 0x5f) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 18:15:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast1}}}}) [ 738.341024][T21407] usb 5-1: reset high-speed USB device number 91 using dummy_hcd 18:15:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 738.449512][T19965] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 738.600518][T21407] usb 5-1: Using ep0 maxpacket: 16 [ 738.641855][T21407] usb 5-1: device firmware changed [ 738.647406][T21407] usb 5-1: USB disconnect, device number 91 [ 738.730899][T19965] usb 2-1: Using ep0 maxpacket: 8 [ 738.851620][T19965] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.870641][T19965] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 738.893560][T19965] usb 2-1: New USB device found, idVendor=06cd, idProduct=0106, bcdDevice= 4.e0 [ 738.914543][T19965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.937762][T19965] usb 2-1: config 0 descriptor?? [ 739.081929][T21407] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 739.209414][T19965] usb 2-1: USB disconnect, device number 60 [ 739.350637][T21407] usb 5-1: Using ep0 maxpacket: 16 [ 739.480623][T21407] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 739.497556][T21407] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 739.508152][T21407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.518395][T21407] usb 5-1: config 0 descriptor?? [ 739.583131][T21407] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 739.790896][T17753] usb 5-1: USB disconnect, device number 92 [ 740.360406][T17753] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 740.600425][T17753] usb 5-1: Using ep0 maxpacket: 32 [ 740.721625][T17753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.736234][T17753] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 740.746893][T17753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.758047][T17753] usb 5-1: config 0 descriptor?? [ 740.801403][T17753] hub 5-1:0.0: bad descriptor, ignoring hub [ 740.807464][T17753] hub: probe of 5-1:0.0 failed with error -5 [ 740.821992][T17753] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 18:15:39 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:15:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4040aea0, &(0x7f0000000140)={0x1, 0x0, [{}]}) 18:15:39 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x63, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5, 0x24, 0x1, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x4c5}, @obex={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x20, &(0x7f0000000100)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "dded396c7407f9da9636ce14284c4fc6"}, @ext_cap={0x7, 0x10, 0x2, 0xa}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 18:15:39 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000002, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40305828, 0x0) 18:15:39 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "9030f1aa22144014cd3a0fc78ce044f2cfcfbd1f587dbed362411f2951487066feeb5ea5eae076634723ac223576367b6e597d35aa84b64681cd96dee04753da"}, 0x48, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x6, r0, 0x0, 0x0, 0x0) 18:15:39 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a8f30708cd060601e0040000000109021200010000000009"], 0x0) 18:15:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x16, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:15:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) 18:15:39 executing program 5: socket$netlink(0x10, 0x3, 0xa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x4, 0x6, {{0x1b, 0x4, 0x1, 0x1f, 0x6c, 0x67, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@cipso={0x86, 0x39, 0x3, [{0x1, 0xc, "deabbfac9160df9150a5"}, {0x0, 0xb, "ed9b5a7618cbb5a880"}, {0x2, 0xa, "24b1acc973863d12"}, {0x6, 0x12, "841fd86ed9940c5e04101bcf9b192a4e"}]}, @end, @timestamp_prespec={0x44, 0x1c, 0x7f, 0x3, 0x1, [{@remote, 0xfffffffc}, {@remote}, {@empty, 0x7}]}]}}}}}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207220902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x3ff}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fd, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) [ 742.300866][T17753] usb 5-1: reset high-speed USB device number 93 using dummy_hcd 18:15:40 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x5, [@union={0x0, 0x8, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0xf5, 0x0, 0x400001}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 742.370288][T21407] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 742.420297][T17751] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 742.485054][T22889] ptrace attach of "/root/syz-executor.0"[22888] was attempted by "/root/syz-executor.0"[22889] 18:15:40 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x5, [@union={0x0, 0x8, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @array, @const, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0xfd}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 742.551128][T17753] usb 5-1: Using ep0 maxpacket: 16 [ 742.590657][T17753] usb 5-1: device firmware changed [ 742.596265][T17753] usb 5-1: USB disconnect, device number 93 [ 742.610153][T21407] usb 2-1: Using ep0 maxpacket: 8 18:15:40 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x894a, &(0x7f0000000040)={'dummy0\x00', 0x0}) [ 742.656093][T22901] ptrace attach of "/root/syz-executor.0"[22899] was attempted by "/root/syz-executor.0"[22901] [ 742.710764][T17751] usb 3-1: Using ep0 maxpacket: 32 [ 742.731267][T21407] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 742.749188][T21407] usb 2-1: New USB device found, idVendor=06cd, idProduct=0106, bcdDevice= 4.e0 [ 742.778540][T21407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.819012][T21407] usb 2-1: config 0 descriptor?? [ 742.951095][T17751] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 743.090475][T17753] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 743.091961][T21407] usb 2-1: USB disconnect, device number 61 [ 743.241152][T17751] usb 3-1: string descriptor 0 read error: -22 [ 743.250124][T17751] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 743.282594][T17751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.332410][T22855] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 743.350226][T17753] usb 5-1: Using ep0 maxpacket: 16 [ 743.362679][T17751] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 743.490324][T17753] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 743.514515][T17753] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 743.535965][T17753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.596061][T17753] usb 5-1: config 0 descriptor?? [ 743.640418][T17751] usb 3-1: USB disconnect, device number 10 [ 743.692841][T17753] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 744.096831][T22859] udc-core: couldn't find an available UDC or it's busy [ 744.116623][T22859] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 744.143945][T17754] usb 5-1: USB disconnect, device number 94 [ 744.370096][T17751] usb 3-1: new high-speed USB device number 11 using dummy_hcd 18:15:42 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:15:42 executing program 3: fork() tkill(0x0, 0x0) [ 744.640075][T17751] usb 3-1: Using ep0 maxpacket: 32 [ 744.890969][T17751] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 744.980326][T17753] usb 5-1: new high-speed USB device number 95 using dummy_hcd 18:15:42 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0xfffffffe, 0x0, 0x0) 18:15:42 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a8f30708cd060601e0040000000109021200010000000009"], 0x0) 18:15:42 executing program 0: mlockall(0x7) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:15:42 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1}}}}) 18:15:42 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000300)) ftruncate(r2, 0x800) lseek(r2, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) [ 745.110319][T17751] usb 3-1: string descriptor 0 read error: -71 [ 745.116652][T17751] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 18:15:42 executing program 0: io_setup(0x9e56, &(0x7f0000000000)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0xf23ad2f}]) [ 745.176886][T17751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 18:15:42 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x12, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x1a8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'batadv_slave_1\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @local, [], [], 'macvlan0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) [ 745.227439][T17751] usb 3-1: can't set config #1, error -71 [ 745.241889][T17751] usb 3-1: USB disconnect, device number 11 [ 745.250026][T17753] usb 5-1: Using ep0 maxpacket: 16 18:15:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="0f0836660f3a633ea4c4e1bc5649deec9a13000000fb00f00fb18500000000670f01cb660f388054fe04660f3a0aef07cf66ba410066ed", 0x37}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:15:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8902, &(0x7f0000000440)={'lo\x00', @ifru_hwaddr=@link_local}) [ 745.400486][T17753] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 745.440035][T21407] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 745.449313][T17753] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 18:15:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 745.494926][T17753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.524033][T17753] usb 5-1: config 0 descriptor?? [ 745.582651][T17753] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 745.690040][T21407] usb 2-1: Using ep0 maxpacket: 8 [ 745.810040][T21407] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 745.823960][T21407] usb 2-1: New USB device found, idVendor=06cd, idProduct=0106, bcdDevice= 4.e0 [ 745.838278][T21407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.853128][T21407] usb 2-1: config 0 descriptor?? [ 745.984897][T22951] udc-core: couldn't find an available UDC or it's busy [ 746.018542][T22951] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 746.042357][T21407] usb 5-1: USB disconnect, device number 95 [ 746.097456][T19965] usb 2-1: USB disconnect, device number 62 18:15:44 executing program 2: sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000009380)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c090}, 0x40881) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000009340)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x0) socket$packet(0x11, 0x2, 0x300) sendto$inet(r0, &(0x7f0000000440)="8a25d00daae1a2e9955c69b7546619de941fb82ce497d012d1085a4b8c697762608d5510bde4d2c6a6a7e93887a7596867a4db58893382299928f7019ba63d9fafded50eec66287ddef41314c99e932bb94d86ac25ac6e450d36567262e9f94fea892e80ed1453c2f21b4129cc828bc17577a067cdb6429a14f0f34c3c76fc1dae43f43d30dfa4d29a081ae8bf3be0716da600375b1e5526cb5e", 0x9a, 0x20000004, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r3 = syz_io_uring_setup(0x124e, &(0x7f0000009200)={0x0, 0xd6c5, 0x0, 0x2, 0x33e}, &(0x7f0000cad000/0x1000)=nil, &(0x7f0000d4e000/0x3000)=nil, &(0x7f0000000700), &(0x7f0000009280)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000009300)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x3, &(0x7f00000092c0)={0x0, 0x989680}}, 0x7) mmap(&(0x7f0000e37000/0x2000)=nil, 0x2000, 0x2, 0x8010, r3, 0x7cc09000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000005c0)="0938b8ed3d1635bc67934cdadc7948d510e28362a3775b83609ed3e06d27f119f221526511c8da417c9f453cb730553a451a9aa3473735b5755d023679dfc70940e4f24829d8539f41f228abfaf585fc71d263cf5296ef2219a23f6f2eb7f1d39a615a9266c0871ba009fc2d886b732cb052fd52e2920d945a667d0cc131c713ef66b39a45b21b8282a0a14136f1fd27996e74efe2", 0x95}, {&(0x7f0000000300)="46bee7069e394d260268e25f1b517baf1990eb7889af7bb61400adfe469c44e2df", 0x21}, {&(0x7f0000000380)="16b2b42c1b0747aed747d5140f5fdf50cf622a9a6819ecbf37a9862bf85d46e7ab7085b1683805990921bb880451a22e004fdb6f9801647df310b28c4a372a872591a8f3ce377aeb6e6b4b16b491728d9b66830521d514ef1e0fbc56c8df5ebd8c96dfb3a8b29fc67bc57059d6db6352a2f9e444efd4df7fa4714465", 0x7c}, {&(0x7f0000001740)="5a7069e491cb9f9b1a3111d0c61ce770385536cb4139f850f5244c6b6f621f51850b60b4745cc4451c8c34ed947d58a97193adf50778c73a3649ecf58a4846a9f672b9153f17464061abb04990cd307cc8361af8fd1a0ff3a367a5522cad1c2bc612449cdec98203d15899652c3a255306becb1de5f7153aeaba67dee5267bf078ce996c6088dba655e77f24ec3c47d42e586f3be7af44a06fa5d8e27b52ae0ebe26de4e91c2e6f7e1d34b7325bf2416936e57963220ae453cf07c84a582533c2c5d803cf0c25af37fbf1cdc35180cada128", 0xd2}, {&(0x7f0000000680)="6bdfbba8c212d13fb581d99663aaf36f1c0a07cff7373a4c04bdc3f1fe08ce7efe411fee17f43edd0dcf84fd8e3cbf95dc348d289c8a684dc53114c569dfea753c13b14aadad4677863dfacb", 0x4c}, {&(0x7f0000001840)="e58d0c5a08d302aefa2eff5336c457df27e893e8b74d325138169985c7e729cb2c4cfe232e722a8d836027c7f35b5ab2e98798e065beeed067f6a7fe2439e20c571d7cba44941fd5c825bb97410db12c52566748bc7fcf7a9582bdaf9fb74652a8a0ab42827fee22a979e341c61db2862e88e7f5137e53b954955f1f832b4d62dfe622c15a641bf3f045af2305e7ff37d5daf2996cbae4a72ab5cdbb7e989b020d618d6b2b9d356dccc6dbd93751f06f583a1b03febca2a289c354dcb97a667d1623b3b4cfb721f2220f18ac73ff7c97b3a7c69132c7547e21f87543755a360e68881ffda8f369976ddd5caaf3958fa03c", 0xf1}, {&(0x7f0000001940)="1972d3b4f07357d90793a15ad5e4a85ec7ff3e1fd312ecc000eda98ee1049dc8b1d1b3616c86c4de06de77f6a6a2ae04418d2996a4da107ecab7bb094bd1bd4389ea6c00e8f3ca0b58bffbf6cc1b9969a781a65f08bd2c723f5d3132027c69e829a7b3705ad486700c9dd2f749df8a55dc39d778ec2930b3b7177f8189f18da0cccbc697181b32f981de63f2e8d9393086e1afcf818bb0571d9d3a4106468b75ee078147ba02894c02cf6a03082d7458c6a7df37aee880eaa076aed5edc8c86c50511926e69a604839c02d96c540b93fef3a0476d0e13390c369bf07ecbcfb953022662fb048ed", 0xe7}, {&(0x7f0000000540)="e5747986f239b6f2ec6a118f500b7695087c4a5904a3a22b46a5c3ca5e999ab5f08320fca4c91c327e81561800b6383dfbedc6b59f", 0x35}, {&(0x7f0000001a40)="d17ed555eb8223abe119abeb0b6cbfe80b0065294ab5dc0fadf6f4e7c29c1c36cc06a3735e0d0c067650e67f5ee6e01453bac519078f7538a97033dfcde31654c81de546b7f847ba4f17c00ed772bc2c56ae9f5928bc34637cf9dfddc742a30e8a0f8f85aff89ae1e3accd8815bc12f75849f740e22655dc904d7a80ba9eef75b117c62989d491ffaa925e8300cf090ddd4a6c7699ca5ab3fbbd5a707530d8952275b96c981fa2e7c95676980a4beb3f74c29fc9dc2665eb465c1eac36cdbe43f3580b2f01b6bb11cc9eed0f7d56fa4b165675606bf34e3e6cba", 0xda}], 0x9, &(0x7f0000000700)}}, {{&(0x7f0000001c00)=@ieee802154={0x24, @short={0x2, 0x3}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001c80)="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", 0x1000}], 0x1, &(0x7f0000002cc0)=[{0x18, 0x100, 0x9, "5250309c36"}], 0x18}}, {{&(0x7f0000002d00)=@ethernet={0x306, @multicast}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002d80)="6e24249947aae937383502ac2d77e8a557a8674fecf9075e1487988a6c5304202f61d9f9c191f1b63d503f486d79827ddd5f116e069a6cbc3d4866858b0fefbb6390152f2a47c5390ac161fa", 0x4c}, {&(0x7f0000002e00)="5d12c39b4c0406ae95b546aae60a17dd1b1967ce6f44931b79159e3190657b075c1c08b904a12c4b793dfe03312778abca9f024e3bad6fedf6d549940e36bb128a80350ccd22972816bd855d332a7acf7e34a369966ee746e3e63aed8c50a614e148940af7c56637656753639cf19474eb5330fba96817e403014ecee69c", 0x7e}], 0x2, &(0x7f00000093c0)=ANY=[@ANYBLOB="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"], 0x1198}}, {{&(0x7f0000004080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x2, 0x3, {0xa, 0x4e23, 0x7, @loopback, 0x95}}}, 0x80, &(0x7f0000004600)=[{&(0x7f0000004100)="5bcd088353fa10e63f91a4e8c70ee757e115849dfe1e8e7bd2f42f26a8432fcfe521584bb33accc82f3b22f2ba4e18814f6140985ff2061ce38b886a1c3cb4535d4fe0bc15e35ecdb0b931a5776dc68fe64839c6d00194829e439b018249c3a2362738e20ebb896648b34ec26cfb4713d1eae5f9f0326269d30158ddbce7ba5a49764143df520dab8a60efbe5dc39fa336fd7fabac08c6", 0x97}, {&(0x7f00000041c0)="72dce7e1e3508e6f77aff370c64800675ea9695d8d636d05e6515dd0b07a0d81db5acaa5bb60dfe6d222d7f9d2258263ab0df8d87c816c2709a9351771788f376468c3e3ed442e238e4d", 0x4a}, {&(0x7f0000004240)="8b09880ef4ef6f16e2b13e3d0e36152a5695fb61f1ce10cd10b61dd759d6ea0635c83aed2e1958b100a40f9957193609a06916d2af780a3e095fbe22642c8a8915298f14945dd7f127fae8ee1c8ffa510c23297ca880c082852745c015e8a4f6f6a83f556f98a4ccee409337116a516d5de860368ef3ad159a7a40a37248bf6cbfad00e6cbe5edb4b357946761ac0df2e608c6c0a6ddc1200123d257d5ef5ccceb410624240324a80d6f42a3af6fd8aa85e766550a2492ca26e9a50b2ceb31354216e281", 0xc4}, {&(0x7f0000004340)="5a8f58b9f0e4babade7843626c5b396823dafddaeb2c78bd731ef1c0a9886406b01261290f42cfd41dac1a3374e3f1ebfe3c8bde59615e19b8d98c5a57ac3afd93d3091810becb69e9f5e1989be6279a", 0x50}, {&(0x7f00000043c0)="c1c74b794c09ee72b28ada0b96ffa7bc0db760cc1d828af0ddeb5a8a4b11b3aeb5a748767cd27e598288cfb9c9f9aa30f083b4bdf67f405e7569eff320cfae37a74a", 0x42}, {&(0x7f0000004440)="0fa0e9138685", 0x6}, {&(0x7f0000004480)="bbc2bf8324141b90885faf8040387c3c28bb49168b0c7b37adef8d49fd9cdb04f7b0ffdda290d73a3fb3dd278e0f14bd9ad4afe01a9c78d622212ab97af4f5426f63636ab7c7f678b076ca714061b878055c4ffeb892cea55a3f180ccd77ea21b06e23", 0x63}, {&(0x7f0000004500)="7fb3d486b1e404a759f390b7919bfe9f4320262b9124d856817bf4c5e3d3db5fda264620499e656f1f61f988a2", 0x2d}, {&(0x7f0000004540)="dc80a80c0af2d1a6918f35390a8906692497e524fe373e8d1e4e214280c8042f92b2e95d40410444b5fe74852913241b2ac616704e0d547fc7f7de8d8e2f8e599e4305ee9beae43207cc7edab75fdc5fe7f462b5bdeb4cb2a60e27cdbf3e107c818289c86d6a595f0a0380ed74b6810d055ca49c4a0554965ea519d89918590f1b5058c24dde9a98e97ce13755a02fc1151ba1c3c2", 0x95}], 0x9, &(0x7f00000046c0)=[{0x1010, 0x11, 0x20, "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"}, {0x18, 0x107, 0x11, "40baba892551"}, {0x40, 0x114, 0xfffffffe, "eb24bae2bf5d890b1ea1ebdf161b4755614d657b8d2ebafb91f11cfb9775a03871fee20a79e6f461bc"}], 0x1068}}, {{&(0x7f0000005740)=@l2tp6={0xa, 0x0, 0x61ceb19f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x8, 0x4}, 0x80, &(0x7f00000058c0)=[{&(0x7f00000057c0)="78ad5e2ca996884d9df976e9dad0ec739051964fa78692285d5b748a0f0bcef45aa194e24a218a5ed364c1b46d4f92200f5834cee15a0f29f4ff9b5b1baa265cd45298b8fc5070f88fb2c63264977ace73094fdc7453fb7333b699c685e63437b0b0f292d570ba4e02a035faf324c493ed4787af0513f16b9a401cc876eb23f97d4776e3493744ab73363acb362d10508329514d77db50bd8fba9d2b556cd2dbaee0f039b13f3b636ff754a7d0eab9a190e3e738c51eebbd56ca2dd46560fd085c65864a95b02f60208a0fd9d7010ad6", 0xd0}], 0x1, &(0x7f0000005900)=[{0x20, 0x105, 0x5, "6653c08fd284b4b26a"}, {0x90, 0x114, 0x5, "eb4bcd4df3b18fabff6ec528a2fcc7c6f6524a713531d66996f38ae0bfd2c096881427c6d07ca86a1ccbccab850c1fbd3c67217b34272004b268f82c4720973c084e625ebfaeed96f6ef1fbda900e7a2a0b00a4ea1610f2c8999b0dc0a34902076d6bd47b17c33d2c6a0c3130369fcd59aec6f24413df56d5659457f64"}, {0x78, 0x100, 0x6, "3b8065b26a81570cb5ae2437a6bdd02f6c8ea1703e35a437077706dd8fa1af98087dcf687069fe4ab6441e8ef7d61e7df17342dd2fa16447815e6d0ab3928f20e4a6bc706ef7118fa83d123ef2bc2653ea4fbf5402305148eda7d21bae272a92b9c31efc93"}], 0x128}}, {{0x0, 0x0, &(0x7f0000005ac0)=[{&(0x7f0000005a40)="86ebf38911e76650b8d07c2f2670e12f5c242c967a4eec22c82dd60612f738a5d5f29e648243360d9b4714dff0f1b11b0d2d3092bbe18838de6af7da1a16f7d67aa354ff37a3fb0ee8c842faad582f3a492bf51a1c82c0a39f13aae1bf8c1cc0d0752d3293c1", 0x66}], 0x1, &(0x7f0000005b00)=ANY=[@ANYBLOB="f0000000000000000901000050070000fa33e6a96e080408ced50366de3acad0cb3d8a9ee3f0dd8c27313c16abd46652c9cbe4558a32efb829ec202844e5a739a0421a20b914771b0de3f21900ccf9236b2afc8be85b010c5910bfdadf11a828ba4401cd08e4ccbec093fb034bd291b1a80c096315d69bf8315100fcfe7e0130f705e0244dde2385dcb76392bca57df0c5c14305ae91ed2b6b88caed544bc5341eb565e56cd606f0fde932c1bb53562522b3fec64347a0a1037c0e3c4f0ad550d2680e6467f9e94640c999188fa7a2db20de9a118a22d90d64e101a712e84d563865a2dd5ff3db6c9812b56b02b00b01"], 0xf0}}, {{0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f0000005c00)="f22e95bb3c2bb3effc96828c4aece5415c1f605eaad7e90dc427bcdd922f76", 0x1f}, {&(0x7f0000005c40)="9db548b06fcebdbbf76578d08413a57c2f9e8c1df59cd3e386a4e69c97e80fab03ad19f348ad703ecbd818bac1f82c75216ff7068b4ae0d7317c9e28bf00c420a1b618cb1732947a0ff983bc1b0607bf787b77e21758705713e46ec87e57053704ba67aa2fb83c41403fe80bed8b6d5e735ef33610745b2a89895e88374639ba9e7154a1286b7f14", 0x88}], 0x2, &(0x7f0000005d40)=[{0x1010, 0x117, 0x4, "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"}, {0x58, 0x6, 0x100, "9bd69af5393ee0f76e1f44d8e8c37eb43f8906479ed2804278ded8467720ac22f0c6ef8e82c88c106f6a7cc8faef8f783e1022c89874853175825f94645df34b6d42"}, {0x68, 0x104, 0x8, "8b1a06515fa36cdfaa67e885f7cc6b9f616c20cc07828a83327d178479e77cbeae74b774b54f85f55db4046828313d4244fcb3b1a2c07712bd14410bab970318782b6b66b5f574247ec60b0897a8f44f815c9c39e55b3445"}, {0xa0, 0x112, 0x8001, "1929fee838571a15aebe44a73c6f04e90db415bac809d761a0f73f7aa4ef21dac76866cb9bbe4d65f9b7857b5638a8fc9c45a2d4fa5a57513dc4ea2cfcdba5be8255acbac39dbb30d00b3cc1ab457f97b491142d097933589578b925743bff37f41c8b25466f1213c025a11e297b9d31201b8141b25b9a563ad758ef96bc54513f9a293de8962599d1"}, {0x1010, 0x1, 0x0, "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"}, {0xb8, 0x10a, 0x800, "13cb0793ae90f7bc9cfed7d1f865b81ae7e88fb1c28952532fb034c2a67ac09dc6ee7b3c34f134197da5ed948dfc8e781f6990ba845aa712e0af3ed039ffd93033f4fddd46eb483d429e372f6790d577d3971f27220a53549bec9de0a536156295dd300bd22c13313f43c69eca77097f9ebcfb9c52c2e3b6f7907319fc259279b2b58da11bb793d45b42ba43b25d87a3f503311820391aa38d646f152b685a83f705"}, {0x1010, 0xff, 0x4, "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"}, {0x78, 0x119, 0x4, "a6c7d91f569c865afd3e8c31d2dbe0f75022601ca6d4a810c9a780c26c2cd231bc2fac398d8d4fd062bd853c1eb8243a7b61af30696e0d53471a68f30927cd45e81c4622d25ec5fdc7e45589316d7cf294095ff79344911189106ee2eeb743212f"}, {0x20, 0x10d, 0x4, "4d92a3ef519476d130019dc813dc"}], 0x32e0}}], 0x7, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x6, 0x7, 0x5, 0xf7, 0x0, 0x8, 0x7021, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3000000, 0x4, @perf_config_ext={0x14d5, 0x1800}, 0x2000, 0x7, 0x101, 0x7, 0xffffffffbcacaad8, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0xa) recvmsg(r0, &(0x7f0000000580)={0x0, 0xb, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 18:15:44 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/config\x00') 18:15:44 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 18:15:44 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:15:44 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a8f30708cd060601e0040000000109021200010000000009"], 0x0) 18:15:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) open(&(0x7f0000000040)='./file0\x00', 0x712, 0x0) readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000100)=""/97, 0x61}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e008f8) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) flock(r2, 0x1) shutdown(r0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x712, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) shutdown(r1, 0x0) [ 746.679878][T23029] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 747.000419][T17753] usb 5-1: new high-speed USB device number 96 using dummy_hcd 18:15:44 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000300)) ftruncate(r2, 0x800) lseek(r2, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 18:15:44 executing program 5: syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}]}}}]}}]}}, 0x0) 18:15:44 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x265, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xa}]}}, 0x0}, 0x0) [ 747.045019][ T8] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 747.289871][T17753] usb 5-1: Using ep0 maxpacket: 16 [ 747.293477][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 747.380457][T17754] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 747.411680][T17751] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 747.425671][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 747.440827][T17753] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 747.442699][ T8] usb 2-1: New USB device found, idVendor=06cd, idProduct=0106, bcdDevice= 4.e0 [ 747.472037][T17753] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 747.476154][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.503301][T17753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.506780][ T8] usb 2-1: config 0 descriptor?? [ 747.544604][T17753] usb 5-1: config 0 descriptor?? 18:15:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) lseek(r0, 0x9, 0x0) [ 747.603116][T17753] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 18:15:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 747.775896][ T8] usb 2-1: USB disconnect, device number 63 [ 747.798248][ T3250] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.807102][T17754] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 747.810079][ T3250] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.823062][T17751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.875703][T17754] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.892857][T17751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 18:15:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 747.928253][T17754] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 747.951513][T17751] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.40 [ 747.968311][T17754] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 747.988391][T17751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.014885][T17751] usb 1-1: config 0 descriptor?? [ 748.023647][T23033] udc-core: couldn't find an available UDC or it's busy [ 748.036850][T23033] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 748.066265][T17753] usb 5-1: USB disconnect, device number 96 18:15:45 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x6041, 0x0) [ 748.210304][T17754] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 748.219501][T17754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.230256][T17754] usb 6-1: Product: syz [ 748.234949][T17754] usb 6-1: Manufacturer: syz [ 748.243012][T17754] usb 6-1: SerialNumber: syz 18:15:45 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000300)) ftruncate(r2, 0x800) lseek(r2, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) [ 748.301375][T17754] cdc_ether: probe of 6-1:1.0 failed with error -22 18:15:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[{0x10, 0x1}], 0x10}, 0x0) [ 748.506309][T17754] usb 6-1: USB disconnect, device number 25 18:15:46 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c200000000000109022400010000000009040000000300000009210000000122000009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x0, 0x0, "e6ff10c0", "86a92e51"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0}) 18:15:46 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="38000000031401000000000000000000170002"], 0x38}}, 0x0) 18:15:46 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 18:15:46 executing program 2: clock_getres(0x0, &(0x7f0000000040)) fork() sched_rr_get_interval(0x0, &(0x7f0000000000)) [ 748.716855][T21407] usb 1-1: USB disconnect, device number 11 [ 748.741148][T21407] general protection fault, probably for non-canonical address 0xdffffc000000002b: 0000 [#1] PREEMPT SMP KASAN [ 748.752985][T21407] KASAN: null-ptr-deref in range [0x0000000000000158-0x000000000000015f] [ 748.761422][T21407] CPU: 0 PID: 21407 Comm: kworker/0:6 Not tainted 5.13.0-rc1-syzkaller #0 [ 748.769981][T21407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.780083][T21407] Workqueue: usb_hub_wq hub_event [ 748.785195][T21407] RIP: 0010:timer_is_static_object+0x20/0x90 [ 748.791217][T21407] Code: 84 00 00 00 00 00 0f 1f 40 00 41 54 53 48 89 fb e8 a5 1a 11 00 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 4f 45 31 e4 48 83 7b 08 00 74 0c e8 7b 1a 11 00 44 [ 748.810863][T21407] RSP: 0018:ffffc9000984f330 EFLAGS: 00010006 [ 748.817060][T21407] RAX: dffffc0000000000 RBX: 0000000000000150 RCX: ffffc90016c89000 [ 748.825158][T21407] RDX: 000000000000002b RSI: ffffffff8163b87b RDI: 0000000000000158 [ 748.834476][T21407] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffff908f816b [ 748.842508][T21407] R10: fffffbfff211f02d R11: 0000000000000000 R12: dffffc0000000000 [ 748.850514][T21407] R13: ffffffff896d9920 R14: 0000000000000150 R15: 1ffff92001309e6b [ 748.858518][T21407] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 748.867484][T21407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 748.874105][T21407] CR2: 0000001b2d427000 CR3: 000000001bbaf000 CR4: 00000000001506f0 [ 748.882116][T21407] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 748.890122][T21407] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 748.898128][T21407] Call Trace: [ 748.901438][T21407] debug_object_assert_init+0x1df/0x2e0 [ 748.907213][T21407] ? debug_object_free+0x350/0x350 [ 748.912365][T21407] ? __lock_acquire+0x16a7/0x5230 [ 748.917597][T21407] del_timer+0x6d/0x110 [ 748.921790][T21407] ? detach_if_pending+0x470/0x470 [ 748.926940][T21407] ? try_to_grab_pending+0xbd/0xd0 [ 748.932151][T21407] ? lockdep_hardirqs_off+0x90/0xd0 [ 748.937452][T21407] try_to_grab_pending+0x6d/0xd0 [ 748.942426][T21407] __cancel_work_timer+0xa6/0x570 [ 748.947497][T21407] ? try_to_grab_pending+0xd0/0xd0 [ 748.952644][T21407] ? mark_held_locks+0x9f/0xe0 [ 748.957445][T21407] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 748.963342][T21407] ? lockdep_hardirqs_on+0x79/0x100 [ 748.968668][T21407] magicmouse_remove+0x3a/0x50 [ 748.973520][T21407] hid_device_remove+0xed/0x240 [ 748.978406][T21407] ? magicmouse_raw_event+0x1020/0x1020 [ 748.983982][T21407] ? hid_register_report+0x3b0/0x3b0 [ 748.989306][T21407] __device_release_driver+0x3bd/0x6f0 [ 748.994934][T21407] device_release_driver+0x26/0x40 [ 749.000087][T21407] bus_remove_device+0x2eb/0x5a0 [ 749.005062][T21407] device_del+0x502/0xd40 [ 749.009433][T21407] ? __device_links_queue_sync_state+0x3f0/0x3f0 [ 749.016413][T21407] ? mark_held_locks+0x9f/0xe0 [ 749.021220][T21407] ? rwlock_bug.part.0+0x90/0x90 [ 749.026278][T21407] hid_destroy_device+0xe1/0x150 [ 749.031256][T21407] usbhid_disconnect+0x9f/0xe0 [ 749.036140][T21407] usb_unbind_interface+0x1d8/0x8d0 [ 749.041410][T21407] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 749.047170][T21407] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 749.052814][T21407] ? usb_unbind_device+0x1a0/0x1a0 [ 749.058135][T21407] __device_release_driver+0x3bd/0x6f0 [ 749.063632][T21407] device_release_driver+0x26/0x40 [ 749.068781][T21407] bus_remove_device+0x2eb/0x5a0 [ 749.073759][T21407] device_del+0x502/0xd40 [ 749.078129][T21407] ? __device_links_queue_sync_state+0x3f0/0x3f0 [ 749.084492][T21407] ? kobject_put+0x1f3/0x540 [ 749.089235][T21407] usb_disable_device+0x35b/0x7b0 [ 749.094381][T21407] usb_disconnect.cold+0x27d/0x791 [ 749.099583][T21407] hub_event+0x1c9c/0x4330 [ 749.104045][T21407] ? hub_port_debounce+0x3c0/0x3c0 [ 749.109279][T21407] ? lock_release+0x720/0x720 [ 749.113999][T21407] ? lock_downgrade+0x6e0/0x6e0 [ 749.118889][T21407] process_one_work+0x98d/0x1600 [ 749.123913][T21407] ? pwq_dec_nr_in_flight+0x320/0x320 [ 749.129501][T21407] ? rwlock_bug.part.0+0x90/0x90 [ 749.134475][T21407] ? _raw_spin_lock_irq+0x41/0x50 [ 749.139543][T21407] worker_thread+0x64c/0x1120 [ 749.144270][T21407] ? __kthread_parkme+0x13f/0x1e0 [ 749.149394][T21407] ? process_one_work+0x1600/0x1600 [ 749.154636][T21407] kthread+0x3b1/0x4a0 [ 749.158735][T21407] ? __kthread_bind_mask+0xc0/0xc0 [ 749.163885][T21407] ret_from_fork+0x1f/0x30 [ 749.168372][T21407] Modules linked in: [ 749.172393][T21407] ---[ end trace cc016e4eeab1cd30 ]--- [ 749.178074][T21407] RIP: 0010:timer_is_static_object+0x20/0x90 [ 749.184177][T21407] Code: 84 00 00 00 00 00 0f 1f 40 00 41 54 53 48 89 fb e8 a5 1a 11 00 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 4f 45 31 e4 48 83 7b 08 00 74 0c e8 7b 1a 11 00 44 [ 749.204775][T21407] RSP: 0018:ffffc9000984f330 EFLAGS: 00010006 [ 749.210875][T21407] RAX: dffffc0000000000 RBX: 0000000000000150 RCX: ffffc90016c89000 [ 749.218964][T21407] RDX: 000000000000002b RSI: ffffffff8163b87b RDI: 0000000000000158 [ 749.227233][T21407] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffff908f816b [ 749.235229][T21407] R10: fffffbfff211f02d R11: 0000000000000000 R12: dffffc0000000000 [ 749.243230][T21407] R13: ffffffff896d9920 R14: 0000000000000150 R15: 1ffff92001309e6b [ 749.251233][T21407] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 749.260207][T21407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 749.266871][T21407] CR2: 0000001b2d427000 CR3: 000000001bbaf000 CR4: 00000000001506f0 [ 749.274868][T21407] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 749.282865][T21407] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 749.290872][T21407] Kernel panic - not syncing: Fatal exception [ 749.297860][T21407] Kernel Offset: disabled [ 749.302193][T21407] Rebooting in 86400 seconds..