uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 17:46:54 executing program 1: io_setup(0x8, &(0x7f0000000600)=0x0) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 17:46:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304, 0x38}, "1aedccc6e8cea484", "7d7183c7ece3d665729fb1d24ab5454c", "b2080f8a", "c01ae27bd313e817"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="3081211e55216a7b69c1f6e5b5c79b21ea7347f560107417aaf416dcaf2bab8c", 0x21, 0x0, 0x0, 0x0) 17:46:55 executing program 1: io_setup(0x8, &(0x7f0000000600)=0x0) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 2433.383954][ T1123] CoreChips 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 2433.410180][ T1123] CoreChips 5-1:0.0 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 17:46:55 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xfffffffffffffffa) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20983, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000060c0)={0x2020}, 0x2020) getresgid(0x0, &(0x7f000000ae40), &(0x7f000000ae80)) geteuid() ioprio_set$uid(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) r1 = geteuid() ioprio_set$uid(0x3, r1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f000000d580)={&(0x7f000000a500)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x26, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf9}}, 0x0, &(0x7f000000a5c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000000}}, 0x0, &(0x7f000000a640)={0x18, 0x0, 0x7}, &(0x7f000000a980)={0x28, 0x0, 0x0, {{0x100000000, 0xfffffffffffffffc, 0x1}}}, 0x0, 0x0, &(0x7f000000aa80)={0x12, 0x0, 0x0, {'}\x00'}}, &(0x7f000000aac0)={0x20, 0x0, 0xa8, {0x0, 0x11}}, 0x0, &(0x7f000000ac40)={0x90, 0x0, 0x20, {0x6, 0x0, 0x8000, 0x80000001, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x7, 0x8, 0x7, 0x0, 0x0, 0xffffffff, 0x4000}}}, 0x0, &(0x7f000000d140)={0x150, 0x0, 0x8c28, [{{0x0, 0x1, 0x9, 0x0, 0x2, 0xfffffff7, {0x0, 0x0, 0x5, 0xfff, 0x0, 0xff, 0x4, 0x0, 0x0, 0x0, 0x2, 0xee01, 0x0, 0x0, 0x2}}, {0x0, 0x0, 0x1, 0x0, '%'}}, {{0x0, 0x2, 0x0, 0x1, 0x0, 0xdb, {0x1, 0x0, 0x101, 0x0, 0x0, 0x24, 0x1}}, {0x6, 0x1, 0x7, 0x0, ']$(-&$\''}}]}, &(0x7f000000d480)={0xa0, 0x0, 0x5, {{0x0, 0x0, 0x0, 0x20, 0x8000, 0x40, {0x0, 0x0, 0x0, 0x401, 0x7f, 0x3, 0x1, 0xae, 0x0, 0x8000, 0x9, r1, 0x0, 0x101, 0xff}}, {0x0, 0x4}}}, &(0x7f000000d540)={0x20, 0x0, 0xffff, {0x0, 0x0, 0xe973, 0x9}}}) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) openat$sysctl(0xffffff9c, 0x0, 0x1, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003240)=[{0x0, 0x8dffffff, &(0x7f0000000500)=[{&(0x7f0000000040)='\v', 0x1}, {&(0x7f0000000180)="c0aa05b00f3feedd6171b5da465a26eee6d41c721b15ba34b8ff01daff0e3d4ff60f3b59731ca7a10550e986ac63e16c66963b1d521e903287a75172cd8b", 0x3e}], 0x2}], 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 2433.461306][ T1123] CoreChips: probe of 5-1:0.0 failed with error -71 [ 2433.515025][ T1123] usb 5-1: USB disconnect, device number 9 17:46:55 executing program 1: io_setup(0x8, &(0x7f0000000600)=0x0) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 2433.843027][ T3462] usb 1-1: new high-speed USB device number 102 using dummy_hcd 17:46:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 's'}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x19}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 17:46:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffd88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0xfc}}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 17:46:55 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f000075a000/0x3000)=nil, 0x3000, 0x3) 17:46:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) dup3(r0, r2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32], 0xa5) 17:46:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 's'}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x19}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 17:46:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) dup3(r0, r2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32], 0xa5) 17:46:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) dup3(r0, r2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32], 0xa5) 17:46:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304, 0x38}, "1aedccc6e8cea484", "7d7183c7ece3d665729fb1d24ab5454c", "b2080f8a", "c01ae27bd313e817"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="3081211e55216a7b69c1f6e5b5c79b21ea7347f560107417aaf416dcaf2bab8c", 0x21, 0x0, 0x0, 0x0) 17:46:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 's'}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x19}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) [ 2434.247090][ T3462] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2434.273084][ T3462] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 17:46:56 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f000075a000/0x3000)=nil, 0x3000, 0x3) [ 2434.312878][ T3462] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2434.361867][ T3462] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2434.386801][ T3462] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2434.468072][ T3462] usb 1-1: invalid MIDI out EP 0 [ 2434.590380][ T3462] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 2434.742633][ T3462] usb 1-1: USB disconnect, device number 102 17:46:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xfffffffffffffffa) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20983, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000060c0)={0x2020}, 0x2020) getresgid(0x0, &(0x7f000000ae40), &(0x7f000000ae80)) geteuid() ioprio_set$uid(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) r1 = geteuid() ioprio_set$uid(0x3, r1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f000000d580)={&(0x7f000000a500)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x26, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf9}}, 0x0, &(0x7f000000a5c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000000}}, 0x0, &(0x7f000000a640)={0x18, 0x0, 0x7}, &(0x7f000000a980)={0x28, 0x0, 0x0, {{0x100000000, 0xfffffffffffffffc, 0x1}}}, 0x0, 0x0, &(0x7f000000aa80)={0x12, 0x0, 0x0, {'}\x00'}}, &(0x7f000000aac0)={0x20, 0x0, 0xa8, {0x0, 0x11}}, 0x0, &(0x7f000000ac40)={0x90, 0x0, 0x20, {0x6, 0x0, 0x8000, 0x80000001, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x7, 0x8, 0x7, 0x0, 0x0, 0xffffffff, 0x4000}}}, 0x0, &(0x7f000000d140)={0x150, 0x0, 0x8c28, [{{0x0, 0x1, 0x9, 0x0, 0x2, 0xfffffff7, {0x0, 0x0, 0x5, 0xfff, 0x0, 0xff, 0x4, 0x0, 0x0, 0x0, 0x2, 0xee01, 0x0, 0x0, 0x2}}, {0x0, 0x0, 0x1, 0x0, '%'}}, {{0x0, 0x2, 0x0, 0x1, 0x0, 0xdb, {0x1, 0x0, 0x101, 0x0, 0x0, 0x24, 0x1}}, {0x6, 0x1, 0x7, 0x0, ']$(-&$\''}}]}, &(0x7f000000d480)={0xa0, 0x0, 0x5, {{0x0, 0x0, 0x0, 0x20, 0x8000, 0x40, {0x0, 0x0, 0x0, 0x401, 0x7f, 0x3, 0x1, 0xae, 0x0, 0x8000, 0x9, r1, 0x0, 0x101, 0xff}}, {0x0, 0x4}}}, &(0x7f000000d540)={0x20, 0x0, 0xffff, {0x0, 0x0, 0xe973, 0x9}}}) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) openat$sysctl(0xffffff9c, 0x0, 0x1, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003240)=[{0x0, 0x8dffffff, &(0x7f0000000500)=[{&(0x7f0000000040)='\v', 0x1}, {&(0x7f0000000180)="c0aa05b00f3feedd6171b5da465a26eee6d41c721b15ba34b8ff01daff0e3d4ff60f3b59731ca7a10550e986ac63e16c66963b1d521e903287a75172cd8b", 0x3e}], 0x2}], 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 17:46:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 's'}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x19}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 17:46:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) dup3(r0, r2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32], 0xa5) 17:46:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304, 0x38}, "1aedccc6e8cea484", "7d7183c7ece3d665729fb1d24ab5454c", "b2080f8a", "c01ae27bd313e817"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="3081211e55216a7b69c1f6e5b5c79b21ea7347f560107417aaf416dcaf2bab8c", 0x21, 0x0, 0x0, 0x0) 17:46:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x20) 17:46:56 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f000075a000/0x3000)=nil, 0x3000, 0x3) 17:46:57 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xfffffffffffffffa) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20983, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000060c0)={0x2020}, 0x2020) getresgid(0x0, &(0x7f000000ae40), &(0x7f000000ae80)) geteuid() ioprio_set$uid(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) r1 = geteuid() ioprio_set$uid(0x3, r1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f000000d580)={&(0x7f000000a500)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x26, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf9}}, 0x0, &(0x7f000000a5c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000000}}, 0x0, &(0x7f000000a640)={0x18, 0x0, 0x7}, &(0x7f000000a980)={0x28, 0x0, 0x0, {{0x100000000, 0xfffffffffffffffc, 0x1}}}, 0x0, 0x0, &(0x7f000000aa80)={0x12, 0x0, 0x0, {'}\x00'}}, &(0x7f000000aac0)={0x20, 0x0, 0xa8, {0x0, 0x11}}, 0x0, &(0x7f000000ac40)={0x90, 0x0, 0x20, {0x6, 0x0, 0x8000, 0x80000001, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x7, 0x8, 0x7, 0x0, 0x0, 0xffffffff, 0x4000}}}, 0x0, &(0x7f000000d140)={0x150, 0x0, 0x8c28, [{{0x0, 0x1, 0x9, 0x0, 0x2, 0xfffffff7, {0x0, 0x0, 0x5, 0xfff, 0x0, 0xff, 0x4, 0x0, 0x0, 0x0, 0x2, 0xee01, 0x0, 0x0, 0x2}}, {0x0, 0x0, 0x1, 0x0, '%'}}, {{0x0, 0x2, 0x0, 0x1, 0x0, 0xdb, {0x1, 0x0, 0x101, 0x0, 0x0, 0x24, 0x1}}, {0x6, 0x1, 0x7, 0x0, ']$(-&$\''}}]}, &(0x7f000000d480)={0xa0, 0x0, 0x5, {{0x0, 0x0, 0x0, 0x20, 0x8000, 0x40, {0x0, 0x0, 0x0, 0x401, 0x7f, 0x3, 0x1, 0xae, 0x0, 0x8000, 0x9, r1, 0x0, 0x101, 0xff}}, {0x0, 0x4}}}, &(0x7f000000d540)={0x20, 0x0, 0xffff, {0x0, 0x0, 0xe973, 0x9}}}) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) openat$sysctl(0xffffff9c, 0x0, 0x1, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003240)=[{0x0, 0x8dffffff, &(0x7f0000000500)=[{&(0x7f0000000040)='\v', 0x1}, {&(0x7f0000000180)="c0aa05b00f3feedd6171b5da465a26eee6d41c721b15ba34b8ff01daff0e3d4ff60f3b59731ca7a10550e986ac63e16c66963b1d521e903287a75172cd8b", 0x3e}], 0x2}], 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 17:46:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x20) 17:46:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304, 0x38}, "1aedccc6e8cea484", "7d7183c7ece3d665729fb1d24ab5454c", "b2080f8a", "c01ae27bd313e817"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="3081211e55216a7b69c1f6e5b5c79b21ea7347f560107417aaf416dcaf2bab8c", 0x21, 0x0, 0x0, 0x0) 17:46:57 executing program 2: syz_clone3(&(0x7f0000004d80)={0x5041000, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:46:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x27}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}}, 0x0) 17:46:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x20) [ 2435.693638][ T3462] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2435.733063][ T1123] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2436.133541][ T1123] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2436.144077][ T3462] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2436.154431][ T1123] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2436.174139][ T3462] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2436.186743][ T1123] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2436.199874][ T3462] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2436.213061][ T1123] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2436.222233][ T1123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2436.230399][ T3462] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2436.239723][ T3462] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2436.297638][ T1123] usb 5-1: invalid MIDI out EP 0 [ 2436.391927][ T8849] udevd[8849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2436.411879][ T1123] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 2436.420503][ T3462] usb 1-1: invalid MIDI out EP 0 [ 2436.550194][ T3462] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 2436.576189][ T3462] usb 1-1: USB disconnect, device number 103 [ 2436.609500][ T314] usb 5-1: USB disconnect, device number 10 17:46:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xfffffffffffffffa) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20983, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000060c0)={0x2020}, 0x2020) getresgid(0x0, &(0x7f000000ae40), &(0x7f000000ae80)) geteuid() ioprio_set$uid(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) r1 = geteuid() ioprio_set$uid(0x3, r1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f000000d580)={&(0x7f000000a500)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x26, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf9}}, 0x0, &(0x7f000000a5c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000000}}, 0x0, &(0x7f000000a640)={0x18, 0x0, 0x7}, &(0x7f000000a980)={0x28, 0x0, 0x0, {{0x100000000, 0xfffffffffffffffc, 0x1}}}, 0x0, 0x0, &(0x7f000000aa80)={0x12, 0x0, 0x0, {'}\x00'}}, &(0x7f000000aac0)={0x20, 0x0, 0xa8, {0x0, 0x11}}, 0x0, &(0x7f000000ac40)={0x90, 0x0, 0x20, {0x6, 0x0, 0x8000, 0x80000001, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x7, 0x8, 0x7, 0x0, 0x0, 0xffffffff, 0x4000}}}, 0x0, &(0x7f000000d140)={0x150, 0x0, 0x8c28, [{{0x0, 0x1, 0x9, 0x0, 0x2, 0xfffffff7, {0x0, 0x0, 0x5, 0xfff, 0x0, 0xff, 0x4, 0x0, 0x0, 0x0, 0x2, 0xee01, 0x0, 0x0, 0x2}}, {0x0, 0x0, 0x1, 0x0, '%'}}, {{0x0, 0x2, 0x0, 0x1, 0x0, 0xdb, {0x1, 0x0, 0x101, 0x0, 0x0, 0x24, 0x1}}, {0x6, 0x1, 0x7, 0x0, ']$(-&$\''}}]}, &(0x7f000000d480)={0xa0, 0x0, 0x5, {{0x0, 0x0, 0x0, 0x20, 0x8000, 0x40, {0x0, 0x0, 0x0, 0x401, 0x7f, 0x3, 0x1, 0xae, 0x0, 0x8000, 0x9, r1, 0x0, 0x101, 0xff}}, {0x0, 0x4}}}, &(0x7f000000d540)={0x20, 0x0, 0xffff, {0x0, 0x0, 0xe973, 0x9}}}) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) openat$sysctl(0xffffff9c, 0x0, 0x1, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003240)=[{0x0, 0x8dffffff, &(0x7f0000000500)=[{&(0x7f0000000040)='\v', 0x1}, {&(0x7f0000000180)="c0aa05b00f3feedd6171b5da465a26eee6d41c721b15ba34b8ff01daff0e3d4ff60f3b59731ca7a10550e986ac63e16c66963b1d521e903287a75172cd8b", 0x3e}], 0x2}], 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 17:46:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x27}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}}, 0x0) 17:46:58 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 17:46:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x20) 17:46:58 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f000075a000/0x3000)=nil, 0x3000, 0x3) 17:46:58 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xfffffffffffffffa) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20983, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000060c0)={0x2020}, 0x2020) getresgid(0x0, &(0x7f000000ae40), &(0x7f000000ae80)) geteuid() ioprio_set$uid(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) r1 = geteuid() ioprio_set$uid(0x3, r1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f000000d580)={&(0x7f000000a500)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x26, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf9}}, 0x0, &(0x7f000000a5c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000000}}, 0x0, &(0x7f000000a640)={0x18, 0x0, 0x7}, &(0x7f000000a980)={0x28, 0x0, 0x0, {{0x100000000, 0xfffffffffffffffc, 0x1}}}, 0x0, 0x0, &(0x7f000000aa80)={0x12, 0x0, 0x0, {'}\x00'}}, &(0x7f000000aac0)={0x20, 0x0, 0xa8, {0x0, 0x11}}, 0x0, &(0x7f000000ac40)={0x90, 0x0, 0x20, {0x6, 0x0, 0x8000, 0x80000001, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x7, 0x8, 0x7, 0x0, 0x0, 0xffffffff, 0x4000}}}, 0x0, &(0x7f000000d140)={0x150, 0x0, 0x8c28, [{{0x0, 0x1, 0x9, 0x0, 0x2, 0xfffffff7, {0x0, 0x0, 0x5, 0xfff, 0x0, 0xff, 0x4, 0x0, 0x0, 0x0, 0x2, 0xee01, 0x0, 0x0, 0x2}}, {0x0, 0x0, 0x1, 0x0, '%'}}, {{0x0, 0x2, 0x0, 0x1, 0x0, 0xdb, {0x1, 0x0, 0x101, 0x0, 0x0, 0x24, 0x1}}, {0x6, 0x1, 0x7, 0x0, ']$(-&$\''}}]}, &(0x7f000000d480)={0xa0, 0x0, 0x5, {{0x0, 0x0, 0x0, 0x20, 0x8000, 0x40, {0x0, 0x0, 0x0, 0x401, 0x7f, 0x3, 0x1, 0xae, 0x0, 0x8000, 0x9, r1, 0x0, 0x101, 0xff}}, {0x0, 0x4}}}, &(0x7f000000d540)={0x20, 0x0, 0xffff, {0x0, 0x0, 0xe973, 0x9}}}) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) openat$sysctl(0xffffff9c, 0x0, 0x1, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003240)=[{0x0, 0x8dffffff, &(0x7f0000000500)=[{&(0x7f0000000040)='\v', 0x1}, {&(0x7f0000000180)="c0aa05b00f3feedd6171b5da465a26eee6d41c721b15ba34b8ff01daff0e3d4ff60f3b59731ca7a10550e986ac63e16c66963b1d521e903287a75172cd8b", 0x3e}], 0x2}], 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 17:46:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x27}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}}, 0x0) 17:46:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create1(0x0) ioctl$TCXONC(r0, 0x540a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TCXONC(r0, 0x540a, 0x1) 17:46:59 executing program 2: socketpair(0x21, 0x0, 0x2, &(0x7f0000000100)) 17:46:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x27}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}}, 0x0) 17:46:59 executing program 2: socketpair(0x21, 0x0, 0x2, &(0x7f0000000100)) 17:46:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create1(0x0) ioctl$TCXONC(r0, 0x540a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TCXONC(r0, 0x540a, 0x1) [ 2437.503093][ T3462] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2437.573920][ T1123] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2437.895198][ T3462] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2437.912807][ T3462] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2437.943367][ T3462] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2437.962786][ T3462] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2437.971872][ T3462] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2437.993205][ T1123] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2438.013668][ T1123] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2438.035925][ T1123] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2438.049137][ T1123] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2438.058976][ T1123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2438.085768][ T3462] usb 5-1: invalid MIDI out EP 0 [ 2438.165099][ T3462] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 2438.173747][ T1123] usb 1-1: invalid MIDI out EP 0 [ 2438.181456][ T8849] udevd[8849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2438.271772][ T1123] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 2438.274671][ T9028] udevd[9028]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2438.346443][ T314] usb 5-1: USB disconnect, device number 11 [ 2438.414157][ T5112] usb 1-1: USB disconnect, device number 104 17:47:00 executing program 2: socketpair(0x21, 0x0, 0x2, &(0x7f0000000100)) 17:47:00 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000200)=[{}], 0x8) 17:47:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create1(0x0) ioctl$TCXONC(r0, 0x540a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TCXONC(r0, 0x540a, 0x1) 17:47:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/154, 0x9a}], 0x1, 0x80000001, 0x0) 17:47:00 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xfffffffffffffffa) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20983, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000060c0)={0x2020}, 0x2020) getresgid(0x0, &(0x7f000000ae40), &(0x7f000000ae80)) geteuid() ioprio_set$uid(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) r1 = geteuid() ioprio_set$uid(0x3, r1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f000000d580)={&(0x7f000000a500)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x26, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf9}}, 0x0, &(0x7f000000a5c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000000}}, 0x0, &(0x7f000000a640)={0x18, 0x0, 0x7}, &(0x7f000000a980)={0x28, 0x0, 0x0, {{0x100000000, 0xfffffffffffffffc, 0x1}}}, 0x0, 0x0, &(0x7f000000aa80)={0x12, 0x0, 0x0, {'}\x00'}}, &(0x7f000000aac0)={0x20, 0x0, 0xa8, {0x0, 0x11}}, 0x0, &(0x7f000000ac40)={0x90, 0x0, 0x20, {0x6, 0x0, 0x8000, 0x80000001, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x7, 0x8, 0x7, 0x0, 0x0, 0xffffffff, 0x4000}}}, 0x0, &(0x7f000000d140)={0x150, 0x0, 0x8c28, [{{0x0, 0x1, 0x9, 0x0, 0x2, 0xfffffff7, {0x0, 0x0, 0x5, 0xfff, 0x0, 0xff, 0x4, 0x0, 0x0, 0x0, 0x2, 0xee01, 0x0, 0x0, 0x2}}, {0x0, 0x0, 0x1, 0x0, '%'}}, {{0x0, 0x2, 0x0, 0x1, 0x0, 0xdb, {0x1, 0x0, 0x101, 0x0, 0x0, 0x24, 0x1}}, {0x6, 0x1, 0x7, 0x0, ']$(-&$\''}}]}, &(0x7f000000d480)={0xa0, 0x0, 0x5, {{0x0, 0x0, 0x0, 0x20, 0x8000, 0x40, {0x0, 0x0, 0x0, 0x401, 0x7f, 0x3, 0x1, 0xae, 0x0, 0x8000, 0x9, r1, 0x0, 0x101, 0xff}}, {0x0, 0x4}}}, &(0x7f000000d540)={0x20, 0x0, 0xffff, {0x0, 0x0, 0xe973, 0x9}}}) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) openat$sysctl(0xffffff9c, 0x0, 0x1, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003240)=[{0x0, 0x8dffffff, &(0x7f0000000500)=[{&(0x7f0000000040)='\v', 0x1}, {&(0x7f0000000180)="c0aa05b00f3feedd6171b5da465a26eee6d41c721b15ba34b8ff01daff0e3d4ff60f3b59731ca7a10550e986ac63e16c66963b1d521e903287a75172cd8b", 0x3e}], 0x2}], 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 17:47:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xfffffffffffffffa) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20983, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000060c0)={0x2020}, 0x2020) getresgid(0x0, &(0x7f000000ae40), &(0x7f000000ae80)) geteuid() ioprio_set$uid(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) r1 = geteuid() ioprio_set$uid(0x3, r1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f000000d580)={&(0x7f000000a500)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x26, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf9}}, 0x0, &(0x7f000000a5c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000000}}, 0x0, &(0x7f000000a640)={0x18, 0x0, 0x7}, &(0x7f000000a980)={0x28, 0x0, 0x0, {{0x100000000, 0xfffffffffffffffc, 0x1}}}, 0x0, 0x0, &(0x7f000000aa80)={0x12, 0x0, 0x0, {'}\x00'}}, &(0x7f000000aac0)={0x20, 0x0, 0xa8, {0x0, 0x11}}, 0x0, &(0x7f000000ac40)={0x90, 0x0, 0x20, {0x6, 0x0, 0x8000, 0x80000001, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x7, 0x8, 0x7, 0x0, 0x0, 0xffffffff, 0x4000}}}, 0x0, &(0x7f000000d140)={0x150, 0x0, 0x8c28, [{{0x0, 0x1, 0x9, 0x0, 0x2, 0xfffffff7, {0x0, 0x0, 0x5, 0xfff, 0x0, 0xff, 0x4, 0x0, 0x0, 0x0, 0x2, 0xee01, 0x0, 0x0, 0x2}}, {0x0, 0x0, 0x1, 0x0, '%'}}, {{0x0, 0x2, 0x0, 0x1, 0x0, 0xdb, {0x1, 0x0, 0x101, 0x0, 0x0, 0x24, 0x1}}, {0x6, 0x1, 0x7, 0x0, ']$(-&$\''}}]}, &(0x7f000000d480)={0xa0, 0x0, 0x5, {{0x0, 0x0, 0x0, 0x20, 0x8000, 0x40, {0x0, 0x0, 0x0, 0x401, 0x7f, 0x3, 0x1, 0xae, 0x0, 0x8000, 0x9, r1, 0x0, 0x101, 0xff}}, {0x0, 0x4}}}, &(0x7f000000d540)={0x20, 0x0, 0xffff, {0x0, 0x0, 0xe973, 0x9}}}) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) openat$sysctl(0xffffff9c, 0x0, 0x1, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003240)=[{0x0, 0x8dffffff, &(0x7f0000000500)=[{&(0x7f0000000040)='\v', 0x1}, {&(0x7f0000000180)="c0aa05b00f3feedd6171b5da465a26eee6d41c721b15ba34b8ff01daff0e3d4ff60f3b59731ca7a10550e986ac63e16c66963b1d521e903287a75172cd8b", 0x3e}], 0x2}], 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 17:47:00 executing program 2: socketpair(0x21, 0x0, 0x2, &(0x7f0000000100)) 17:47:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/154, 0x9a}], 0x1, 0x80000001, 0x0) 17:47:00 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000200)=[{}], 0x8) 17:47:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create1(0x0) ioctl$TCXONC(r0, 0x540a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TCXONC(r0, 0x540a, 0x1) 17:47:00 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$inet(r4, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb7400000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xdc03, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:47:00 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000200)=[{}], 0x8) 17:47:00 executing program 5: r0 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 17:47:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/154, 0x9a}], 0x1, 0x80000001, 0x0) 17:47:01 executing program 5: r0 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 17:47:01 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000200)=[{}], 0x8) [ 2439.278112][ T9105] bridge26: port 1(bond0) entered blocking state [ 2439.293214][ T3462] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2439.296045][ T9105] bridge26: port 1(bond0) entered disabled state [ 2439.356109][ T9105] bond0: entered allmulticast mode [ 2439.356653][ T1123] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2439.379649][ T9105] bond_slave_0: entered allmulticast mode [ 2439.402213][ T9105] bond_slave_1: entered allmulticast mode [ 2439.412170][ T9105] bond19: entered allmulticast mode [ 2439.424158][ T9105] bond20: entered allmulticast mode [ 2439.431804][ T9105] bond21: entered allmulticast mode [ 2439.440920][ T9105] bond22: entered allmulticast mode [ 2439.473107][ T9110] macsec2: entered promiscuous mode [ 2439.478656][ T9110] bridge26: entered promiscuous mode [ 2439.485541][ T9110] macsec2: entered allmulticast mode [ 2439.491059][ T9110] bridge26: entered allmulticast mode [ 2439.500461][ T9110] bridge26: left allmulticast mode [ 2439.506559][ T9110] bridge26: left promiscuous mode [ 2439.673637][ T3462] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2439.692796][ T3462] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2439.712769][ T3462] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2439.744377][ T3462] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2439.762773][ T3462] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2439.773485][ T1123] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2439.794226][ T1123] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2439.812778][ T1123] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2439.827792][ T1123] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2439.837274][ T1123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2439.849297][ T3462] usb 5-1: invalid MIDI out EP 0 [ 2439.948150][ T1123] usb 1-1: invalid MIDI out EP 0 [ 2439.954828][ T3462] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 2440.043214][ T8849] udevd[8849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2440.066284][ T1123] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 2440.121143][ T1123] usb 5-1: USB disconnect, device number 12 [ 2440.171763][ T3462] usb 1-1: USB disconnect, device number 105 17:47:02 executing program 5: r0 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 17:47:02 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$inet(r4, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb7400000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xdc03, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:47:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/154, 0x9a}], 0x1, 0x80000001, 0x0) 17:47:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x31e, 0x0, &(0x7f0000345000/0x4000)=nil, &(0x7f00003aa000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000480)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4c6) syz_io_uring_setup(0x4aa8, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000d6000/0x3000)=nil, 0x0, &(0x7f00000003c0)=0x0) syz_open_dev$vcsu(&(0x7f00000004c0), 0x6, 0x262000) syz_io_uring_submit(0x0, r3, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x108040, 0x0) r5 = syz_io_uring_setup(0x4db0, &(0x7f00000005c0)={0x0, 0x11f7, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000398000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{&(0x7f0000000500)=@generic, 0x80, &(0x7f0000000980)=[{&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f0000000800)=""/141, 0x8d}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000180)=""/1, 0x1}], 0x5}, 0x14}], 0x1, 0x0, &(0x7f0000000380)={0x77359400}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = mmap$IORING_OFF_SQES(&(0x7f00000d8000/0x1000)=nil, 0x1000, 0x4, 0x10, r5, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000280), 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) 17:47:02 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$inet(r4, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb7400000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xdc03, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:47:02 executing program 5: r0 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) [ 2440.865656][ T9128] bond0: left allmulticast mode 17:47:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newneigh={0x1c, 0x10, 0x1}, 0x1c}}, 0x0) 17:47:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x3a50d000) getpeername(r1, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000080)=0x80) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) munmap(&(0x7f00001d9000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000280)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0xffff, 0x4) socket(0x15, 0x80000, 0x3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001740)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="58e461cc334e75992c194ea23972c733dc7ff4877f2fec832104edff694180d821b359ae105afe9bc56d681a9acc1925ff8ef60d832ab62a8a1ddcc76169322cfa72d4b3f586279b1dc96f83c928db0f0c88e30b731abb7d98f7ac1808321670dec1a0c49238e25c08587e68a6b37f5dc70230d34c2fbc98251af390e092a802e80cf9", 0x83, 0x24058144, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) [ 2440.928267][ T9128] bond_slave_0: left allmulticast mode 17:47:02 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0d05605, &(0x7f00000001c0)={0xa, {0x0, 0x0, 0x0, 0x31324d59}}) [ 2440.985830][ T9128] bond_slave_1: left allmulticast mode [ 2441.044616][ T9128] bond19: left allmulticast mode [ 2441.063055][ T9128] bond20: left allmulticast mode [ 2441.068229][ T9128] bond21: left allmulticast mode [ 2441.095709][ T9128] bond22: left allmulticast mode [ 2441.112639][ T9128] bridge26: port 1(bond0) entered disabled state [ 2441.127384][ T9128] bridge27: port 1(bond0) entered blocking state 17:47:02 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0d05605, &(0x7f00000001c0)={0xa, {0x0, 0x0, 0x0, 0x31324d59}}) [ 2441.146263][ T9128] bridge27: port 1(bond0) entered disabled state [ 2441.170197][ T9128] bond0: entered allmulticast mode [ 2441.190989][ T9128] bond_slave_0: entered allmulticast mode [ 2441.216440][ T9128] bond_slave_1: entered allmulticast mode [ 2441.223820][ T9128] bond19: entered allmulticast mode [ 2441.231834][ T9128] bond20: entered allmulticast mode 17:47:02 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0d05605, &(0x7f00000001c0)={0xa, {0x0, 0x0, 0x0, 0x31324d59}}) [ 2441.259883][ T9128] bond21: entered allmulticast mode [ 2441.273418][ T9128] bond22: entered allmulticast mode 17:47:03 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0d05605, &(0x7f00000001c0)={0xa, {0x0, 0x0, 0x0, 0x31324d59}}) [ 2441.356022][ T9124] macsec2: entered promiscuous mode [ 2441.385521][ T9124] bridge27: entered promiscuous mode [ 2441.424959][ T9124] macsec2: entered allmulticast mode [ 2441.453251][ T9124] bridge27: entered allmulticast mode [ 2441.493523][ T9124] bridge27: left allmulticast mode [ 2441.513753][ T9124] bridge27: left promiscuous mode 17:47:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x3c1, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x22b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x81}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x1, 0x1f}, 0x1c, &(0x7f0000000280)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @string={0x4, 0x3, "04cd"}}, 0x0, 0x0}, 0x0) [ 2441.665206][ T9131] bridge34: port 1(bond0) entered blocking state [ 2441.676627][ T9131] bridge34: port 1(bond0) entered disabled state [ 2441.691331][ T9131] bond0: entered allmulticast mode [ 2441.697810][ T9131] bond_slave_0: entered allmulticast mode [ 2441.703911][ T9131] bond_slave_1: entered allmulticast mode [ 2441.719550][ T9133] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2441.735316][ T9133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 17:47:03 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$inet(r4, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb7400000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xdc03, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 17:47:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x31e, 0x0, &(0x7f0000345000/0x4000)=nil, &(0x7f00003aa000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000480)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4c6) syz_io_uring_setup(0x4aa8, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000d6000/0x3000)=nil, 0x0, &(0x7f00000003c0)=0x0) syz_open_dev$vcsu(&(0x7f00000004c0), 0x6, 0x262000) syz_io_uring_submit(0x0, r3, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x108040, 0x0) r5 = syz_io_uring_setup(0x4db0, &(0x7f00000005c0)={0x0, 0x11f7, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000398000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{&(0x7f0000000500)=@generic, 0x80, &(0x7f0000000980)=[{&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f0000000800)=""/141, 0x8d}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000180)=""/1, 0x1}], 0x5}, 0x14}], 0x1, 0x0, &(0x7f0000000380)={0x77359400}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = mmap$IORING_OFF_SQES(&(0x7f00000d8000/0x1000)=nil, 0x1000, 0x4, 0x10, r5, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000280), 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) 17:47:03 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@link_local, @random="8bd06b6d0a77", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo}}}}, 0x0) [ 2441.827468][ T9137] macsec1: entered promiscuous mode [ 2441.873166][ T9137] bridge34: entered promiscuous mode [ 2441.879143][ T9137] bond0: entered promiscuous mode [ 2441.884510][ T9137] bond_slave_0: entered promiscuous mode [ 2441.890507][ T9137] bond_slave_1: entered promiscuous mode [ 2441.898981][ T9137] macsec1: entered allmulticast mode [ 2441.904584][ T9137] bridge34: entered allmulticast mode [ 2441.920030][ T9137] bridge34: left allmulticast mode [ 2441.925481][ T9137] bridge34: left promiscuous mode [ 2441.934006][ T9137] bond0: left promiscuous mode [ 2441.939159][ T9137] bond_slave_0: left promiscuous mode [ 2441.956372][ T9137] bond_slave_1: left promiscuous mode 17:47:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x3a50d000) getpeername(r1, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000080)=0x80) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) munmap(&(0x7f00001d9000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000280)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0xffff, 0x4) socket(0x15, 0x80000, 0x3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001740)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="58e461cc334e75992c194ea23972c733dc7ff4877f2fec832104edff694180d821b359ae105afe9bc56d681a9acc1925ff8ef60d832ab62a8a1ddcc76169322cfa72d4b3f586279b1dc96f83c928db0f0c88e30b731abb7d98f7ac1808321670dec1a0c49238e25c08587e68a6b37f5dc70230d34c2fbc98251af390e092a802e80cf9", 0x83, 0x24058144, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 17:47:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x3a50d000) getpeername(r1, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000080)=0x80) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) munmap(&(0x7f00001d9000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000280)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0xffff, 0x4) socket(0x15, 0x80000, 0x3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001740)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="58e461cc334e75992c194ea23972c733dc7ff4877f2fec832104edff694180d821b359ae105afe9bc56d681a9acc1925ff8ef60d832ab62a8a1ddcc76169322cfa72d4b3f586279b1dc96f83c928db0f0c88e30b731abb7d98f7ac1808321670dec1a0c49238e25c08587e68a6b37f5dc70230d34c2fbc98251af390e092a802e80cf9", 0x83, 0x24058144, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 17:47:03 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$inet(r4, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb7400000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xdc03, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 2442.055108][ T9159] bond0: left allmulticast mode [ 2442.074986][ T9159] bond_slave_0: left allmulticast mode [ 2442.114366][ T9159] bond_slave_1: left allmulticast mode [ 2442.123546][ T9159] bond19: left allmulticast mode [ 2442.140076][ T9159] bond20: left allmulticast mode [ 2442.142934][T22697] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2442.192946][ T9159] bond21: left allmulticast mode [ 2442.197969][ T9159] bond22: left allmulticast mode [ 2442.203691][ T9159] bridge27: port 1(bond0) entered disabled state [ 2442.227241][ T9159] bridge28: port 1(bond0) entered blocking state [ 2442.243248][ T9159] bridge28: port 1(bond0) entered disabled state [ 2442.255401][ T9159] bond0: entered allmulticast mode [ 2442.274845][ T9159] bond_slave_0: entered allmulticast mode [ 2442.289949][ T9159] bond_slave_1: entered allmulticast mode [ 2442.308728][ T9159] bond19: entered allmulticast mode [ 2442.323284][ T9159] bond20: entered allmulticast mode [ 2442.336258][ T9159] bond21: entered allmulticast mode [ 2442.366995][ T9159] bond22: entered allmulticast mode [ 2442.403121][T22697] usb 6-1: Using ep0 maxpacket: 8 [ 2442.420581][ T9157] macsec2: entered promiscuous mode [ 2442.440247][ T9157] bridge28: entered promiscuous mode [ 2442.484760][ T9157] macsec2: entered allmulticast mode [ 2442.536573][ T9157] bridge28: entered allmulticast mode [ 2442.566380][ T9157] bridge28: left allmulticast mode [ 2442.571813][ T9157] bridge28: left promiscuous mode [ 2442.603368][T22697] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2442.631574][T22697] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 2442.643792][ T9162] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2442.654367][ T9162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2442.670274][ T9164] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2442.712106][ T9164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 17:47:04 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$inet(r4, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb7400000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xdc03, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 2442.793601][ T9169] bond0: left allmulticast mode [ 2442.805881][ T9169] bond_slave_0: left allmulticast mode [ 2442.851780][ T9169] bond_slave_1: left allmulticast mode [ 2442.863103][T22697] usb 6-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40 [ 2442.870523][ T9169] bridge34: port 1(bond0) entered disabled state [ 2442.887111][T22697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2442.907642][T22697] usb 6-1: Product: syz [ 2442.911895][T22697] usb 6-1: Manufacturer: syz [ 2442.923906][ T9169] bridge35: port 1(bond0) entered blocking state [ 2442.931856][T22697] usb 6-1: SerialNumber: syz [ 2442.943574][ T9169] bridge35: port 1(bond0) entered disabled state 17:47:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x3a50d000) getpeername(r1, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000080)=0x80) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) munmap(&(0x7f00001d9000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000280)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0xffff, 0x4) socket(0x15, 0x80000, 0x3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001740)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="58e461cc334e75992c194ea23972c733dc7ff4877f2fec832104edff694180d821b359ae105afe9bc56d681a9acc1925ff8ef60d832ab62a8a1ddcc76169322cfa72d4b3f586279b1dc96f83c928db0f0c88e30b731abb7d98f7ac1808321670dec1a0c49238e25c08587e68a6b37f5dc70230d34c2fbc98251af390e092a802e80cf9", 0x83, 0x24058144, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 17:47:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x3a50d000) getpeername(r1, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000080)=0x80) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) munmap(&(0x7f00001d9000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000280)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0xffff, 0x4) socket(0x15, 0x80000, 0x3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001740)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="58e461cc334e75992c194ea23972c733dc7ff4877f2fec832104edff694180d821b359ae105afe9bc56d681a9acc1925ff8ef60d832ab62a8a1ddcc76169322cfa72d4b3f586279b1dc96f83c928db0f0c88e30b731abb7d98f7ac1808321670dec1a0c49238e25c08587e68a6b37f5dc70230d34c2fbc98251af390e092a802e80cf9", 0x83, 0x24058144, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) [ 2442.962551][ T9169] bond0: entered allmulticast mode [ 2443.012310][ T9169] bond_slave_0: entered allmulticast mode [ 2443.064103][ T9169] bond_slave_1: entered allmulticast mode 17:47:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x31e, 0x0, &(0x7f0000345000/0x4000)=nil, &(0x7f00003aa000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000480)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4c6) syz_io_uring_setup(0x4aa8, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000d6000/0x3000)=nil, 0x0, &(0x7f00000003c0)=0x0) syz_open_dev$vcsu(&(0x7f00000004c0), 0x6, 0x262000) syz_io_uring_submit(0x0, r3, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x108040, 0x0) r5 = syz_io_uring_setup(0x4db0, &(0x7f00000005c0)={0x0, 0x11f7, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000398000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{&(0x7f0000000500)=@generic, 0x80, &(0x7f0000000980)=[{&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f0000000800)=""/141, 0x8d}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000180)=""/1, 0x1}], 0x5}, 0x14}], 0x1, 0x0, &(0x7f0000000380)={0x77359400}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = mmap$IORING_OFF_SQES(&(0x7f00000d8000/0x1000)=nil, 0x1000, 0x4, 0x10, r5, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000280), 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) [ 2443.150344][ T9171] macsec1: entered promiscuous mode [ 2443.163330][ T9171] bridge35: entered promiscuous mode [ 2443.179909][ T9171] bond0: entered promiscuous mode [ 2443.200414][ T9171] bond_slave_0: entered promiscuous mode [ 2443.219586][ T9171] bond_slave_1: entered promiscuous mode [ 2443.238085][ T9171] macsec1: entered allmulticast mode [ 2443.261362][ T9171] bridge35: entered allmulticast mode [ 2443.269813][ T9171] bridge35: left allmulticast mode [ 2443.276568][ T9171] bridge35: left promiscuous mode [ 2443.281756][ T9171] bond0: left promiscuous mode [ 2443.287622][ T9171] bond_slave_0: left promiscuous mode [ 2443.294283][ T9171] bond_slave_1: left promiscuous mode [ 2443.328711][ T9174] bond0: left allmulticast mode [ 2443.340326][ T9174] bond_slave_0: left allmulticast mode 17:47:05 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$inet(r4, &(0x7f00000003c0)='~', 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000104000002cf08000000005dee00", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104fd0008000fa1bb7400000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xdc03, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 2443.371852][ T9174] bond_slave_1: left allmulticast mode [ 2443.394702][ T9174] bond19: left allmulticast mode [ 2443.405968][ T9174] bond20: left allmulticast mode [ 2443.417593][ T9174] bond21: left allmulticast mode [ 2443.422906][ T9174] bond22: left allmulticast mode [ 2443.432265][ T9174] bridge28: port 1(bond0) entered disabled state [ 2443.446478][ T9174] bridge29: port 1(bond0) entered blocking state [ 2443.473112][T22697] appletouch 6-1:1.0: Failed to read mode from device. [ 2443.474826][ T9174] bridge29: port 1(bond0) entered disabled state [ 2443.480309][T22697] appletouch: probe of 6-1:1.0 failed with error -5 [ 2443.486820][ T9174] bond0: entered allmulticast mode [ 2443.498900][ T9174] bond_slave_0: entered allmulticast mode [ 2443.504959][ T9174] bond_slave_1: entered allmulticast mode [ 2443.510957][ T9174] bond19: entered allmulticast mode [ 2443.516612][ T9174] bond20: entered allmulticast mode [ 2443.524269][ T9174] bond21: entered allmulticast mode [ 2443.529732][ T9174] bond22: entered allmulticast mode [ 2443.609154][T22697] usb 6-1: USB disconnect, device number 125 [ 2443.623320][ T9175] macsec2: entered promiscuous mode [ 2443.653198][ T9175] bridge29: entered promiscuous mode [ 2443.692462][ T9175] macsec2: entered allmulticast mode [ 2443.715388][ T9175] bridge29: entered allmulticast mode [ 2443.760358][ T9175] bridge29: left allmulticast mode [ 2443.780132][ T9175] bridge29: left promiscuous mode [ 2443.831307][ T9178] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2443.847103][ T9178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2443.864863][ T9179] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2443.886241][ T9179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 17:47:05 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x3c1, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x22b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x81}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x1, 0x1f}, 0x1c, &(0x7f0000000280)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @string={0x4, 0x3, "04cd"}}, 0x0, 0x0}, 0x0) 17:47:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x3a50d000) getpeername(r1, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000080)=0x80) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) munmap(&(0x7f00001d9000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000280)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0xffff, 0x4) socket(0x15, 0x80000, 0x3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001740)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="58e461cc334e75992c194ea23972c733dc7ff4877f2fec832104edff694180d821b359ae105afe9bc56d681a9acc1925ff8ef60d832ab62a8a1ddcc76169322cfa72d4b3f586279b1dc96f83c928db0f0c88e30b731abb7d98f7ac1808321670dec1a0c49238e25c08587e68a6b37f5dc70230d34c2fbc98251af390e092a802e80cf9", 0x83, 0x24058144, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) [ 2443.947226][ T9190] bond0: left allmulticast mode [ 2443.952160][ T9190] bond_slave_0: left allmulticast mode 17:47:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x3a50d000) getpeername(r1, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000080)=0x80) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) munmap(&(0x7f00001d9000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000280)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0xffff, 0x4) socket(0x15, 0x80000, 0x3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001740)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="58e461cc334e75992c194ea23972c733dc7ff4877f2fec832104edff694180d821b359ae105afe9bc56d681a9acc1925ff8ef60d832ab62a8a1ddcc76169322cfa72d4b3f586279b1dc96f83c928db0f0c88e30b731abb7d98f7ac1808321670dec1a0c49238e25c08587e68a6b37f5dc70230d34c2fbc98251af390e092a802e80cf9", 0x83, 0x24058144, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 17:47:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x3a50d000) getpeername(r1, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000080)=0x80) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) munmap(&(0x7f00001d9000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000280)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0xffff, 0x4) socket(0x15, 0x80000, 0x3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001740)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="58e461cc334e75992c194ea23972c733dc7ff4877f2fec832104edff694180d821b359ae105afe9bc56d681a9acc1925ff8ef60d832ab62a8a1ddcc76169322cfa72d4b3f586279b1dc96f83c928db0f0c88e30b731abb7d98f7ac1808321670dec1a0c49238e25c08587e68a6b37f5dc70230d34c2fbc98251af390e092a802e80cf9", 0x83, 0x24058144, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) [ 2444.003917][ T9190] bond_slave_1: left allmulticast mode [ 2444.009638][ T9190] bridge35: port 1(bond0) entered disabled state [ 2444.075839][ T9190] bridge36: port 1(bond0) entered blocking state [ 2444.082338][ T9190] bridge36: port 1(bond0) entered disabled state [ 2444.101931][ T9190] bond0: entered allmulticast mode [ 2444.117175][ T9190] bond_slave_0: entered allmulticast mode [ 2444.123607][ T9190] bond_slave_1: entered allmulticast mode [ 2444.151272][ T9191] macsec1: entered promiscuous mode [ 2444.156964][ T9191] bridge36: entered promiscuous mode [ 2444.162313][ T9191] bond0: entered promiscuous mode [ 2444.169407][ T9191] bond_slave_0: entered promiscuous mode [ 2444.184772][ T9191] bond_slave_1: entered promiscuous mode [ 2444.223493][ T9191] macsec1: entered allmulticast mode [ 2444.229416][ T9191] bridge36: entered allmulticast mode [ 2444.238822][ T9191] bridge36: left allmulticast mode [ 2444.244497][ T9191] bridge36: left promiscuous mode [ 2444.249917][ T9191] bond0: left promiscuous mode [ 2444.255523][ T9191] bond_slave_0: left promiscuous mode [ 2444.261398][ T9191] bond_slave_1: left promiscuous mode [ 2444.330738][ T9194] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2444.379282][ T9194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2444.394814][ T314] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2444.491584][ T9198] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2444.513592][ T9198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 17:47:06 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 17:47:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x3a50d000) getpeername(r1, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000080)=0x80) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) munmap(&(0x7f00001d9000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000280)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0xffff, 0x4) socket(0x15, 0x80000, 0x3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001740)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="58e461cc334e75992c194ea23972c733dc7ff4877f2fec832104edff694180d821b359ae105afe9bc56d681a9acc1925ff8ef60d832ab62a8a1ddcc76169322cfa72d4b3f586279b1dc96f83c928db0f0c88e30b731abb7d98f7ac1808321670dec1a0c49238e25c08587e68a6b37f5dc70230d34c2fbc98251af390e092a802e80cf9", 0x83, 0x24058144, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) [ 2444.580888][ T9200] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2444.611090][ T9200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 17:47:06 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) accept4$phonet_pipe(r0, 0x0, 0x0, 0x40800) [ 2444.643268][ T314] usb 6-1: Using ep0 maxpacket: 8 17:47:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x31e, 0x0, &(0x7f0000345000/0x4000)=nil, &(0x7f00003aa000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000480)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4c6) syz_io_uring_setup(0x4aa8, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000d6000/0x3000)=nil, 0x0, &(0x7f00000003c0)=0x0) syz_open_dev$vcsu(&(0x7f00000004c0), 0x6, 0x262000) syz_io_uring_submit(0x0, r3, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x108040, 0x0) r5 = syz_io_uring_setup(0x4db0, &(0x7f00000005c0)={0x0, 0x11f7, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000398000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{&(0x7f0000000500)=@generic, 0x80, &(0x7f0000000980)=[{&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f0000000800)=""/141, 0x8d}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000180)=""/1, 0x1}], 0x5}, 0x14}], 0x1, 0x0, &(0x7f0000000380)={0x77359400}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = mmap$IORING_OFF_SQES(&(0x7f00000d8000/0x1000)=nil, 0x1000, 0x4, 0x10, r5, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000280), 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) [ 2444.688591][ T9208] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. 17:47:06 executing program 1: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000300)=0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_deladdrlabel={0x11, 0x43, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x7, 0x2}, 0x10}}, 0x0) r7 = creat(0x0, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000003400)) sendmsg$nl_route(r7, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 2444.783836][ T9208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2444.843216][ T314] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2444.866301][ T314] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 17:47:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x3a50d000) getpeername(r1, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000080)=0x80) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) munmap(&(0x7f00001d9000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000280)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0xffff, 0x4) socket(0x15, 0x80000, 0x3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001740)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="58e461cc334e75992c194ea23972c733dc7ff4877f2fec832104edff694180d821b359ae105afe9bc56d681a9acc1925ff8ef60d832ab62a8a1ddcc76169322cfa72d4b3f586279b1dc96f83c928db0f0c88e30b731abb7d98f7ac1808321670dec1a0c49238e25c08587e68a6b37f5dc70230d34c2fbc98251af390e092a802e80cf9", 0x83, 0x24058144, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 17:47:06 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_freeze_timeout', 0x1, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)='+', 0x1}]) [ 2445.083150][ T314] usb 6-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40 [ 2445.110115][ T314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2445.151596][ T9223] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2445.178055][ T314] usb 6-1: Product: syz [ 2445.202951][ T314] usb 6-1: Manufacturer: syz [ 2445.216673][ T314] usb 6-1: SerialNumber: syz [ 2445.222997][ T9223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 17:47:07 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_freeze_timeout', 0x1, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)='+', 0x1}]) [ 2445.723175][ T314] appletouch 6-1:1.0: Failed to read mode from device. [ 2445.737625][ T314] appletouch: probe of 6-1:1.0 failed with error -5 [ 2445.847040][ T314] usb 6-1: USB disconnect, device number 126 17:47:08 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x3c1, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x22b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x81}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x1, 0x1f}, 0x1c, &(0x7f0000000280)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @string={0x4, 0x3, "04cd"}}, 0x0, 0x0}, 0x0) 17:47:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40) fstat(r0, &(0x7f0000000140)) 17:47:08 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_freeze_timeout', 0x1, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)='+', 0x1}]) 17:47:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001200)='tunl0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) 17:47:08 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 17:47:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40) fstat(r0, &(0x7f0000000140)) 17:47:08 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_freeze_timeout', 0x1, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)='+', 0x1}]) 17:47:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001200)='tunl0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) [ 2446.763257][ T3462] usb 6-1: new high-speed USB device number 127 using dummy_hcd 17:47:08 executing program 1: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000300)=0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_deladdrlabel={0x11, 0x43, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x7, 0x2}, 0x10}}, 0x0) r7 = creat(0x0, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000003400)) sendmsg$nl_route(r7, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 17:47:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001200)='tunl0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) 17:47:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40) fstat(r0, &(0x7f0000000140)) 17:47:08 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) [ 2447.032943][ T3462] usb 6-1: Using ep0 maxpacket: 8 [ 2447.233195][ T3462] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2447.253508][ T3462] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 2447.493247][ T3462] usb 6-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40 [ 2447.508326][ T3462] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2447.518309][ T3462] usb 6-1: Product: syz [ 2447.522798][ T3462] usb 6-1: Manufacturer: syz [ 2447.527516][ T3462] usb 6-1: SerialNumber: syz [ 2448.033272][ T3462] appletouch 6-1:1.0: Failed to read mode from device. [ 2448.040519][ T3462] appletouch: probe of 6-1:1.0 failed with error -5 [ 2448.136451][ T3462] usb 6-1: USB disconnect, device number 127 17:47:10 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x3c1, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x22b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x81}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x1, 0x1f}, 0x1c, &(0x7f0000000280)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @string={0x4, 0x3, "04cd"}}, 0x0, 0x0}, 0x0) 17:47:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40) fstat(r0, &(0x7f0000000140)) 17:47:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001200)='tunl0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) 17:47:10 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 17:47:10 executing program 2: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000300)=0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_deladdrlabel={0x11, 0x43, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x7, 0x2}, 0x10}}, 0x0) r7 = creat(0x0, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000003400)) sendmsg$nl_route(r7, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 17:47:10 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 17:47:10 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) [ 2449.013738][ T3462] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2449.284016][ T3462] usb 6-1: Using ep0 maxpacket: 8 [ 2449.503333][ T3462] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2449.529009][ T3462] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 2449.753277][ T3462] usb 6-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40 [ 2449.762399][ T3462] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2449.792871][ T3462] usb 6-1: Product: syz [ 2449.797110][ T3462] usb 6-1: Manufacturer: syz [ 2449.801754][ T3462] usb 6-1: SerialNumber: syz 17:47:11 executing program 1: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000300)=0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_deladdrlabel={0x11, 0x43, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x7, 0x2}, 0x10}}, 0x0) r7 = creat(0x0, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000003400)) sendmsg$nl_route(r7, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 2450.343566][ T3462] appletouch 6-1:1.0: Failed to read mode from device. [ 2450.350886][ T3462] appletouch: probe of 6-1:1.0 failed with error -5 [ 2450.446320][ T3462] usb 6-1: USB disconnect, device number 2 17:47:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001200)='tunl0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) 17:47:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001200)='tunl0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) 17:47:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001200)='tunl0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) 17:47:13 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 17:47:13 executing program 5: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0) 17:47:13 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 17:47:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280), 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0xfffffc00, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 17:47:13 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 17:47:13 executing program 2: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000300)=0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_deladdrlabel={0x11, 0x43, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x7, 0x2}, 0x10}}, 0x0) r7 = creat(0x0, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000003400)) sendmsg$nl_route(r7, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 17:47:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280), 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0xfffffc00, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 17:47:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280), 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0xfffffc00, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 17:47:15 executing program 1: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000300)=0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_deladdrlabel={0x11, 0x43, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x7, 0x2}, 0x10}}, 0x0) r7 = creat(0x0, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000003400)) sendmsg$nl_route(r7, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 17:47:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280), 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0xfffffc00, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 17:47:15 executing program 5: name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000040)=ANY=[], 0x0, 0x400) 17:47:15 executing program 5: name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000040)=ANY=[], 0x0, 0x400) 17:47:15 executing program 5: name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000040)=ANY=[], 0x0, 0x400) 17:47:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'wlan1\x00', &(0x7f0000001600)=@ethtool_flash={0x1d, 0x0, './file0\x00'}}) 17:47:16 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 17:47:16 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)="3616deca12cc4f8562ad583e0a", 0xd}], 0x1}, 0x0) 17:47:16 executing program 5: name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000040)=ANY=[], 0x0, 0x400) 17:47:17 executing program 2: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000300)=0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_deladdrlabel={0x11, 0x43, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x7, 0x2}, 0x10}}, 0x0) r7 = creat(0x0, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000003400)) sendmsg$nl_route(r7, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 17:47:17 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)="3616deca12cc4f8562ad583e0a", 0xd}], 0x1}, 0x0) 17:47:17 executing program 4: fsopen(&(0x7f0000000080)='bpf\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = gettid() pipe(&(0x7f0000000580)) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x10ae) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 17:47:17 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r0, 0x0, &(0x7f00000003c0)) 17:47:17 executing program 1: r0 = fsopen(&(0x7f0000000180)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x85) fstatfs(r1, &(0x7f0000000040)=""/74) 17:47:17 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)="3616deca12cc4f8562ad583e0a", 0xd}], 0x1}, 0x0) 17:47:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@policy_type={0xa, 0x10, {0x2}}]}, 0xc4}}, 0x0) 17:47:17 executing program 1: r0 = fsopen(&(0x7f0000000180)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x85) fstatfs(r1, &(0x7f0000000040)=""/74) 17:47:17 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)="3616deca12cc4f8562ad583e0a", 0xd}], 0x1}, 0x0) [ 2455.613879][ T9414] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2455.636354][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:47:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@policy_type={0xa, 0x10, {0x2}}]}, 0xc4}}, 0x0) 17:47:18 executing program 1: r0 = fsopen(&(0x7f0000000180)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x85) fstatfs(r1, &(0x7f0000000040)=""/74) 17:47:18 executing program 0: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x12000584) [ 2456.984015][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:47:20 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 17:47:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0x17}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)) 17:47:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@policy_type={0xa, 0x10, {0x2}}]}, 0xc4}}, 0x0) 17:47:20 executing program 1: r0 = fsopen(&(0x7f0000000180)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x85) fstatfs(r1, &(0x7f0000000040)=""/74) 17:47:20 executing program 2: fsopen(&(0x7f0000000080)='bpf\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = gettid() pipe(&(0x7f0000000580)) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x10ae) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 17:47:20 executing program 4: fsopen(&(0x7f0000000080)='bpf\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = gettid() pipe(&(0x7f0000000580)) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x10ae) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 17:47:20 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) [ 2458.514086][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:47:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@policy_type={0xa, 0x10, {0x2}}]}, 0xc4}}, 0x0) 17:47:20 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) openat(r0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat(r1, &(0x7f0000000080)='./cgroup\x00', 0x6b040, 0x0) 17:47:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) [ 2458.695320][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2458.723821][ T9459] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:47:20 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) keyctl$link(0x8, 0x0, r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x1}, 0x14}}, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$inet6(0xa, 0x3, 0xff) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000180), 0x20, 0x20080) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffd8) 17:47:20 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) [ 2458.881962][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 2458.881985][ T27] audit: type=1326 audit(1688406440.579:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fea579 code=0x0 [ 2459.324927][ T9463] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 17:47:23 executing program 4: fsopen(&(0x7f0000000080)='bpf\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = gettid() pipe(&(0x7f0000000580)) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x10ae) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 17:47:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 17:47:23 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 17:47:23 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) openat(r0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat(r1, &(0x7f0000000080)='./cgroup\x00', 0x6b040, 0x0) 17:47:23 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) keyctl$link(0x8, 0x0, r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x1}, 0x14}}, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$inet6(0xa, 0x3, 0xff) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000180), 0x20, 0x20080) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffd8) 17:47:24 executing program 2: fsopen(&(0x7f0000000080)='bpf\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = gettid() pipe(&(0x7f0000000580)) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x10ae) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 2462.270849][ T27] audit: type=1326 audit(1688406443.969:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fea579 code=0x0 17:47:24 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) keyctl$link(0x8, 0x0, r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x1}, 0x14}}, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$inet6(0xa, 0x3, 0xff) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000180), 0x20, 0x20080) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffd8) 17:47:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 17:47:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) [ 2462.505471][ T9495] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:47:24 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) [ 2462.841129][ T27] audit: type=1326 audit(1688406444.539:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9501 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 17:47:24 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) [ 2462.921861][ T27] audit: type=1326 audit(1688406444.569:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9501 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 2462.988079][ T9498] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 17:47:24 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) openat(r0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat(r1, &(0x7f0000000080)='./cgroup\x00', 0x6b040, 0x0) [ 2463.126444][ T27] audit: type=1326 audit(1688406444.569:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9501 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=151 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 2463.338615][ T27] audit: type=1326 audit(1688406444.569:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9501 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 2463.493007][ T27] audit: type=1326 audit(1688406444.579:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9501 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 2463.676757][ T27] audit: type=1326 audit(1688406444.809:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 2463.899897][ T27] audit: type=1326 audit(1688406444.819:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=151 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 2464.072534][ T27] audit: type=1326 audit(1688406444.819:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 2464.134500][ T27] audit: type=1326 audit(1688406444.819:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 2464.203540][ T27] audit: type=1326 audit(1688406444.959:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fea579 code=0x0 17:47:26 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) keyctl$link(0x8, 0x0, r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x1}, 0x14}}, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$inet6(0xa, 0x3, 0xff) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000180), 0x20, 0x20080) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffd8) 17:47:26 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) 17:47:26 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) openat(r0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat(r1, &(0x7f0000000080)='./cgroup\x00', 0x6b040, 0x0) 17:47:26 executing program 4: fsopen(&(0x7f0000000080)='bpf\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = gettid() pipe(&(0x7f0000000580)) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x10ae) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 17:47:26 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) keyctl$link(0x8, 0x0, r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x1}, 0x14}}, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$inet6(0xa, 0x3, 0xff) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000180), 0x20, 0x20080) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffd8) [ 2464.979348][ T27] audit: type=1326 audit(1688406446.679:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fea579 code=0x0 [ 2465.120741][ T27] audit: type=1326 audit(1688406446.679:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9513 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 2465.225121][ T27] audit: type=1326 audit(1688406446.679:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9513 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 2465.265755][ T27] audit: type=1326 audit(1688406446.709:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9513 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=151 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 2465.289471][ T27] audit: type=1326 audit(1688406446.709:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9513 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 17:47:27 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) 17:47:27 executing program 2: fsopen(&(0x7f0000000080)='bpf\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = gettid() pipe(&(0x7f0000000580)) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x10ae) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 2465.313426][ T27] audit: type=1326 audit(1688406446.709:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9513 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 2465.347116][ T9523] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:47:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x31, 0x0, "991f625b05c1d18549f81c549d23495a32d5464c5d934cd7f606c66403356293521987875062c3d5af8e40fd240043122bd93839078a8b4a7322f13b10c05fedebaf800fc1f91a2653baea9d69d680d4"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:47:27 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00), 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x9, 0x7ff, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0xaf47], 0x0, 0x104cc0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:47:27 executing program 1: r0 = openat$sysctl(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x5000000) 17:47:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) [ 2466.079165][ T9531] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2466.207044][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:47:28 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000583000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0x5, 0x6, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) 17:47:28 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) keyctl$link(0x8, 0x0, r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x1}, 0x14}}, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$inet6(0xa, 0x3, 0xff) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000180), 0x20, 0x20080) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffd8) 17:47:28 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) keyctl$link(0x8, 0x0, r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x1}, 0x14}}, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$inet6(0xa, 0x3, 0xff) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000fee000/0x11000)=nil, 0x11000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x843, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000180), 0x20, 0x20080) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffd8) 17:47:28 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000583000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0x5, 0x6, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) 17:47:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) 17:47:30 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000583000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0x5, 0x6, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) 17:47:30 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000583000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0x5, 0x6, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) [ 2468.707276][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:47:30 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/88, 0x58}], 0x1, 0x0, 0x0) 17:47:30 executing program 4: r0 = openat$nullb(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 17:47:30 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000583000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0x5, 0x6, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) 17:47:30 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000583000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0x5, 0x6, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) 17:47:30 executing program 2: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{}, {}, 0x0, 0xffdfffff}) 17:47:30 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/88, 0x58}], 0x1, 0x0, 0x0) 17:47:30 executing program 4: r0 = openat$nullb(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 17:47:30 executing program 3: unshare(0x40000000) prctl$PR_GET_PDEATHSIG(0xf, 0x0) exit(0x10001) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x7f) 17:47:30 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000583000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0x5, 0x6, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) 17:47:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) 17:47:31 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff8000/0x8000)=nil, 0x4) 17:47:31 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/88, 0x58}], 0x1, 0x0, 0x0) 17:47:31 executing program 4: r0 = openat$nullb(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 17:47:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setparam(r1, &(0x7f0000000000)=0x4) sched_setscheduler(r0, 0x2, &(0x7f0000001740)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000003b00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/146, 0x92}], 0x3}, 0x6}, {{&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000001880)=[{&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f0000001780)=""/150, 0x96}, {&(0x7f0000001700)=""/19, 0x13}, {&(0x7f0000001840)}], 0x5, &(0x7f0000001900)=""/119, 0x77}}, {{&(0x7f0000001980)=@hci, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001a00)=""/170, 0xaa}, {&(0x7f0000001ac0)=""/159, 0x9f}, {&(0x7f0000001b80)=""/194, 0xc2}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/126, 0x7e}, {&(0x7f0000002d00)=""/98, 0x62}, {&(0x7f0000002d80)=""/169, 0xa9}, {&(0x7f0000002e40)=""/86, 0x56}, {&(0x7f0000002ec0)=""/24, 0x18}], 0x9, &(0x7f0000002fc0)=""/67, 0x43}, 0x81}, {{&(0x7f0000003040)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000003100)=[{&(0x7f00000030c0)=""/23, 0x17}], 0x1, &(0x7f0000003140)=""/226, 0xe2}, 0x7}, {{&(0x7f0000003240)=@caif=@rfm, 0x80, &(0x7f0000003480)=[{&(0x7f00000032c0)=""/240, 0xf0}, {&(0x7f00000033c0)=""/27, 0x1b}], 0x2, &(0x7f00000034c0)=""/190, 0xbe}, 0x4}, {{&(0x7f0000003580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003600)=""/100, 0x64}], 0x1}, 0x8}, {{&(0x7f00000036c0)=@ax25={{0x3, @default}, [@default, @default, @rose, @default, @remote, @bcast, @null]}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003740)=""/237, 0xed}], 0x1, &(0x7f0000003880)=""/179, 0xb3}, 0x7}], 0x7, 0x40010000, &(0x7f0000003b40)={r5, r6+60000000}) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) write$binfmt_script(r3, &(0x7f0000003cc0)={'#! ', './file1', [{0x20, '.'}, {}, {0x20, ':%:+@\x14,'}, {0x20, 'ns\x00\x00\x00\xa9\xc0\x93\xc4\x1a\"\xa0\t'}, {0x20, '\xd7\b\xad\xa4\xb5\x86\xca\xe1\xc5\xf4\xe1\xb9mb\xcf\x1f,MnK\xa5B\xa9\x89\f\x8e\xfd}\x18q\\\xa3\xad\xa3$t\x95\x95\xf04L{\xcf\x89\x04\xe6#\xcc\xdc:u\x88\x9a\x9d}\xccvP\x96\x8b5b\xf5\x1f\x93\x994BpN\nER\v\xe1{I\xf6\x10\xceX\x80\bLcE\nTc\a\x1a'}], 0xa, "b2682ef13cc80eec06266953f364c2ccfb6da51cd303eb615cd76a7bd910fb9e94d2693c274ee7c747c298b56ab30f7823507dcb87301173bbcb098580"}, 0xbd) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000002080), 0x300, 0x38000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) getpid() socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) connect$unix(r8, &(0x7f00000002c0)=@file={0x1, './file1\x00'}, 0x6e) 17:47:31 executing program 4: r0 = openat$nullb(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 17:47:31 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff8000/0x8000)=nil, 0x4) 17:47:31 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/88, 0x58}], 0x1, 0x0, 0x0) [ 2469.457088][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:47:31 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) 17:47:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) [ 2469.694243][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:47:31 executing program 3: mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x8}}, 0x30) syz_fuse_handle_req(r0, &(0x7f00000050c0)="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", 0x2000, &(0x7f0000002d00)={&(0x7f0000000200)={0x50, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:47:31 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff8000/0x8000)=nil, 0x4) 17:47:31 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) 17:47:31 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6}]}}}]}, 0x44}}, 0x0) 17:47:31 executing program 1: r0 = socket(0x0, 0x803, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', r1, 0x29, 0x0, 0x0, 0xfffffff8, 0x0, @local, @private2, 0x7810, 0x0, 0x0, 0xe5d}}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) socket$inet6(0xa, 0x0, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x40844) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000200)={0x28, r5, 0xb21, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}]}]}, 0x28}}, 0x0) 17:47:31 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff8000/0x8000)=nil, 0x4) 17:47:32 executing program 3: mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x8}}, 0x30) syz_fuse_handle_req(r0, &(0x7f00000050c0)="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", 0x2000, &(0x7f0000002d00)={&(0x7f0000000200)={0x50, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:47:32 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6}]}}}]}, 0x44}}, 0x0) 17:47:32 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) 17:47:32 executing program 2: syz_usb_connect(0x0, 0x13b, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000048cf5008b8222760ed9e010203010902290101000000000904309600020a00000a24060001f1972bbf9205240003000d240f0104000000090004000706"], 0x0) 17:47:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setparam(r1, &(0x7f0000000000)=0x4) sched_setscheduler(r0, 0x2, &(0x7f0000001740)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000003b00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/146, 0x92}], 0x3}, 0x6}, {{&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000001880)=[{&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f0000001780)=""/150, 0x96}, {&(0x7f0000001700)=""/19, 0x13}, {&(0x7f0000001840)}], 0x5, &(0x7f0000001900)=""/119, 0x77}}, {{&(0x7f0000001980)=@hci, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001a00)=""/170, 0xaa}, {&(0x7f0000001ac0)=""/159, 0x9f}, {&(0x7f0000001b80)=""/194, 0xc2}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/126, 0x7e}, {&(0x7f0000002d00)=""/98, 0x62}, {&(0x7f0000002d80)=""/169, 0xa9}, {&(0x7f0000002e40)=""/86, 0x56}, {&(0x7f0000002ec0)=""/24, 0x18}], 0x9, &(0x7f0000002fc0)=""/67, 0x43}, 0x81}, {{&(0x7f0000003040)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000003100)=[{&(0x7f00000030c0)=""/23, 0x17}], 0x1, &(0x7f0000003140)=""/226, 0xe2}, 0x7}, {{&(0x7f0000003240)=@caif=@rfm, 0x80, &(0x7f0000003480)=[{&(0x7f00000032c0)=""/240, 0xf0}, {&(0x7f00000033c0)=""/27, 0x1b}], 0x2, &(0x7f00000034c0)=""/190, 0xbe}, 0x4}, {{&(0x7f0000003580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003600)=""/100, 0x64}], 0x1}, 0x8}, {{&(0x7f00000036c0)=@ax25={{0x3, @default}, [@default, @default, @rose, @default, @remote, @bcast, @null]}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003740)=""/237, 0xed}], 0x1, &(0x7f0000003880)=""/179, 0xb3}, 0x7}], 0x7, 0x40010000, &(0x7f0000003b40)={r5, r6+60000000}) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) write$binfmt_script(r3, &(0x7f0000003cc0)={'#! ', './file1', [{0x20, '.'}, {}, {0x20, ':%:+@\x14,'}, {0x20, 'ns\x00\x00\x00\xa9\xc0\x93\xc4\x1a\"\xa0\t'}, {0x20, '\xd7\b\xad\xa4\xb5\x86\xca\xe1\xc5\xf4\xe1\xb9mb\xcf\x1f,MnK\xa5B\xa9\x89\f\x8e\xfd}\x18q\\\xa3\xad\xa3$t\x95\x95\xf04L{\xcf\x89\x04\xe6#\xcc\xdc:u\x88\x9a\x9d}\xccvP\x96\x8b5b\xf5\x1f\x93\x994BpN\nER\v\xe1{I\xf6\x10\xceX\x80\bLcE\nTc\a\x1a'}], 0xa, "b2682ef13cc80eec06266953f364c2ccfb6da51cd303eb615cd76a7bd910fb9e94d2693c274ee7c747c298b56ab30f7823507dcb87301173bbcb098580"}, 0xbd) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000002080), 0x300, 0x38000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) getpid() socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) connect$unix(r8, &(0x7f00000002c0)=@file={0x1, './file1\x00'}, 0x6e) 17:47:32 executing program 1: r0 = socket(0x0, 0x803, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', r1, 0x29, 0x0, 0x0, 0xfffffff8, 0x0, @local, @private2, 0x7810, 0x0, 0x0, 0xe5d}}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) socket$inet6(0xa, 0x0, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x40844) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000200)={0x28, r5, 0xb21, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}]}]}, 0x28}}, 0x0) 17:47:32 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) 17:47:33 executing program 3: mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x8}}, 0x30) syz_fuse_handle_req(r0, &(0x7f00000050c0)="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", 0x2000, &(0x7f0000002d00)={&(0x7f0000000200)={0x50, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:47:33 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6}]}}}]}, 0x44}}, 0x0) [ 2471.382801][ T902] usb 3-1: new high-speed USB device number 99 using dummy_hcd 17:47:33 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0) pwritev(r0, &(0x7f0000001500)=[{&(0x7f0000000100)='T', 0x1}], 0x1, 0x2000000, 0x0) 17:47:33 executing program 3: mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x8}}, 0x30) syz_fuse_handle_req(r0, &(0x7f00000050c0)="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", 0x2000, &(0x7f0000002d00)={&(0x7f0000000200)={0x50, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:47:33 executing program 1: r0 = socket(0x0, 0x803, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', r1, 0x29, 0x0, 0x0, 0xfffffff8, 0x0, @local, @private2, 0x7810, 0x0, 0x0, 0xe5d}}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) socket$inet6(0xa, 0x0, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x40844) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000200)={0x28, r5, 0xb21, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}]}]}, 0x28}}, 0x0) 17:47:33 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6}]}}}]}, 0x44}}, 0x0) [ 2471.643450][ T902] usb 3-1: Using ep0 maxpacket: 8 17:47:33 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0) pwritev(r0, &(0x7f0000001500)=[{&(0x7f0000000100)='T', 0x1}], 0x1, 0x2000000, 0x0) [ 2471.773434][ T902] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 2471.781785][ T902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 17:47:33 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r3 = getpid() accept4$alg(r2, 0x0, 0x0, 0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440), 0x0, 0x2, 0x1}, 0x20) r4 = dup(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r9 = syz_io_uring_setup(0x387, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x2, 0xffffffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000000), &(0x7f0000000180)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x18, 0x20000a00, r10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r10}}, 0x8) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r11 = socket$inet_tcp(0x2, 0x1, 0x0) pidfd_open(r3, 0x0) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @vsock={0x28, 0x0, 0xffffffff, @local}, @phonet={0x23, 0x0, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x800}) [ 2471.831523][ T902] usb 3-1: config 0 has no interface number 0 [ 2471.860314][ T902] usb 3-1: config 0 interface 48 has no altsetting 0 [ 2472.042996][ T902] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=9e.ed [ 2472.053562][ T9685] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2472.077687][ T902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2472.135268][ T902] usb 3-1: Product: syz [ 2472.170255][ T902] usb 3-1: Manufacturer: syz [ 2472.193769][ T902] usb 3-1: SerialNumber: syz [ 2472.200679][ T9685] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2472.213025][ T9685] 0ªX: renamed from ‘|‚ªu [ 2472.252515][ T902] usb 3-1: config 0 descriptor?? [ 2472.271842][ T9685] 0ªX: left promiscuous mode [ 2472.304167][ T902] cdc_ether 3-1:0.48: skipping garbage [ 2472.309717][ T902] usb 3-1: bad CDC descriptors [ 2472.327730][ T902] usb 3-1: unsupported MDLM descriptors [ 2472.335101][ T9685] 0ªX: entered allmulticast mode [ 2472.386212][ T9685] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. [ 2472.513545][ T902] usb 3-1: USB disconnect, device number 99 [ 2472.654630][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.661099][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 17:47:34 executing program 2: syz_usb_connect(0x0, 0x13b, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000048cf5008b8222760ed9e010203010902290101000000000904309600020a00000a24060001f1972bbf9205240003000d240f0104000000090004000706"], 0x0) [ 2473.382851][ T902] usb 3-1: new high-speed USB device number 100 using dummy_hcd 17:47:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setparam(r1, &(0x7f0000000000)=0x4) sched_setscheduler(r0, 0x2, &(0x7f0000001740)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000003b00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/146, 0x92}], 0x3}, 0x6}, {{&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000001880)=[{&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f0000001780)=""/150, 0x96}, {&(0x7f0000001700)=""/19, 0x13}, {&(0x7f0000001840)}], 0x5, &(0x7f0000001900)=""/119, 0x77}}, {{&(0x7f0000001980)=@hci, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001a00)=""/170, 0xaa}, {&(0x7f0000001ac0)=""/159, 0x9f}, {&(0x7f0000001b80)=""/194, 0xc2}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/126, 0x7e}, {&(0x7f0000002d00)=""/98, 0x62}, {&(0x7f0000002d80)=""/169, 0xa9}, {&(0x7f0000002e40)=""/86, 0x56}, {&(0x7f0000002ec0)=""/24, 0x18}], 0x9, &(0x7f0000002fc0)=""/67, 0x43}, 0x81}, {{&(0x7f0000003040)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000003100)=[{&(0x7f00000030c0)=""/23, 0x17}], 0x1, &(0x7f0000003140)=""/226, 0xe2}, 0x7}, {{&(0x7f0000003240)=@caif=@rfm, 0x80, &(0x7f0000003480)=[{&(0x7f00000032c0)=""/240, 0xf0}, {&(0x7f00000033c0)=""/27, 0x1b}], 0x2, &(0x7f00000034c0)=""/190, 0xbe}, 0x4}, {{&(0x7f0000003580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003600)=""/100, 0x64}], 0x1}, 0x8}, {{&(0x7f00000036c0)=@ax25={{0x3, @default}, [@default, @default, @rose, @default, @remote, @bcast, @null]}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003740)=""/237, 0xed}], 0x1, &(0x7f0000003880)=""/179, 0xb3}, 0x7}], 0x7, 0x40010000, &(0x7f0000003b40)={r5, r6+60000000}) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) write$binfmt_script(r3, &(0x7f0000003cc0)={'#! ', './file1', [{0x20, '.'}, {}, {0x20, ':%:+@\x14,'}, {0x20, 'ns\x00\x00\x00\xa9\xc0\x93\xc4\x1a\"\xa0\t'}, {0x20, '\xd7\b\xad\xa4\xb5\x86\xca\xe1\xc5\xf4\xe1\xb9mb\xcf\x1f,MnK\xa5B\xa9\x89\f\x8e\xfd}\x18q\\\xa3\xad\xa3$t\x95\x95\xf04L{\xcf\x89\x04\xe6#\xcc\xdc:u\x88\x9a\x9d}\xccvP\x96\x8b5b\xf5\x1f\x93\x994BpN\nER\v\xe1{I\xf6\x10\xceX\x80\bLcE\nTc\a\x1a'}], 0xa, "b2682ef13cc80eec06266953f364c2ccfb6da51cd303eb615cd76a7bd910fb9e94d2693c274ee7c747c298b56ab30f7823507dcb87301173bbcb098580"}, 0xbd) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000002080), 0x300, 0x38000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) getpid() socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) connect$unix(r8, &(0x7f00000002c0)=@file={0x1, './file1\x00'}, 0x6e) 17:47:35 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000100)={@mcast2={0xff, 0x3a}, @mcast1, @mcast2, 0x0, 0x1a, 0x1, 0x0, 0x0, 0x0, r2}) 17:47:35 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0) pwritev(r0, &(0x7f0000001500)=[{&(0x7f0000000100)='T', 0x1}], 0x1, 0x2000000, 0x0) 17:47:35 executing program 1: r0 = socket(0x0, 0x803, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', r1, 0x29, 0x0, 0x0, 0xfffffff8, 0x0, @local, @private2, 0x7810, 0x0, 0x0, 0xe5d}}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) socket$inet6(0xa, 0x0, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x40844) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000200)={0x28, r5, 0xb21, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}]}]}, 0x28}}, 0x0) 17:47:35 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r3 = getpid() accept4$alg(r2, 0x0, 0x0, 0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440), 0x0, 0x2, 0x1}, 0x20) r4 = dup(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r9 = syz_io_uring_setup(0x387, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x2, 0xffffffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000000), &(0x7f0000000180)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x18, 0x20000a00, r10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r10}}, 0x8) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r11 = socket$inet_tcp(0x2, 0x1, 0x0) pidfd_open(r3, 0x0) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @vsock={0x28, 0x0, 0xffffffff, @local}, @phonet={0x23, 0x0, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x800}) 17:47:35 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r3 = getpid() accept4$alg(r2, 0x0, 0x0, 0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440), 0x0, 0x2, 0x1}, 0x20) r4 = dup(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r9 = syz_io_uring_setup(0x387, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x2, 0xffffffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000000), &(0x7f0000000180)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x18, 0x20000a00, r10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r10}}, 0x8) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r11 = socket$inet_tcp(0x2, 0x1, 0x0) pidfd_open(r3, 0x0) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @vsock={0x28, 0x0, 0xffffffff, @local}, @phonet={0x23, 0x0, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x800}) [ 2473.622967][ T902] usb 3-1: Using ep0 maxpacket: 8 17:47:35 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0) pwritev(r0, &(0x7f0000001500)=[{&(0x7f0000000100)='T', 0x1}], 0x1, 0x2000000, 0x0) [ 2473.708604][ T9705] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2473.743428][ T902] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 2473.762156][ T902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 17:47:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @multicast}, 0x28, {0x2, 0x0, @empty}}) [ 2473.817910][ T902] usb 3-1: config 0 has no interface number 0 [ 2473.853063][ T902] usb 3-1: config 0 interface 48 has no altsetting 0 [ 2473.920196][ T9705] 0ªX: entered promiscuous mode [ 2473.925437][ T9705] 0ªX: left allmulticast mode [ 2474.033336][ T902] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=9e.ed [ 2474.063779][ T902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2474.109372][ T902] usb 3-1: Product: syz [ 2474.129646][ T902] usb 3-1: Manufacturer: syz [ 2474.152943][ T902] usb 3-1: SerialNumber: syz [ 2474.199041][ T9718] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2474.206690][ T902] usb 3-1: config 0 descriptor?? [ 2474.236508][ T9718] 1ªX¹¦Dö»: entered promiscuous mode [ 2474.243262][ T9718] 1ªX¹¦Dö»: left allmulticast mode 17:47:36 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045406, 0x0) [ 2474.307207][ T902] cdc_ether 3-1:0.48: skipping garbage [ 2474.318269][ T902] usb 3-1: bad CDC descriptors [ 2474.329724][ T9719] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 17:47:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @multicast}, 0x28, {0x2, 0x0, @empty}}) [ 2474.372228][ T9719] 0ªX: renamed from c1ªX¹¦Dö» [ 2474.386226][ T902] usb 3-1: unsupported MDLM descriptors [ 2474.406608][ T9719] 0ªX: left promiscuous mode [ 2474.427306][ T9719] 0ªX: entered allmulticast mode 17:47:36 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045406, 0x0) [ 2474.571726][ T9719] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. [ 2474.596651][ T9705] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2474.654885][ T9705] 1ªX: renamed from 00ªX [ 2474.685322][ T9705] 1ªX: left promiscuous mode [ 2474.690092][ T9705] 1ªX: entered allmulticast mode [ 2474.715032][ T9705] A link change request failed with some changes committed already. Interface 01ªX may have been left with an inconsistent configuration, please check. [ 2474.737165][ T1123] usb 3-1: USB disconnect, device number 100 17:47:36 executing program 2: syz_usb_connect(0x0, 0x13b, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000048cf5008b8222760ed9e010203010902290101000000000904309600020a00000a24060001f1972bbf9205240003000d240f0104000000090004000706"], 0x0) [ 2475.663123][ T314] usb 3-1: new high-speed USB device number 101 using dummy_hcd 17:47:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setparam(r1, &(0x7f0000000000)=0x4) sched_setscheduler(r0, 0x2, &(0x7f0000001740)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000003b00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/146, 0x92}], 0x3}, 0x6}, {{&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000001880)=[{&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f0000001780)=""/150, 0x96}, {&(0x7f0000001700)=""/19, 0x13}, {&(0x7f0000001840)}], 0x5, &(0x7f0000001900)=""/119, 0x77}}, {{&(0x7f0000001980)=@hci, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001a00)=""/170, 0xaa}, {&(0x7f0000001ac0)=""/159, 0x9f}, {&(0x7f0000001b80)=""/194, 0xc2}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/126, 0x7e}, {&(0x7f0000002d00)=""/98, 0x62}, {&(0x7f0000002d80)=""/169, 0xa9}, {&(0x7f0000002e40)=""/86, 0x56}, {&(0x7f0000002ec0)=""/24, 0x18}], 0x9, &(0x7f0000002fc0)=""/67, 0x43}, 0x81}, {{&(0x7f0000003040)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000003100)=[{&(0x7f00000030c0)=""/23, 0x17}], 0x1, &(0x7f0000003140)=""/226, 0xe2}, 0x7}, {{&(0x7f0000003240)=@caif=@rfm, 0x80, &(0x7f0000003480)=[{&(0x7f00000032c0)=""/240, 0xf0}, {&(0x7f00000033c0)=""/27, 0x1b}], 0x2, &(0x7f00000034c0)=""/190, 0xbe}, 0x4}, {{&(0x7f0000003580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003600)=""/100, 0x64}], 0x1}, 0x8}, {{&(0x7f00000036c0)=@ax25={{0x3, @default}, [@default, @default, @rose, @default, @remote, @bcast, @null]}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003740)=""/237, 0xed}], 0x1, &(0x7f0000003880)=""/179, 0xb3}, 0x7}], 0x7, 0x40010000, &(0x7f0000003b40)={r5, r6+60000000}) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) write$binfmt_script(r3, &(0x7f0000003cc0)={'#! ', './file1', [{0x20, '.'}, {}, {0x20, ':%:+@\x14,'}, {0x20, 'ns\x00\x00\x00\xa9\xc0\x93\xc4\x1a\"\xa0\t'}, {0x20, '\xd7\b\xad\xa4\xb5\x86\xca\xe1\xc5\xf4\xe1\xb9mb\xcf\x1f,MnK\xa5B\xa9\x89\f\x8e\xfd}\x18q\\\xa3\xad\xa3$t\x95\x95\xf04L{\xcf\x89\x04\xe6#\xcc\xdc:u\x88\x9a\x9d}\xccvP\x96\x8b5b\xf5\x1f\x93\x994BpN\nER\v\xe1{I\xf6\x10\xceX\x80\bLcE\nTc\a\x1a'}], 0xa, "b2682ef13cc80eec06266953f364c2ccfb6da51cd303eb615cd76a7bd910fb9e94d2693c274ee7c747c298b56ab30f7823507dcb87301173bbcb098580"}, 0xbd) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000002080), 0x300, 0x38000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) getpid() socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) connect$unix(r8, &(0x7f00000002c0)=@file={0x1, './file1\x00'}, 0x6e) 17:47:37 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045406, 0x0) 17:47:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @multicast}, 0x28, {0x2, 0x0, @empty}}) 17:47:37 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r3 = getpid() accept4$alg(r2, 0x0, 0x0, 0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440), 0x0, 0x2, 0x1}, 0x20) r4 = dup(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r9 = syz_io_uring_setup(0x387, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x2, 0xffffffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000000), &(0x7f0000000180)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x18, 0x20000a00, r10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r10}}, 0x8) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r11 = socket$inet_tcp(0x2, 0x1, 0x0) pidfd_open(r3, 0x0) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @vsock={0x28, 0x0, 0xffffffff, @local}, @phonet={0x23, 0x0, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x800}) 17:47:37 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r3 = getpid() accept4$alg(r2, 0x0, 0x0, 0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440), 0x0, 0x2, 0x1}, 0x20) r4 = dup(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r9 = syz_io_uring_setup(0x387, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x2, 0xffffffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000000), &(0x7f0000000180)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x18, 0x20000a00, r10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r10}}, 0x8) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r11 = socket$inet_tcp(0x2, 0x1, 0x0) pidfd_open(r3, 0x0) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @vsock={0x28, 0x0, 0xffffffff, @local}, @phonet={0x23, 0x0, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x800}) [ 2475.912946][ T314] usb 3-1: Using ep0 maxpacket: 8 17:47:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @multicast}, 0x28, {0x2, 0x0, @empty}}) 17:47:37 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045406, 0x0) [ 2475.984600][ T9752] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2476.001821][ T9752] 0ªX: entered promiscuous mode [ 2476.007675][ T9752] 0ªX: left allmulticast mode [ 2476.033095][ T314] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 2476.042176][ T314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2476.124886][ T314] usb 3-1: config 0 has no interface number 0 [ 2476.131165][ T314] usb 3-1: config 0 interface 48 has no altsetting 0 17:47:37 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) [ 2476.199350][ T9756] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2476.250615][ T9756] 1ªX: entered promiscuous mode [ 2476.256189][ T9756] 1ªX: left allmulticast mode [ 2476.293242][ T314] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=9e.ed [ 2476.302401][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2476.328980][ T9759] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 17:47:38 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) [ 2476.370347][ T9759] 1ªX: renamed from 00ªX [ 2476.387816][ T314] usb 3-1: Product: syz [ 2476.397967][ T314] usb 3-1: Manufacturer: syz [ 2476.410594][ T314] usb 3-1: SerialNumber: syz [ 2476.437286][ T314] usb 3-1: config 0 descriptor?? [ 2476.446473][ T9759] 1ªX: left promiscuous mode [ 2476.451509][ T9759] 1ªX: entered allmulticast mode [ 2476.465361][ T9759] A link change request failed with some changes committed already. Interface 01ªX may have been left with an inconsistent configuration, please check. [ 2476.484064][ T314] cdc_ether 3-1:0.48: skipping garbage [ 2476.489597][ T314] usb 3-1: bad CDC descriptors [ 2476.515424][ T314] usb 3-1: unsupported MDLM descriptors 17:47:38 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) [ 2476.530089][ T9763] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 17:47:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELSET={0xd7, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_EXPRESSIONS={0x84, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x64, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x0, 0x1, 'syz0\x00'}]}}}]}, @NFTA_SET_ID]}], {0x14}}, 0xeb}}, 0x0) [ 2476.705784][ T9763] 0ªX: renamed from 01ªX [ 2476.787030][ T9763] 0ªX: left promiscuous mode [ 2476.792818][ T9763] 0ªX: entered allmulticast mode [ 2476.800651][ T9763] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. [ 2476.840964][ T314] usb 3-1: USB disconnect, device number 101 17:47:39 executing program 2: syz_usb_connect(0x0, 0x13b, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000048cf5008b8222760ed9e010203010902290101000000000904309600020a00000a24060001f1972bbf9205240003000d240f0104000000090004000706"], 0x0) 17:47:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELSET={0xd7, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_EXPRESSIONS={0x84, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x64, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x0, 0x1, 'syz0\x00'}]}}}]}, @NFTA_SET_ID]}], {0x14}}, 0xeb}}, 0x0) 17:47:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) 17:47:39 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r3 = getpid() accept4$alg(r2, 0x0, 0x0, 0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440), 0x0, 0x2, 0x1}, 0x20) r4 = dup(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r9 = syz_io_uring_setup(0x387, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x2, 0xffffffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000000), &(0x7f0000000180)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x18, 0x20000a00, r10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r10}}, 0x8) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r11 = socket$inet_tcp(0x2, 0x1, 0x0) pidfd_open(r3, 0x0) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @vsock={0x28, 0x0, 0xffffffff, @local}, @phonet={0x23, 0x0, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x800}) 17:47:39 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r3 = getpid() accept4$alg(r2, 0x0, 0x0, 0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0xfffffffffffffffa, &(0x7f0000000440), 0x0, 0x2, 0x1}, 0x20) r4 = dup(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@rc={0x1f, @none, 0x9}, 0x80, 0x0}}], 0x1, 0x4004040) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r9 = syz_io_uring_setup(0x387, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x2, 0xffffffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000000), &(0x7f0000000180)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x18, 0x20000a00, r10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r10}}, 0x8) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r11 = socket$inet_tcp(0x2, 0x1, 0x0) pidfd_open(r3, 0x0) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}, 0x8}, @vsock={0x28, 0x0, 0xffffffff, @local}, @phonet={0x23, 0x0, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x800}) 17:47:39 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "866a9b45"}]}}, 0x0}, 0x0) 17:47:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc}]}, 0x28}}, 0x0) 17:47:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELSET={0xd7, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_EXPRESSIONS={0x84, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x64, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x0, 0x1, 'syz0\x00'}]}}}]}, @NFTA_SET_ID]}], {0x14}}, 0xeb}}, 0x0) [ 2477.522189][ T9790] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2477.575009][ T9790] 1ªX: entered promiscuous mode [ 2477.580156][ T9790] 1ªX: left allmulticast mode 17:47:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELSET={0xd7, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_EXPRESSIONS={0x84, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x64, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x0, 0x1, 'syz0\x00'}]}}}]}, @NFTA_SET_ID]}], {0x14}}, 0xeb}}, 0x0) [ 2477.649133][ T9791] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2477.675181][ T9791] 0ªX: entered promiscuous mode [ 2477.682069][ T9791] 0ªX: left allmulticast mode [ 2477.713071][ T1123] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2477.754485][T31605] usb 3-1: new high-speed USB device number 102 using dummy_hcd 17:47:39 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000003a80), 0x8400, 0x0) 17:47:39 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008aec1, 0xf6f37000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0), 0x4) [ 2477.848873][ T9794] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2478.000998][ T9794] 1ªX: renamed from 00ªX [ 2478.013059][T31605] usb 3-1: Using ep0 maxpacket: 8 [ 2478.057489][ T9794] 1ªX: left promiscuous mode [ 2478.064042][ T9794] 1ªX: entered allmulticast mode 17:47:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 2478.110148][ T9794] A link change request failed with some changes committed already. Interface 01ªX may have been left with an inconsistent configuration, please check. [ 2478.163277][T31605] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 2478.171689][ T1123] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2478.197804][T31605] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2478.227528][ T1123] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2478.266429][ T9795] 0ªX: renamed from 01ªX [ 2478.273101][T31605] usb 3-1: config 0 has no interface number 0 [ 2478.282919][ T1123] usb 6-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 2478.296565][T31605] usb 3-1: config 0 interface 48 has no altsetting 0 [ 2478.310918][ T1123] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2478.320672][ T9795] 0ªX: left promiscuous mode [ 2478.332630][ T9795] 0ªX: entered allmulticast mode [ 2478.353370][ T1123] usb 6-1: config 0 descriptor?? [ 2478.387851][ T9795] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. [ 2478.523228][T31605] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=9e.ed [ 2478.542008][T31605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2478.571155][T31605] usb 3-1: Product: syz [ 2478.595140][T31605] usb 3-1: Manufacturer: syz [ 2478.613159][T31605] usb 3-1: SerialNumber: syz [ 2478.660496][T31605] usb 3-1: config 0 descriptor?? [ 2478.724571][T31605] cdc_ether 3-1:0.48: skipping garbage [ 2478.730109][T31605] usb 3-1: bad CDC descriptors [ 2478.744689][T31605] usb 3-1: unsupported MDLM descriptors [ 2478.856058][ T1123] uclogic 0003:28BD:0074.0072: interface is invalid, ignoring [ 2478.985549][T31602] usb 3-1: USB disconnect, device number 102 [ 2479.062464][T31605] usb 6-1: USB disconnect, device number 3 17:47:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:47:41 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008aec1, 0xf6f37000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0), 0x4) 17:47:41 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x1, 0x0, 0x0, 0x4}}) 17:47:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0xf, 0x1, @mcast1}]}, 0x2c}}, 0x0) 17:47:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "866a9b45"}]}}, 0x0}, 0x0) 17:47:41 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008aec1, 0xf6f37000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0), 0x4) 17:47:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:47:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0xf, 0x1, @mcast1}]}, 0x2c}}, 0x0) 17:47:41 executing program 2: syz_io_uring_setup(0x1d59, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x1ad}, &(0x7f0000fef000/0xf000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000100)) 17:47:41 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x1, 0x0, 0x0, 0x4}}) 17:47:41 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x21, 0x0, 0x0) 17:47:41 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008aec1, 0xf6f37000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0), 0x4) 17:47:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:47:41 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x1, 0x0, 0x0, 0x4}}) 17:47:41 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x21, 0x0, 0x0) 17:47:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0xf, 0x1, @mcast1}]}, 0x2c}}, 0x0) [ 2479.963013][ T314] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2480.343165][ T314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2480.355463][ T314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2480.366295][ T314] usb 6-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 2480.376022][ T314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2480.388041][ T314] usb 6-1: config 0 descriptor?? [ 2480.876454][ T314] uclogic 0003:28BD:0074.0073: interface is invalid, ignoring [ 2481.103370][T31605] usb 6-1: USB disconnect, device number 4 17:47:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_newnexthop={0x24, 0x58, 0xf29, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x6}, [@NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6}]}, 0x24}}, 0x0) 17:47:43 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x1, 0x0, 0x0, 0x4}}) 17:47:43 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x55a479cdd144fb91) 17:47:43 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x21, 0x0, 0x0) 17:47:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0xf, 0x1, @mcast1}]}, 0x2c}}, 0x0) 17:47:43 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "866a9b45"}]}}, 0x0}, 0x0) [ 2481.664248][ T9842] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 17:47:43 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x21, 0x0, 0x0) 17:47:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_newnexthop={0x24, 0x58, 0xf29, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x6}, [@NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6}]}, 0x24}}, 0x0) 17:47:43 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_TBF={0x4}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 17:47:43 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x55a479cdd144fb91) 17:47:43 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='attr/keycreate\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000001440)='\n', 0x1}, {&(0x7f0000000080)=':', 0x1}], 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x44}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf2, &(0x7f0000000180)=""/242, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) dup2(r1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x78, 0x12, 0x319, 0x0, 0x0, {}, [{0x4}, {0x60, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x2c, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="2eb87c27166cf6f8245905982cf53377cf56facaf8c9", 0x16}, {&(0x7f0000000580)="8e9ced5216e091af66220c1567a100f5092d7a36590cd70832c9ce91691c0de8ff645904a882bcc6fcfe9c277a06f608ccaf7d8618528222a23c15d833109ba9f50e320a284dc6c18afe5ee24e0a70325874bf9bc4318813fd421b002e2c79d39eb18c24ef1553a358c8f43814e17603d85c0311c4b095992829418a5b37f7fed9de", 0x82}, {&(0x7f0000000140)="99", 0x1}], 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="2e10000000001000000000000000ef73", @ANYRES32=0x0, @ANYBLOB="000000df5d00000000000000450000140000000003001081ac72abc9d63142f338646c221b6999e4f132725d3070b4edcb77c274054d6c171591418c2030f17f00000000000000c311a7abfe46a9d4fea3e46febca06ba554463173273bf0f518f332c546b12bcdbefd4"]}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="57f68539ac888fc77d4e1bd4b13945114432071ca735db84900ac0db62aaed6371970d497d491e99b599c426444e4be8e3c7a23af3acf78d031afc120f102660693f0467686b01fdac6ea71fc725b0f8b16130a7ddb46360ef32fa37690c6a55474d8a4bcdfacd83f8cd48ce623cb5c138abf4daa50609ba783d87cea131cc7dc56b0ac5", @ANYRES64=r4, @ANYRESOCT=r6], 0xb8}, 0x1, 0x0, 0x0, 0x841}, 0x80d4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800bf01", @ANYRES16=r7, @ANYBLOB="200028bd7000fedbdf250600000008000200030000001c00018008000300ac1414aa080003000a010100060001000200000008000200020000000800030005000000", @ANYRESDEC=r3, @ANYRES32=r5, @ANYRES16=r6], 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x4850) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x80011}, 0x8010) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002300}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64=r5, @ANYRES16=r7, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000002c0)=0x1) 17:47:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001400)={0x0}) 17:47:43 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x55a479cdd144fb91) 17:47:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_newnexthop={0x24, 0x58, 0xf29, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x6}, [@NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6}]}, 0x24}}, 0x0) [ 2481.854409][ T9860] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 2481.865954][ T9861] __nla_validate_parse: 1 callbacks suppressed [ 2481.865978][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2481.926634][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 17:47:43 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x55a479cdd144fb91) 17:47:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001400)={0x0}) [ 2482.011133][ T9870] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 2482.024970][ T9861] netlink: 2120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2482.053340][T31605] usb 6-1: new high-speed USB device number 5 using dummy_hcd 17:47:43 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_TBF={0x4}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2482.179231][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2482.200800][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2482.272941][ T9876] netlink: 2120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2482.443017][T31605] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2482.454585][T31605] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2482.464763][T31605] usb 6-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 2482.474188][T31605] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2482.484934][T31605] usb 6-1: config 0 descriptor?? [ 2482.967787][T31605] uclogic 0003:28BD:0074.0074: interface is invalid, ignoring [ 2483.208709][T31605] usb 6-1: USB disconnect, device number 5 17:47:45 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "866a9b45"}]}}, 0x0}, 0x0) 17:47:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001400)={0x0}) 17:47:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_newnexthop={0x24, 0x58, 0xf29, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x6}, [@NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6}]}, 0x24}}, 0x0) 17:47:45 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf2c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x0) 17:47:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='attr/keycreate\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000001440)='\n', 0x1}, {&(0x7f0000000080)=':', 0x1}], 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x44}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf2, &(0x7f0000000180)=""/242, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) dup2(r1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x78, 0x12, 0x319, 0x0, 0x0, {}, [{0x4}, {0x60, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x2c, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="2eb87c27166cf6f8245905982cf53377cf56facaf8c9", 0x16}, {&(0x7f0000000580)="8e9ced5216e091af66220c1567a100f5092d7a36590cd70832c9ce91691c0de8ff645904a882bcc6fcfe9c277a06f608ccaf7d8618528222a23c15d833109ba9f50e320a284dc6c18afe5ee24e0a70325874bf9bc4318813fd421b002e2c79d39eb18c24ef1553a358c8f43814e17603d85c0311c4b095992829418a5b37f7fed9de", 0x82}, {&(0x7f0000000140)="99", 0x1}], 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="2e10000000001000000000000000ef73", @ANYRES32=0x0, @ANYBLOB="000000df5d00000000000000450000140000000003001081ac72abc9d63142f338646c221b6999e4f132725d3070b4edcb77c274054d6c171591418c2030f17f00000000000000c311a7abfe46a9d4fea3e46febca06ba554463173273bf0f518f332c546b12bcdbefd4"]}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="57f68539ac888fc77d4e1bd4b13945114432071ca735db84900ac0db62aaed6371970d497d491e99b599c426444e4be8e3c7a23af3acf78d031afc120f102660693f0467686b01fdac6ea71fc725b0f8b16130a7ddb46360ef32fa37690c6a55474d8a4bcdfacd83f8cd48ce623cb5c138abf4daa50609ba783d87cea131cc7dc56b0ac5", @ANYRES64=r4, @ANYRESOCT=r6], 0xb8}, 0x1, 0x0, 0x0, 0x841}, 0x80d4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800bf01", @ANYRES16=r7, @ANYBLOB="200028bd7000fedbdf250600000008000200030000001c00018008000300ac1414aa080003000a010100060001000200000008000200020000000800030005000000", @ANYRESDEC=r3, @ANYRES32=r5, @ANYRES16=r6], 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x4850) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x80011}, 0x8010) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002300}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64=r5, @ANYRES16=r7, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000002c0)=0x1) 17:47:45 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_TBF={0x4}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 17:47:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001400)={0x0}) [ 2483.799285][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2483.825035][ T9885] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 2483.837464][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 17:47:45 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='attr/keycreate\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000001440)='\n', 0x1}, {&(0x7f0000000080)=':', 0x1}], 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x44}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf2, &(0x7f0000000180)=""/242, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) dup2(r1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x78, 0x12, 0x319, 0x0, 0x0, {}, [{0x4}, {0x60, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x2c, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="2eb87c27166cf6f8245905982cf53377cf56facaf8c9", 0x16}, {&(0x7f0000000580)="8e9ced5216e091af66220c1567a100f5092d7a36590cd70832c9ce91691c0de8ff645904a882bcc6fcfe9c277a06f608ccaf7d8618528222a23c15d833109ba9f50e320a284dc6c18afe5ee24e0a70325874bf9bc4318813fd421b002e2c79d39eb18c24ef1553a358c8f43814e17603d85c0311c4b095992829418a5b37f7fed9de", 0x82}, {&(0x7f0000000140)="99", 0x1}], 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="2e10000000001000000000000000ef73", @ANYRES32=0x0, @ANYBLOB="000000df5d00000000000000450000140000000003001081ac72abc9d63142f338646c221b6999e4f132725d3070b4edcb77c274054d6c171591418c2030f17f00000000000000c311a7abfe46a9d4fea3e46febca06ba554463173273bf0f518f332c546b12bcdbefd4"]}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="57f68539ac888fc77d4e1bd4b13945114432071ca735db84900ac0db62aaed6371970d497d491e99b599c426444e4be8e3c7a23af3acf78d031afc120f102660693f0467686b01fdac6ea71fc725b0f8b16130a7ddb46360ef32fa37690c6a55474d8a4bcdfacd83f8cd48ce623cb5c138abf4daa50609ba783d87cea131cc7dc56b0ac5", @ANYRES64=r4, @ANYRESOCT=r6], 0xb8}, 0x1, 0x0, 0x0, 0x841}, 0x80d4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800bf01", @ANYRES16=r7, @ANYBLOB="200028bd7000fedbdf250600000008000200030000001c00018008000300ac1414aa080003000a010100060001000200000008000200020000000800030005000000", @ANYRESDEC=r3, @ANYRES32=r5, @ANYRES16=r6], 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x4850) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x80011}, 0x8010) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002300}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64=r5, @ANYRES16=r7, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000002c0)=0x1) 17:47:45 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='attr/keycreate\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000001440)='\n', 0x1}, {&(0x7f0000000080)=':', 0x1}], 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x44}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf2, &(0x7f0000000180)=""/242, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) dup2(r1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x78, 0x12, 0x319, 0x0, 0x0, {}, [{0x4}, {0x60, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x2c, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="2eb87c27166cf6f8245905982cf53377cf56facaf8c9", 0x16}, {&(0x7f0000000580)="8e9ced5216e091af66220c1567a100f5092d7a36590cd70832c9ce91691c0de8ff645904a882bcc6fcfe9c277a06f608ccaf7d8618528222a23c15d833109ba9f50e320a284dc6c18afe5ee24e0a70325874bf9bc4318813fd421b002e2c79d39eb18c24ef1553a358c8f43814e17603d85c0311c4b095992829418a5b37f7fed9de", 0x82}, {&(0x7f0000000140)="99", 0x1}], 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="2e10000000001000000000000000ef73", @ANYRES32=0x0, @ANYBLOB="000000df5d00000000000000450000140000000003001081ac72abc9d63142f338646c221b6999e4f132725d3070b4edcb77c274054d6c171591418c2030f17f00000000000000c311a7abfe46a9d4fea3e46febca06ba554463173273bf0f518f332c546b12bcdbefd4"]}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="57f68539ac888fc77d4e1bd4b13945114432071ca735db84900ac0db62aaed6371970d497d491e99b599c426444e4be8e3c7a23af3acf78d031afc120f102660693f0467686b01fdac6ea71fc725b0f8b16130a7ddb46360ef32fa37690c6a55474d8a4bcdfacd83f8cd48ce623cb5c138abf4daa50609ba783d87cea131cc7dc56b0ac5", @ANYRES64=r4, @ANYRESOCT=r6], 0xb8}, 0x1, 0x0, 0x0, 0x841}, 0x80d4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800bf01", @ANYRES16=r7, @ANYBLOB="200028bd7000fedbdf250600000008000200030000001c00018008000300ac1414aa080003000a010100060001000200000008000200020000000800030005000000", @ANYRESDEC=r3, @ANYRES32=r5, @ANYRES16=r6], 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x4850) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x80011}, 0x8010) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002300}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64=r5, @ANYRES16=r7, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000002c0)=0x1) 17:47:45 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_TBF={0x4}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2484.032909][ T314] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2484.132975][ T4033] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2484.190933][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:47:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='attr/keycreate\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000001440)='\n', 0x1}, {&(0x7f0000000080)=':', 0x1}], 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x44}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf2, &(0x7f0000000180)=""/242, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) dup2(r1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x78, 0x12, 0x319, 0x0, 0x0, {}, [{0x4}, {0x60, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x2c, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="2eb87c27166cf6f8245905982cf53377cf56facaf8c9", 0x16}, {&(0x7f0000000580)="8e9ced5216e091af66220c1567a100f5092d7a36590cd70832c9ce91691c0de8ff645904a882bcc6fcfe9c277a06f608ccaf7d8618528222a23c15d833109ba9f50e320a284dc6c18afe5ee24e0a70325874bf9bc4318813fd421b002e2c79d39eb18c24ef1553a358c8f43814e17603d85c0311c4b095992829418a5b37f7fed9de", 0x82}, {&(0x7f0000000140)="99", 0x1}], 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="2e10000000001000000000000000ef73", @ANYRES32=0x0, @ANYBLOB="000000df5d00000000000000450000140000000003001081ac72abc9d63142f338646c221b6999e4f132725d3070b4edcb77c274054d6c171591418c2030f17f00000000000000c311a7abfe46a9d4fea3e46febca06ba554463173273bf0f518f332c546b12bcdbefd4"]}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="57f68539ac888fc77d4e1bd4b13945114432071ca735db84900ac0db62aaed6371970d497d491e99b599c426444e4be8e3c7a23af3acf78d031afc120f102660693f0467686b01fdac6ea71fc725b0f8b16130a7ddb46360ef32fa37690c6a55474d8a4bcdfacd83f8cd48ce623cb5c138abf4daa50609ba783d87cea131cc7dc56b0ac5", @ANYRES64=r4, @ANYRESOCT=r6], 0xb8}, 0x1, 0x0, 0x0, 0x841}, 0x80d4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800bf01", @ANYRES16=r7, @ANYBLOB="200028bd7000fedbdf250600000008000200030000001c00018008000300ac1414aa080003000a010100060001000200000008000200020000000800030005000000", @ANYRESDEC=r3, @ANYRES32=r5, @ANYRES16=r6], 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x4850) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x80011}, 0x8010) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002300}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64=r5, @ANYRES16=r7, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000002c0)=0x1) [ 2484.248456][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2484.283402][ T314] usb 2-1: Using ep0 maxpacket: 8 [ 2484.403567][ T314] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 2484.419899][ T314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 17:47:46 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='attr/keycreate\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000001440)='\n', 0x1}, {&(0x7f0000000080)=':', 0x1}], 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x44}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf2, &(0x7f0000000180)=""/242, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) dup2(r1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x78, 0x12, 0x319, 0x0, 0x0, {}, [{0x4}, {0x60, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x2c, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="2eb87c27166cf6f8245905982cf53377cf56facaf8c9", 0x16}, {&(0x7f0000000580)="8e9ced5216e091af66220c1567a100f5092d7a36590cd70832c9ce91691c0de8ff645904a882bcc6fcfe9c277a06f608ccaf7d8618528222a23c15d833109ba9f50e320a284dc6c18afe5ee24e0a70325874bf9bc4318813fd421b002e2c79d39eb18c24ef1553a358c8f43814e17603d85c0311c4b095992829418a5b37f7fed9de", 0x82}, {&(0x7f0000000140)="99", 0x1}], 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="2e10000000001000000000000000ef73", @ANYRES32=0x0, @ANYBLOB="000000df5d00000000000000450000140000000003001081ac72abc9d63142f338646c221b6999e4f132725d3070b4edcb77c274054d6c171591418c2030f17f00000000000000c311a7abfe46a9d4fea3e46febca06ba554463173273bf0f518f332c546b12bcdbefd4"]}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="57f68539ac888fc77d4e1bd4b13945114432071ca735db84900ac0db62aaed6371970d497d491e99b599c426444e4be8e3c7a23af3acf78d031afc120f102660693f0467686b01fdac6ea71fc725b0f8b16130a7ddb46360ef32fa37690c6a55474d8a4bcdfacd83f8cd48ce623cb5c138abf4daa50609ba783d87cea131cc7dc56b0ac5", @ANYRES64=r4, @ANYRESOCT=r6], 0xb8}, 0x1, 0x0, 0x0, 0x841}, 0x80d4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800bf01", @ANYRES16=r7, @ANYBLOB="200028bd7000fedbdf250600000008000200030000001c00018008000300ac1414aa080003000a010100060001000200000008000200020000000800030005000000", @ANYRESDEC=r3, @ANYRES32=r5, @ANYRES16=r6], 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x4850) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x80011}, 0x8010) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002300}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64=r5, @ANYRES16=r7, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000002c0)=0x1) [ 2484.462335][ T314] usb 2-1: config 0 has no interface number 0 [ 2484.483917][ T314] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2484.503728][ T4033] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2484.535493][ T4033] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2484.555759][ T314] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2484.576437][ T4033] usb 6-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 2484.605381][ T4033] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2484.614004][ T314] usb 2-1: config 0 interface 52 has no altsetting 0 [ 2484.652279][ T4033] usb 6-1: config 0 descriptor?? [ 2484.793338][ T314] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 2484.833008][ T314] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 2484.841457][ T314] usb 2-1: Product: syz [ 2484.862899][ T314] usb 2-1: Manufacturer: syz [ 2484.867581][ T314] usb 2-1: SerialNumber: syz [ 2484.903616][ T314] usb 2-1: config 0 descriptor?? [ 2485.155382][ T4033] uclogic 0003:28BD:0074.0075: interface is invalid, ignoring [ 2485.169188][ T314] input: syz syz (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input201 [ 2485.379410][T31605] usb 2-1: USB disconnect, device number 34 [ 2485.398639][ T314] usb 6-1: USB disconnect, device number 6 17:47:47 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='attr/keycreate\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000001440)='\n', 0x1}, {&(0x7f0000000080)=':', 0x1}], 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x44}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf2, &(0x7f0000000180)=""/242, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) dup2(r1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x78, 0x12, 0x319, 0x0, 0x0, {}, [{0x4}, {0x60, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x2c, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="2eb87c27166cf6f8245905982cf53377cf56facaf8c9", 0x16}, {&(0x7f0000000580)="8e9ced5216e091af66220c1567a100f5092d7a36590cd70832c9ce91691c0de8ff645904a882bcc6fcfe9c277a06f608ccaf7d8618528222a23c15d833109ba9f50e320a284dc6c18afe5ee24e0a70325874bf9bc4318813fd421b002e2c79d39eb18c24ef1553a358c8f43814e17603d85c0311c4b095992829418a5b37f7fed9de", 0x82}, {&(0x7f0000000140)="99", 0x1}], 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="2e10000000001000000000000000ef73", @ANYRES32=0x0, @ANYBLOB="000000df5d00000000000000450000140000000003001081ac72abc9d63142f338646c221b6999e4f132725d3070b4edcb77c274054d6c171591418c2030f17f00000000000000c311a7abfe46a9d4fea3e46febca06ba554463173273bf0f518f332c546b12bcdbefd4"]}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="57f68539ac888fc77d4e1bd4b13945114432071ca735db84900ac0db62aaed6371970d497d491e99b599c426444e4be8e3c7a23af3acf78d031afc120f102660693f0467686b01fdac6ea71fc725b0f8b16130a7ddb46360ef32fa37690c6a55474d8a4bcdfacd83f8cd48ce623cb5c138abf4daa50609ba783d87cea131cc7dc56b0ac5", @ANYRES64=r4, @ANYRESOCT=r6], 0xb8}, 0x1, 0x0, 0x0, 0x841}, 0x80d4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800bf01", @ANYRES16=r7, @ANYBLOB="200028bd7000fedbdf250600000008000200030000001c00018008000300ac1414aa080003000a010100060001000200000008000200020000000800030005000000", @ANYRESDEC=r3, @ANYRES32=r5, @ANYRES16=r6], 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x4850) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x80011}, 0x8010) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002300}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64=r5, @ANYRES16=r7, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000002c0)=0x1) 17:47:47 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='attr/keycreate\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000001440)='\n', 0x1}, {&(0x7f0000000080)=':', 0x1}], 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x44}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf2, &(0x7f0000000180)=""/242, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) dup2(r1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x78, 0x12, 0x319, 0x0, 0x0, {}, [{0x4}, {0x60, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x2c, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="2eb87c27166cf6f8245905982cf53377cf56facaf8c9", 0x16}, {&(0x7f0000000580)="8e9ced5216e091af66220c1567a100f5092d7a36590cd70832c9ce91691c0de8ff645904a882bcc6fcfe9c277a06f608ccaf7d8618528222a23c15d833109ba9f50e320a284dc6c18afe5ee24e0a70325874bf9bc4318813fd421b002e2c79d39eb18c24ef1553a358c8f43814e17603d85c0311c4b095992829418a5b37f7fed9de", 0x82}, {&(0x7f0000000140)="99", 0x1}], 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="2e10000000001000000000000000ef73", @ANYRES32=0x0, @ANYBLOB="000000df5d00000000000000450000140000000003001081ac72abc9d63142f338646c221b6999e4f132725d3070b4edcb77c274054d6c171591418c2030f17f00000000000000c311a7abfe46a9d4fea3e46febca06ba554463173273bf0f518f332c546b12bcdbefd4"]}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="57f68539ac888fc77d4e1bd4b13945114432071ca735db84900ac0db62aaed6371970d497d491e99b599c426444e4be8e3c7a23af3acf78d031afc120f102660693f0467686b01fdac6ea71fc725b0f8b16130a7ddb46360ef32fa37690c6a55474d8a4bcdfacd83f8cd48ce623cb5c138abf4daa50609ba783d87cea131cc7dc56b0ac5", @ANYRES64=r4, @ANYRESOCT=r6], 0xb8}, 0x1, 0x0, 0x0, 0x841}, 0x80d4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800bf01", @ANYRES16=r7, @ANYBLOB="200028bd7000fedbdf250600000008000200030000001c00018008000300ac1414aa080003000a010100060001000200000008000200020000000800030005000000", @ANYRESDEC=r3, @ANYRES32=r5, @ANYRES16=r6], 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x4850) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x80011}, 0x8010) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002300}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64=r5, @ANYRES16=r7, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000002c0)=0x1) 17:47:47 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='attr/keycreate\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000001440)='\n', 0x1}, {&(0x7f0000000080)=':', 0x1}], 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x44}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf2, &(0x7f0000000180)=""/242, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) dup2(r1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x78, 0x12, 0x319, 0x0, 0x0, {}, [{0x4}, {0x60, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x2c, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="2eb87c27166cf6f8245905982cf53377cf56facaf8c9", 0x16}, {&(0x7f0000000580)="8e9ced5216e091af66220c1567a100f5092d7a36590cd70832c9ce91691c0de8ff645904a882bcc6fcfe9c277a06f608ccaf7d8618528222a23c15d833109ba9f50e320a284dc6c18afe5ee24e0a70325874bf9bc4318813fd421b002e2c79d39eb18c24ef1553a358c8f43814e17603d85c0311c4b095992829418a5b37f7fed9de", 0x82}, {&(0x7f0000000140)="99", 0x1}], 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="2e10000000001000000000000000ef73", @ANYRES32=0x0, @ANYBLOB="000000df5d00000000000000450000140000000003001081ac72abc9d63142f338646c221b6999e4f132725d3070b4edcb77c274054d6c171591418c2030f17f00000000000000c311a7abfe46a9d4fea3e46febca06ba554463173273bf0f518f332c546b12bcdbefd4"]}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="57f68539ac888fc77d4e1bd4b13945114432071ca735db84900ac0db62aaed6371970d497d491e99b599c426444e4be8e3c7a23af3acf78d031afc120f102660693f0467686b01fdac6ea71fc725b0f8b16130a7ddb46360ef32fa37690c6a55474d8a4bcdfacd83f8cd48ce623cb5c138abf4daa50609ba783d87cea131cc7dc56b0ac5", @ANYRES64=r4, @ANYRESOCT=r6], 0xb8}, 0x1, 0x0, 0x0, 0x841}, 0x80d4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800bf01", @ANYRES16=r7, @ANYBLOB="200028bd7000fedbdf250600000008000200030000001c00018008000300ac1414aa080003000a010100060001000200000008000200020000000800030005000000", @ANYRESDEC=r3, @ANYRES32=r5, @ANYRES16=r6], 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x4850) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x80011}, 0x8010) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002300}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64=r5, @ANYRES16=r7, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000002c0)=0x1) 17:47:47 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf2c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x0) 17:47:47 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='attr/keycreate\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000001440)='\n', 0x1}, {&(0x7f0000000080)=':', 0x1}], 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x44}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf2, &(0x7f0000000180)=""/242, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) dup2(r1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x78, 0x12, 0x319, 0x0, 0x0, {}, [{0x4}, {0x60, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x2c, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="2eb87c27166cf6f8245905982cf53377cf56facaf8c9", 0x16}, {&(0x7f0000000580)="8e9ced5216e091af66220c1567a100f5092d7a36590cd70832c9ce91691c0de8ff645904a882bcc6fcfe9c277a06f608ccaf7d8618528222a23c15d833109ba9f50e320a284dc6c18afe5ee24e0a70325874bf9bc4318813fd421b002e2c79d39eb18c24ef1553a358c8f43814e17603d85c0311c4b095992829418a5b37f7fed9de", 0x82}, {&(0x7f0000000140)="99", 0x1}], 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="2e10000000001000000000000000ef73", @ANYRES32=0x0, @ANYBLOB="000000df5d00000000000000450000140000000003001081ac72abc9d63142f338646c221b6999e4f132725d3070b4edcb77c274054d6c171591418c2030f17f00000000000000c311a7abfe46a9d4fea3e46febca06ba554463173273bf0f518f332c546b12bcdbefd4"]}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="57f68539ac888fc77d4e1bd4b13945114432071ca735db84900ac0db62aaed6371970d497d491e99b599c426444e4be8e3c7a23af3acf78d031afc120f102660693f0467686b01fdac6ea71fc725b0f8b16130a7ddb46360ef32fa37690c6a55474d8a4bcdfacd83f8cd48ce623cb5c138abf4daa50609ba783d87cea131cc7dc56b0ac5", @ANYRES64=r4, @ANYRESOCT=r6], 0xb8}, 0x1, 0x0, 0x0, 0x841}, 0x80d4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800bf01", @ANYRES16=r7, @ANYBLOB="200028bd7000fedbdf250600000008000200030000001c00018008000300ac1414aa080003000a010100060001000200000008000200020000000800030005000000", @ANYRESDEC=r3, @ANYRES32=r5, @ANYRES16=r6], 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x4850) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x80011}, 0x8010) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002300}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64=r5, @ANYRES16=r7, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000002c0)=0x1) 17:47:47 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf2c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x0) [ 2486.292919][ T314] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2486.382911][ T4033] usb 6-1: new high-speed USB device number 7 using dummy_hcd 17:47:48 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) sendfile(r1, r0, 0x0, 0xff) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) 17:47:48 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000140)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @redirect={0x5, 0x0, 0x0, @broadcast, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1f, 0x0, [@private, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @empty, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@local}]}]}}}}}}}, 0x0) [ 2486.553011][ T314] usb 2-1: Using ep0 maxpacket: 8 17:47:48 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) sendfile(r1, r0, 0x0, 0xff) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) 17:47:48 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='attr/keycreate\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000001440)='\n', 0x1}, {&(0x7f0000000080)=':', 0x1}], 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x44}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf2, &(0x7f0000000180)=""/242, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) dup2(r1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x78, 0x12, 0x319, 0x0, 0x0, {}, [{0x4}, {0x60, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x2c, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="2eb87c27166cf6f8245905982cf53377cf56facaf8c9", 0x16}, {&(0x7f0000000580)="8e9ced5216e091af66220c1567a100f5092d7a36590cd70832c9ce91691c0de8ff645904a882bcc6fcfe9c277a06f608ccaf7d8618528222a23c15d833109ba9f50e320a284dc6c18afe5ee24e0a70325874bf9bc4318813fd421b002e2c79d39eb18c24ef1553a358c8f43814e17603d85c0311c4b095992829418a5b37f7fed9de", 0x82}, {&(0x7f0000000140)="99", 0x1}], 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="2e10000000001000000000000000ef73", @ANYRES32=0x0, @ANYBLOB="000000df5d00000000000000450000140000000003001081ac72abc9d63142f338646c221b6999e4f132725d3070b4edcb77c274054d6c171591418c2030f17f00000000000000c311a7abfe46a9d4fea3e46febca06ba554463173273bf0f518f332c546b12bcdbefd4"]}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="57f68539ac888fc77d4e1bd4b13945114432071ca735db84900ac0db62aaed6371970d497d491e99b599c426444e4be8e3c7a23af3acf78d031afc120f102660693f0467686b01fdac6ea71fc725b0f8b16130a7ddb46360ef32fa37690c6a55474d8a4bcdfacd83f8cd48ce623cb5c138abf4daa50609ba783d87cea131cc7dc56b0ac5", @ANYRES64=r4, @ANYRESOCT=r6], 0xb8}, 0x1, 0x0, 0x0, 0x841}, 0x80d4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800bf01", @ANYRES16=r7, @ANYBLOB="200028bd7000fedbdf250600000008000200030000001c00018008000300ac1414aa080003000a010100060001000200000008000200020000000800030005000000", @ANYRESDEC=r3, @ANYRES32=r5, @ANYRES16=r6], 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x4850) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x80011}, 0x8010) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002300}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64=r5, @ANYRES16=r7, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000002c0)=0x1) 17:47:48 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='attr/keycreate\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000001440)='\n', 0x1}, {&(0x7f0000000080)=':', 0x1}], 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x44}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf2, &(0x7f0000000180)=""/242, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) dup2(r1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x78, 0x12, 0x319, 0x0, 0x0, {}, [{0x4}, {0x60, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x2c, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="2eb87c27166cf6f8245905982cf53377cf56facaf8c9", 0x16}, {&(0x7f0000000580)="8e9ced5216e091af66220c1567a100f5092d7a36590cd70832c9ce91691c0de8ff645904a882bcc6fcfe9c277a06f608ccaf7d8618528222a23c15d833109ba9f50e320a284dc6c18afe5ee24e0a70325874bf9bc4318813fd421b002e2c79d39eb18c24ef1553a358c8f43814e17603d85c0311c4b095992829418a5b37f7fed9de", 0x82}, {&(0x7f0000000140)="99", 0x1}], 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="2e10000000001000000000000000ef73", @ANYRES32=0x0, @ANYBLOB="000000df5d00000000000000450000140000000003001081ac72abc9d63142f338646c221b6999e4f132725d3070b4edcb77c274054d6c171591418c2030f17f00000000000000c311a7abfe46a9d4fea3e46febca06ba554463173273bf0f518f332c546b12bcdbefd4"]}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="57f68539ac888fc77d4e1bd4b13945114432071ca735db84900ac0db62aaed6371970d497d491e99b599c426444e4be8e3c7a23af3acf78d031afc120f102660693f0467686b01fdac6ea71fc725b0f8b16130a7ddb46360ef32fa37690c6a55474d8a4bcdfacd83f8cd48ce623cb5c138abf4daa50609ba783d87cea131cc7dc56b0ac5", @ANYRES64=r4, @ANYRESOCT=r6], 0xb8}, 0x1, 0x0, 0x0, 0x841}, 0x80d4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800bf01", @ANYRES16=r7, @ANYBLOB="200028bd7000fedbdf250600000008000200030000001c00018008000300ac1414aa080003000a010100060001000200000008000200020000000800030005000000", @ANYRESDEC=r3, @ANYRES32=r5, @ANYRES16=r6], 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x4850) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x80011}, 0x8010) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002300}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64=r5, @ANYRES16=r7, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000002c0)=0x1) 17:47:48 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000140)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @redirect={0x5, 0x0, 0x0, @broadcast, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1f, 0x0, [@private, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @empty, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@local}]}]}}}}}}}, 0x0) [ 2486.633231][ T4033] usb 6-1: Using ep0 maxpacket: 8 17:47:48 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) sendfile(r1, r0, 0x0, 0xff) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) [ 2486.673159][ T314] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 2486.696570][ T314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2486.728521][ T314] usb 2-1: config 0 has no interface number 0 [ 2486.748414][ T314] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2486.763524][ T4033] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 17:47:48 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000140)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @redirect={0x5, 0x0, 0x0, @broadcast, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1f, 0x0, [@private, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @empty, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@local}]}]}}}}}}}, 0x0) [ 2486.778976][ T4033] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2486.806107][ T314] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2486.821920][ T4033] usb 6-1: config 0 has no interface number 0 17:47:48 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000140)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @redirect={0x5, 0x0, 0x0, @broadcast, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1f, 0x0, [@private, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @empty, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@local}]}]}}}}}}}, 0x0) [ 2486.829635][ T4033] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2486.841402][ T314] usb 2-1: config 0 interface 52 has no altsetting 0 [ 2486.848624][ T4033] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2486.862116][ T4033] usb 6-1: config 0 interface 52 has no altsetting 0 [ 2487.013302][ T314] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 2487.038270][ T314] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 2487.047423][ T4033] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 2487.064731][ T4033] usb 6-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 2487.079835][ T314] usb 2-1: Product: syz [ 2487.086208][ T4033] usb 6-1: Product: syz [ 2487.090613][ T314] usb 2-1: Manufacturer: syz [ 2487.096148][ T4033] usb 6-1: Manufacturer: syz [ 2487.100951][ T314] usb 2-1: SerialNumber: syz [ 2487.106084][ T4033] usb 6-1: SerialNumber: syz [ 2487.114522][ T314] usb 2-1: config 0 descriptor?? [ 2487.130917][ T4033] usb 6-1: config 0 descriptor?? [ 2487.394383][ T4033] input: syz syz (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input202 [ 2487.406218][ T314] input: syz syz (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input203 [ 2487.667184][ T1123] usb 6-1: USB disconnect, device number 7 [ 2487.687741][ T4033] usb 2-1: USB disconnect, device number 35 17:47:49 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf2c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x0) 17:47:49 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf2c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x0) 17:47:49 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) sendfile(r1, r0, 0x0, 0xff) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) 17:47:49 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) sendfile(r1, r0, 0x0, 0xff) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) 17:47:49 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) sendfile(r1, r0, 0x0, 0xff) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) 17:47:49 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001400)='attr/keycreate\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000001440)='\n', 0x1}, {&(0x7f0000000080)=':', 0x1}], 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x44}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf2, &(0x7f0000000180)=""/242, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) dup2(r1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x78, 0x12, 0x319, 0x0, 0x0, {}, [{0x4}, {0x60, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x2c, 0x12, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="2eb87c27166cf6f8245905982cf53377cf56facaf8c9", 0x16}, {&(0x7f0000000580)="8e9ced5216e091af66220c1567a100f5092d7a36590cd70832c9ce91691c0de8ff645904a882bcc6fcfe9c277a06f608ccaf7d8618528222a23c15d833109ba9f50e320a284dc6c18afe5ee24e0a70325874bf9bc4318813fd421b002e2c79d39eb18c24ef1553a358c8f43814e17603d85c0311c4b095992829418a5b37f7fed9de", 0x82}, {&(0x7f0000000140)="99", 0x1}], 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="2e10000000001000000000000000ef73", @ANYRES32=0x0, @ANYBLOB="000000df5d00000000000000450000140000000003001081ac72abc9d63142f338646c221b6999e4f132725d3070b4edcb77c274054d6c171591418c2030f17f00000000000000c311a7abfe46a9d4fea3e46febca06ba554463173273bf0f518f332c546b12bcdbefd4"]}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="57f68539ac888fc77d4e1bd4b13945114432071ca735db84900ac0db62aaed6371970d497d491e99b599c426444e4be8e3c7a23af3acf78d031afc120f102660693f0467686b01fdac6ea71fc725b0f8b16130a7ddb46360ef32fa37690c6a55474d8a4bcdfacd83f8cd48ce623cb5c138abf4daa50609ba783d87cea131cc7dc56b0ac5", @ANYRES64=r4, @ANYRESOCT=r6], 0xb8}, 0x1, 0x0, 0x0, 0x841}, 0x80d4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800bf01", @ANYRES16=r7, @ANYBLOB="200028bd7000fedbdf250600000008000200030000001c00018008000300ac1414aa080003000a010100060001000200000008000200020000000800030005000000", @ANYRESDEC=r3, @ANYRES32=r5, @ANYRES16=r6], 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x4850) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x80011}, 0x8010) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002300}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64=r5, @ANYRES16=r7, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000002c0)=0x1) 17:47:50 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) sendfile(r1, r0, 0x0, 0xff) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) 17:47:50 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = inotify_init1(0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000280)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f00000002c0)='./file0\x00', 0x91) truncate(&(0x7f0000000140)='./file0\x00', 0x2) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 17:47:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) sendfile(r1, r0, 0x0, 0xff) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) 17:47:50 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) sendfile(r1, r0, 0x0, 0xff) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) 17:47:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) sendfile(r1, r0, 0x0, 0xff) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) [ 2488.455955][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 2488.456021][ T27] audit: type=1804 audit(1688406470.159:670): pid=9968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name=2F6E6577726F6F742F323132392F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6530 dev="ramfs" ino=188475 res=1 errno=0 17:47:50 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = inotify_init1(0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000280)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f00000002c0)='./file0\x00', 0x91) truncate(&(0x7f0000000140)='./file0\x00', 0x2) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 2488.573858][ T1123] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2488.593212][T31605] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2488.662237][ T27] audit: type=1804 audit(1688406470.359:671): pid=9977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name=2F6E6577726F6F742F323133302F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6530 dev="ramfs" ino=187908 res=1 errno=0 [ 2488.843088][ T1123] usb 6-1: Using ep0 maxpacket: 8 [ 2488.849895][T31605] usb 2-1: Using ep0 maxpacket: 8 [ 2488.973337][ T1123] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 2488.981905][ T1123] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2488.992267][ T1123] usb 6-1: config 0 has no interface number 0 [ 2488.999028][T31605] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 2489.007494][T31605] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2489.018170][ T1123] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2489.029474][T31605] usb 2-1: config 0 has no interface number 0 [ 2489.036107][ T1123] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2489.049509][T31605] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2489.061064][ T1123] usb 6-1: config 0 interface 52 has no altsetting 0 [ 2489.069874][T31605] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2489.083392][T31605] usb 2-1: config 0 interface 52 has no altsetting 0 [ 2489.243067][ T1123] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 2489.252581][ T1123] usb 6-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 2489.261936][T31605] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 2489.271334][T31605] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 2489.280293][ T1123] usb 6-1: Product: syz [ 2489.285119][T31605] usb 2-1: Product: syz [ 2489.289483][ T1123] usb 6-1: Manufacturer: syz [ 2489.302436][T31605] usb 2-1: Manufacturer: syz [ 2489.308273][ T1123] usb 6-1: SerialNumber: syz [ 2489.313542][T31605] usb 2-1: SerialNumber: syz [ 2489.325549][ T1123] usb 6-1: config 0 descriptor?? [ 2489.333589][T31605] usb 2-1: config 0 descriptor?? [ 2489.594972][ T1123] input: syz syz (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input204 [ 2489.607275][T31605] input: syz syz (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input205 [ 2489.867621][ T4033] usb 2-1: USB disconnect, device number 36 [ 2489.879430][ T1123] usb 6-1: USB disconnect, device number 8 [ 2489.882808][ C0] synaptics_usb 6-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 17:47:52 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf2c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x0) 17:47:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x3000004, 0x12, 0x1f}) 17:47:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000200)="92", 0x1}], 0x1, &(0x7f0000001340)=[@init={0x14, 0x84, 0x0, {0x0, 0x0, 0x0, 0x200}}], 0x14}], 0x1, 0x0) 17:47:52 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = inotify_init1(0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000280)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f00000002c0)='./file0\x00', 0x91) truncate(&(0x7f0000000140)='./file0\x00', 0x2) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 17:47:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0137080000000000000009"], 0x2c}}, 0x0) 17:47:52 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf2c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x0) 17:47:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x3000004, 0x12, 0x1f}) 17:47:52 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = inotify_init1(0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000280)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f00000002c0)='./file0\x00', 0x91) truncate(&(0x7f0000000140)='./file0\x00', 0x2) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 17:47:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000200)="92", 0x1}], 0x1, &(0x7f0000001340)=[@init={0x14, 0x84, 0x0, {0x0, 0x0, 0x0, 0x200}}], 0x14}], 0x1, 0x0) [ 2490.514239][ T27] audit: type=1804 audit(1688406472.219:672): pid=9987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name=2F6E6577726F6F742F323133312F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6530 dev="ramfs" ino=187926 res=1 errno=0 [ 2490.551046][ C1] vkms_vblank_simulate: vblank timer overrun 17:47:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0137080000000000000009"], 0x2c}}, 0x0) 17:47:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0137080000000000000009"], 0x2c}}, 0x0) [ 2490.695042][ T27] audit: type=1804 audit(1688406472.399:673): pid=9997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name=2F6E6577726F6F742F323133322F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6530 dev="ramfs" ino=188519 res=1 errno=0 [ 2490.731871][ C1] vkms_vblank_simulate: vblank timer overrun 17:47:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x3000004, 0x12, 0x1f}) [ 2490.738420][T31605] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2490.872997][ T4033] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2490.993000][T31605] usb 2-1: Using ep0 maxpacket: 8 [ 2491.112956][ T4033] usb 6-1: Using ep0 maxpacket: 8 [ 2491.113177][T31605] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 2491.128698][T31605] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2491.140183][T31605] usb 2-1: config 0 has no interface number 0 [ 2491.147574][T31605] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2491.159145][T31605] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2491.192751][T31605] usb 2-1: config 0 interface 52 has no altsetting 0 [ 2491.233344][ T4033] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 2491.241499][ T4033] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2491.252080][ T4033] usb 6-1: config 0 has no interface number 0 [ 2491.258587][ T4033] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2491.293097][ T4033] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2491.313010][ T4033] usb 6-1: config 0 interface 52 has no altsetting 0 [ 2491.362991][T31605] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 2491.372492][T31605] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 2491.382043][T31605] usb 2-1: Product: syz [ 2491.387151][T31605] usb 2-1: Manufacturer: syz [ 2491.391947][T31605] usb 2-1: SerialNumber: syz [ 2491.404349][T31605] usb 2-1: config 0 descriptor?? [ 2491.473188][ T4033] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 2491.482345][ T4033] usb 6-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 2491.491291][ T4033] usb 6-1: Product: syz [ 2491.495959][ T4033] usb 6-1: Manufacturer: syz [ 2491.500693][ T4033] usb 6-1: SerialNumber: syz [ 2491.508717][ T4033] usb 6-1: config 0 descriptor?? [ 2491.664713][T31605] input: syz syz (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input206 [ 2491.795114][ T4033] input: syz syz (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input207 [ 2491.919502][ T1123] usb 2-1: USB disconnect, device number 37 [ 2491.925549][ C1] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 2492.056235][ T7] usb 6-1: USB disconnect, device number 9 [ 2492.062780][ C0] synaptics_usb 6-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 17:47:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000200)="92", 0x1}], 0x1, &(0x7f0000001340)=[@init={0x14, 0x84, 0x0, {0x0, 0x0, 0x0, 0x200}}], 0x14}], 0x1, 0x0) 17:47:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x21, 0x0, "bfd1a1b0"}}]}, 0x13c}}, 0x0) 17:47:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0137080000000000000009"], 0x2c}}, 0x0) 17:47:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x3000004, 0x12, 0x1f}) 17:47:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x464, 0x0, 0x14, 0x0, 0x0, 0xf4030000, 0x39c, 0x1fc, 0x1fc, 0x39c, 0x1fc, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@private0, @local={0xfe, 0x37}, [], [], 'team0\x00', 'tunl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x48}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4c0) 17:47:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x21, 0x0, "bfd1a1b0"}}]}, 0x13c}}, 0x0) 17:47:54 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xfffffffffffffffe, 0x8}) 17:47:54 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000200)={0x1d, r3}, 0x18) 17:47:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x2, 0x4, 0x3d8, 0xffffffff, 0x0, 0x0, 0x210, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x108, 0x148, 0x0, {}, [@common=@unspec=@physdev={{0x58}, {'caif0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@udplite={{0x2c}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x434) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x2, 0x4, 0x3d8, 0xffffffff, 0x0, 0x0, 0x210, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x108, 0x148, 0x0, {}, [@common=@unspec=@physdev={{0x58}, {'caif0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@udplite={{0x2c}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x434) writev(r2, &(0x7f0000000440)=[{&(0x7f00000008c0)="31305e6a4e0a41875a7a6a511d588fb510116a6c1aa7e9cf9d1a005a354c9ce1", 0x20}], 0x1) writev(r1, &(0x7f0000001b00)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001800)="9239acca121f02b2c67fc487053ac272b4165f8c73385ef5c763665616e8ff81529ac7fccdbd6568c06329ea499bf8722f540250a82b1f91538e13", 0x3b}, {&(0x7f0000000200)="10aaae7cd9ecf5a273a75afafe9c54", 0xf}, {0x0}, {0x0}], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x304721, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) write$damon_init_regions(r3, &(0x7f00000002c0)={{' ', r4}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) move_mount(r3, &(0x7f00000001c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x65) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYBLOB="08000000000000000900000000000000090000000000000000000000000000005800000000000000040000000000000006000000000000000e88002016000000060000000000000009000000000000000400000000000000fe000000000000002000000000000000000000000000000000000000000000000000000000000000000000ca35000000"]) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)=0x200, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x1000590, 0x4) unshare(0x6c060000) [ 2492.681025][T10013] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 17:47:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x21, 0x0, "bfd1a1b0"}}]}, 0x13c}}, 0x0) 17:47:54 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x6, 0x3ff) 17:47:54 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xfffffffffffffffe, 0x8}) 17:47:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000200)="92", 0x1}], 0x1, &(0x7f0000001340)=[@init={0x14, 0x84, 0x0, {0x0, 0x0, 0x0, 0x200}}], 0x14}], 0x1, 0x0) 17:47:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x464, 0x0, 0x14, 0x0, 0x0, 0xf4030000, 0x39c, 0x1fc, 0x1fc, 0x39c, 0x1fc, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@private0, @local={0xfe, 0x37}, [], [], 'team0\x00', 'tunl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x48}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4c0) 17:47:54 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xfffffffffffffffe, 0x8}) 17:47:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x21, 0x0, "bfd1a1b0"}}]}, 0x13c}}, 0x0) 17:47:54 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x6, 0x3ff) [ 2492.994897][T10030] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 17:47:54 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xfffffffffffffffe, 0x8}) 17:47:54 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x6, 0x3ff) 17:47:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x464, 0x0, 0x14, 0x0, 0x0, 0xf4030000, 0x39c, 0x1fc, 0x1fc, 0x39c, 0x1fc, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@private0, @local={0xfe, 0x37}, [], [], 'team0\x00', 'tunl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x48}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4c0) [ 2493.273880][T10044] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 17:47:55 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x2, 0x4, 0x3d8, 0xffffffff, 0x0, 0x0, 0x210, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x108, 0x148, 0x0, {}, [@common=@unspec=@physdev={{0x58}, {'caif0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@udplite={{0x2c}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x434) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x2, 0x4, 0x3d8, 0xffffffff, 0x0, 0x0, 0x210, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x108, 0x148, 0x0, {}, [@common=@unspec=@physdev={{0x58}, {'caif0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@udplite={{0x2c}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x434) writev(r2, &(0x7f0000000440)=[{&(0x7f00000008c0)="31305e6a4e0a41875a7a6a511d588fb510116a6c1aa7e9cf9d1a005a354c9ce1", 0x20}], 0x1) writev(r1, &(0x7f0000001b00)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001800)="9239acca121f02b2c67fc487053ac272b4165f8c73385ef5c763665616e8ff81529ac7fccdbd6568c06329ea499bf8722f540250a82b1f91538e13", 0x3b}, {&(0x7f0000000200)="10aaae7cd9ecf5a273a75afafe9c54", 0xf}, {0x0}, {0x0}], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x304721, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) write$damon_init_regions(r3, &(0x7f00000002c0)={{' ', r4}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) move_mount(r3, &(0x7f00000001c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x65) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYBLOB="08000000000000000900000000000000090000000000000000000000000000005800000000000000040000000000000006000000000000000e88002016000000060000000000000009000000000000000400000000000000fe000000000000002000000000000000000000000000000000000000000000000000000000000000000000ca35000000"]) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)=0x200, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x1000590, 0x4) unshare(0x6c060000) 17:47:55 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x6, 0x3ff) 17:47:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x4000000}) close_range(r2, 0xffffffffffffffff, 0x0) 17:47:55 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x6, 0x3ff) 17:47:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000000)=0x8) 17:47:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x464, 0x0, 0x14, 0x0, 0x0, 0xf4030000, 0x39c, 0x1fc, 0x1fc, 0x39c, 0x1fc, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@private0, @local={0xfe, 0x37}, [], [], 'team0\x00', 'tunl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x48}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4c0) [ 2493.695085][T10050] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 17:47:55 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x6, 0x3ff) 17:47:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000000)=0x8) 17:47:55 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x6, 0x3ff) 17:47:55 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x2, 0x4, 0x3d8, 0xffffffff, 0x0, 0x0, 0x210, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x108, 0x148, 0x0, {}, [@common=@unspec=@physdev={{0x58}, {'caif0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@udplite={{0x2c}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x434) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x2, 0x4, 0x3d8, 0xffffffff, 0x0, 0x0, 0x210, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x108, 0x148, 0x0, {}, [@common=@unspec=@physdev={{0x58}, {'caif0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@udplite={{0x2c}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x434) writev(r2, &(0x7f0000000440)=[{&(0x7f00000008c0)="31305e6a4e0a41875a7a6a511d588fb510116a6c1aa7e9cf9d1a005a354c9ce1", 0x20}], 0x1) writev(r1, &(0x7f0000001b00)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001800)="9239acca121f02b2c67fc487053ac272b4165f8c73385ef5c763665616e8ff81529ac7fccdbd6568c06329ea499bf8722f540250a82b1f91538e13", 0x3b}, {&(0x7f0000000200)="10aaae7cd9ecf5a273a75afafe9c54", 0xf}, {0x0}, {0x0}], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x304721, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) write$damon_init_regions(r3, &(0x7f00000002c0)={{' ', r4}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) move_mount(r3, &(0x7f00000001c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x65) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYBLOB="08000000000000000900000000000000090000000000000000000000000000005800000000000000040000000000000006000000000000000e88002016000000060000000000000009000000000000000400000000000000fe000000000000002000000000000000000000000000000000000000000000000000000000000000000000ca35000000"]) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)=0x200, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x1000590, 0x4) unshare(0x6c060000) 17:47:55 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000040)) 17:47:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@acquire={0x124, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@loopback}, {{@in, @in=@broadcast}}}}, 0x124}}, 0x0) [ 2494.296514][T10073] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 17:47:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x2, 0x4, 0x3d8, 0xffffffff, 0x0, 0x0, 0x210, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x108, 0x148, 0x0, {}, [@common=@unspec=@physdev={{0x58}, {'caif0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@udplite={{0x2c}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x434) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x2, 0x4, 0x3d8, 0xffffffff, 0x0, 0x0, 0x210, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x108, 0x148, 0x0, {}, [@common=@unspec=@physdev={{0x58}, {'caif0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@udplite={{0x2c}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x434) writev(r2, &(0x7f0000000440)=[{&(0x7f00000008c0)="31305e6a4e0a41875a7a6a511d588fb510116a6c1aa7e9cf9d1a005a354c9ce1", 0x20}], 0x1) writev(r1, &(0x7f0000001b00)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001800)="9239acca121f02b2c67fc487053ac272b4165f8c73385ef5c763665616e8ff81529ac7fccdbd6568c06329ea499bf8722f540250a82b1f91538e13", 0x3b}, {&(0x7f0000000200)="10aaae7cd9ecf5a273a75afafe9c54", 0xf}, {0x0}, {0x0}], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x304721, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) write$damon_init_regions(r3, &(0x7f00000002c0)={{' ', r4}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) move_mount(r3, &(0x7f00000001c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x65) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYBLOB="08000000000000000900000000000000090000000000000000000000000000005800000000000000040000000000000006000000000000000e88002016000000060000000000000009000000000000000400000000000000fe000000000000002000000000000000000000000000000000000000000000000000000000000000000000ca35000000"]) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)=0x200, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x1000590, 0x4) unshare(0x6c060000) 17:47:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000000)=0x8) 17:47:56 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000040)) 17:47:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@acquire={0x124, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@loopback}, {{@in, @in=@broadcast}}}}, 0x124}}, 0x0) 17:47:56 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x4000000}) close_range(r2, 0xffffffffffffffff, 0x0) [ 2495.353088][T10081] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 17:47:57 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000040)) 17:47:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000000)=0x8) 17:47:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@acquire={0x124, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@loopback}, {{@in, @in=@broadcast}}}}, 0x124}}, 0x0) 17:47:57 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x2, 0x4, 0x3d8, 0xffffffff, 0x0, 0x0, 0x210, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x108, 0x148, 0x0, {}, [@common=@unspec=@physdev={{0x58}, {'caif0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@udplite={{0x2c}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x434) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x2, 0x4, 0x3d8, 0xffffffff, 0x0, 0x0, 0x210, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x108, 0x148, 0x0, {}, [@common=@unspec=@physdev={{0x58}, {'caif0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@udplite={{0x2c}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x434) writev(r2, &(0x7f0000000440)=[{&(0x7f00000008c0)="31305e6a4e0a41875a7a6a511d588fb510116a6c1aa7e9cf9d1a005a354c9ce1", 0x20}], 0x1) writev(r1, &(0x7f0000001b00)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001800)="9239acca121f02b2c67fc487053ac272b4165f8c73385ef5c763665616e8ff81529ac7fccdbd6568c06329ea499bf8722f540250a82b1f91538e13", 0x3b}, {&(0x7f0000000200)="10aaae7cd9ecf5a273a75afafe9c54", 0xf}, {0x0}, {0x0}], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x304721, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) write$damon_init_regions(r3, &(0x7f00000002c0)={{' ', r4}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) move_mount(r3, &(0x7f00000001c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x65) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYBLOB="08000000000000000900000000000000090000000000000000000000000000005800000000000000040000000000000006000000000000000e88002016000000060000000000000009000000000000000400000000000000fe000000000000002000000000000000000000000000000000000000000000000000000000000000000000ca35000000"]) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)=0x200, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x1000590, 0x4) unshare(0x6c060000) [ 2495.668616][T10093] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 17:47:57 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000040)) 17:47:57 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x4000000}) close_range(r2, 0xffffffffffffffff, 0x0) 17:47:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@acquire={0x124, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@loopback}, {{@in, @in=@broadcast}}}}, 0x124}}, 0x0) [ 2496.103091][T10102] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 17:47:58 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x2, 0x4, 0x3d8, 0xffffffff, 0x0, 0x0, 0x210, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x108, 0x148, 0x0, {}, [@common=@unspec=@physdev={{0x58}, {'caif0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@udplite={{0x2c}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x434) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x2, 0x4, 0x3d8, 0xffffffff, 0x0, 0x0, 0x210, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x108, 0x148, 0x0, {}, [@common=@unspec=@physdev={{0x58}, {'caif0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@udplite={{0x2c}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x434) writev(r2, &(0x7f0000000440)=[{&(0x7f00000008c0)="31305e6a4e0a41875a7a6a511d588fb510116a6c1aa7e9cf9d1a005a354c9ce1", 0x20}], 0x1) writev(r1, &(0x7f0000001b00)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001800)="9239acca121f02b2c67fc487053ac272b4165f8c73385ef5c763665616e8ff81529ac7fccdbd6568c06329ea499bf8722f540250a82b1f91538e13", 0x3b}, {&(0x7f0000000200)="10aaae7cd9ecf5a273a75afafe9c54", 0xf}, {0x0}, {0x0}], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x304721, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) write$damon_init_regions(r3, &(0x7f00000002c0)={{' ', r4}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) move_mount(r3, &(0x7f00000001c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x65) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYBLOB="08000000000000000900000000000000090000000000000000000000000000005800000000000000040000000000000006000000000000000e88002016000000060000000000000009000000000000000400000000000000fe000000000000002000000000000000000000000000000000000000000000000000000000000000000000ca35000000"]) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)=0x200, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x1000590, 0x4) unshare(0x6c060000) 17:47:58 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x80) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0xc784}], 0xd}, 0x8000000}], 0x400000000000078, 0x920000000000090d) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='aio\x00', 0x2002, 0x0) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) 17:47:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4a}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'vlan0\x00'}) 17:47:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x4000000}) close_range(r2, 0xffffffffffffffff, 0x0) 17:47:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4a}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'vlan0\x00'}) 17:47:59 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x4000000}) close_range(r2, 0xffffffffffffffff, 0x0) 17:47:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4a}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'vlan0\x00'}) 17:48:00 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x4000000}) close_range(r2, 0xffffffffffffffff, 0x0) 17:48:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x4000000}) close_range(r2, 0xffffffffffffffff, 0x0) 17:48:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4a}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'vlan0\x00'}) 17:48:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4a}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'vlan0\x00'}) 17:48:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x2, 0x4, 0x3d8, 0xffffffff, 0x0, 0x0, 0x210, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x108, 0x148, 0x0, {}, [@common=@unspec=@physdev={{0x58}, {'caif0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@udplite={{0x2c}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x434) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x2, 0x4, 0x3d8, 0xffffffff, 0x0, 0x0, 0x210, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x108, 0x148, 0x0, {}, [@common=@unspec=@physdev={{0x58}, {'caif0\x00', {}, 'bridge_slave_0\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@udplite={{0x2c}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x434) writev(r2, &(0x7f0000000440)=[{&(0x7f00000008c0)="31305e6a4e0a41875a7a6a511d588fb510116a6c1aa7e9cf9d1a005a354c9ce1", 0x20}], 0x1) writev(r1, &(0x7f0000001b00)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001800)="9239acca121f02b2c67fc487053ac272b4165f8c73385ef5c763665616e8ff81529ac7fccdbd6568c06329ea499bf8722f540250a82b1f91538e13", 0x3b}, {&(0x7f0000000200)="10aaae7cd9ecf5a273a75afafe9c54", 0xf}, {0x0}, {0x0}], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x304721, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) write$damon_init_regions(r3, &(0x7f00000002c0)={{' ', r4}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) move_mount(r3, &(0x7f00000001c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x65) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYBLOB="08000000000000000900000000000000090000000000000000000000000000005800000000000000040000000000000006000000000000000e88002016000000060000000000000009000000000000000400000000000000fe000000000000002000000000000000000000000000000000000000000000000000000000000000000000ca35000000"]) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)=0x200, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x1000590, 0x4) unshare(0x6c060000) 17:48:04 executing program 0: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r3, 0x0) tkill(r0, 0x14) 17:48:04 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x80) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0xc784}], 0xd}, 0x8000000}], 0x400000000000078, 0x920000000000090d) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='aio\x00', 0x2002, 0x0) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) 17:48:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4a}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'vlan0\x00'}) 17:48:04 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x80) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0xc784}], 0xd}, 0x8000000}], 0x400000000000078, 0x920000000000090d) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='aio\x00', 0x2002, 0x0) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) 17:48:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x80) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0xc784}], 0xd}, 0x8000000}], 0x400000000000078, 0x920000000000090d) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='aio\x00', 0x2002, 0x0) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) 17:48:05 executing program 1: execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1400) 17:48:05 executing program 0: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r3, 0x0) tkill(r0, 0x14) 17:48:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4a}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'vlan0\x00'}) 17:48:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newneigh={0x11, 0x1a, 0x521}, 0x1c}}, 0x0) 17:48:05 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket$rds(0x15, 0x5, 0x0) io_submit(r0, 0x2, &(0x7f00000006c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, 0x0]) 17:48:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newneigh={0x11, 0x1a, 0x521}, 0x1c}}, 0x0) 17:48:05 executing program 0: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r3, 0x0) tkill(r0, 0x14) 17:48:05 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket$rds(0x15, 0x5, 0x0) io_submit(r0, 0x2, &(0x7f00000006c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, 0x0]) 17:48:07 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x80) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0xc784}], 0xd}, 0x8000000}], 0x400000000000078, 0x920000000000090d) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='aio\x00', 0x2002, 0x0) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) 17:48:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newneigh={0x11, 0x1a, 0x521}, 0x1c}}, 0x0) 17:48:07 executing program 0: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r3, 0x0) tkill(r0, 0x14) 17:48:07 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket$rds(0x15, 0x5, 0x0) io_submit(r0, 0x2, &(0x7f00000006c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, 0x0]) 17:48:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x80) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0xc784}], 0xd}, 0x8000000}], 0x400000000000078, 0x920000000000090d) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='aio\x00', 0x2002, 0x0) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) 17:48:07 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x80) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0xc784}], 0xd}, 0x8000000}], 0x400000000000078, 0x920000000000090d) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='aio\x00', 0x2002, 0x0) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) 17:48:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newneigh={0x11, 0x1a, 0x521}, 0x1c}}, 0x0) 17:48:07 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket$rds(0x15, 0x5, 0x0) io_submit(r0, 0x2, &(0x7f00000006c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, 0x0]) 17:48:07 executing program 0: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000a80)='./file0\x00', 0x0, 0x8a1029, 0x0) 17:48:08 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000640)={{@my=0x0}, {@my=0x0}, 0x400, "4501272ae8fef5707f18c9148efd3d93d423c9d0dc5befbb2d5d5b7c3bbce452e00c77593b67a0a8dff433d73dc5f40e33dc3e15a5cc4497b947d1e0bc0929c3551bb74955d8c2ba0361050a9b81b63a3c72de427c3dd0fdf8fc268f59d0d74779a5e239039692c11fc011b86fd5dd54dbc84a4315b0c3308c4664a21193588bfa4493d9cb92ce7affc634e26be01572dca9209469de4a54c3a53afb9fca3e017cdde631257fd963f3131d58942cae025315f09202d9f5a034f1d7dd81b58d8ea539fa8ede6cad01bf8c3c76561bab78cc2f628e36aa628bcec1ea3925dbb2eed46e79f2b679cfde6f1a1d1f69ae5122169970d0ca34066195dcc7de5c36d2e1513ef1c45d00531eaec48274030261cc77fa99e68f5dda0bbbd0158106f23df9df93c0688d21c384d6748c623bd09f9f42d8c473bd0321e3e636104955a194160e8de56b0097f5725610df28a8c3e4c9322d9b96be03e952cc02ffc54002ad2266cc26ee7decd62df791b0d3e95f9b2e03244ee0eefdd25affcdf76fd4294d2336e391973e09dfac4be9c98ee7ce87e789d927182942532659dd8de4c3398778a2720f46991769fa9bb7d4e498ff6508ee21c840dab03adac679788cc409f8aad5c8affe7218f470e3e0e9b3136a3039bef78e6216fcc96fbab2d6b2111a36e2b509b98358375ab14bf84d405ea78869a414874efca5c8928d330d256a17ddd47c81dd9bae3fe6a2b10f8ed9604ea5e8cb763378793ee4cb6efcd7463aa55e3ad3bd346401726e8a780d4417b96028a900000000dd5f149d446dbba757238edd336be60000056f80238cce10525f57e73ad0bdf23d45991c9d3e0fd49828dbadddc02bd82a9227c722a95eee806e5f099fa2890b405df94e8633f8517bc953cf0640ea42ee21da1170a59a3c078e711f03f3ecba5b932597f6a0c18b48ea308cf2245bde5266b53269d51a5ee1bb36ae07fb42e78d13bc4c349f4e67a6b8bf77c05df7a595b579841edc293bbc514d5d4de65b07896d5d874aae73b72e1331651b29d8a4d4f2a6ea0424902007d5c070dd54d3f884d41541e3717726a351bba6c23941365050bab824900d03c69e08b4b2fd3a6a295378e031907c3cda1fdbe25f2291def1456e4759a4a739d108664973f899e753d5e0e77d2e8613f6297a46c870867f7df4f9846e8ba8ea1264e9bd6eb530b080c367055ceb6b2b472540a9252b951af3906447e11fb312d7faf453a776a7ba36059ee398382b65e1be673f9d600a162c03e2d0c3139634211a6895a7cbb4a7461005c04780eef0dd9ba480ace85eed5250067ba7d5c86a4e2db462b98dbb1ae251b88235689b5b608fde9d7b2ee9c0d46440b3dde57237c642e6c39c0e3ee6a267107852164cfe650a748440de7e9911691aa870133d5a86b5fbba3f434101e62700"}, 0x418}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7cb, &(0x7f00000000c0)={&(0x7f00000001c0)={{@my=0x1}, {@local}, 0x400, "e27b8588882e9d39626c5e742d5c96cc9086e671c00efffc22b2e6fceb2ec737b3540286f01d7f32b5f849c9e1535f3e3a35d79c24c4b492314017ff8d2b2aef0208951093ef2c40c54d2bb9e4370f6516e85b1c6936dae83941285a9baba86c524fcc2ff30b6c9c06c1112ad67b75dc89698fc5704ef884ca08cdf0fc2b6b368d958bf26997d9aad178640d792e4b85a507d79b255235b500405310c50f3e7f5f11c526f80e7a98ef760e76d5e4c0a0d1b92e14f8029317b1b39ab17c2196270a850f53dd13be4167989bf2c60bf0a17444523292abf96151af0fa31fc49655dcd3993ffaa0dd73bc0a126fb98fc76c53a165e09e57e7b7f6be1128d0df042b07b520396363c6c9cd2a235dbaa3f120b56abee3195e36b5d362759abf8f05b70ad7b4f835fe613dd2f991a45dab34d2625676f57e4f57520a147ce776fa280c87e57cd873bbd7701d6a859169c29f0bcc0ecd5738b14c98f0f3c273f255ec4f3a8d69e8ba0bf1844ca2d86fd437a6a9640c1dc7f3773ae1cfbe31424c997eaf6d58af074de85c09ed9991b7a8e3e74a9ed6f98109d3555cdf4ac434183ba3230261e91bccd982ea255f63a2e670ad6f8edbdabfdd37874882daac43afbef45fcc7a1c493717a4d1a08f9486312c14f9ede7b3b01c6336a607ac59bdee16f63039b190cadba89da7dae4eadee5e82c01f0b02b6ae6960837e4a20ff61ca8b9623ee9b740603aaeff169546086a85bb78c1064801181763f6ca80bbddc9c6dc5dfd5116337f83ab7f48a605a9d55a9bddfccba0b08b70173a93f8c43a3b790bf8790bf1c2fa9619fee91c0e4b6a3fc47fecd8486ff9f46bc0428090a7afd384828652965585d5eaaf044e67efd088217dd621ff29f6ba081337329ec39e9b6f5afe67920de473aaefda18881295acd8b9e444f5d3cc017a8e4904981fe3d3d2ea5234e78d7136131baa0a03a86c28a0ba0b5d7d5351a6c1bc2c4eb9fe4e8edcffbf5a0bceca4ad48e0a940583be249b7dc85c3f8c97309c6ed96d8090b19d63a18f78da1d47f60d071f6bbad3eb399c9c37104db51d115d9ee82ef4b0ee24688b13b5d72379602ff8adf318e4dbdd498a1b6cfeaf43f45260b3b146c22a00adc6fed1592614d759cb8f667282e9ba6751a15084a8df79e4fc2f584a246e6cb078b0960a9a5068e3d345a5677eca02e55f9adeeb8f19e24d0fbcfb44df2b6f6acc340c11abd2c0be38eb65de4b4ba0f33aed4436b0b4bb8abe1279e9277fd5402c548a1a352858f8da0dc8d7fc6ed36ed2b0745c115d3cc6b50457ffff0dbeb85f9e611d688ea47298f8cf9602e283de9ff8208b1f3ebece040e6c7ef6fe5877db487446385e432b0d5f04be8d36f538400bdd22fe45052ca34c3bd6511c3dd408d678648c75f43989076b25287499e7027888fae4f09d53ed52e3a0d20f8f5c9e"}, 0x418}) 17:48:08 executing program 2: syz_open_dev$vcsa(&(0x7f0000001740), 0x0, 0x4400) 17:48:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='mqueue\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000540)='./file0/bus\x00', 0x0) mq_notify(r0, 0x0) 17:48:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0x3, 0x0, 0x0, @private2}], 0x1c) 17:48:10 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x80) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0xc784}], 0xd}, 0x8000000}], 0x400000000000078, 0x920000000000090d) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='aio\x00', 0x2002, 0x0) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) 17:48:10 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000640)={{@my=0x0}, {@my=0x0}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7cb, &(0x7f00000000c0)={&(0x7f00000001c0)={{@my=0x1}, {@local}, 0x400, "e27b8588882e9d39626c5e742d5c96cc9086e671c00efffc22b2e6fceb2ec737b3540286f01d7f32b5f849c9e1535f3e3a35d79c24c4b492314017ff8d2b2aef0208951093ef2c40c54d2bb9e4370f6516e85b1c6936dae83941285a9baba86c524fcc2ff30b6c9c06c1112ad67b75dc89698fc5704ef884ca08cdf0fc2b6b368d958bf26997d9aad178640d792e4b85a507d79b255235b500405310c50f3e7f5f11c526f80e7a98ef760e76d5e4c0a0d1b92e14f8029317b1b39ab17c2196270a850f53dd13be4167989bf2c60bf0a17444523292abf96151af0fa31fc49655dcd3993ffaa0dd73bc0a126fb98fc76c53a165e09e57e7b7f6be1128d0df042b07b520396363c6c9cd2a235dbaa3f120b56abee3195e36b5d362759abf8f05b70ad7b4f835fe613dd2f991a45dab34d2625676f57e4f57520a147ce776fa280c87e57cd873bbd7701d6a859169c29f0bcc0ecd5738b14c98f0f3c273f255ec4f3a8d69e8ba0bf1844ca2d86fd437a6a9640c1dc7f3773ae1cfbe31424c997eaf6d58af074de85c09ed9991b7a8e3e74a9ed6f98109d3555cdf4ac434183ba3230261e91bccd982ea255f63a2e670ad6f8edbdabfdd37874882daac43afbef45fcc7a1c493717a4d1a08f9486312c14f9ede7b3b01c6336a607ac59bdee16f63039b190cadba89da7dae4eadee5e82c01f0b02b6ae6960837e4a20ff61ca8b9623ee9b740603aaeff169546086a85bb78c1064801181763f6ca80bbddc9c6dc5dfd5116337f83ab7f48a605a9d55a9bddfccba0b08b70173a93f8c43a3b790bf8790bf1c2fa9619fee91c0e4b6a3fc47fecd8486ff9f46bc0428090a7afd384828652965585d5eaaf044e67efd088217dd621ff29f6ba081337329ec39e9b6f5afe67920de473aaefda18881295acd8b9e444f5d3cc017a8e4904981fe3d3d2ea5234e78d7136131baa0a03a86c28a0ba0b5d7d5351a6c1bc2c4eb9fe4e8edcffbf5a0bceca4ad48e0a940583be249b7dc85c3f8c97309c6ed96d8090b19d63a18f78da1d47f60d071f6bbad3eb399c9c37104db51d115d9ee82ef4b0ee24688b13b5d72379602ff8adf318e4dbdd498a1b6cfeaf43f45260b3b146c22a00adc6fed1592614d759cb8f667282e9ba6751a15084a8df79e4fc2f584a246e6cb078b0960a9a5068e3d345a5677eca02e55f9adeeb8f19e24d0fbcfb44df2b6f6acc340c11abd2c0be38eb65de4b4ba0f33aed4436b0b4bb8abe1279e9277fd5402c548a1a352858f8da0dc8d7fc6ed36ed2b0745c115d3cc6b50457ffff0dbeb85f9e611d688ea47298f8cf9602e283de9ff8208b1f3ebece040e6c7ef6fe5877db487446385e432b0d5f04be8d36f538400bdd22fe45052ca34c3bd6511c3dd408d678648c75f43989076b25287499e7027888fae4f09d53ed52e3a0d20f8f5c9e"}, 0x418}) 17:48:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='mqueue\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000540)='./file0/bus\x00', 0x0) mq_notify(r0, 0x0) 17:48:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x80) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0xc784}], 0xd}, 0x8000000}], 0x400000000000078, 0x920000000000090d) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='aio\x00', 0x2002, 0x0) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) 17:48:10 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x91, 0x0, 0x0, 0x10001}, 0x80) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0xc784}], 0xd}, 0x8000000}], 0x400000000000078, 0x920000000000090d) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='aio\x00', 0x2002, 0x0) recvmmsg$unix(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/149, 0x95}], 0x1}}], 0x1, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) 17:48:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0x3, 0x0, 0x0, @private2}], 0x1c) 17:48:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='mqueue\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000540)='./file0/bus\x00', 0x0) mq_notify(r0, 0x0) 17:48:10 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000640)={{@my=0x0}, {@my=0x0}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7cb, &(0x7f00000000c0)={&(0x7f00000001c0)={{@my=0x1}, {@local}, 0x400, "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"}, 0x418}) 17:48:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0x3, 0x0, 0x0, @private2}], 0x1c) 17:48:11 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000640)={{@my=0x0}, {@my=0x0}, 0x400, "4501272ae8fef5707f18c9148efd3d93d423c9d0dc5befbb2d5d5b7c3bbce452e00c77593b67a0a8dff433d73dc5f40e33dc3e15a5cc4497b947d1e0bc0929c3551bb74955d8c2ba0361050a9b81b63a3c72de427c3dd0fdf8fc268f59d0d74779a5e239039692c11fc011b86fd5dd54dbc84a4315b0c3308c4664a21193588bfa4493d9cb92ce7affc634e26be01572dca9209469de4a54c3a53afb9fca3e017cdde631257fd963f3131d58942cae025315f09202d9f5a034f1d7dd81b58d8ea539fa8ede6cad01bf8c3c76561bab78cc2f628e36aa628bcec1ea3925dbb2eed46e79f2b679cfde6f1a1d1f69ae5122169970d0ca34066195dcc7de5c36d2e1513ef1c45d00531eaec48274030261cc77fa99e68f5dda0bbbd0158106f23df9df93c0688d21c384d6748c623bd09f9f42d8c473bd0321e3e636104955a194160e8de56b0097f5725610df28a8c3e4c9322d9b96be03e952cc02ffc54002ad2266cc26ee7decd62df791b0d3e95f9b2e03244ee0eefdd25affcdf76fd4294d2336e391973e09dfac4be9c98ee7ce87e789d927182942532659dd8de4c3398778a2720f46991769fa9bb7d4e498ff6508ee21c840dab03adac679788cc409f8aad5c8affe7218f470e3e0e9b3136a3039bef78e6216fcc96fbab2d6b2111a36e2b509b98358375ab14bf84d405ea78869a414874efca5c8928d330d256a17ddd47c81dd9bae3fe6a2b10f8ed9604ea5e8cb763378793ee4cb6efcd7463aa55e3ad3bd346401726e8a780d4417b96028a900000000dd5f149d446dbba757238edd336be60000056f80238cce10525f57e73ad0bdf23d45991c9d3e0fd49828dbadddc02bd82a9227c722a95eee806e5f099fa2890b405df94e8633f8517bc953cf0640ea42ee21da1170a59a3c078e711f03f3ecba5b932597f6a0c18b48ea308cf2245bde5266b53269d51a5ee1bb36ae07fb42e78d13bc4c349f4e67a6b8bf77c05df7a595b579841edc293bbc514d5d4de65b07896d5d874aae73b72e1331651b29d8a4d4f2a6ea0424902007d5c070dd54d3f884d41541e3717726a351bba6c23941365050bab824900d03c69e08b4b2fd3a6a295378e031907c3cda1fdbe25f2291def1456e4759a4a739d108664973f899e753d5e0e77d2e8613f6297a46c870867f7df4f9846e8ba8ea1264e9bd6eb530b080c367055ceb6b2b472540a9252b951af3906447e11fb312d7faf453a776a7ba36059ee398382b65e1be673f9d600a162c03e2d0c3139634211a6895a7cbb4a7461005c04780eef0dd9ba480ace85eed5250067ba7d5c86a4e2db462b98dbb1ae251b88235689b5b608fde9d7b2ee9c0d46440b3dde57237c642e6c39c0e3ee6a267107852164cfe650a748440de7e9911691aa870133d5a86b5fbba3f434101e62700"}, 0x418}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7cb, &(0x7f00000000c0)={&(0x7f00000001c0)={{@my=0x1}, {@local}, 0x400, "e27b8588882e9d39626c5e742d5c96cc9086e671c00efffc22b2e6fceb2ec737b3540286f01d7f32b5f849c9e1535f3e3a35d79c24c4b492314017ff8d2b2aef0208951093ef2c40c54d2bb9e4370f6516e85b1c6936dae83941285a9baba86c524fcc2ff30b6c9c06c1112ad67b75dc89698fc5704ef884ca08cdf0fc2b6b368d958bf26997d9aad178640d792e4b85a507d79b255235b500405310c50f3e7f5f11c526f80e7a98ef760e76d5e4c0a0d1b92e14f8029317b1b39ab17c2196270a850f53dd13be4167989bf2c60bf0a17444523292abf96151af0fa31fc49655dcd3993ffaa0dd73bc0a126fb98fc76c53a165e09e57e7b7f6be1128d0df042b07b520396363c6c9cd2a235dbaa3f120b56abee3195e36b5d362759abf8f05b70ad7b4f835fe613dd2f991a45dab34d2625676f57e4f57520a147ce776fa280c87e57cd873bbd7701d6a859169c29f0bcc0ecd5738b14c98f0f3c273f255ec4f3a8d69e8ba0bf1844ca2d86fd437a6a9640c1dc7f3773ae1cfbe31424c997eaf6d58af074de85c09ed9991b7a8e3e74a9ed6f98109d3555cdf4ac434183ba3230261e91bccd982ea255f63a2e670ad6f8edbdabfdd37874882daac43afbef45fcc7a1c493717a4d1a08f9486312c14f9ede7b3b01c6336a607ac59bdee16f63039b190cadba89da7dae4eadee5e82c01f0b02b6ae6960837e4a20ff61ca8b9623ee9b740603aaeff169546086a85bb78c1064801181763f6ca80bbddc9c6dc5dfd5116337f83ab7f48a605a9d55a9bddfccba0b08b70173a93f8c43a3b790bf8790bf1c2fa9619fee91c0e4b6a3fc47fecd8486ff9f46bc0428090a7afd384828652965585d5eaaf044e67efd088217dd621ff29f6ba081337329ec39e9b6f5afe67920de473aaefda18881295acd8b9e444f5d3cc017a8e4904981fe3d3d2ea5234e78d7136131baa0a03a86c28a0ba0b5d7d5351a6c1bc2c4eb9fe4e8edcffbf5a0bceca4ad48e0a940583be249b7dc85c3f8c97309c6ed96d8090b19d63a18f78da1d47f60d071f6bbad3eb399c9c37104db51d115d9ee82ef4b0ee24688b13b5d72379602ff8adf318e4dbdd498a1b6cfeaf43f45260b3b146c22a00adc6fed1592614d759cb8f667282e9ba6751a15084a8df79e4fc2f584a246e6cb078b0960a9a5068e3d345a5677eca02e55f9adeeb8f19e24d0fbcfb44df2b6f6acc340c11abd2c0be38eb65de4b4ba0f33aed4436b0b4bb8abe1279e9277fd5402c548a1a352858f8da0dc8d7fc6ed36ed2b0745c115d3cc6b50457ffff0dbeb85f9e611d688ea47298f8cf9602e283de9ff8208b1f3ebece040e6c7ef6fe5877db487446385e432b0d5f04be8d36f538400bdd22fe45052ca34c3bd6511c3dd408d678648c75f43989076b25287499e7027888fae4f09d53ed52e3a0d20f8f5c9e"}, 0x418}) 17:48:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='mqueue\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000540)='./file0/bus\x00', 0x0) mq_notify(r0, 0x0) 17:48:11 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x86, 0x81, 0x56, 0x40, 0xa2c, 0x8, 0x390b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xba, 0x24, 0xa9}}]}}]}}, 0x0) [ 2509.913010][T10728] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2510.283228][T10728] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=39.0b [ 2510.299618][T10728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2510.343853][T10728] usb 2-1: config 0 descriptor?? [ 2510.404848][T10728] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now attached [ 2510.607250][T10728] usb 2-1: USB disconnect, device number 38 [ 2510.618238][T10728] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now disconnected 17:48:13 executing program 5: r0 = memfd_create(&(0x7f0000000800)='\x01\fD\xd1q\xd23\x00\x00\xbf\xecs \xc5\xb55nVg\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83rz\xc0\x03\x00\x00\x00\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZ\x8bp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P9(\xe1-q \xb3\x80\xb9\xdfj\xed\xb9_o\xa6\x04\xf5\x9f\x04\xf1\xd5\xe3\xfa\xfd\xff\xbf\xff\x7f\x00\x00\x00\x00y\xb7\xbe\xf5\xcc\a\fM\xa9\xcbX\x891\xed\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\xbcI\xbf\xac*\xb4\xed\xf0^\x935\xeb=\xc7\x82;\xb32;\xc5\xa3\xc8\xb9\xf2\xe5\xf4\x93[\x91F\x83?\xfe\xd9\x7ffvQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\x81\xc0m}O\xfd\xe0\x05$\xcd\xfdkMu\x9bQ\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89bmY\xb9O\x8f\xc3\xf6a\xba=\xed\x84\xf3\x8c#X0\x94T\x10\x9dx@\xce:]\xb68\xa2W\xcb\x86\b#s\xb4q6\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4bT\xc1.\xfc\xd4\xcay)$\n\x05\xd1\xc5V\x91\xe3W\x10r\x9b~n`z\x8c\x16c\xa1d\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x91\x19\xd5\xa1\xce)?r\x01\t\x8c\xa1t]\xb0\xd1\x9e\x8aZ1\xb4R,\x1d\xb8w\xa6\x93-w\x1e1}\xf8G\xe4\x8dI\x8co\xb5N\x12\xf5\xf7\x93\x88\xbd\x9d\x00\xedL\x8ea\x92l\x9c\x1ce\x11\x1e\x8d\x12\xa8\x8a\xc0\"\'\xb7Q\x1dp\xd1\x87 \xd3$U\xdfyx1\xfe\xdd\x1d \xe9\xe7\xbc\xff(\x02\x82\x97\xafJ\xeas\xfc)\x05\xc9G\xaf\xa1=L\xfdg-\x06\x89\x17\'F\"\x86\x0e\f\xde\xfan\xaf\x8e\x8f\xa2-l d\xa1O\xc3nZ\xf7\x06\xeb\x04\x0e\xa8\xa5Z7[\xbd\xfa\xbfH}\xcci\xb8~\x86\x97C\xa5\xbb,_\xee\xa2V\xa8\xacp\xe9r\xfcxi\xc0\xd1D\xe69C\xc4A\xed\xf4\x10\xab\xff?\xa9\xa3\xe7@b\x93\xb9\xdb\x14\xd8\x8d\x91@2(\xf7\xaa\x8b\xb6\xf9\xee\x18j\xa6\xa5\x01\x87\xcc\x92e\xfbQ\xbb\x01\x8d\xef\xd3\xa6\x95\xab&P\x05`&D\x1c\xf7F\xfbm\t\xaf\xf0\xb9\xa8n\xf2\n\xb7\xe7\xc2I\x1fs\xf1\x01;BC\x03(\x8d&\x80\x98Z\xed=O\xb1\x1en\x98F\x96\x15\xae\x82\xedBC\xb1\xd9Q\xf1\xb4\xd2\xd1\xcb\x8e\x86\xedq:o\bW\x9a\x96\xb1]Ha\xa7y\xbb&\x95\x90\xd5(\xa8\x1dt\xc7\x0fl\b\xb37\xc5Y\xbe\xd6\xed\xe1\x06|(q]\xb2\x03\x00\xd0\x17\xe8\xe2\xc6\x84{\xa5\x03\x19mAr`\x1d\xe5).*\x1f@\x1d&;\xaf\x01\x02\x7f`\xd6', 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000580)='\a', 0x1}], 0x1) r1 = dup(r0) sendfile(r0, r1, &(0x7f0000000080), 0x20000080000001) prctl$PR_SET_SECCOMP(0xf, 0x20ffffff, 0x0) 17:48:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = socket(0x1, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="00060000000000fa270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r13, @ANYBLOB="451f0200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 17:48:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0x3, 0x0, 0x0, @private2}], 0x1c) 17:48:13 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x86, 0x81, 0x56, 0x40, 0xa2c, 0x8, 0x390b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xba, 0x24, 0xa9}}]}}]}}, 0x0) 17:48:13 executing program 3: rt_sigaction(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000280)) 17:48:13 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001000)={0x0}, 0x1c) remap_file_pages(&(0x7f00009c4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x10000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 17:48:13 executing program 3: rt_sigaction(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000280)) [ 2511.913242][T10261] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 17:48:13 executing program 2: syz_clone(0x560a0000, 0x0, 0x0, 0x0, 0x0, 0x0) 17:48:13 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001000)={0x0}, 0x1c) remap_file_pages(&(0x7f00009c4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x10000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) [ 2512.021170][T10269] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.0'. 17:48:13 executing program 3: rt_sigaction(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000280)) 17:48:13 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001000)={0x0}, 0x1c) remap_file_pages(&(0x7f00009c4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x10000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) [ 2512.152950][T10728] usb 2-1: new high-speed USB device number 39 using dummy_hcd 17:48:13 executing program 3: rt_sigaction(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000280)) [ 2512.275014][T10273] bond11: (slave macvlan2): Enslaving as an active interface with a down link [ 2512.347836][T10261] bridge39: entered promiscuous mode [ 2512.363098][T10261] bridge39: entered allmulticast mode [ 2512.401986][T10269] bond11: (slave vlan0): making interface the new active one [ 2512.415836][T10269] bond11: (slave vlan0): Enslaving as an active interface with an up link [ 2512.513978][T10728] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=39.0b [ 2512.533413][T10728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2512.562252][T10728] usb 2-1: config 0 descriptor?? [ 2512.604789][T10728] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now attached 17:48:14 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001000)={0x0}, 0x1c) remap_file_pages(&(0x7f00009c4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x10000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 17:48:14 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001000)={0x0}, 0x1c) remap_file_pages(&(0x7f00009c4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x10000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 17:48:14 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x904aaa4bfca9bf8f, {{0x41}}}, 0x10) [ 2512.863469][T31605] usb 2-1: USB disconnect, device number 39 [ 2512.876201][T31605] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now disconnected 17:48:15 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x86, 0x81, 0x56, 0x40, 0xa2c, 0x8, 0x390b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xba, 0x24, 0xa9}}]}}]}}, 0x0) 17:48:15 executing program 5: r0 = memfd_create(&(0x7f0000000800)='\x01\fD\xd1q\xd23\x00\x00\xbf\xecs \xc5\xb55nVg\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83rz\xc0\x03\x00\x00\x00\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZ\x8bp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P9(\xe1-q \xb3\x80\xb9\xdfj\xed\xb9_o\xa6\x04\xf5\x9f\x04\xf1\xd5\xe3\xfa\xfd\xff\xbf\xff\x7f\x00\x00\x00\x00y\xb7\xbe\xf5\xcc\a\fM\xa9\xcbX\x891\xed\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\xbcI\xbf\xac*\xb4\xed\xf0^\x935\xeb=\xc7\x82;\xb32;\xc5\xa3\xc8\xb9\xf2\xe5\xf4\x93[\x91F\x83?\xfe\xd9\x7ffvQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\x81\xc0m}O\xfd\xe0\x05$\xcd\xfdkMu\x9bQ\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89bmY\xb9O\x8f\xc3\xf6a\xba=\xed\x84\xf3\x8c#X0\x94T\x10\x9dx@\xce:]\xb68\xa2W\xcb\x86\b#s\xb4q6\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4bT\xc1.\xfc\xd4\xcay)$\n\x05\xd1\xc5V\x91\xe3W\x10r\x9b~n`z\x8c\x16c\xa1d\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x91\x19\xd5\xa1\xce)?r\x01\t\x8c\xa1t]\xb0\xd1\x9e\x8aZ1\xb4R,\x1d\xb8w\xa6\x93-w\x1e1}\xf8G\xe4\x8dI\x8co\xb5N\x12\xf5\xf7\x93\x88\xbd\x9d\x00\xedL\x8ea\x92l\x9c\x1ce\x11\x1e\x8d\x12\xa8\x8a\xc0\"\'\xb7Q\x1dp\xd1\x87 \xd3$U\xdfyx1\xfe\xdd\x1d \xe9\xe7\xbc\xff(\x02\x82\x97\xafJ\xeas\xfc)\x05\xc9G\xaf\xa1=L\xfdg-\x06\x89\x17\'F\"\x86\x0e\f\xde\xfan\xaf\x8e\x8f\xa2-l d\xa1O\xc3nZ\xf7\x06\xeb\x04\x0e\xa8\xa5Z7[\xbd\xfa\xbfH}\xcci\xb8~\x86\x97C\xa5\xbb,_\xee\xa2V\xa8\xacp\xe9r\xfcxi\xc0\xd1D\xe69C\xc4A\xed\xf4\x10\xab\xff?\xa9\xa3\xe7@b\x93\xb9\xdb\x14\xd8\x8d\x91@2(\xf7\xaa\x8b\xb6\xf9\xee\x18j\xa6\xa5\x01\x87\xcc\x92e\xfbQ\xbb\x01\x8d\xef\xd3\xa6\x95\xab&P\x05`&D\x1c\xf7F\xfbm\t\xaf\xf0\xb9\xa8n\xf2\n\xb7\xe7\xc2I\x1fs\xf1\x01;BC\x03(\x8d&\x80\x98Z\xed=O\xb1\x1en\x98F\x96\x15\xae\x82\xedBC\xb1\xd9Q\xf1\xb4\xd2\xd1\xcb\x8e\x86\xedq:o\bW\x9a\x96\xb1]Ha\xa7y\xbb&\x95\x90\xd5(\xa8\x1dt\xc7\x0fl\b\xb37\xc5Y\xbe\xd6\xed\xe1\x06|(q]\xb2\x03\x00\xd0\x17\xe8\xe2\xc6\x84{\xa5\x03\x19mAr`\x1d\xe5).*\x1f@\x1d&;\xaf\x01\x02\x7f`\xd6', 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000580)='\a', 0x1}], 0x1) r1 = dup(r0) sendfile(r0, r1, &(0x7f0000000080), 0x20000080000001) prctl$PR_SET_SECCOMP(0xf, 0x20ffffff, 0x0) 17:48:15 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x904aaa4bfca9bf8f, {{0x41}}}, 0x10) 17:48:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = socket(0x1, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="00060000000000fa270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r13, @ANYBLOB="451f0200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 17:48:15 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001000)={0x0}, 0x1c) remap_file_pages(&(0x7f00009c4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x10000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 17:48:15 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001000)={0x0}, 0x1c) remap_file_pages(&(0x7f00009c4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x10000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 17:48:15 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x904aaa4bfca9bf8f, {{0x41}}}, 0x10) [ 2513.444328][T10300] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 17:48:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = socket(0x1, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="00060000000000fa270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r13, @ANYBLOB="451f0200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 17:48:15 executing program 4: r0 = request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000002c0)='\'!\x00', 0xfffffffffffffffe) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='syz', r0) 17:48:15 executing program 4: r0 = request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000002c0)='\'!\x00', 0xfffffffffffffffe) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='syz', r0) 17:48:15 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x904aaa4bfca9bf8f, {{0x41}}}, 0x10) [ 2513.703331][T10303] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2513.717674][ T902] usb 2-1: new high-speed USB device number 40 using dummy_hcd 17:48:15 executing program 4: r0 = request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000002c0)='\'!\x00', 0xfffffffffffffffe) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='syz', r0) [ 2513.936591][T10309] bond12: (slave macvlan3): Enslaving as an active interface with a down link [ 2513.961438][T10310] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2514.019767][T10312] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2514.057498][T10313] bridge40: entered promiscuous mode [ 2514.072467][T10313] bridge40: entered allmulticast mode [ 2514.083421][ T902] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=39.0b [ 2514.095994][ T902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2514.130021][ T902] usb 2-1: config 0 descriptor?? [ 2514.166226][T10314] bond23: (slave macvlan2): Enslaving as an active interface with a down link [ 2514.175449][ T902] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now attached [ 2514.225726][T10319] bridge30: entered promiscuous mode [ 2514.231279][T10319] bridge30: entered allmulticast mode [ 2514.301628][T10321] bond23: (slave vlan0): making interface the new active one [ 2514.320689][T10321] bond23: (slave vlan0): Enslaving as an active interface with an up link [ 2514.345655][T10300] bond12: (slave vlan1): making interface the new active one [ 2514.375078][T10300] bond12: (slave vlan1): Enslaving as an active interface with an up link [ 2514.418194][T31602] usb 2-1: USB disconnect, device number 40 [ 2514.426968][T31602] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now disconnected 17:48:16 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x86, 0x81, 0x56, 0x40, 0xa2c, 0x8, 0x390b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xba, 0x24, 0xa9}}]}}]}}, 0x0) 17:48:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0x8, 0x2}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1, 0x0, 0x0) 17:48:16 executing program 4: r0 = request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000002c0)='\'!\x00', 0xfffffffffffffffe) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='syz', r0) 17:48:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = socket(0x1, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="00060000000000fa270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r13, @ANYBLOB="451f0200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 17:48:16 executing program 5: r0 = memfd_create(&(0x7f0000000800)='\x01\fD\xd1q\xd23\x00\x00\xbf\xecs \xc5\xb55nVg\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83rz\xc0\x03\x00\x00\x00\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZ\x8bp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P9(\xe1-q \xb3\x80\xb9\xdfj\xed\xb9_o\xa6\x04\xf5\x9f\x04\xf1\xd5\xe3\xfa\xfd\xff\xbf\xff\x7f\x00\x00\x00\x00y\xb7\xbe\xf5\xcc\a\fM\xa9\xcbX\x891\xed\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\xbcI\xbf\xac*\xb4\xed\xf0^\x935\xeb=\xc7\x82;\xb32;\xc5\xa3\xc8\xb9\xf2\xe5\xf4\x93[\x91F\x83?\xfe\xd9\x7ffvQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\x81\xc0m}O\xfd\xe0\x05$\xcd\xfdkMu\x9bQ\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89bmY\xb9O\x8f\xc3\xf6a\xba=\xed\x84\xf3\x8c#X0\x94T\x10\x9dx@\xce:]\xb68\xa2W\xcb\x86\b#s\xb4q6\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4bT\xc1.\xfc\xd4\xcay)$\n\x05\xd1\xc5V\x91\xe3W\x10r\x9b~n`z\x8c\x16c\xa1d\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x91\x19\xd5\xa1\xce)?r\x01\t\x8c\xa1t]\xb0\xd1\x9e\x8aZ1\xb4R,\x1d\xb8w\xa6\x93-w\x1e1}\xf8G\xe4\x8dI\x8co\xb5N\x12\xf5\xf7\x93\x88\xbd\x9d\x00\xedL\x8ea\x92l\x9c\x1ce\x11\x1e\x8d\x12\xa8\x8a\xc0\"\'\xb7Q\x1dp\xd1\x87 \xd3$U\xdfyx1\xfe\xdd\x1d \xe9\xe7\xbc\xff(\x02\x82\x97\xafJ\xeas\xfc)\x05\xc9G\xaf\xa1=L\xfdg-\x06\x89\x17\'F\"\x86\x0e\f\xde\xfan\xaf\x8e\x8f\xa2-l d\xa1O\xc3nZ\xf7\x06\xeb\x04\x0e\xa8\xa5Z7[\xbd\xfa\xbfH}\xcci\xb8~\x86\x97C\xa5\xbb,_\xee\xa2V\xa8\xacp\xe9r\xfcxi\xc0\xd1D\xe69C\xc4A\xed\xf4\x10\xab\xff?\xa9\xa3\xe7@b\x93\xb9\xdb\x14\xd8\x8d\x91@2(\xf7\xaa\x8b\xb6\xf9\xee\x18j\xa6\xa5\x01\x87\xcc\x92e\xfbQ\xbb\x01\x8d\xef\xd3\xa6\x95\xab&P\x05`&D\x1c\xf7F\xfbm\t\xaf\xf0\xb9\xa8n\xf2\n\xb7\xe7\xc2I\x1fs\xf1\x01;BC\x03(\x8d&\x80\x98Z\xed=O\xb1\x1en\x98F\x96\x15\xae\x82\xedBC\xb1\xd9Q\xf1\xb4\xd2\xd1\xcb\x8e\x86\xedq:o\bW\x9a\x96\xb1]Ha\xa7y\xbb&\x95\x90\xd5(\xa8\x1dt\xc7\x0fl\b\xb37\xc5Y\xbe\xd6\xed\xe1\x06|(q]\xb2\x03\x00\xd0\x17\xe8\xe2\xc6\x84{\xa5\x03\x19mAr`\x1d\xe5).*\x1f@\x1d&;\xaf\x01\x02\x7f`\xd6', 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000580)='\a', 0x1}], 0x1) r1 = dup(r0) sendfile(r0, r1, &(0x7f0000000080), 0x20000080000001) prctl$PR_SET_SECCOMP(0xf, 0x20ffffff, 0x0) 17:48:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = socket(0x1, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="00060000000000fa270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r13, @ANYBLOB="451f0200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 17:48:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0x8, 0x2}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1, 0x0, 0x0) [ 2514.990851][T10326] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 17:48:16 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000600)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000580)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240401000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, 'aC7\a'}]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x20, &(0x7f0000000080)="9ae33c636253a123928639a10688e482e8f1b6e17ec8350000000020e6f50905") 17:48:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0x8, 0x2}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1, 0x0, 0x0) [ 2515.156686][T10331] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 17:48:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0x8, 0x2}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1, 0x0, 0x0) [ 2515.265859][T10335] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.2'. 17:48:17 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000cc0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) [ 2515.322793][ T902] usb 2-1: new high-speed USB device number 41 using dummy_hcd 17:48:17 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x3c}}, 0x0) [ 2515.373273][T31602] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2515.381067][T10336] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2515.507061][T10344] bond24: (slave macvlan3): Enslaving as an active interface with a down link [ 2515.575216][T10345] bond13: (slave macvlan4): Enslaving as an active interface with a down link [ 2515.606389][T10346] bridge31: entered promiscuous mode [ 2515.632298][T10346] bridge31: entered allmulticast mode [ 2515.683094][ T902] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=39.0b [ 2515.696343][T10350] bond24: (slave vlan9): making interface the new active one [ 2515.706537][ T902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2515.749756][ T902] usb 2-1: config 0 descriptor?? [ 2515.758280][T10350] bond24: (slave vlan9): Enslaving as an active interface with an up link [ 2515.773690][T31602] usb 5-1: config index 0 descriptor too short (expected 1060, got 36) [ 2515.788889][T10326] bridge41: entered promiscuous mode [ 2515.804985][ T902] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now attached [ 2515.806490][T31602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2515.852881][T10326] bridge41: entered allmulticast mode [ 2515.864712][T31602] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2515.891314][T31602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2515.900817][T10353] bond13: (slave vlan2): making interface the new active one [ 2515.922015][T31602] usb 5-1: config 0 descriptor?? [ 2515.943621][T10353] bond13: (slave vlan2): Enslaving as an active interface with an up link [ 2516.039637][T31605] usb 2-1: USB disconnect, device number 41 [ 2516.047165][T31605] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now disconnected [ 2516.434508][T31602] keytouch 0003:0926:3333.0076: fixing up Keytouch IEC report descriptor [ 2516.463503][T31602] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0076/input/input208 17:48:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x3c}}, 0x0) 17:48:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = socket(0x1, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="00060000000000fa270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r13, @ANYBLOB="451f0200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 17:48:18 executing program 5: r0 = memfd_create(&(0x7f0000000800)='\x01\fD\xd1q\xd23\x00\x00\xbf\xecs \xc5\xb55nVg\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83rz\xc0\x03\x00\x00\x00\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZ\x8bp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P9(\xe1-q \xb3\x80\xb9\xdfj\xed\xb9_o\xa6\x04\xf5\x9f\x04\xf1\xd5\xe3\xfa\xfd\xff\xbf\xff\x7f\x00\x00\x00\x00y\xb7\xbe\xf5\xcc\a\fM\xa9\xcbX\x891\xed\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\xbcI\xbf\xac*\xb4\xed\xf0^\x935\xeb=\xc7\x82;\xb32;\xc5\xa3\xc8\xb9\xf2\xe5\xf4\x93[\x91F\x83?\xfe\xd9\x7ffvQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\x81\xc0m}O\xfd\xe0\x05$\xcd\xfdkMu\x9bQ\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89bmY\xb9O\x8f\xc3\xf6a\xba=\xed\x84\xf3\x8c#X0\x94T\x10\x9dx@\xce:]\xb68\xa2W\xcb\x86\b#s\xb4q6\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4bT\xc1.\xfc\xd4\xcay)$\n\x05\xd1\xc5V\x91\xe3W\x10r\x9b~n`z\x8c\x16c\xa1d\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x91\x19\xd5\xa1\xce)?r\x01\t\x8c\xa1t]\xb0\xd1\x9e\x8aZ1\xb4R,\x1d\xb8w\xa6\x93-w\x1e1}\xf8G\xe4\x8dI\x8co\xb5N\x12\xf5\xf7\x93\x88\xbd\x9d\x00\xedL\x8ea\x92l\x9c\x1ce\x11\x1e\x8d\x12\xa8\x8a\xc0\"\'\xb7Q\x1dp\xd1\x87 \xd3$U\xdfyx1\xfe\xdd\x1d \xe9\xe7\xbc\xff(\x02\x82\x97\xafJ\xeas\xfc)\x05\xc9G\xaf\xa1=L\xfdg-\x06\x89\x17\'F\"\x86\x0e\f\xde\xfan\xaf\x8e\x8f\xa2-l d\xa1O\xc3nZ\xf7\x06\xeb\x04\x0e\xa8\xa5Z7[\xbd\xfa\xbfH}\xcci\xb8~\x86\x97C\xa5\xbb,_\xee\xa2V\xa8\xacp\xe9r\xfcxi\xc0\xd1D\xe69C\xc4A\xed\xf4\x10\xab\xff?\xa9\xa3\xe7@b\x93\xb9\xdb\x14\xd8\x8d\x91@2(\xf7\xaa\x8b\xb6\xf9\xee\x18j\xa6\xa5\x01\x87\xcc\x92e\xfbQ\xbb\x01\x8d\xef\xd3\xa6\x95\xab&P\x05`&D\x1c\xf7F\xfbm\t\xaf\xf0\xb9\xa8n\xf2\n\xb7\xe7\xc2I\x1fs\xf1\x01;BC\x03(\x8d&\x80\x98Z\xed=O\xb1\x1en\x98F\x96\x15\xae\x82\xedBC\xb1\xd9Q\xf1\xb4\xd2\xd1\xcb\x8e\x86\xedq:o\bW\x9a\x96\xb1]Ha\xa7y\xbb&\x95\x90\xd5(\xa8\x1dt\xc7\x0fl\b\xb37\xc5Y\xbe\xd6\xed\xe1\x06|(q]\xb2\x03\x00\xd0\x17\xe8\xe2\xc6\x84{\xa5\x03\x19mAr`\x1d\xe5).*\x1f@\x1d&;\xaf\x01\x02\x7f`\xd6', 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000580)='\a', 0x1}], 0x1) r1 = dup(r0) sendfile(r0, r1, &(0x7f0000000080), 0x20000080000001) prctl$PR_SET_SECCOMP(0xf, 0x20ffffff, 0x0) 17:48:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = socket(0x1, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="00060000000000fa270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r13, @ANYBLOB="451f0200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 17:48:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) [ 2516.619721][T10359] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2516.680419][T31602] keytouch 0003:0926:3333.0076: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 17:48:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 17:48:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x3c}}, 0x0) [ 2516.805245][T10367] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2516.857459][T31602] usb 5-1: USB disconnect, device number 13 [ 2517.004006][T10366] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2517.076573][T10371] bond14: (slave macvlan5): Enslaving as an active interface with a down link [ 2517.109540][T10370] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2517.251252][T10373] bond25: (slave macvlan4): Enslaving as an active interface with a down link [ 2517.334431][T10377] bridge32: entered promiscuous mode [ 2517.346862][T10377] bridge32: entered allmulticast mode 17:48:19 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000600)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000580)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240401000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, 'aC7\a'}]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x20, &(0x7f0000000080)="9ae33c636253a123928639a10688e482e8f1b6e17ec8350000000020e6f50905") 17:48:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 17:48:19 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x3c}}, 0x0) 17:48:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) [ 2517.466558][T10379] bond25: (slave vlan10): making interface the new active one [ 2517.525604][T10379] bond25: (slave vlan10): Enslaving as an active interface with an up link [ 2517.576722][T10359] bridge42: entered promiscuous mode [ 2517.597086][T10359] bridge42: entered allmulticast mode 17:48:19 executing program 2: syz_usb_connect(0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000600)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000580)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240401000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, 'aC7\a'}]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x20, &(0x7f0000000080)="9ae33c636253a123928639a10688e482e8f1b6e17ec8350000000020e6f50905") 17:48:19 executing program 1: syz_usb_connect(0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000600)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000580)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240401000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, 'aC7\a'}]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x20, &(0x7f0000000080)="9ae33c636253a123928639a10688e482e8f1b6e17ec8350000000020e6f50905") 17:48:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x4, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) [ 2517.659783][T10367] bond14: (slave vlan3): making interface the new active one [ 2517.671231][T10367] bond14: (slave vlan3): Enslaving as an active interface with an up link 17:48:19 executing program 5: syz_open_dev$vcsa(0x0, 0x101, 0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0x1ff, 0x81]}, 0x8, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0xc5fffffd) 17:48:19 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000480)="5871a61f57e6e161d914166e97588add6d7d07ef1fc535ca8c73216d28ff202d2bf758ff479e712d239fe5028dbcd949d201ddf15a6adb527271173decbcbf3a730f0b286065c68d74ac4fe7438dd2e8f1e1f0938b0cba5bacab3392653c7525f370f4f2ae66d514662c8788b3c35489ac76f5235cff0a3f76e8f7c216c5826a4836756e84bc1bf9e748023946a83bbce9e41ab7f7bd3c035e7ca7a150038b16064638c5f426fabbb11ca5ff1b779dceef03ed15e3e86f9b91e747e403f08e3c1e0b5d22c8cbcb7b7ecd26c84b9a10635688987a2d556b335b84fd52b6cb36be3c1eebb247519cedcc21d21436c1ed52e281ac", 0xf3}, {&(0x7f0000002680)="9639af8ec0f078c42b09a234f0b29e91ba0920046826bfe87f26367b22d4df03ea9233de3c29b70c8116222b4bfb21c1af27e331d1c073e86e4009422eb1855675472d5778412a024c4a9ddc552eebf0976077d0d5b89c0f56cc857463e1d7b36c8129b1755ca564dc5c5fdc6fe90a23cad12886a39757c2666f77d3d53340108eddc1281a401ff8d01f511e763c35e4dc232de0abd53ccf0c7c19306818164963998ddc9952a1f598cb99fba4322d5d88016a2bb890b9af72d92970c3dec7cb80cd729a7eb24452edbccb6a0cece2eed9e06cfbb440145c97", 0xd9}], 0x2, &(0x7f00000002c0), 0x0, 0x800}, 0x40000c0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='environ\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x84, 0x4004, @fd_index=0x9, 0x4, 0x0, 0x0, 0x2, 0x0, {0x3}}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) [ 2517.743596][T31605] usb 5-1: new high-speed USB device number 14 using dummy_hcd 17:48:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x4, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) 17:48:19 executing program 5: syz_open_dev$vcsa(0x0, 0x101, 0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0x1ff, 0x81]}, 0x8, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0xc5fffffd) [ 2517.809284][T10395] futex_wake_op: syz-executor.5 tries to shift op by -1; fix this program 17:48:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x4, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) [ 2517.959725][T10403] futex_wake_op: syz-executor.5 tries to shift op by -1; fix this program [ 2518.014287][T10728] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2518.063139][ T1123] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2518.143654][T31605] usb 5-1: config index 0 descriptor too short (expected 1060, got 36) [ 2518.155206][T31605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2518.167786][T31605] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2518.178040][T31605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2518.191486][T31605] usb 5-1: config 0 descriptor?? [ 2518.383222][T10728] usb 3-1: config index 0 descriptor too short (expected 1060, got 36) [ 2518.395406][T10728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2518.407499][T10728] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2518.417501][T10728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2518.436960][T10728] usb 3-1: config 0 descriptor?? [ 2518.453200][ T1123] usb 2-1: config index 0 descriptor too short (expected 1060, got 36) [ 2518.476913][ T1123] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2518.493070][ T1123] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2518.502496][ T1123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2518.527766][ T1123] usb 2-1: config 0 descriptor?? [ 2518.695092][T31605] keytouch 0003:0926:3333.0077: fixing up Keytouch IEC report descriptor [ 2518.732143][T31605] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0077/input/input209 [ 2518.870080][T31605] keytouch 0003:0926:3333.0077: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 2518.924413][T10728] keytouch 0003:0926:3333.0078: fixing up Keytouch IEC report descriptor [ 2518.936345][T10728] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0078/input/input210 [ 2518.994579][ T1123] keytouch 0003:0926:3333.0079: fixing up Keytouch IEC report descriptor [ 2519.011590][ T1123] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0079/input/input211 [ 2519.064381][T10728] keytouch 0003:0926:3333.0078: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 2519.129579][ T1123] keytouch 0003:0926:3333.0079: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2519.193358][T10728] usb 5-1: USB disconnect, device number 14 [ 2519.212796][ C1] keytouch 0003:0926:3333.0077: usb_submit_urb(ctrl) failed: -19 [ 2519.400647][ T902] usb 3-1: USB disconnect, device number 103 [ 2519.406847][ C0] keytouch 0003:0926:3333.0078: usb_submit_urb(ctrl) failed: -19 [ 2519.479231][ T7] usb 2-1: USB disconnect, device number 42 17:48:21 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000600)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000580)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240401000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, 'aC7\a'}]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x20, &(0x7f0000000080)="9ae33c636253a123928639a10688e482e8f1b6e17ec8350000000020e6f50905") 17:48:21 executing program 5: syz_open_dev$vcsa(0x0, 0x101, 0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0x1ff, 0x81]}, 0x8, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0xc5fffffd) 17:48:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x4, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) 17:48:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000480)="5871a61f57e6e161d914166e97588add6d7d07ef1fc535ca8c73216d28ff202d2bf758ff479e712d239fe5028dbcd949d201ddf15a6adb527271173decbcbf3a730f0b286065c68d74ac4fe7438dd2e8f1e1f0938b0cba5bacab3392653c7525f370f4f2ae66d514662c8788b3c35489ac76f5235cff0a3f76e8f7c216c5826a4836756e84bc1bf9e748023946a83bbce9e41ab7f7bd3c035e7ca7a150038b16064638c5f426fabbb11ca5ff1b779dceef03ed15e3e86f9b91e747e403f08e3c1e0b5d22c8cbcb7b7ecd26c84b9a10635688987a2d556b335b84fd52b6cb36be3c1eebb247519cedcc21d21436c1ed52e281ac", 0xf3}, {&(0x7f0000002680)="9639af8ec0f078c42b09a234f0b29e91ba0920046826bfe87f26367b22d4df03ea9233de3c29b70c8116222b4bfb21c1af27e331d1c073e86e4009422eb1855675472d5778412a024c4a9ddc552eebf0976077d0d5b89c0f56cc857463e1d7b36c8129b1755ca564dc5c5fdc6fe90a23cad12886a39757c2666f77d3d53340108eddc1281a401ff8d01f511e763c35e4dc232de0abd53ccf0c7c19306818164963998ddc9952a1f598cb99fba4322d5d88016a2bb890b9af72d92970c3dec7cb80cd729a7eb24452edbccb6a0cece2eed9e06cfbb440145c97", 0xd9}], 0x2, &(0x7f00000002c0), 0x0, 0x800}, 0x40000c0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='environ\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x84, 0x4004, @fd_index=0x9, 0x4, 0x0, 0x0, 0x2, 0x0, {0x3}}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) [ 2519.817044][T10412] futex_wake_op: syz-executor.5 tries to shift op by -1; fix this program 17:48:21 executing program 2: syz_usb_connect(0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000600)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000580)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240401000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, 'aC7\a'}]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x20, &(0x7f0000000080)="9ae33c636253a123928639a10688e482e8f1b6e17ec8350000000020e6f50905") 17:48:21 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000480)="5871a61f57e6e161d914166e97588add6d7d07ef1fc535ca8c73216d28ff202d2bf758ff479e712d239fe5028dbcd949d201ddf15a6adb527271173decbcbf3a730f0b286065c68d74ac4fe7438dd2e8f1e1f0938b0cba5bacab3392653c7525f370f4f2ae66d514662c8788b3c35489ac76f5235cff0a3f76e8f7c216c5826a4836756e84bc1bf9e748023946a83bbce9e41ab7f7bd3c035e7ca7a150038b16064638c5f426fabbb11ca5ff1b779dceef03ed15e3e86f9b91e747e403f08e3c1e0b5d22c8cbcb7b7ecd26c84b9a10635688987a2d556b335b84fd52b6cb36be3c1eebb247519cedcc21d21436c1ed52e281ac", 0xf3}, {&(0x7f0000002680)="9639af8ec0f078c42b09a234f0b29e91ba0920046826bfe87f26367b22d4df03ea9233de3c29b70c8116222b4bfb21c1af27e331d1c073e86e4009422eb1855675472d5778412a024c4a9ddc552eebf0976077d0d5b89c0f56cc857463e1d7b36c8129b1755ca564dc5c5fdc6fe90a23cad12886a39757c2666f77d3d53340108eddc1281a401ff8d01f511e763c35e4dc232de0abd53ccf0c7c19306818164963998ddc9952a1f598cb99fba4322d5d88016a2bb890b9af72d92970c3dec7cb80cd729a7eb24452edbccb6a0cece2eed9e06cfbb440145c97", 0xd9}], 0x2, &(0x7f00000002c0), 0x0, 0x800}, 0x40000c0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='environ\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x84, 0x4004, @fd_index=0x9, 0x4, 0x0, 0x0, 0x2, 0x0, {0x3}}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 17:48:21 executing program 5: syz_open_dev$vcsa(0x0, 0x101, 0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0x1ff, 0x81]}, 0x8, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0xc5fffffd) 17:48:21 executing program 1: syz_usb_connect(0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000600)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000580)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240401000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, 'aC7\a'}]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x20, &(0x7f0000000080)="9ae33c636253a123928639a10688e482e8f1b6e17ec8350000000020e6f50905") [ 2520.101665][T10425] futex_wake_op: syz-executor.5 tries to shift op by -1; fix this program 17:48:21 executing program 5: syz_open_dev$vcsa(0x0, 0x101, 0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0x1ff, 0x81]}, 0x8, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0xc5fffffd) [ 2520.162946][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2520.293128][ T902] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2520.333358][T10431] futex_wake_op: syz-executor.5 tries to shift op by -1; fix this program 17:48:22 executing program 5: syz_open_dev$vcsa(0x0, 0x101, 0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0x1ff, 0x81]}, 0x8, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0xc5fffffd) [ 2520.392947][T10728] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2520.503866][T10434] futex_wake_op: syz-executor.5 tries to shift op by -1; fix this program [ 2520.533235][ T7] usb 5-1: config index 0 descriptor too short (expected 1060, got 36) [ 2520.549110][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 17:48:22 executing program 5: syz_open_dev$vcsa(0x0, 0x101, 0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0x1ff, 0x81]}, 0x8, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0xc5fffffd) [ 2520.605933][ T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2520.658457][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2520.667434][ T902] usb 3-1: config index 0 descriptor too short (expected 1060, got 36) [ 2520.689837][ T902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2520.747680][ T7] usb 5-1: config 0 descriptor?? [ 2520.763061][T10728] usb 2-1: config index 0 descriptor too short (expected 1060, got 36) [ 2520.782092][ T902] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2520.793059][T10728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2520.819127][ T902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2520.821660][T10437] futex_wake_op: syz-executor.5 tries to shift op by -1; fix this program [ 2520.858584][T10728] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 17:48:22 executing program 5: syz_open_dev$vcsa(0x0, 0x101, 0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0x1ff, 0x81]}, 0x8, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0xc5fffffd) [ 2520.915099][ T902] usb 3-1: config 0 descriptor?? [ 2520.923193][T10728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2520.991093][T10728] usb 2-1: config 0 descriptor?? [ 2521.096750][T10439] futex_wake_op: syz-executor.5 tries to shift op by -1; fix this program [ 2521.284917][ T7] keytouch 0003:0926:3333.007A: fixing up Keytouch IEC report descriptor [ 2521.335706][ T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.007A/input/input212 [ 2521.450798][ T902] keytouch 0003:0926:3333.007B: fixing up Keytouch IEC report descriptor [ 2521.499494][ T7] keytouch 0003:0926:3333.007A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 2521.514424][T10728] keytouch 0003:0926:3333.007C: fixing up Keytouch IEC report descriptor [ 2521.533969][ T902] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.007B/input/input213 [ 2521.554717][T10728] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.007C/input/input214 [ 2521.631755][ T902] keytouch 0003:0926:3333.007B: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 2521.708600][T10728] keytouch 0003:0926:3333.007C: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2521.775771][T31605] usb 5-1: USB disconnect, device number 15 [ 2521.782827][ C0] keytouch 0003:0926:3333.007A: usb_submit_urb(ctrl) failed: -19 [ 2521.884179][T10728] usb 3-1: USB disconnect, device number 104 [ 2521.902875][ C0] keytouch 0003:0926:3333.007B: usb_submit_urb(ctrl) failed: -19 [ 2521.974698][ T902] usb 2-1: USB disconnect, device number 43 17:48:24 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000600)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000580)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240401000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, 'aC7\a'}]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x20, &(0x7f0000000080)="9ae33c636253a123928639a10688e482e8f1b6e17ec8350000000020e6f50905") 17:48:24 executing program 5: syz_open_dev$vcsa(0x0, 0x101, 0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0x1ff, 0x81]}, 0x8, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0xc5fffffd) 17:48:24 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000480)="5871a61f57e6e161d914166e97588add6d7d07ef1fc535ca8c73216d28ff202d2bf758ff479e712d239fe5028dbcd949d201ddf15a6adb527271173decbcbf3a730f0b286065c68d74ac4fe7438dd2e8f1e1f0938b0cba5bacab3392653c7525f370f4f2ae66d514662c8788b3c35489ac76f5235cff0a3f76e8f7c216c5826a4836756e84bc1bf9e748023946a83bbce9e41ab7f7bd3c035e7ca7a150038b16064638c5f426fabbb11ca5ff1b779dceef03ed15e3e86f9b91e747e403f08e3c1e0b5d22c8cbcb7b7ecd26c84b9a10635688987a2d556b335b84fd52b6cb36be3c1eebb247519cedcc21d21436c1ed52e281ac", 0xf3}, {&(0x7f0000002680)="9639af8ec0f078c42b09a234f0b29e91ba0920046826bfe87f26367b22d4df03ea9233de3c29b70c8116222b4bfb21c1af27e331d1c073e86e4009422eb1855675472d5778412a024c4a9ddc552eebf0976077d0d5b89c0f56cc857463e1d7b36c8129b1755ca564dc5c5fdc6fe90a23cad12886a39757c2666f77d3d53340108eddc1281a401ff8d01f511e763c35e4dc232de0abd53ccf0c7c19306818164963998ddc9952a1f598cb99fba4322d5d88016a2bb890b9af72d92970c3dec7cb80cd729a7eb24452edbccb6a0cece2eed9e06cfbb440145c97", 0xd9}], 0x2, &(0x7f00000002c0), 0x0, 0x800}, 0x40000c0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='environ\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x84, 0x4004, @fd_index=0x9, 0x4, 0x0, 0x0, 0x2, 0x0, {0x3}}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 17:48:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000480)="5871a61f57e6e161d914166e97588add6d7d07ef1fc535ca8c73216d28ff202d2bf758ff479e712d239fe5028dbcd949d201ddf15a6adb527271173decbcbf3a730f0b286065c68d74ac4fe7438dd2e8f1e1f0938b0cba5bacab3392653c7525f370f4f2ae66d514662c8788b3c35489ac76f5235cff0a3f76e8f7c216c5826a4836756e84bc1bf9e748023946a83bbce9e41ab7f7bd3c035e7ca7a150038b16064638c5f426fabbb11ca5ff1b779dceef03ed15e3e86f9b91e747e403f08e3c1e0b5d22c8cbcb7b7ecd26c84b9a10635688987a2d556b335b84fd52b6cb36be3c1eebb247519cedcc21d21436c1ed52e281ac", 0xf3}, {&(0x7f0000002680)="9639af8ec0f078c42b09a234f0b29e91ba0920046826bfe87f26367b22d4df03ea9233de3c29b70c8116222b4bfb21c1af27e331d1c073e86e4009422eb1855675472d5778412a024c4a9ddc552eebf0976077d0d5b89c0f56cc857463e1d7b36c8129b1755ca564dc5c5fdc6fe90a23cad12886a39757c2666f77d3d53340108eddc1281a401ff8d01f511e763c35e4dc232de0abd53ccf0c7c19306818164963998ddc9952a1f598cb99fba4322d5d88016a2bb890b9af72d92970c3dec7cb80cd729a7eb24452edbccb6a0cece2eed9e06cfbb440145c97", 0xd9}], 0x2, &(0x7f00000002c0), 0x0, 0x800}, 0x40000c0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='environ\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x84, 0x4004, @fd_index=0x9, 0x4, 0x0, 0x0, 0x2, 0x0, {0x3}}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) [ 2522.355675][T10442] futex_wake_op: syz-executor.5 tries to shift op by -1; fix this program 17:48:24 executing program 5: syz_open_dev$vcsa(0x0, 0x101, 0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0x1ff, 0x81]}, 0x8, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0xc5fffffd) 17:48:24 executing program 2: syz_usb_connect(0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000600)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000580)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240401000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, 'aC7\a'}]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x20, &(0x7f0000000080)="9ae33c636253a123928639a10688e482e8f1b6e17ec8350000000020e6f50905") 17:48:24 executing program 1: syz_usb_connect(0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000600)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000580)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240401000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, 'aC7\a'}]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x20, &(0x7f0000000080)="9ae33c636253a123928639a10688e482e8f1b6e17ec8350000000020e6f50905") [ 2522.584595][T10456] futex_wake_op: syz-executor.5 tries to shift op by -1; fix this program 17:48:24 executing program 5: syz_open_dev$vcsa(0x0, 0x101, 0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0x1ff, 0x81]}, 0x8, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0xc5fffffd) [ 2522.652966][T31605] usb 5-1: new high-speed USB device number 16 using dummy_hcd 17:48:24 executing program 5: syz_open_dev$vcsa(0x0, 0x101, 0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0x1ff, 0x81]}, 0x8, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0xc5fffffd) [ 2522.813214][ T1123] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2522.836671][T10463] futex_atomic_op_inuser: 1 callbacks suppressed [ 2522.836698][T10463] futex_wake_op: syz-executor.5 tries to shift op by -1; fix this program 17:48:24 executing program 5: syz_open_dev$vcsa(0x0, 0x101, 0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0x1ff, 0x81]}, 0x8, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0xc5fffffd) [ 2522.913338][T31602] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2523.033549][T31605] usb 5-1: config index 0 descriptor too short (expected 1060, got 36) [ 2523.049459][T31605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2523.094050][T31605] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2523.105868][T10465] futex_wake_op: syz-executor.5 tries to shift op by -1; fix this program [ 2523.154028][T31605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2523.209544][T31605] usb 5-1: config 0 descriptor?? [ 2523.215687][ T1123] usb 3-1: config index 0 descriptor too short (expected 1060, got 36) [ 2523.227911][ T1123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 17:48:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)='<', 0x1920, 0x805, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) [ 2523.264010][ T1123] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2523.284249][ T1123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2523.309262][ T1123] usb 3-1: config 0 descriptor?? [ 2523.314792][T31602] usb 2-1: config index 0 descriptor too short (expected 1060, got 36) [ 2523.324251][T31602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2523.336212][T31602] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2523.346274][T31602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2523.379652][T31602] usb 2-1: config 0 descriptor?? 17:48:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000480)="5871a61f57e6e161d914166e97588add6d7d07ef1fc535ca8c73216d28ff202d2bf758ff479e712d239fe5028dbcd949d201ddf15a6adb527271173decbcbf3a730f0b286065c68d74ac4fe7438dd2e8f1e1f0938b0cba5bacab3392653c7525f370f4f2ae66d514662c8788b3c35489ac76f5235cff0a3f76e8f7c216c5826a4836756e84bc1bf9e748023946a83bbce9e41ab7f7bd3c035e7ca7a150038b16064638c5f426fabbb11ca5ff1b779dceef03ed15e3e86f9b91e747e403f08e3c1e0b5d22c8cbcb7b7ecd26c84b9a10635688987a2d556b335b84fd52b6cb36be3c1eebb247519cedcc21d21436c1ed52e281ac", 0xf3}, {&(0x7f0000002680)="9639af8ec0f078c42b09a234f0b29e91ba0920046826bfe87f26367b22d4df03ea9233de3c29b70c8116222b4bfb21c1af27e331d1c073e86e4009422eb1855675472d5778412a024c4a9ddc552eebf0976077d0d5b89c0f56cc857463e1d7b36c8129b1755ca564dc5c5fdc6fe90a23cad12886a39757c2666f77d3d53340108eddc1281a401ff8d01f511e763c35e4dc232de0abd53ccf0c7c19306818164963998ddc9952a1f598cb99fba4322d5d88016a2bb890b9af72d92970c3dec7cb80cd729a7eb24452edbccb6a0cece2eed9e06cfbb440145c97", 0xd9}], 0x2, &(0x7f00000002c0), 0x0, 0x800}, 0x40000c0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='environ\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x84, 0x4004, @fd_index=0x9, 0x4, 0x0, 0x0, 0x2, 0x0, {0x3}}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) [ 2523.725500][T31605] keytouch 0003:0926:3333.007D: fixing up Keytouch IEC report descriptor [ 2523.763248][T31605] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.007D/input/input215 [ 2523.806971][ T1123] keytouch 0003:0926:3333.007E: fixing up Keytouch IEC report descriptor [ 2523.861287][ T1123] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.007E/input/input216 [ 2523.888522][T31605] keytouch 0003:0926:3333.007D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 2523.902154][T31602] keytouch 0003:0926:3333.007F: fixing up Keytouch IEC report descriptor [ 2523.950570][T31602] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.007F/input/input217 [ 2524.069439][ T1123] keytouch 0003:0926:3333.007E: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 2524.161752][ T902] usb 5-1: USB disconnect, device number 16 [ 2524.172965][ C1] keytouch 0003:0926:3333.007D: usb_submit_urb(ctrl) failed: -19 [ 2524.195116][T31602] keytouch 0003:0926:3333.007F: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2524.227858][ T1123] usb 3-1: USB disconnect, device number 105 [ 2524.329652][T10728] usb 2-1: USB disconnect, device number 44 [ 2524.342786][ C1] keytouch 0003:0926:3333.007F: usb_submit_urb(ctrl) failed: -19 17:48:26 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000001c0)=0x20, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) 17:48:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)='<', 0x1920, 0x805, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) 17:48:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) pipe(0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$tipc(r4, &(0x7f0000000340)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000480)="5871a61f57e6e161d914166e97588add6d7d07ef1fc535ca8c73216d28ff202d2bf758ff479e712d239fe5028dbcd949d201ddf15a6adb527271173decbcbf3a730f0b286065c68d74ac4fe7438dd2e8f1e1f0938b0cba5bacab3392653c7525f370f4f2ae66d514662c8788b3c35489ac76f5235cff0a3f76e8f7c216c5826a4836756e84bc1bf9e748023946a83bbce9e41ab7f7bd3c035e7ca7a150038b16064638c5f426fabbb11ca5ff1b779dceef03ed15e3e86f9b91e747e403f08e3c1e0b5d22c8cbcb7b7ecd26c84b9a10635688987a2d556b335b84fd52b6cb36be3c1eebb247519cedcc21d21436c1ed52e281ac", 0xf3}, {&(0x7f0000002680)="9639af8ec0f078c42b09a234f0b29e91ba0920046826bfe87f26367b22d4df03ea9233de3c29b70c8116222b4bfb21c1af27e331d1c073e86e4009422eb1855675472d5778412a024c4a9ddc552eebf0976077d0d5b89c0f56cc857463e1d7b36c8129b1755ca564dc5c5fdc6fe90a23cad12886a39757c2666f77d3d53340108eddc1281a401ff8d01f511e763c35e4dc232de0abd53ccf0c7c19306818164963998ddc9952a1f598cb99fba4322d5d88016a2bb890b9af72d92970c3dec7cb80cd729a7eb24452edbccb6a0cece2eed9e06cfbb440145c97", 0xd9}], 0x2, &(0x7f00000002c0), 0x0, 0x800}, 0x40000c0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='environ\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x84, 0x4004, @fd_index=0x9, 0x4, 0x0, 0x0, 0x2, 0x0, {0x3}}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 17:48:26 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(0x0, 0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x3f0}, 0x9c) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) r7 = dup(r1) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001600), &(0x7f0000001640)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={r5, r6+10000000}) r8 = dup3(r4, r3, 0x0) recvmmsg$unix(r8, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaabd1, [@broadcast, @random="1e58c0f98007", @random="9589c32f958f"]}) dup(r9) 17:48:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)='<', 0x1920, 0x805, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) 17:48:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000001c0)="d22a0f01d70f320f38f09525df66b9f90900000f3226646781f7270066b80c07ffff0f23c00f21f8663501000b000f23f866b9100000400f320f1ac5c6f8dd", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYBLOB="3972008000000800008020e461022033990428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x33, 0x6, 0x0, {0x0, 0x0, 0xa, 0x0, '/dev/fuse\x00'}}, 0x33) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:48:26 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000001c0)=0x20, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) 17:48:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 17:48:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)='<', 0x1920, 0x805, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) [ 2525.158165][T10493] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:48:27 executing program 5: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="0bf30000000000002000128008000100677265001400028008000100", @ANYRES32=r3, @ANYBLOB="08000700ac"], 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32, @ANYBLOB="08000700ac"], 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 17:48:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000001c0)="d22a0f01d70f320f38f09525df66b9f90900000f3226646781f7270066b80c07ffff0f23c00f21f8663501000b000f23f866b9100000400f320f1ac5c6f8dd", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYBLOB="3972008000000800008020e461022033990428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x33, 0x6, 0x0, {0x0, 0x0, 0xa, 0x0, '/dev/fuse\x00'}}, 0x33) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:48:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 17:48:27 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000001c0)=0x20, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) [ 2525.646620][T10510] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:48:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 2525.980320][T10521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:48:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 17:48:28 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000001c0)=0x20, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) 17:48:28 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(0x0, 0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x3f0}, 0x9c) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) r7 = dup(r1) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001600), &(0x7f0000001640)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={r5, r6+10000000}) r8 = dup3(r4, r3, 0x0) recvmmsg$unix(r8, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaabd1, [@broadcast, @random="1e58c0f98007", @random="9589c32f958f"]}) dup(r9) 17:48:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000001c0)="d22a0f01d70f320f38f09525df66b9f90900000f3226646781f7270066b80c07ffff0f23c00f21f8663501000b000f23f866b9100000400f320f1ac5c6f8dd", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYBLOB="3972008000000800008020e461022033990428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x33, 0x6, 0x0, {0x0, 0x0, 0xa, 0x0, '/dev/fuse\x00'}}, 0x33) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:48:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(0x0, 0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x3f0}, 0x9c) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) r7 = dup(r1) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001600), &(0x7f0000001640)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={r5, r6+10000000}) r8 = dup3(r4, r3, 0x0) recvmmsg$unix(r8, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaabd1, [@broadcast, @random="1e58c0f98007", @random="9589c32f958f"]}) dup(r9) [ 2526.446170][T10534] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:48:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(0x0, 0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x3f0}, 0x9c) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) r7 = dup(r1) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001600), &(0x7f0000001640)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={r5, r6+10000000}) r8 = dup3(r4, r3, 0x0) recvmmsg$unix(r8, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaabd1, [@broadcast, @random="1e58c0f98007", @random="9589c32f958f"]}) dup(r9) [ 2526.779288][T10506] gre1: entered promiscuous mode [ 2526.810264][T10506] gre1: entered allmulticast mode 17:48:28 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(0x0, 0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x3f0}, 0x9c) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) r7 = dup(r1) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001600), &(0x7f0000001640)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={r5, r6+10000000}) r8 = dup3(r4, r3, 0x0) recvmmsg$unix(r8, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaabd1, [@broadcast, @random="1e58c0f98007", @random="9589c32f958f"]}) dup(r9) 17:48:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000001c0)="d22a0f01d70f320f38f09525df66b9f90900000f3226646781f7270066b80c07ffff0f23c00f21f8663501000b000f23f866b9100000400f320f1ac5c6f8dd", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYBLOB="3972008000000800008020e461022033990428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x33, 0x6, 0x0, {0x0, 0x0, 0xa, 0x0, '/dev/fuse\x00'}}, 0x33) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:48:29 executing program 5: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="0bf30000000000002000128008000100677265001400028008000100", @ANYRES32=r3, @ANYBLOB="08000700ac"], 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32, @ANYBLOB="08000700ac"], 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 17:48:30 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(0x0, 0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x3f0}, 0x9c) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) r7 = dup(r1) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001600), &(0x7f0000001640)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={r5, r6+10000000}) r8 = dup3(r4, r3, 0x0) recvmmsg$unix(r8, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaabd1, [@broadcast, @random="1e58c0f98007", @random="9589c32f958f"]}) dup(r9) 17:48:30 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(0x0, 0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x3f0}, 0x9c) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) r7 = dup(r1) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001600), &(0x7f0000001640)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={r5, r6+10000000}) r8 = dup3(r4, r3, 0x0) recvmmsg$unix(r8, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaabd1, [@broadcast, @random="1e58c0f98007", @random="9589c32f958f"]}) dup(r9) 17:48:30 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(0x0, 0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x3f0}, 0x9c) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) r7 = dup(r1) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001600), &(0x7f0000001640)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={r5, r6+10000000}) r8 = dup3(r4, r3, 0x0) recvmmsg$unix(r8, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaabd1, [@broadcast, @random="1e58c0f98007", @random="9589c32f958f"]}) dup(r9) 17:48:30 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(0x0, 0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x3f0}, 0x9c) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) r7 = dup(r1) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001600), &(0x7f0000001640)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={r5, r6+10000000}) r8 = dup3(r4, r3, 0x0) recvmmsg$unix(r8, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaabd1, [@broadcast, @random="1e58c0f98007", @random="9589c32f958f"]}) dup(r9) 17:48:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(0x0, 0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x3f0}, 0x9c) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) r7 = dup(r1) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001600), &(0x7f0000001640)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={r5, r6+10000000}) r8 = dup3(r4, r3, 0x0) recvmmsg$unix(r8, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaabd1, [@broadcast, @random="1e58c0f98007", @random="9589c32f958f"]}) dup(r9) [ 2529.811082][T10559] gre1: entered promiscuous mode [ 2529.849011][T10559] gre1: entered allmulticast mode 17:48:31 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(0x0, 0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x3f0}, 0x9c) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) r7 = dup(r1) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001600), &(0x7f0000001640)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={r5, r6+10000000}) r8 = dup3(r4, r3, 0x0) recvmmsg$unix(r8, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaabd1, [@broadcast, @random="1e58c0f98007", @random="9589c32f958f"]}) dup(r9) 17:48:32 executing program 5: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="0bf30000000000002000128008000100677265001400028008000100", @ANYRES32=r3, @ANYBLOB="08000700ac"], 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32, @ANYBLOB="08000700ac"], 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 17:48:32 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(0x0, 0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x3f0}, 0x9c) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) r7 = dup(r1) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001600), &(0x7f0000001640)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={r5, r6+10000000}) r8 = dup3(r4, r3, 0x0) recvmmsg$unix(r8, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaabd1, [@broadcast, @random="1e58c0f98007", @random="9589c32f958f"]}) dup(r9) 17:48:32 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(0x0, 0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x3f0}, 0x9c) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) r7 = dup(r1) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001600), &(0x7f0000001640)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={r5, r6+10000000}) r8 = dup3(r4, r3, 0x0) recvmmsg$unix(r8, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaabd1, [@broadcast, @random="1e58c0f98007", @random="9589c32f958f"]}) dup(r9) 17:48:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(0x0, 0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x3f0}, 0x9c) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) r7 = dup(r1) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001600), &(0x7f0000001640)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={r5, r6+10000000}) r8 = dup3(r4, r3, 0x0) recvmmsg$unix(r8, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaabd1, [@broadcast, @random="1e58c0f98007", @random="9589c32f958f"]}) dup(r9) 17:48:32 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(0x0, 0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x3f0}, 0x9c) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) r7 = dup(r1) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001600), &(0x7f0000001640)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={r5, r6+10000000}) r8 = dup3(r4, r3, 0x0) recvmmsg$unix(r8, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaabd1, [@broadcast, @random="1e58c0f98007", @random="9589c32f958f"]}) dup(r9) 17:48:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(0x0, 0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x3f0}, 0x9c) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) r7 = dup(r1) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001600), &(0x7f0000001640)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={r5, r6+10000000}) r8 = dup3(r4, r3, 0x0) recvmmsg$unix(r8, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaabd1, [@broadcast, @random="1e58c0f98007", @random="9589c32f958f"]}) dup(r9) [ 2532.260829][T10595] gre1: entered promiscuous mode [ 2532.282791][T10595] gre1: entered allmulticast mode 17:48:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 2532.714388][T10630] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 17:48:34 executing program 5: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="0bf30000000000002000128008000100677265001400028008000100", @ANYRES32=r3, @ANYBLOB="08000700ac"], 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32, @ANYBLOB="08000700ac"], 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 17:48:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 17:48:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}]}]}, 0x30}}, 0x0) unshare(0x6c060000) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d242f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0], 0x1}, 0x58) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 17:48:35 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$sndmidi(0x0, 0x800, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000040)=[{0x28, 0x4, 0x0, 0x91b0}, {0x80000006, 0x0, 0xfe}]}, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) memfd_secret(0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, 0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0220ae8a0da6c250296d8e10c4962a83924374544ffe42acf181dd678c9ac062893bc6890c51c57e55031969f64462246da7403d4ec60ce5aef9573427226b2f6af27edb9aa46e262b3b909a8e5161f903756b7717377c060108a378c70182ee621cdd95cee8996a003456d223928dd350d8bb3010e0b0d4efd9fbe6cc9e6aabdb4d36d72210a6a06d49b1a048acc59b78d92fafa579b5b7d7defa915ac14966f293ef5323", @ANYRESDEC=0x0, @ANYBLOB="2ccacccf6406e2fd7e071239c30233b357006d8f703404b6"]) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r5}) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES32=r6, @ANYBLOB="f3ff0c00000000000900f1ff09000100686673630000000074000200100002000005200000080000ac360000100001800500000000000000f49affff10000300800000000300000000000000100003000308ed46b32d3e8e9200002f32494e000000800010000000d00800001000010004000000000000434c0000001000020001000000800000000600000006000500007f177a7ffd1be596fbb40a6bfc0a8addbb808b7b6e81ad7cd8d1e36e742f17d9cedccff4a1713971d4d3b5b734b6a97b7ac8d6fddb2556d4eca7c29b06667b6cc459fe4a965012491f9c765bf095219b305da37ab0eac4c50503f957edcd024c0670df8f60b543aeea60505a397da8c40f211a471b89bccc04412546da8cf58cb29154ab58757bd17280ba1aff0d2708f0387844328ba2c7ef092f788512d9a69e"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x24048040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 17:48:35 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x101, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000380)=0x4456) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 2533.672036][T10638] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2533.759165][T10641] tipc: Started in network mode [ 2533.783060][T10641] tipc: Node identity aaaaaaaaaa1f, cluster identity 4711 [ 2533.805087][T10641] tipc: Enabled bearer , priority 10 17:48:35 executing program 2: madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000133000/0xb000)=nil, 0xb000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) [ 2533.901285][T10652] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? 17:48:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 2533.983212][ T1123] usb 1-1: new high-speed USB device number 106 using dummy_hcd 17:48:35 executing program 2: madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000133000/0xb000)=nil, 0xb000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) [ 2534.095037][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 2534.101438][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 [ 2534.210991][T10656] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2534.263457][ T1123] usb 1-1: Using ep0 maxpacket: 8 [ 2534.393332][ T1123] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 17:48:36 executing program 2: madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000133000/0xb000)=nil, 0xb000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) [ 2534.459515][ T1123] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2534.553071][ T1123] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2534.640086][ T1123] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 17:48:36 executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000133000/0xb000)=nil, 0xb000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) 17:48:36 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$sndmidi(0x0, 0x800, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000040)=[{0x28, 0x4, 0x0, 0x91b0}, {0x80000006, 0x0, 0xfe}]}, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) memfd_secret(0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, 0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0220ae8a0da6c250296d8e10c4962a83924374544ffe42acf181dd678c9ac062893bc6890c51c57e55031969f64462246da7403d4ec60ce5aef9573427226b2f6af27edb9aa46e262b3b909a8e5161f903756b7717377c060108a378c70182ee621cdd95cee8996a003456d223928dd350d8bb3010e0b0d4efd9fbe6cc9e6aabdb4d36d72210a6a06d49b1a048acc59b78d92fafa579b5b7d7defa915ac14966f293ef5323", @ANYRESDEC=0x0, @ANYBLOB="2ccacccf6406e2fd7e071239c30233b357006d8f703404b6"]) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r5}) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES32=r6, @ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x24048040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) [ 2534.707174][ T1123] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2534.731692][ T1123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:48:36 executing program 2: madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000133000/0xb000)=nil, 0xb000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) [ 2534.833898][T10647] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2534.855714][ T1123] hub 1-1:1.0: bad descriptor, ignoring hub [ 2534.866236][ T1123] hub: probe of 1-1:1.0 failed with error -5 [ 2534.909177][ T1123] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2534.924315][ T7] tipc: Node number set to 11905706 [ 2534.966233][ T1123] cdc_wdm 1-1:1.0: Unknown control protocol [ 2535.161349][T10676] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 2535.202458][T10635] gre1: entered promiscuous mode [ 2535.213160][T10635] gre1: entered allmulticast mode [ 2535.310421][T10635] Dead loop on virtual device gre1, fix it urgently! [ 2535.543546][T10645] usb 1-1: reset high-speed USB device number 106 using dummy_hcd 17:48:37 executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000133000/0xb000)=nil, 0xb000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) 17:48:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x101, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000380)=0x4456) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 2535.677704][T10635] syz-executor.5 (10635) used greatest stack depth: 13592 bytes left [ 2535.793351][T10645] usb 1-1: Using ep0 maxpacket: 8 [ 2535.913300][T10641] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 17:48:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}]}]}, 0x30}}, 0x0) unshare(0x6c060000) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d242f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0], 0x1}, 0x58) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 17:48:42 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x101, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000380)=0x4456) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 17:48:42 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x101, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000380)=0x4456) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 17:48:42 executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000133000/0xb000)=nil, 0xb000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) 17:48:42 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$sndmidi(0x0, 0x800, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000040)=[{0x28, 0x4, 0x0, 0x91b0}, {0x80000006, 0x0, 0xfe}]}, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) memfd_secret(0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, 0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0220ae8a0da6c250296d8e10c4962a83924374544ffe42acf181dd678c9ac062893bc6890c51c57e55031969f64462246da7403d4ec60ce5aef9573427226b2f6af27edb9aa46e262b3b909a8e5161f903756b7717377c060108a378c70182ee621cdd95cee8996a003456d223928dd350d8bb3010e0b0d4efd9fbe6cc9e6aabdb4d36d72210a6a06d49b1a048acc59b78d92fafa579b5b7d7defa915ac14966f293ef5323", @ANYRESDEC=0x0, @ANYBLOB="2ccacccf6406e2fd7e071239c30233b357006d8f703404b6"]) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r5}) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES32=r6, @ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x24048040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 17:48:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x101, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000380)=0x4456) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 2540.323162][ T314] usb 1-1: USB disconnect, device number 106 17:48:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}]}]}, 0x30}}, 0x0) unshare(0x6c060000) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d242f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0], 0x1}, 0x58) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) [ 2540.505351][T10695] tipc: Enabling of bearer rejected, already enabled [ 2540.622511][T10699] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 2540.802627][T10703] tipc: Started in network mode [ 2540.825320][T10703] tipc: Node identity aaaaaaaaaa1f, cluster identity 4711 [ 2540.915288][T10703] tipc: Enabled bearer , priority 10 [ 2540.982904][ T314] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 2541.242906][ T314] usb 1-1: Using ep0 maxpacket: 8 [ 2541.303114][ T7] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2541.363592][ T314] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2541.410066][ T314] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2541.464567][ T314] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 17:48:43 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x101, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000380)=0x4456) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 2541.543345][ T314] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2541.572890][ T7] usb 4-1: Using ep0 maxpacket: 8 17:48:43 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x101, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000380)=0x4456) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 2541.619735][ T314] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2541.671769][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2541.693151][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2541.732793][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2541.813386][T10701] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2541.827934][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2541.844428][ T314] hub 1-1:1.0: bad descriptor, ignoring hub [ 2541.862132][ T314] hub: probe of 1-1:1.0 failed with error -5 [ 2541.913771][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2541.944222][ T314] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2541.993202][ T314] cdc_wdm 1-1:1.0: Unknown control protocol [ 2541.999850][ T7] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2542.034946][ T4033] tipc: Node number set to 11905706 [ 2542.046310][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2542.103532][T10706] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2542.130839][ T7] hub 4-1:1.0: bad descriptor, ignoring hub [ 2542.151721][ T7] hub: probe of 4-1:1.0 failed with error -5 [ 2542.203657][ T7] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device 17:48:43 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$sndmidi(0x0, 0x800, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000040)=[{0x28, 0x4, 0x0, 0x91b0}, {0x80000006, 0x0, 0xfe}]}, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) memfd_secret(0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, 0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0220ae8a0da6c250296d8e10c4962a83924374544ffe42acf181dd678c9ac062893bc6890c51c57e55031969f64462246da7403d4ec60ce5aef9573427226b2f6af27edb9aa46e262b3b909a8e5161f903756b7717377c060108a378c70182ee621cdd95cee8996a003456d223928dd350d8bb3010e0b0d4efd9fbe6cc9e6aabdb4d36d72210a6a06d49b1a048acc59b78d92fafa579b5b7d7defa915ac14966f293ef5323", @ANYRESDEC=0x0, @ANYBLOB="2ccacccf6406e2fd7e071239c30233b357006d8f703404b6"]) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r5}) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES32=r6, @ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x24048040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) [ 2542.261025][ T7] cdc_wdm 4-1:1.0: Unknown control protocol 17:48:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x101, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000380)=0x4456) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 17:48:44 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x101, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000380)=0x4456) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 2542.873973][T10729] usb 4-1: USB disconnect, device number 70 [ 2542.894308][T10722] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 2543.143635][T10701] usb 1-1: reset high-speed USB device number 107 using dummy_hcd [ 2543.423326][T10701] usb 1-1: Using ep0 maxpacket: 8 [ 2543.523478][T10695] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2543.903160][ T3466] usb 1-1: USB disconnect, device number 107 [ 2543.947908][T10729] usb 4-1: new high-speed USB device number 71 using dummy_hcd 17:48:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}]}]}, 0x30}}, 0x0) unshare(0x6c060000) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d242f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0], 0x1}, 0x58) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 17:48:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}]}]}, 0x30}}, 0x0) unshare(0x6c060000) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d242f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0], 0x1}, 0x58) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 17:48:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x101, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000380)=0x4456) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 17:48:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$sndmidi(0x0, 0x800, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000040)=[{0x28, 0x4, 0x0, 0x91b0}, {0x80000006, 0x0, 0xfe}]}, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) memfd_secret(0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, 0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0220ae8a0da6c250296d8e10c4962a83924374544ffe42acf181dd678c9ac062893bc6890c51c57e55031969f64462246da7403d4ec60ce5aef9573427226b2f6af27edb9aa46e262b3b909a8e5161f903756b7717377c060108a378c70182ee621cdd95cee8996a003456d223928dd350d8bb3010e0b0d4efd9fbe6cc9e6aabdb4d36d72210a6a06d49b1a048acc59b78d92fafa579b5b7d7defa915ac14966f293ef5323", @ANYRESDEC=0x0, @ANYBLOB="2ccacccf6406e2fd7e071239c30233b357006d8f703404b6"]) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r5}) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES32=r6, @ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x24048040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 17:48:46 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000040)={0x1, 0x80, 0xffffffff}) 17:48:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x0, @loopback}}) [ 2544.435161][T10729] usb 4-1: device not accepting address 71, error -71 17:48:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x0, @loopback}}) [ 2544.492409][T10737] tipc: Enabling of bearer rejected, already enabled 17:48:46 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000040)={0x1, 0x80, 0xffffffff}) 17:48:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x0, @loopback}}) [ 2544.653301][T10745] tipc: Enabling of bearer rejected, already enabled 17:48:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$sndmidi(0x0, 0x800, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000040)=[{0x28, 0x4, 0x0, 0x91b0}, {0x80000006, 0x0, 0xfe}]}, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) memfd_secret(0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, 0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0220ae8a0da6c250296d8e10c4962a83924374544ffe42acf181dd678c9ac062893bc6890c51c57e55031969f64462246da7403d4ec60ce5aef9573427226b2f6af27edb9aa46e262b3b909a8e5161f903756b7717377c060108a378c70182ee621cdd95cee8996a003456d223928dd350d8bb3010e0b0d4efd9fbe6cc9e6aabdb4d36d72210a6a06d49b1a048acc59b78d92fafa579b5b7d7defa915ac14966f293ef5323", @ANYRESDEC=0x0, @ANYBLOB="2ccacccf6406e2fd7e071239c30233b357006d8f703404b6"]) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r5}) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES32=r6, @ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x24048040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 17:48:46 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000040)={0x1, 0x80, 0xffffffff}) [ 2544.912857][T10729] usb 4-1: new high-speed USB device number 72 using dummy_hcd 17:48:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x0, @loopback}}) [ 2545.033091][ T7] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2545.192974][T10729] usb 4-1: Using ep0 maxpacket: 8 [ 2545.283007][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 2545.324900][T10729] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2545.397799][T10729] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2545.403156][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2545.422007][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2545.454494][T10729] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2545.483344][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2545.503305][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2545.515238][ T7] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2545.518273][T10729] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2545.539400][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2545.572278][T10729] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2545.618983][T10729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2545.633475][T10745] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2545.654311][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 2545.663266][T10743] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2545.683671][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 2545.684314][T10729] hub 4-1:1.0: bad descriptor, ignoring hub [ 2545.701276][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2545.711124][ T7] cdc_wdm 1-1:1.0: Unknown control protocol [ 2545.763777][T10729] hub: probe of 4-1:1.0 failed with error -5 [ 2545.803034][T10729] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 2545.809122][T10729] cdc_wdm 4-1:1.0: Unknown control protocol [ 2546.303324][ T4033] usb 4-1: USB disconnect, device number 72 [ 2546.493511][T10745] usb 1-1: reset high-speed USB device number 108 using dummy_hcd [ 2546.733106][T10745] usb 1-1: Using ep0 maxpacket: 8 [ 2546.833623][T10747] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2547.193722][ T314] usb 1-1: USB disconnect, device number 108 [ 2547.232836][ T4033] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2547.473024][ T4033] usb 4-1: Using ep0 maxpacket: 8 [ 2547.533088][ T4033] usb 4-1: device descriptor read/all, error -71 17:48:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}]}]}, 0x30}}, 0x0) unshare(0x6c060000) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d242f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0], 0x1}, 0x58) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 17:48:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}]}]}, 0x30}}, 0x0) unshare(0x6c060000) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d242f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0], 0x1}, 0x58) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 17:48:49 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000040)={0x1, 0x80, 0xffffffff}) 17:48:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x1}) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 17:48:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$sndmidi(0x0, 0x800, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000040)=[{0x28, 0x4, 0x0, 0x91b0}, {0x80000006, 0x0, 0xfe}]}, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) memfd_secret(0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, 0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0220ae8a0da6c250296d8e10c4962a83924374544ffe42acf181dd678c9ac062893bc6890c51c57e55031969f64462246da7403d4ec60ce5aef9573427226b2f6af27edb9aa46e262b3b909a8e5161f903756b7717377c060108a378c70182ee621cdd95cee8996a003456d223928dd350d8bb3010e0b0d4efd9fbe6cc9e6aabdb4d36d72210a6a06d49b1a048acc59b78d92fafa579b5b7d7defa915ac14966f293ef5323", @ANYRESDEC=0x0, @ANYBLOB="2ccacccf6406e2fd7e071239c30233b357006d8f703404b6"]) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r5}) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYRES8, @ANYRES32=r6, @ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x24048040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 17:48:49 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x4, 0x9ed, 0x0, 0x13c8, 0x1, 0x76, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x2}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)={&(0x7f0000000600)='./file0\x00'}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x41080000, &(0x7f0000000740)="d1e7530cc91ff4987fb541767e6198e25f93b662780dc1b761349e81b3bb6f8cb3f8e6a716aa3047659d75e6832d12a2cd0dd1a7fa6e5011fc2d160f5e867779e80b7ddd0ff1cec5ffa3d8bcd391ddd01d3d1f806a47d213bb56a1fced646e180cf3a612d6352c7bf014f3a128b1ae2bc93689ef86126d6c8c247268374483a92a4bd280f6562144c5a828a2fc8f698bab23ff7686f40bb797fa8b30b555796fb5f4f9f1bd119dd8530c679aa92fa2f8ff7ac7da0292eb92d305a87563ffe7d91b747e23ec55a14e001f4558ed30d50ee57e81e68fac2bad8afd6942c70cbfc314b1c1964790562406b70132975f9a6da872285e249233ff1aeb7e0ff2ab707cf016b584a91471576802d49121e07343b4fed6930f9a90a360e0e2e2db0d7384a432c78c1ff6569f05f7a106d4c95de1f70b3d4bfa513745d290dcf87d21364fd5ef0452046535de63d6fb8532d304505e8f3c70501f23428f1a482f550a9cc2016b804ab0782237cad3f3c5762c434195efe99b6072558de41a29346d9f7db0478171275c013069da4196bfd57dc6d099fe5af796588c4c81912755f3c4591280bc08df7513f5c4ad297b4993ace23991cc816b893d6fdb3a350e2ae30193662d6bf60f08a2169cbb71636a1c42d911aab9972c490a59e5a52bf652e2e14a59ac0da86bd4838a65955d2b3d1565369548b54226cd908a4b930220d37fbba512c7c2925acfd92b8f1958f7141ac97a2ca4d52c5829afb6a197117ce262c742c470124cd5784efaef344ce876d2f1db4389ca3450516f36c423798847f5b6bdce9c700aadb80e65aa12d4516a15964f4b67a0529188831d4751c9dcc6ef09b0d638b29b058f45b7a3f7d091c791eeecfb56b8cef9587130846c6955a680e6b9f7397c96ff4590b9ba2b5a00ad6180424abe18286b95ad132d97f051f4454cf7aedc16dc69e8651d8cef5a4efae7d194764fa03d72274727b11a4e2668ae02c5ee2c37de57a0b5b960f02dd736db912d5d9cb75a7d22760ea2c12eda9aafa0eb035d7d398d826b4f1f8ececef2e14b6df57cab842f5fdf3b225f208ee0928ed5ec8a41a7ff376a68dd57fb9dca0322b4a58d8f9c94ecba6bff94c1ce5a1302a396a123f918adcbfeb6c1dd6a6a1238d62843f2f9dc81a4fb84ec9d8eaf8392b4eff44b617be0a8933c7b25ab1fa68f236640c5ce2f40ec0d7f9591e4441686133f611c24fca6fadb864a255afea7634c64d40e46aba020e81884dab36cd40472912e1d44eeefaf11357b0d6f2970ddc7b00277c790517cd58c4b07527dce98d0183ac36b2dd1ca8b7704927683c74a9c563d18872d880ca7ada63889a405839396e2d0eaedeb497ff1850d139d95f1435add16d23ecaf6439d7a196244d6584275de0edeb77f53dfe9e357eeaf1875718402b774d0e60fb7d1b1b524c1b73a5deeb2848afa4255a3e84cdb6a218d75c766b80cad303da646a213652581cb9789e110849ea53702572771f82cea9ced134e4f384f422307b0a3e1b72f4c4c5c918235ec5dcd5f0c0a90e218dba315b928fda537722f0b6bf3273f9bf82bdb4ca2eb28d31f9d086b7b26d78ca5fe0e91b2b8158d744eab5c9b7297c608bdc5ea28bd7721e4bef99a0f1c646d50855db048fc5c626d965d257435ae045564df2eab64210d25809eb627e8619c7267141ee337b88c54f3b0ef12dd40e059668d7721d409d91e167240b09f7d38001b92f17fea4eb0c9435f1ccdeb5adbb394834ee87cd6731518cf84b16ef87bc6c3c519a3008e077a7364938077da344c34fb0f244d9bdf205c35049ba62bffb00b924cb0ac8eeff7b1416907bd37724318235264f49e97644ee6f60737d0ea9c0113f9f426996b01c01b45a418564b93dc8b88f070cb89c6d1ad72273e72afaa1097b9520e2dba1bbcad9b2e69b170f96e32eba6b23f4d37a99a74494a22dc65fc4e8ff2307ac5680b58746b10e8a6e7b901b12754db0ea62219a9125c5001311af69b126baf71fd6563f51efcbaf21dd41812a03d48bdde4e3ef162ef5a5a23fbf40394ec29ef3c656dac35bc7945e089ee275e4554dc89faed8b755c029bde00c9dadcf6e34f85be365b59357931a4d4200482ad08939eb9f2705149f9c90424714bffebf49e046794a410fc754af9955c9531ddc3f9344b3ef00a840950b8147e98656266230ca969dcb142deb5a3b58f26e2927d79dce3fbc05a8ccb4a0fd80967ac410a71d62e4429948150322f735a556ed33477238113fb2e887044fbab51fc0df3283f59ace06443d8f49671624af5a70493b7b45d1250837a451b9286e3f9525ebeec7d7550e1175cb0485d3193d77103b5186a9f0eaf9cdc08159084a614ff778c2a51c92aca4df4147f4d7d76881d48570d3e5d716d8501149696328d410f4674baedeaba3218a18b5386fe4897eebdc0488d45d1e9d30d491e44ee1aa0e074d3c82a355688fe0c220a58a3eaf1985317c70e7e594677bea2cab602856801de10752afcdf66a5004d4e2ee4521daf20f8191ea31dbb8d7299e8b20db43fcde96a18ece43a50cd4a6563b6458ba06d6f3c85397fe9197c2f7aded136a70e11314346bc3cffc8acb5687fde9327f2e483b52089a5b3f5978cfc17f6f48cfd56fcdaaeeb8814947309bcbd78f6bb764aa9d2489c8eb07c0a6fd8a4a204aefba235f48b69f6c7190dbaec8833b6d847eef0f6223a636b5718e7464d4a702b88fd0a6fb7d986e5b3c8f2289cf11c0c9785ca0152fbfe3c5108bfa3bf90e536c9974a0272c9ebf8a0d737720d04c81d34f44e93ac63875e037c3a7df150d48e3ac769822854e5ba3cfabbb330d845a042f5bb8279eb44de68e54e0e54254f3efc5c47c5152d7173784232b0bf9ecf1525a5499ceec468ed4156005b704a22e8e70ad810357e8c4f537806b77971a035128421c6f312da70b0acd0e543638020689650bec14370da424ef5601fb3f13b2abc19c5e2ffafac5112a57f6ca350df26ded822ba871d4ac4f10dd7f5ad528abddb1af60efa29781e197d5974d1f78f21d8b0ccdff2056b61bee9247c5a312b918e1fafd16f65b722a6d905fc603d1d8589f961cc517e8c00d9691976c0a4c69a5b32829238ed82143b3837234743191a8bae0a5bffdc627f2afd561521dadadecd2b02b6d0dc3c7b1a1c520594e8c26f92b33a1021b46875602d83db23e3ac003e7c81edc76295561903d044b47e5a9fba81e5d343150e2c5cf9ce5bd19cd75c44b45403729fdef97957c847f22c10246b1a0389d87e9a05e3e254e16f92bad6a4ca219d7b4f752261c125fc688c41158658eaf02868636ebccfdb3ee74e71b8bcae18cd3f9cb75200f1c0172238593c09cc8fefdede1652525ff3ad51f56e8e46d7f1415da4d9d7368af58903619158a74632e3f3357a46687fe010ba5d98fc901435065edb1fe89039c7f5b2013f3cc3d1656b0d6f2e63d70e58e390883002093f19eb720574248cd6810f6b4da21d9635e16d1a4c82f51df7f5af1903b964c35df7a7eaaf596dee02a2f81acfd67c14c1b66cac98f54a3607a486bb6d30b16089d675748d0b805ca77bcd4c4e6caa0bad335b74ad155d49419fc261c116e06abbd4e1d2806716eb00b85e4108656ea746261eef6a3fb530eb65cd100f600573fec767113682174060d4a4b6fecd813f27f37583358c6fde15f2fd4109ce36d009d2d63407d149bdca23008d264ace0081c4453fb315fa84b1b05fe6375dff85a5ba5357cb206c53add03dd039dd7967560c70cdadf851deed0467293973167a6d3945bd63e526164ec24490dac52e4c4fd57977381e6eddf0587ae6ed2bfc5588b3651bb9c04008577bfb346fae0eda2bf9a009bcc9663163cc2e62f50a7d388d44dc97936a9b72766cc6a7a8249115903de9ad55111756137ffc294561649bc39226d163ba9c233b0405c3d9f2baaac25627f3018de5e9761d3b7213e8c8dc8d3f6b48f6c150958064e6057bdba18e7516d3be340091144116da391be73399a9fdf7fb2ce65ad183f1f9b5d27ff3b8ae0fe81b79ace245c33cf78862ff0bfec115bbd8188ca572af5aa67c9ca889b8b5dd16eb42332e428b26f59c64828f83558536e51eac8e514df9a28bf75cc91a892f93d2f2d0034ea78f40d08a10814489f487c042d0591303ea6df36b4efa6e645e62ad21d2a2f6f18caa92029381dd651c15162e8a1f609e077ab3402934c8e4779144310c12a0fc04ccf1a3fef4e6cc6c5745e294fff127edcf90f34db2c36b70371111d9d31a528627233fa5b4a64a969bc4cc3da2501d0831fe69822436012f9f95ffc792aa7b1f948df4dbfcf9c3adc82c68251abb6b86888814307ffdbdfb5ab8caebde488b307eeabedf9fff861c008317a2ee93b63a30a90f98fbf45016aa8ff1761c627609ac66e684e07c8e23847627fa098ac0918846f40c0ab9321d8968ee75d5e61171bb68927d13458d97af9652591f2ffbe967fd02d32ad6a97475a124d4dd7ab71a09b2ecfccfc8e1f040ca540a1164224b453f9d0c50a937fe77bd4cb2ae6e05002c76c2a11f03413b926a7f6a906d1af219d1ddd19302a1ab5cc82b280fd110fdeeb21140afda8338cf5d649d5fc07139d506ce1c654bf23d39053d3472edf58e1608040ac71ffdb02d9bf738f021dd961702e96ef1047cc40dd4e33b1b92a998ef1f2a65d7ace9674a595640cfe9267654043b03b628f364b785f6ce567d8799e87e9392680c429992ee22665d55b552d8270e50f42f3c6fc956942ff80212b363750b7434be8776e80e4a8d9958677bcd8659a02ea3d2b61785030ce480a7fc039c2fbce997f89e657f293f0b564bf8763744340c885b6155e496e46d6145d52283e4356cd4d3a16fa1877fa6606bb0d0dc32e0b57dd8c90cba763750d4a11ad4a73ea90b12bef2d79049f1245ec8ac7dc81f4c5ad5e15727d59eaead1b940f8f7e546c54e888d8907a75ba7a5ccab389e60edb5a390a170ac22e68ec074fb10960174f60ee407afd7cd5964875d763828157fe792c7d605e4f6e9a2ee1ae", 0xdf8, &(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0)="e2cdfbf3ccfa917e4ce3118fe5698c661a9c596346ad733e11f5c792f7d0c1dfca9e5f416fe438cb3144c9ffb5077905cc77030f2410867557bc57bd4b257d1702ba198f03b72c60c1e3b5e2fa") r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000001ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@int={0xc, 0x0, 0x0, 0x1, 0x0, 0x23, 0x0, 0x22}, @fwd={0x2}]}, {0x0, [0x61, 0x61, 0x0, 0x0]}}, &(0x7f0000001b00)=""/254, 0x3a, 0xfe}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x18, 0xf, &(0x7f0000001980)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x448abf3cd1685f4b, 0x4, 0x0, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd411, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf}, @map_fd={0x18, 0x8}]}, &(0x7f0000001a00)='GPL\x00', 0x0, 0x5b, &(0x7f0000001a40)=""/91, 0x41100, 0x2, '\x00', r0, 0x1a, r4, 0x8, &(0x7f0000001c40)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001c80)={0x4, 0x5, 0x5, 0x7f}, 0x10, 0x0, r3, 0x0, &(0x7f0000001cc0)=[r1]}, 0x80) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001f40)={r1, 0x0, &(0x7f0000001e40)=""/205}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000001fc0)=@ax25={{}, [@remote, @default, @rose, @rose, @null, @rose, @bcast, @rose]}, 0x80, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002640)={r3, 0xe0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000023c0)=[0x0, 0x0, 0x0], &(0x7f0000002400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, &(0x7f00000024c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002500)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000027c0)={0x0, &(0x7f0000002740)=""/98, 0x0, 0x62}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002800)=@base={0x12, 0x8, 0x8, 0x0, 0x1415, 0xffffffffffffffff, 0x9, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002c80)={0xffffffffffffffff, 0xe0, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000029c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000002a00)=[0x0, 0x0], &(0x7f0000002a40)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002ac0), &(0x7f0000002b00), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002b40)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002f00)={0x0, 0x8, &(0x7f0000002cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x1, 0xa, 0x9, 0x3, 0x20, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @ldst={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffe0, 0xfffffffffffffff0}, @generic={0x80, 0x2, 0x5, 0x1, 0x3ff}]}, &(0x7f0000002d00)='syzkaller\x00', 0x10000, 0xe3, &(0x7f0000002d40)=""/227, 0x40f00, 0x6, '\x00', r0, 0x0, r2, 0x8, &(0x7f0000002e40)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002e80)={0x0, 0x5, 0x9}, 0x10}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000031c0)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000003240)={0x6, 0x4, &(0x7f0000003040)=@raw=[@map_fd, @ldst={0x3, 0x1, 0x0, 0x2, 0x0, 0xfffffffffffffefe, 0x4}, @generic={0x3f, 0x9, 0xf, 0x0, 0x8}], &(0x7f0000003080)='GPL\x00', 0x80000001, 0x63, &(0x7f00000030c0)=""/99, 0x41100, 0x0, '\x00', 0x0, 0x1c, r4, 0x8, &(0x7f0000003140)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000003180)={0x0, 0x0, 0x3ee0000}, 0x10, r8, r9, 0x0, &(0x7f0000003200)=[r7]}, 0x80) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000003680)={&(0x7f0000003640)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 2547.704862][T10770] tipc: Enabling of bearer rejected, already enabled [ 2547.844608][T10777] tipc: Enabling of bearer rejected, already enabled 17:48:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x1}) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 17:48:49 executing program 1: r0 = syz_io_uring_setup(0x6678, &(0x7f00000047c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001300), &(0x7f0000004840)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x8, 0x0, 0x0) 17:48:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x1}) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 17:48:49 executing program 1: r0 = syz_io_uring_setup(0x6678, &(0x7f00000047c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001300), &(0x7f0000004840)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x8, 0x0, 0x0) [ 2548.205536][ T4033] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2548.233106][ T314] usb 1-1: new high-speed USB device number 109 using dummy_hcd 17:48:50 executing program 2: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmdt(r1) 17:48:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x1}) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) [ 2548.462993][ T4033] usb 4-1: Using ep0 maxpacket: 8 [ 2548.473089][ T314] usb 1-1: Using ep0 maxpacket: 8 [ 2548.583180][ T4033] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2548.594050][ T314] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2548.610001][ T314] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2548.619756][ T4033] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2548.642951][ T4033] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2548.654684][ T314] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2548.672982][ T4033] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2548.685034][ T314] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2548.697111][ T314] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2548.706733][ T4033] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2548.717216][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2548.726178][ T4033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2548.763415][T10777] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2548.771102][T10778] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2548.784978][ T314] hub 1-1:1.0: bad descriptor, ignoring hub [ 2548.790968][ T314] hub: probe of 1-1:1.0 failed with error -5 [ 2548.804939][ T4033] hub 4-1:1.0: bad descriptor, ignoring hub [ 2548.810932][ T4033] hub: probe of 4-1:1.0 failed with error -5 [ 2548.824283][ T314] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2548.838207][ T314] cdc_wdm 1-1:1.0: Unknown control protocol [ 2548.846099][ T4033] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 2548.859996][ T4033] cdc_wdm 4-1:1.0: Unknown control protocol [ 2549.395498][ T3466] usb 4-1: USB disconnect, device number 74 [ 2549.743782][T10778] usb 1-1: reset high-speed USB device number 109 using dummy_hcd [ 2549.982847][T10778] usb 1-1: Using ep0 maxpacket: 8 [ 2550.083432][T10779] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2550.331535][ T4033] usb 1-1: USB disconnect, device number 109 [ 2550.683175][ T3466] usb 4-1: new high-speed USB device number 75 using dummy_hcd 17:48:52 executing program 1: r0 = syz_io_uring_setup(0x6678, &(0x7f00000047c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001300), &(0x7f0000004840)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x8, 0x0, 0x0) 17:48:52 executing program 2: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmdt(r1) 17:48:52 executing program 1: r0 = syz_io_uring_setup(0x6678, &(0x7f00000047c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001300), &(0x7f0000004840)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x8, 0x0, 0x0) 17:48:52 executing program 2: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmdt(r1) 17:48:52 executing program 2: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmdt(r1) 17:49:02 executing program 4: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmdt(r1) 17:49:02 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 17:49:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100003052bbdf000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800b0001006d616373656300000400028008003f"], 0x44}}, 0x0) 17:49:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}]}]}, 0x28}}, 0x0) 17:49:02 executing program 0: r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000180)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 17:49:02 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r5, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x48}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000081}, 0x4041) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\b\x00', @ANYRES16=r5, @ANYBLOB="00042abd7000fcdbdf250100000008000900010000000c00030004000000000000000600060000000000080005000000000008000500ac1e010108000100", @ANYRES32=r6, @ANYBLOB="0800020001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040000) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x204f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x30}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000540)="b4a1780a400d2ea41269f4e47f275ecd06a6d5cbea58180a521dafcf421150a94d3b30b743804207de598a537456a9df0ff1e88f5b24ccf356735ecb07a7a6c6c22d2a2006b16623bdfb20d3ba7840d8e076226cdadf28c7b340231da5d5b86afdfa1d9909c9ee007422c3e31281f7d934b72962d445c0804a300cac0d0d6b6af4e9228b32c482d56a7cad88e9eed33cb670a072", 0x94, 0x4040050, &(0x7f0000000480)={0x11, 0x8, r9, 0x1, 0x81, 0x6, @remote}, 0x14) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x50, r10, 0x83870000) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000200)={0x0, 0x3, 0x9a, 0x4}) sendmsg$nl_route(r10, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@setneightbl={0x40, 0x43, 0x1, 0x70bd2a, 0x25dfdbfd, {0x1c}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0xa73f}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x8}, @NDTA_THRESH2={0x8, 0x3, 0x4}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xa335}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24004090) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000040)=0x3, 0x4) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r13}}, 0x20}}, 0x0) [ 2561.067248][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:49:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x3c}, {0x6}]}) 17:49:02 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 17:49:02 executing program 0: r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000180)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 17:49:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100003052bbdf000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800b0001006d616373656300000400028008003f"], 0x44}}, 0x0) [ 2561.140578][T10817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2561.175473][T10817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 17:49:02 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 17:49:02 executing program 4: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmdt(r1) [ 2561.196998][T10817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2561.216597][T10817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 17:49:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x3c}, {0x6}]}) [ 2561.268389][ T27] audit: type=1326 audit(1688406542.969:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10824 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x0 [ 2561.271304][T10821] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 17:49:03 executing program 0: r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000180)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 17:49:03 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 17:49:03 executing program 4: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmdt(r1) [ 2561.403384][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2561.421965][ T27] audit: type=1326 audit(1688406543.119:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x0 17:49:03 executing program 0: r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000180)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 2561.529040][T10817] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2561.548541][T10817] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2561.578504][T10817] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2561.603296][T10817] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 17:49:03 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r5, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x48}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000081}, 0x4041) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\b\x00', @ANYRES16=r5, @ANYBLOB="00042abd7000fcdbdf250100000008000900010000000c00030004000000000000000600060000000000080005000000000008000500ac1e010108000100", @ANYRES32=r6, @ANYBLOB="0800020001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040000) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x204f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x30}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000540)="b4a1780a400d2ea41269f4e47f275ecd06a6d5cbea58180a521dafcf421150a94d3b30b743804207de598a537456a9df0ff1e88f5b24ccf356735ecb07a7a6c6c22d2a2006b16623bdfb20d3ba7840d8e076226cdadf28c7b340231da5d5b86afdfa1d9909c9ee007422c3e31281f7d934b72962d445c0804a300cac0d0d6b6af4e9228b32c482d56a7cad88e9eed33cb670a072", 0x94, 0x4040050, &(0x7f0000000480)={0x11, 0x8, r9, 0x1, 0x81, 0x6, @remote}, 0x14) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x50, r10, 0x83870000) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000200)={0x0, 0x3, 0x9a, 0x4}) sendmsg$nl_route(r10, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@setneightbl={0x40, 0x43, 0x1, 0x70bd2a, 0x25dfdbfd, {0x1c}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0xa73f}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x8}, @NDTA_THRESH2={0x8, 0x3, 0x4}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xa335}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24004090) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000040)=0x3, 0x4) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r13}}, 0x20}}, 0x0) 17:49:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100003052bbdf000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800b0001006d616373656300000400028008003f"], 0x44}}, 0x0) 17:49:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x3c}, {0x6}]}) 17:49:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100003052bbdf000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800b0001006d616373656300000400028008003f"], 0x44}}, 0x0) [ 2561.744037][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2561.754696][ T27] audit: type=1326 audit(1688406543.459:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x0 17:49:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x3c}, {0x6}]}) [ 2561.808424][T10851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2561.828708][T10851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2561.839102][T10851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2561.850252][T10851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2561.863450][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2561.873509][T10854] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 2561.877236][ T27] audit: type=1326 audit(1688406543.579:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x0 [ 2561.941181][T10851] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2561.963317][T10851] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2561.972415][T10851] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2561.982005][T10851] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 17:49:03 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r5, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x48}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000081}, 0x4041) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\b\x00', @ANYRES16=r5, @ANYBLOB="00042abd7000fcdbdf250100000008000900010000000c00030004000000000000000600060000000000080005000000000008000500ac1e010108000100", @ANYRES32=r6, @ANYBLOB="0800020001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040000) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x204f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x30}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000540)="b4a1780a400d2ea41269f4e47f275ecd06a6d5cbea58180a521dafcf421150a94d3b30b743804207de598a537456a9df0ff1e88f5b24ccf356735ecb07a7a6c6c22d2a2006b16623bdfb20d3ba7840d8e076226cdadf28c7b340231da5d5b86afdfa1d9909c9ee007422c3e31281f7d934b72962d445c0804a300cac0d0d6b6af4e9228b32c482d56a7cad88e9eed33cb670a072", 0x94, 0x4040050, &(0x7f0000000480)={0x11, 0x8, r9, 0x1, 0x81, 0x6, @remote}, 0x14) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x50, r10, 0x83870000) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000200)={0x0, 0x3, 0x9a, 0x4}) sendmsg$nl_route(r10, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@setneightbl={0x40, 0x43, 0x1, 0x70bd2a, 0x25dfdbfd, {0x1c}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0xa73f}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x8}, @NDTA_THRESH2={0x8, 0x3, 0x4}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xa335}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24004090) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000040)=0x3, 0x4) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r13}}, 0x20}}, 0x0) 17:49:03 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r5, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x48}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000081}, 0x4041) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\b\x00', @ANYRES16=r5, @ANYBLOB="00042abd7000fcdbdf250100000008000900010000000c00030004000000000000000600060000000000080005000000000008000500ac1e010108000100", @ANYRES32=r6, @ANYBLOB="0800020001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040000) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x204f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x30}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000540)="b4a1780a400d2ea41269f4e47f275ecd06a6d5cbea58180a521dafcf421150a94d3b30b743804207de598a537456a9df0ff1e88f5b24ccf356735ecb07a7a6c6c22d2a2006b16623bdfb20d3ba7840d8e076226cdadf28c7b340231da5d5b86afdfa1d9909c9ee007422c3e31281f7d934b72962d445c0804a300cac0d0d6b6af4e9228b32c482d56a7cad88e9eed33cb670a072", 0x94, 0x4040050, &(0x7f0000000480)={0x11, 0x8, r9, 0x1, 0x81, 0x6, @remote}, 0x14) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x50, r10, 0x83870000) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000200)={0x0, 0x3, 0x9a, 0x4}) sendmsg$nl_route(r10, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@setneightbl={0x40, 0x43, 0x1, 0x70bd2a, 0x25dfdbfd, {0x1c}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0xa73f}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x8}, @NDTA_THRESH2={0x8, 0x3, 0x4}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xa335}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24004090) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000040)=0x3, 0x4) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r13}}, 0x20}}, 0x0) 17:49:03 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080), 0x4, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f00000000c0)) 17:49:03 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff38, &(0x7f0000000100)={0x0, 0xa}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="db74d10304000000000000004870b207dab5c047bb499b5cfdae2b7ef2fda3d8fb21c15c85f620a681f63fa8e53b73f7", 0x30) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/206, 0xce}], 0x1}}], 0x13, 0x0, 0x0) 17:49:03 executing program 4: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES64, @ANYBLOB='N'], 0x208e24b) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb02804fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8da4cf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0cf31b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356e9490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f08162cbecc566222d0051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247f83539d324d3b50000000000"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0xb00) 17:49:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000680)={0x0, @rand_addr, 0x0, 0x0, 'fo\x00'}, 0x2c) [ 2562.135462][T10858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2562.146018][T10858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2562.157337][T10858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2562.166235][T10858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 17:49:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000680)={0x0, @rand_addr, 0x0, 0x0, 'fo\x00'}, 0x2c) [ 2562.225018][T10858] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 17:49:04 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff38, &(0x7f0000000100)={0x0, 0xa}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="db74d10304000000000000004870b207dab5c047bb499b5cfdae2b7ef2fda3d8fb21c15c85f620a681f63fa8e53b73f7", 0x30) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/206, 0xce}], 0x1}}], 0x13, 0x0, 0x0) 17:49:04 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080), 0x4, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f00000000c0)) [ 2562.295563][T10868] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2562.322999][T10868] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 17:49:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000680)={0x0, @rand_addr, 0x0, 0x0, 'fo\x00'}, 0x2c) 17:49:04 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080), 0x4, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f00000000c0)) 17:49:04 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff38, &(0x7f0000000100)={0x0, 0xa}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="db74d10304000000000000004870b207dab5c047bb499b5cfdae2b7ef2fda3d8fb21c15c85f620a681f63fa8e53b73f7", 0x30) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/206, 0xce}], 0x1}}], 0x13, 0x0, 0x0) [ 2562.358617][T10868] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2562.392983][T10868] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2562.432266][T10870] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2562.483258][T10870] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2562.520206][T10870] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2562.569289][T10870] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2562.702990][T10874] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2562.716140][T10883] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2562.738137][T10883] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2562.762003][T10883] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2562.783285][T10883] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 17:49:04 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r5, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x48}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000081}, 0x4041) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\b\x00', @ANYRES16=r5, @ANYBLOB="00042abd7000fcdbdf250100000008000900010000000c00030004000000000000000600060000000000080005000000000008000500ac1e010108000100", @ANYRES32=r6, @ANYBLOB="0800020001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040000) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x204f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x30}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000540)="b4a1780a400d2ea41269f4e47f275ecd06a6d5cbea58180a521dafcf421150a94d3b30b743804207de598a537456a9df0ff1e88f5b24ccf356735ecb07a7a6c6c22d2a2006b16623bdfb20d3ba7840d8e076226cdadf28c7b340231da5d5b86afdfa1d9909c9ee007422c3e31281f7d934b72962d445c0804a300cac0d0d6b6af4e9228b32c482d56a7cad88e9eed33cb670a072", 0x94, 0x4040050, &(0x7f0000000480)={0x11, 0x8, r9, 0x1, 0x81, 0x6, @remote}, 0x14) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x50, r10, 0x83870000) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000200)={0x0, 0x3, 0x9a, 0x4}) sendmsg$nl_route(r10, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@setneightbl={0x40, 0x43, 0x1, 0x70bd2a, 0x25dfdbfd, {0x1c}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0xa73f}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x8}, @NDTA_THRESH2={0x8, 0x3, 0x4}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xa335}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24004090) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000040)=0x3, 0x4) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r13}}, 0x20}}, 0x0) 17:49:04 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r5, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x48}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000081}, 0x4041) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\b\x00', @ANYRES16=r5, @ANYBLOB="00042abd7000fcdbdf250100000008000900010000000c00030004000000000000000600060000000000080005000000000008000500ac1e010108000100", @ANYRES32=r6, @ANYBLOB="0800020001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040000) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x204f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x30}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000540)="b4a1780a400d2ea41269f4e47f275ecd06a6d5cbea58180a521dafcf421150a94d3b30b743804207de598a537456a9df0ff1e88f5b24ccf356735ecb07a7a6c6c22d2a2006b16623bdfb20d3ba7840d8e076226cdadf28c7b340231da5d5b86afdfa1d9909c9ee007422c3e31281f7d934b72962d445c0804a300cac0d0d6b6af4e9228b32c482d56a7cad88e9eed33cb670a072", 0x94, 0x4040050, &(0x7f0000000480)={0x11, 0x8, r9, 0x1, 0x81, 0x6, @remote}, 0x14) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x50, r10, 0x83870000) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000200)={0x0, 0x3, 0x9a, 0x4}) sendmsg$nl_route(r10, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@setneightbl={0x40, 0x43, 0x1, 0x70bd2a, 0x25dfdbfd, {0x1c}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0xa73f}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x8}, @NDTA_THRESH2={0x8, 0x3, 0x4}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xa335}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24004090) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000040)=0x3, 0x4) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r13}}, 0x20}}, 0x0) 17:49:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000680)={0x0, @rand_addr, 0x0, 0x0, 'fo\x00'}, 0x2c) 17:49:04 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff38, &(0x7f0000000100)={0x0, 0xa}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="db74d10304000000000000004870b207dab5c047bb499b5cfdae2b7ef2fda3d8fb21c15c85f620a681f63fa8e53b73f7", 0x30) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/206, 0xce}], 0x1}}], 0x13, 0x0, 0x0) 17:49:04 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clock_settime(0x0, 0x0) 17:49:04 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080), 0x4, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f00000000c0)) 17:49:04 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff38, &(0x7f0000000100)={0x0, 0xa}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="db74d10304000000000000004870b207dab5c047bb499b5cfdae2b7ef2fda3d8fb21c15c85f620a681f63fa8e53b73f7", 0x30) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/206, 0xce}], 0x1}}], 0x13, 0x0, 0x0) 17:49:04 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff38, &(0x7f0000000100)={0x0, 0xa}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="db74d10304000000000000004870b207dab5c047bb499b5cfdae2b7ef2fda3d8fb21c15c85f620a681f63fa8e53b73f7", 0x30) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/206, 0xce}], 0x1}}], 0x13, 0x0, 0x0) [ 2563.051294][T10890] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2563.060876][T10890] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2563.083086][T10890] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2563.091866][T10890] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 17:49:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5}}}}]}, 0x38}}, 0x0) 17:49:04 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff38, &(0x7f0000000100)={0x0, 0xa}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="db74d10304000000000000004870b207dab5c047bb499b5cfdae2b7ef2fda3d8fb21c15c85f620a681f63fa8e53b73f7", 0x30) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/206, 0xce}], 0x1}}], 0x13, 0x0, 0x0) [ 2563.160117][T10892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 17:49:04 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff38, &(0x7f0000000100)={0x0, 0xa}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="db74d10304000000000000004870b207dab5c047bb499b5cfdae2b7ef2fda3d8fb21c15c85f620a681f63fa8e53b73f7", 0x30) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/206, 0xce}], 0x1}}], 0x13, 0x0, 0x0) [ 2563.206023][T10892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 17:49:05 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clock_settime(0x0, 0x0) [ 2563.234467][ T27] audit: type=1326 audit(1688406544.939:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10902 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 2563.269075][T10892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2563.308821][ T27] audit: type=1326 audit(1688406544.959:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10902 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=264 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 2563.311607][T10892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2563.376187][ T27] audit: type=1326 audit(1688406544.959:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10902 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 2563.401210][ T27] audit: type=1326 audit(1688406545.109:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 2563.429683][T10893] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2563.438890][ T27] audit: type=1326 audit(1688406545.109:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 2563.453020][T10897] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 2563.498659][ T27] audit: type=1326 audit(1688406545.129:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10913 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=264 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 2563.521774][T10911] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2563.550689][T10911] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2563.560293][T10911] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2563.569895][T10911] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 17:49:05 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff38, &(0x7f0000000100)={0x0, 0xa}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="db74d10304000000000000004870b207dab5c047bb499b5cfdae2b7ef2fda3d8fb21c15c85f620a681f63fa8e53b73f7", 0x30) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/206, 0xce}], 0x1}}], 0x13, 0x0, 0x0) 17:49:05 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff38, &(0x7f0000000100)={0x0, 0xa}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="db74d10304000000000000004870b207dab5c047bb499b5cfdae2b7ef2fda3d8fb21c15c85f620a681f63fa8e53b73f7", 0x30) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/206, 0xce}], 0x1}}], 0x13, 0x0, 0x0) 17:49:05 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clock_settime(0x0, 0x0) 17:49:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5}}}}]}, 0x38}}, 0x0) 17:49:05 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r5, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x48}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000081}, 0x4041) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\b\x00', @ANYRES16=r5, @ANYBLOB="00042abd7000fcdbdf250100000008000900010000000c00030004000000000000000600060000000000080005000000000008000500ac1e010108000100", @ANYRES32=r6, @ANYBLOB="0800020001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040000) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x204f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x30}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000540)="b4a1780a400d2ea41269f4e47f275ecd06a6d5cbea58180a521dafcf421150a94d3b30b743804207de598a537456a9df0ff1e88f5b24ccf356735ecb07a7a6c6c22d2a2006b16623bdfb20d3ba7840d8e076226cdadf28c7b340231da5d5b86afdfa1d9909c9ee007422c3e31281f7d934b72962d445c0804a300cac0d0d6b6af4e9228b32c482d56a7cad88e9eed33cb670a072", 0x94, 0x4040050, &(0x7f0000000480)={0x11, 0x8, r9, 0x1, 0x81, 0x6, @remote}, 0x14) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x50, r10, 0x83870000) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000200)={0x0, 0x3, 0x9a, 0x4}) sendmsg$nl_route(r10, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@setneightbl={0x40, 0x43, 0x1, 0x70bd2a, 0x25dfdbfd, {0x1c}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0xa73f}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x8}, @NDTA_THRESH2={0x8, 0x3, 0x4}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xa335}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24004090) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000040)=0x3, 0x4) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r13}}, 0x20}}, 0x0) 17:49:05 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clock_settime(0x0, 0x0) 17:49:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 17:49:05 executing program 1: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0xffffe000, 0x0, 0x10, r0, 0x0) 17:49:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5}}}}]}, 0x38}}, 0x0) 17:49:05 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) [ 2563.838325][T10922] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 17:49:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, @adapter}]}) 17:49:05 executing program 0: syz_usb_connect(0x0, 0x2c, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xdd, 0xf1, 0xdb, 0x40, 0x421, 0x4b2, 0xf7d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@uac_as={[@format_type_i_discrete={0x8}]}]}}]}}]}}, 0x0) 17:49:05 executing program 4: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0x6) 17:49:05 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 17:49:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5}}}}]}, 0x38}}, 0x0) 17:49:05 executing program 5: userfaultfd(0x80001) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000001540)={0x2020}, 0x2020) 17:49:05 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg2\x00'}) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c65302077673200202f64ab07f93e9dabf5052bbe131665762f736e642f73657100207379736673000a2c515c4f0abda72fcf0ea156746b22937effc2a2cc900e9ebfb738d42811453af7353e2f2a3d1e50ea6c4ba125046e2fca3105a8c7a75f10a40f0f2a99673c8d801344808f32f91c340dcf4a93c834bcf94db2dfdb734b5cd403d132404a1d47d34a21128259068c07038ea3942f75aa443eb5ef0c54dcf92ec46d"], 0xa0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x8001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=r5, @ANYBLOB="806ea020000000060000eaff48db0060006400000704907800000000ac1e000101940400004424d231e000000200030007ac1414aa000000060000000000000004ffffffff0000f43389133e0e0000994d007f000001ac1414aae0000002440c5f0000000007000000030000335b60d4e9471ec1a2cbded44502827bc8d1755d1e3637c68115b3833eda823e24426f24f0b6b4afc37333e1ed8c4363c6b7824e364651661460f70d0dc6760ea22f258c195419ded56fdbd90b68c3dcec07c9ff4dfb4b"]}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x200302, 0x0) 17:49:05 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 17:49:05 executing program 4: r0 = syz_clone(0x270a2611, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x26, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r0, 0x7, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) tkill(r2, 0x9) prlimit64(r2, 0xd, &(0x7f0000000380), &(0x7f00000003c0)) r3 = getpgid(r0) syz_clone(0x0, &(0x7f0000000180)="be15b0cc054a8d5595c4e58fe2afc03a26f1558c6a33529c963c3572d9890147242c0be05fbd9f8b16461dabee7036212bd546fbf4860c06c134ff72c45c86318f8581a5d95e4590f2b9b679082b0c3e7628a4a7f46e4158fe0249870b3182a8d2c23494c2f7ecf8f2035e61777315fa3ba967e1bb627d41be7285a43522f0", 0x7f, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="df89590f290094fab2067fae0525cdebfe2254bd8686c0861307c6b086b59988") ptrace$cont(0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe) sched_rr_get_interval(0x0, 0x0) waitid(0x0, r3, 0x0, 0x1, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace(0x10, r1) getpgid(0x0) waitid(0x1, r0, &(0x7f0000000000), 0x2, &(0x7f0000000700)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r4, 0x0, &(0x7f0000000080), 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000240)={r5, r6+10000000}, &(0x7f0000000340)) tgkill(0xffffffffffffffff, r4, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_clone(0x2004000, &(0x7f00000007c0), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="a390fbbd96b98c5929a6a677d59e8636005754e8e6ec9fd4e643f94087225718c9ea8b93ea960cd0c35634b7cf7053bca9136dacb0bd06d66752f298b9e9054464c78c09e17df403a9aec8149d97a6ef3ca5f1f00e0ab471e227a5b93b757443525bba93430201172c922d9468cd171155def759e70920653cd345339f1da82285e88a7e1071f8e2e54fa80f3c6aa4258210") 17:49:05 executing program 5: userfaultfd(0x80001) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000001540)={0x2020}, 0x2020) 17:49:06 executing program 5: userfaultfd(0x80001) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000001540)={0x2020}, 0x2020) 17:49:06 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) [ 2564.342908][ T315] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2564.422156][T10964] dummy0: entered promiscuous mode [ 2564.461658][T10964] dummy0: left promiscuous mode 17:49:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, @adapter}]}) [ 2564.723247][ T315] usb 1-1: New USB device found, idVendor=0421, idProduct=04b2, bcdDevice=f7.d6 [ 2564.740583][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2564.810497][ T315] usb 1-1: config 0 descriptor?? [ 2564.889228][ T315] usb 1-1: bad CDC descriptors [ 2564.908562][ T315] usb 1-1: bad CDC descriptors [ 2565.092092][ T3466] usb 1-1: USB disconnect, device number 110 17:49:07 executing program 0: syz_usb_connect(0x0, 0x2c, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xdd, 0xf1, 0xdb, 0x40, 0x421, 0x4b2, 0xf7d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@uac_as={[@format_type_i_discrete={0x8}]}]}}]}}]}}, 0x0) 17:49:07 executing program 5: userfaultfd(0x80001) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000001540)={0x2020}, 0x2020) 17:49:07 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg2\x00'}) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c65302077673200202f64ab07f93e9dabf5052bbe131665762f736e642f73657100207379736673000a2c515c4f0abda72fcf0ea156746b22937effc2a2cc900e9ebfb738d42811453af7353e2f2a3d1e50ea6c4ba125046e2fca3105a8c7a75f10a40f0f2a99673c8d801344808f32f91c340dcf4a93c834bcf94db2dfdb734b5cd403d132404a1d47d34a21128259068c07038ea3942f75aa443eb5ef0c54dcf92ec46d"], 0xa0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x8001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=r5, @ANYBLOB="806ea020000000060000eaff48db0060006400000704907800000000ac1e000101940400004424d231e000000200030007ac1414aa000000060000000000000004ffffffff0000f43389133e0e0000994d007f000001ac1414aae0000002440c5f0000000007000000030000335b60d4e9471ec1a2cbded44502827bc8d1755d1e3637c68115b3833eda823e24426f24f0b6b4afc37333e1ed8c4363c6b7824e364651661460f70d0dc6760ea22f258c195419ded56fdbd90b68c3dcec07c9ff4dfb4b"]}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x200302, 0x0) 17:49:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x3c}}, 0x0) 17:49:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, @adapter}]}) 17:49:07 executing program 4: r0 = syz_clone(0x270a2611, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x26, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r0, 0x7, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) tkill(r2, 0x9) prlimit64(r2, 0xd, &(0x7f0000000380), &(0x7f00000003c0)) r3 = getpgid(r0) syz_clone(0x0, &(0x7f0000000180)="be15b0cc054a8d5595c4e58fe2afc03a26f1558c6a33529c963c3572d9890147242c0be05fbd9f8b16461dabee7036212bd546fbf4860c06c134ff72c45c86318f8581a5d95e4590f2b9b679082b0c3e7628a4a7f46e4158fe0249870b3182a8d2c23494c2f7ecf8f2035e61777315fa3ba967e1bb627d41be7285a43522f0", 0x7f, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="df89590f290094fab2067fae0525cdebfe2254bd8686c0861307c6b086b59988") ptrace$cont(0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe) sched_rr_get_interval(0x0, 0x0) waitid(0x0, r3, 0x0, 0x1, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace(0x10, r1) getpgid(0x0) waitid(0x1, r0, &(0x7f0000000000), 0x2, &(0x7f0000000700)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r4, 0x0, &(0x7f0000000080), 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000240)={r5, r6+10000000}, &(0x7f0000000340)) tgkill(0xffffffffffffffff, r4, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_clone(0x2004000, &(0x7f00000007c0), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="a390fbbd96b98c5929a6a677d59e8636005754e8e6ec9fd4e643f94087225718c9ea8b93ea960cd0c35634b7cf7053bca9136dacb0bd06d66752f298b9e9054464c78c09e17df403a9aec8149d97a6ef3ca5f1f00e0ab471e227a5b93b757443525bba93430201172c922d9468cd171155def759e70920653cd345339f1da82285e88a7e1071f8e2e54fa80f3c6aa4258210") 17:49:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x3c}}, 0x0) 17:49:07 executing program 5: r0 = syz_clone(0x270a2611, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x26, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r0, 0x7, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) tkill(r2, 0x9) prlimit64(r2, 0xd, &(0x7f0000000380), &(0x7f00000003c0)) r3 = getpgid(r0) syz_clone(0x0, &(0x7f0000000180)="be15b0cc054a8d5595c4e58fe2afc03a26f1558c6a33529c963c3572d9890147242c0be05fbd9f8b16461dabee7036212bd546fbf4860c06c134ff72c45c86318f8581a5d95e4590f2b9b679082b0c3e7628a4a7f46e4158fe0249870b3182a8d2c23494c2f7ecf8f2035e61777315fa3ba967e1bb627d41be7285a43522f0", 0x7f, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="df89590f290094fab2067fae0525cdebfe2254bd8686c0861307c6b086b59988") ptrace$cont(0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe) sched_rr_get_interval(0x0, 0x0) waitid(0x0, r3, 0x0, 0x1, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace(0x10, r1) getpgid(0x0) waitid(0x1, r0, &(0x7f0000000000), 0x2, &(0x7f0000000700)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r4, 0x0, &(0x7f0000000080), 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000240)={r5, r6+10000000}, &(0x7f0000000340)) tgkill(0xffffffffffffffff, r4, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_clone(0x2004000, &(0x7f00000007c0), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="a390fbbd96b98c5929a6a677d59e8636005754e8e6ec9fd4e643f94087225718c9ea8b93ea960cd0c35634b7cf7053bca9136dacb0bd06d66752f298b9e9054464c78c09e17df403a9aec8149d97a6ef3ca5f1f00e0ab471e227a5b93b757443525bba93430201172c922d9468cd171155def759e70920653cd345339f1da82285e88a7e1071f8e2e54fa80f3c6aa4258210") [ 2565.823684][T11000] dummy0: entered promiscuous mode [ 2565.876686][T11000] dummy0: left promiscuous mode 17:49:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x3c}}, 0x0) 17:49:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, @adapter}]}) [ 2565.962979][T31602] usb 1-1: new high-speed USB device number 111 using dummy_hcd 17:49:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x3c}}, 0x0) 17:49:07 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg2\x00'}) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c65302077673200202f64ab07f93e9dabf5052bbe131665762f736e642f73657100207379736673000a2c515c4f0abda72fcf0ea156746b22937effc2a2cc900e9ebfb738d42811453af7353e2f2a3d1e50ea6c4ba125046e2fca3105a8c7a75f10a40f0f2a99673c8d801344808f32f91c340dcf4a93c834bcf94db2dfdb734b5cd403d132404a1d47d34a21128259068c07038ea3942f75aa443eb5ef0c54dcf92ec46d"], 0xa0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x8001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=r5, @ANYBLOB="806ea020000000060000eaff48db0060006400000704907800000000ac1e000101940400004424d231e000000200030007ac1414aa000000060000000000000004ffffffff0000f43389133e0e0000994d007f000001ac1414aae0000002440c5f0000000007000000030000335b60d4e9471ec1a2cbded44502827bc8d1755d1e3637c68115b3833eda823e24426f24f0b6b4afc37333e1ed8c4363c6b7824e364651661460f70d0dc6760ea22f258c195419ded56fdbd90b68c3dcec07c9ff4dfb4b"]}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x200302, 0x0) [ 2566.287501][T11024] dummy0: entered promiscuous mode [ 2566.343222][T31602] usb 1-1: New USB device found, idVendor=0421, idProduct=04b2, bcdDevice=f7.d6 [ 2566.353531][T11024] dummy0: left promiscuous mode [ 2566.369099][T31602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2566.417142][T31602] usb 1-1: config 0 descriptor?? [ 2566.482699][T31602] usb 1-1: bad CDC descriptors [ 2566.511990][T31602] usb 1-1: bad CDC descriptors [ 2566.746641][ T7] usb 1-1: USB disconnect, device number 111 17:49:08 executing program 0: syz_usb_connect(0x0, 0x2c, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xdd, 0xf1, 0xdb, 0x40, 0x421, 0x4b2, 0xf7d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@uac_as={[@format_type_i_discrete={0x8}]}]}}]}}]}}, 0x0) 17:49:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x10000003, 0x0, 0x0, 0x0, 0x7d, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:49:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x9, 0x1, [0x0]}, 0xa) 17:49:08 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg2\x00'}) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c65302077673200202f64ab07f93e9dabf5052bbe131665762f736e642f73657100207379736673000a2c515c4f0abda72fcf0ea156746b22937effc2a2cc900e9ebfb738d42811453af7353e2f2a3d1e50ea6c4ba125046e2fca3105a8c7a75f10a40f0f2a99673c8d801344808f32f91c340dcf4a93c834bcf94db2dfdb734b5cd403d132404a1d47d34a21128259068c07038ea3942f75aa443eb5ef0c54dcf92ec46d"], 0xa0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x8001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=r5, @ANYBLOB="806ea020000000060000eaff48db0060006400000704907800000000ac1e000101940400004424d231e000000200030007ac1414aa000000060000000000000004ffffffff0000f43389133e0e0000994d007f000001ac1414aae0000002440c5f0000000007000000030000335b60d4e9471ec1a2cbded44502827bc8d1755d1e3637c68115b3833eda823e24426f24f0b6b4afc37333e1ed8c4363c6b7824e364651661460f70d0dc6760ea22f258c195419ded56fdbd90b68c3dcec07c9ff4dfb4b"]}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x200302, 0x0) 17:49:08 executing program 5: r0 = syz_clone(0x270a2611, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x26, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r0, 0x7, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) tkill(r2, 0x9) prlimit64(r2, 0xd, &(0x7f0000000380), &(0x7f00000003c0)) r3 = getpgid(r0) syz_clone(0x0, &(0x7f0000000180)="be15b0cc054a8d5595c4e58fe2afc03a26f1558c6a33529c963c3572d9890147242c0be05fbd9f8b16461dabee7036212bd546fbf4860c06c134ff72c45c86318f8581a5d95e4590f2b9b679082b0c3e7628a4a7f46e4158fe0249870b3182a8d2c23494c2f7ecf8f2035e61777315fa3ba967e1bb627d41be7285a43522f0", 0x7f, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="df89590f290094fab2067fae0525cdebfe2254bd8686c0861307c6b086b59988") ptrace$cont(0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe) sched_rr_get_interval(0x0, 0x0) waitid(0x0, r3, 0x0, 0x1, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace(0x10, r1) getpgid(0x0) waitid(0x1, r0, &(0x7f0000000000), 0x2, &(0x7f0000000700)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r4, 0x0, &(0x7f0000000080), 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000240)={r5, r6+10000000}, &(0x7f0000000340)) tgkill(0xffffffffffffffff, r4, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_clone(0x2004000, &(0x7f00000007c0), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="a390fbbd96b98c5929a6a677d59e8636005754e8e6ec9fd4e643f94087225718c9ea8b93ea960cd0c35634b7cf7053bca9136dacb0bd06d66752f298b9e9054464c78c09e17df403a9aec8149d97a6ef3ca5f1f00e0ab471e227a5b93b757443525bba93430201172c922d9468cd171155def759e70920653cd345339f1da82285e88a7e1071f8e2e54fa80f3c6aa4258210") 17:49:09 executing program 4: r0 = syz_clone(0x270a2611, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x26, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r0, 0x7, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) tkill(r2, 0x9) prlimit64(r2, 0xd, &(0x7f0000000380), &(0x7f00000003c0)) r3 = getpgid(r0) syz_clone(0x0, &(0x7f0000000180)="be15b0cc054a8d5595c4e58fe2afc03a26f1558c6a33529c963c3572d9890147242c0be05fbd9f8b16461dabee7036212bd546fbf4860c06c134ff72c45c86318f8581a5d95e4590f2b9b679082b0c3e7628a4a7f46e4158fe0249870b3182a8d2c23494c2f7ecf8f2035e61777315fa3ba967e1bb627d41be7285a43522f0", 0x7f, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="df89590f290094fab2067fae0525cdebfe2254bd8686c0861307c6b086b59988") ptrace$cont(0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe) sched_rr_get_interval(0x0, 0x0) waitid(0x0, r3, 0x0, 0x1, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace(0x10, r1) getpgid(0x0) waitid(0x1, r0, &(0x7f0000000000), 0x2, &(0x7f0000000700)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r4, 0x0, &(0x7f0000000080), 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000240)={r5, r6+10000000}, &(0x7f0000000340)) tgkill(0xffffffffffffffff, r4, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_clone(0x2004000, &(0x7f00000007c0), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="a390fbbd96b98c5929a6a677d59e8636005754e8e6ec9fd4e643f94087225718c9ea8b93ea960cd0c35634b7cf7053bca9136dacb0bd06d66752f298b9e9054464c78c09e17df403a9aec8149d97a6ef3ca5f1f00e0ab471e227a5b93b757443525bba93430201172c922d9468cd171155def759e70920653cd345339f1da82285e88a7e1071f8e2e54fa80f3c6aa4258210") 17:49:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x9, 0x1, [0x0]}, 0xa) [ 2567.466271][T11048] dummy0: entered promiscuous mode 17:49:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x9, 0x1, [0x0]}, 0xa) [ 2567.577316][T11048] dummy0: left promiscuous mode 17:49:09 executing program 3: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1800) [ 2567.653006][T31602] usb 1-1: new high-speed USB device number 112 using dummy_hcd 17:49:09 executing program 3: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1800) 17:49:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x9, 0x1, [0x0]}, 0xa) 17:49:09 executing program 3: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1800) [ 2568.063233][T31602] usb 1-1: New USB device found, idVendor=0421, idProduct=04b2, bcdDevice=f7.d6 [ 2568.072367][T31602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2568.128260][T31602] usb 1-1: config 0 descriptor?? [ 2568.193802][T31602] usb 1-1: bad CDC descriptors [ 2568.213406][T31602] usb 1-1: bad CDC descriptors [ 2568.451302][T31602] usb 1-1: USB disconnect, device number 112 17:49:10 executing program 0: syz_usb_connect(0x0, 0x2c, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xdd, 0xf1, 0xdb, 0x40, 0x421, 0x4b2, 0xf7d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@uac_as={[@format_type_i_discrete={0x8}]}]}}]}}]}}, 0x0) 17:49:10 executing program 2: epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) io_setup(0x0, 0x0) r3 = epoll_create1(0x0) io_setup(0x4, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) io_submit(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r7 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105518, 0x0) ptrace(0x8, r7) signalfd(r4, &(0x7f0000000100), 0x8) 17:49:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) dup3(r1, r0, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000001840)=[&(0x7f0000003980)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\"', 0x1}]) 17:49:10 executing program 3: rseq(&(0x7f00000000c0), 0x20, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1800) 17:49:11 executing program 5: r0 = syz_clone(0x270a2611, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x26, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r0, 0x7, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) tkill(r2, 0x9) prlimit64(r2, 0xd, &(0x7f0000000380), &(0x7f00000003c0)) r3 = getpgid(r0) syz_clone(0x0, &(0x7f0000000180)="be15b0cc054a8d5595c4e58fe2afc03a26f1558c6a33529c963c3572d9890147242c0be05fbd9f8b16461dabee7036212bd546fbf4860c06c134ff72c45c86318f8581a5d95e4590f2b9b679082b0c3e7628a4a7f46e4158fe0249870b3182a8d2c23494c2f7ecf8f2035e61777315fa3ba967e1bb627d41be7285a43522f0", 0x7f, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="df89590f290094fab2067fae0525cdebfe2254bd8686c0861307c6b086b59988") ptrace$cont(0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe) sched_rr_get_interval(0x0, 0x0) waitid(0x0, r3, 0x0, 0x1, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace(0x10, r1) getpgid(0x0) waitid(0x1, r0, &(0x7f0000000000), 0x2, &(0x7f0000000700)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r4, 0x0, &(0x7f0000000080), 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000240)={r5, r6+10000000}, &(0x7f0000000340)) tgkill(0xffffffffffffffff, r4, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_clone(0x2004000, &(0x7f00000007c0), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="a390fbbd96b98c5929a6a677d59e8636005754e8e6ec9fd4e643f94087225718c9ea8b93ea960cd0c35634b7cf7053bca9136dacb0bd06d66752f298b9e9054464c78c09e17df403a9aec8149d97a6ef3ca5f1f00e0ab471e227a5b93b757443525bba93430201172c922d9468cd171155def759e70920653cd345339f1da82285e88a7e1071f8e2e54fa80f3c6aa4258210") 17:49:11 executing program 3: syz_clone(0xaa008000, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)) 17:49:11 executing program 4: r0 = syz_clone(0x270a2611, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x26, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r0, 0x7, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) tkill(r2, 0x9) prlimit64(r2, 0xd, &(0x7f0000000380), &(0x7f00000003c0)) r3 = getpgid(r0) syz_clone(0x0, &(0x7f0000000180)="be15b0cc054a8d5595c4e58fe2afc03a26f1558c6a33529c963c3572d9890147242c0be05fbd9f8b16461dabee7036212bd546fbf4860c06c134ff72c45c86318f8581a5d95e4590f2b9b679082b0c3e7628a4a7f46e4158fe0249870b3182a8d2c23494c2f7ecf8f2035e61777315fa3ba967e1bb627d41be7285a43522f0", 0x7f, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="df89590f290094fab2067fae0525cdebfe2254bd8686c0861307c6b086b59988") ptrace$cont(0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe) sched_rr_get_interval(0x0, 0x0) waitid(0x0, r3, 0x0, 0x1, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace(0x10, r1) getpgid(0x0) waitid(0x1, r0, &(0x7f0000000000), 0x2, &(0x7f0000000700)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r4, 0x0, &(0x7f0000000080), 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000240)={r5, r6+10000000}, &(0x7f0000000340)) tgkill(0xffffffffffffffff, r4, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_clone(0x2004000, &(0x7f00000007c0), 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="a390fbbd96b98c5929a6a677d59e8636005754e8e6ec9fd4e643f94087225718c9ea8b93ea960cd0c35634b7cf7053bca9136dacb0bd06d66752f298b9e9054464c78c09e17df403a9aec8149d97a6ef3ca5f1f00e0ab471e227a5b93b757443525bba93430201172c922d9468cd171155def759e70920653cd345339f1da82285e88a7e1071f8e2e54fa80f3c6aa4258210") 17:49:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) dup3(r1, r0, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000001840)=[&(0x7f0000003980)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\"', 0x1}]) 17:49:11 executing program 3: syz_clone(0xaa008000, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)) [ 2569.514837][T31602] usb 1-1: new high-speed USB device number 113 using dummy_hcd 17:49:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) dup3(r1, r0, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000001840)=[&(0x7f0000003980)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\"', 0x1}]) 17:49:11 executing program 3: syz_clone(0xaa008000, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)) [ 2569.873400][T31602] usb 1-1: New USB device found, idVendor=0421, idProduct=04b2, bcdDevice=f7.d6 [ 2569.887084][T31602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2569.913563][T31602] usb 1-1: config 0 descriptor?? 17:49:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) dup3(r1, r0, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000001840)=[&(0x7f0000003980)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\"', 0x1}]) [ 2569.984682][T31602] usb 1-1: bad CDC descriptors [ 2570.002327][T31602] usb 1-1: bad CDC descriptors [ 2570.245063][T10729] usb 1-1: USB disconnect, device number 113 17:49:12 executing program 3: syz_clone(0xaa008000, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)) 17:49:12 executing program 2: epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) io_setup(0x0, 0x0) r3 = epoll_create1(0x0) io_setup(0x4, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) io_submit(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r7 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105518, 0x0) ptrace(0x8, r7) signalfd(r4, &(0x7f0000000100), 0x8) 17:49:12 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x22}], 0x1c) 17:49:12 executing program 0: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000700)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x2, 0x0, r2, 0x0}]) 17:49:13 executing program 0: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000700)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x2, 0x0, r2, 0x0}]) 17:49:13 executing program 5: epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) io_setup(0x0, 0x0) r3 = epoll_create1(0x0) io_setup(0x4, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) io_submit(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r7 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105518, 0x0) ptrace(0x8, r7) signalfd(r4, &(0x7f0000000100), 0x8) 17:49:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', @ifru_data=&(0x7f0000000000)="0a000000000000000200002000000000020000000000000001000f00"}) 17:49:14 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x22}], 0x1c) 17:49:14 executing program 0: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000700)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x2, 0x0, r2, 0x0}]) 17:49:14 executing program 4: epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) io_setup(0x0, 0x0) r3 = epoll_create1(0x0) io_setup(0x4, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) io_submit(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r7 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105518, 0x0) ptrace(0x8, r7) signalfd(r4, &(0x7f0000000100), 0x8) 17:49:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', @ifru_data=&(0x7f0000000000)="0a000000000000000200002000000000020000000000000001000f00"}) 17:49:14 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x22}], 0x1c) 17:49:14 executing program 0: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000700)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x2, 0x0, r2, 0x0}]) 17:49:15 executing program 2: epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) io_setup(0x0, 0x0) r3 = epoll_create1(0x0) io_setup(0x4, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) io_submit(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r7 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105518, 0x0) ptrace(0x8, r7) signalfd(r4, &(0x7f0000000100), 0x8) 17:49:15 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x22}], 0x1c) 17:49:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', @ifru_data=&(0x7f0000000000)="0a000000000000000200002000000000020000000000000001000f00"}) 17:49:15 executing program 0: epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) io_setup(0x0, 0x0) r3 = epoll_create1(0x0) io_setup(0x4, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) io_submit(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r7 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105518, 0x0) ptrace(0x8, r7) signalfd(r4, &(0x7f0000000100), 0x8) 17:49:20 executing program 5: epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) io_setup(0x0, 0x0) r3 = epoll_create1(0x0) io_setup(0x4, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) io_submit(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r7 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105518, 0x0) ptrace(0x8, r7) signalfd(r4, &(0x7f0000000100), 0x8) 17:49:20 executing program 1: r0 = socket(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r0, 0x0, &(0x7f0000001340)) 17:49:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', @ifru_data=&(0x7f0000000000)="0a000000000000000200002000000000020000000000000001000f00"}) 17:49:20 executing program 0: epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) io_setup(0x0, 0x0) r3 = epoll_create1(0x0) io_setup(0x4, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) io_submit(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r7 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105518, 0x0) ptrace(0x8, r7) signalfd(r4, &(0x7f0000000100), 0x8) 17:49:20 executing program 2: epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) io_setup(0x0, 0x0) r3 = epoll_create1(0x0) io_setup(0x4, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) io_submit(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r7 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105518, 0x0) ptrace(0x8, r7) signalfd(r4, &(0x7f0000000100), 0x8) 17:49:20 executing program 4: epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) io_setup(0x0, 0x0) r3 = epoll_create1(0x0) io_setup(0x4, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) io_submit(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r7 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105518, 0x0) ptrace(0x8, r7) signalfd(r4, &(0x7f0000000100), 0x8) 17:49:20 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/dmi', 0x0, 0x0) fchownat(r0, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x1000) 17:49:20 executing program 1: r0 = socket(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r0, 0x0, &(0x7f0000001340)) 17:49:20 executing program 1: r0 = socket(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r0, 0x0, &(0x7f0000001340)) 17:49:20 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/dmi', 0x0, 0x0) fchownat(r0, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x1000) 17:49:20 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/dmi', 0x0, 0x0) fchownat(r0, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x1000) 17:49:20 executing program 1: r0 = socket(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r0, 0x0, &(0x7f0000001340)) 17:49:23 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/dmi', 0x0, 0x0) fchownat(r0, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x1000) 17:49:23 executing program 1: r0 = socket(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r0, 0x0, &(0x7f0000001340)) 17:49:23 executing program 5: epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) io_setup(0x0, 0x0) r3 = epoll_create1(0x0) io_setup(0x4, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) io_submit(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r7 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105518, 0x0) ptrace(0x8, r7) signalfd(r4, &(0x7f0000000100), 0x8) 17:49:23 executing program 0: epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) io_setup(0x0, 0x0) r3 = epoll_create1(0x0) io_setup(0x4, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) io_submit(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r7 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105518, 0x0) ptrace(0x8, r7) signalfd(r4, &(0x7f0000000100), 0x8) 17:49:23 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) close(r0) 17:49:23 executing program 3: set_mempolicy(0x4005, &(0x7f0000000000)=0x22, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 17:49:23 executing program 1: r0 = socket(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r0, 0x0, &(0x7f0000001340)) 17:49:23 executing program 4: epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) io_setup(0x0, 0x0) r3 = epoll_create1(0x0) io_setup(0x4, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) io_submit(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r7 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105518, 0x0) ptrace(0x8, r7) signalfd(r4, &(0x7f0000000100), 0x8) 17:49:23 executing program 3: set_mempolicy(0x4005, &(0x7f0000000000)=0x22, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 17:49:23 executing program 1: r0 = socket(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r0, 0x0, &(0x7f0000001340)) 17:49:23 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) close(r0) 17:49:23 executing program 3: set_mempolicy(0x4005, &(0x7f0000000000)=0x22, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 17:49:23 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:49:23 executing program 3: set_mempolicy(0x4005, &(0x7f0000000000)=0x22, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 17:49:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 17:49:26 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 17:49:26 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) close(r0) 17:49:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000006c0)="ad56b6c5820fae9d6dc200"/24, 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000100), 0xffffffffffffff5d, 0x0, 0x0, 0x429) socket(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) recvfrom$unix(r1, &(0x7f0000000080)=""/252, 0x50600, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 17:49:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 17:49:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:49:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x74}}, 0x0) 17:49:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 17:49:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x74}}, 0x0) 17:49:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 17:49:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x74}}, 0x0) 17:49:26 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 17:49:26 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) close(r0) 17:49:26 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 17:49:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x74}}, 0x0) 17:49:27 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 17:49:27 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 17:49:28 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:49:28 executing program 2: bpf$PROG_LOAD(0x15, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 17:49:28 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 17:49:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000006c0)="ad56b6c5820fae9d6dc200"/24, 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000100), 0xffffffffffffff5d, 0x0, 0x0, 0x429) socket(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) recvfrom$unix(r1, &(0x7f0000000080)=""/252, 0x50600, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 17:49:28 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 17:49:28 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 17:49:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000001640)=0x7ffffffc, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c) 17:49:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000001640)=0x7ffffffc, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c) 17:49:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000001640)=0x7ffffffc, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c) 17:49:28 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 17:49:28 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 17:49:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000001640)=0x7ffffffc, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c) 17:49:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000006c0)="ad56b6c5820fae9d6dc200"/24, 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000100), 0xffffffffffffff5d, 0x0, 0x0, 0x429) socket(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) recvfrom$unix(r1, &(0x7f0000000080)=""/252, 0x50600, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 17:49:29 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:49:29 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0305615, &(0x7f0000000180)) 17:49:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0x6, 0x0, 0x1, [{0x14}]}]}]}]}, 0x40}}, 0x0) 17:49:29 executing program 4: syz_emit_ethernet(0x7c, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0xc, 0x2f, 0x0, @local, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x0, [0x1100]}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1200}, {0x0, 0x0, 0x0, 0x0, 0x1f4}, {0x8, 0x88c0}}}}}}}, 0x0) 17:49:29 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x0, 0x0, 0x9, {0x9, 0x0, "9882b3ba82a294"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 17:49:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0x6, 0x0, 0x1, [{0x14}]}]}]}]}, 0x40}}, 0x0) 17:49:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 17:49:29 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0305615, &(0x7f0000000180)) 17:49:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0x6, 0x0, 0x1, [{0x14}]}]}]}]}, 0x40}}, 0x0) 17:49:29 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0305615, &(0x7f0000000180)) 17:49:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0x6, 0x0, 0x1, [{0x14}]}]}]}]}, 0x40}}, 0x0) [ 2588.153298][ T7] usb 3-1: new high-speed USB device number 106 using dummy_hcd 17:49:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000006c0)="ad56b6c5820fae9d6dc200"/24, 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000100), 0xffffffffffffff5d, 0x0, 0x0, 0x429) socket(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) recvfrom$unix(r1, &(0x7f0000000080)=""/252, 0x50600, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2588.523149][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2588.544354][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2588.565727][ T7] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 2588.598992][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2588.634040][ T7] usb 3-1: config 0 descriptor?? [ 2589.132238][ T7] cherry 0003:046A:0027.0080: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.2-1/input0 [ 2589.333175][ T7] usb 3-1: USB disconnect, device number 106 17:49:31 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) ioprio_set$pid(0x2, r0, 0x0) 17:49:31 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0305615, &(0x7f0000000180)) 17:49:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x0, 0x0, 0x9, {0x9, 0x0, "9882b3ba82a294"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 17:49:31 executing program 4: r0 = socket(0x18, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 17:49:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}]}}}]}, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 17:49:31 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000002a105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001200)={0x24, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00226000000096fa00ef9c264f6f7e5a2f158d26e53f77200000002a6a01070100be008336"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)="a6") 17:49:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000107000000003ec1fd6de3c70000", @ANYRES32=r3, @ANYBLOB="000000fb00000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000024001d0700"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x71d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}}, 0x24}}, 0x0) 17:49:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe}, [@RTA_SRC={0x8, 0x2, @empty}, @RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_PREFSRC={0x8, 0x7, @loopback}, @RTA_GATEWAY={0x8, 0x5, @multicast1}]}, 0x44}}, 0x0) 17:49:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000600)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'morus1280-avx2\x00'}}}]}, 0x184}}, 0x0) 17:49:31 executing program 4: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180), 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff1}, {0xffe0, 0x6}, {0x1, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x3e908574564fbf1a}, 0x4004) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x680500, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xffff, 0xfff1}, {0xffe0, 0x6}, {0x1, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x3e908574564fbf1a}, 0x4004) r9 = syz_open_dev$audion(&(0x7f0000000580), 0x1, 0x20100) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffff0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x401}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x16, &(0x7f0000000100)=""/22, 0x41000, 0x8, '\x00', r3, 0x10, r4, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x20000003, 0x8, 0x7}, 0x10, r5, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r9]}, 0x80) [ 2589.955869][T11392] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:49:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000600)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'morus1280-avx2\x00'}}}]}, 0x184}}, 0x0) [ 2590.037317][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:49:31 executing program 4: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180), 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff1}, {0xffe0, 0x6}, {0x1, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x3e908574564fbf1a}, 0x4004) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x680500, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xffff, 0xfff1}, {0xffe0, 0x6}, {0x1, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x3e908574564fbf1a}, 0x4004) r9 = syz_open_dev$audion(&(0x7f0000000580), 0x1, 0x20100) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffff0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x401}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x16, &(0x7f0000000100)=""/22, 0x41000, 0x8, '\x00', r3, 0x10, r4, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x20000003, 0x8, 0x7}, 0x10, r5, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r9]}, 0x80) [ 2590.112250][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2590.118695][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:49:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000107000000003ec1fd6de3c70000", @ANYRES32=r3, @ANYBLOB="000000fb00000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000024001d0700"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x71d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}}, 0x24}}, 0x0) 17:49:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}]}}}]}, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) [ 2590.202980][ T7] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2590.233529][T10729] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2590.267059][T11409] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2590.330705][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2590.443345][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 2590.563333][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2590.575003][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2590.588416][ T7] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2590.598368][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2590.613252][T10729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2590.617096][ T7] usb 6-1: config 0 descriptor?? [ 2590.634645][T10729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2590.652760][T10729] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 2590.661973][T10729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2590.675376][T10729] usb 3-1: config 0 descriptor?? [ 2591.132060][ T7] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0081/input/input218 [ 2591.163132][T10729] cherry 0003:046A:0027.0082: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.2-1/input0 [ 2591.254562][ T7] microsoft 0003:045E:07DA.0081: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 2591.383088][T10729] usb 3-1: USB disconnect, device number 107 [ 2591.540435][ T7] usb 6-1: USB disconnect, device number 10 17:49:33 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x0, 0x0, 0x9, {0x9, 0x0, "9882b3ba82a294"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 17:49:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000107000000003ec1fd6de3c70000", @ANYRES32=r3, @ANYBLOB="000000fb00000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000024001d0700"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x71d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}}, 0x24}}, 0x0) 17:49:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000600)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'morus1280-avx2\x00'}}}]}, 0x184}}, 0x0) [ 2591.961176][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2591.974506][T11416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:49:33 executing program 5: syz_emit_ethernet(0xce, &(0x7f00000001c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "9cf6f9", 0x98, 0x29, 0x0, @dev, @private2, {[], @name_distributor={{0x98, 0x0, 0x0, 0x0, 0x0, 0xa}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}]}}}}}}, 0x0) 17:49:33 executing program 4: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180), 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff1}, {0xffe0, 0x6}, {0x1, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x3e908574564fbf1a}, 0x4004) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x680500, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xffff, 0xfff1}, {0xffe0, 0x6}, {0x1, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x3e908574564fbf1a}, 0x4004) r9 = syz_open_dev$audion(&(0x7f0000000580), 0x1, 0x20100) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffff0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x401}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x16, &(0x7f0000000100)=""/22, 0x41000, 0x8, '\x00', r3, 0x10, r4, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x20000003, 0x8, 0x7}, 0x10, r5, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r9]}, 0x80) 17:49:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}]}}}]}, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 17:49:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000600)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'morus1280-avx2\x00'}}}]}, 0x184}}, 0x0) [ 2592.037535][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 17:49:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000107000000003ec1fd6de3c70000", @ANYRES32=r3, @ANYBLOB="000000fb00000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000024001d0700"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x71d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 2592.106683][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:49:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000203030000000000000000e3000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 17:49:33 executing program 5: syz_emit_ethernet(0xce, &(0x7f00000001c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "9cf6f9", 0x98, 0x29, 0x0, @dev, @private2, {[], @name_distributor={{0x98, 0x0, 0x0, 0x0, 0x0, 0xa}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}]}}}}}}, 0x0) 17:49:33 executing program 4: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180), 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff1}, {0xffe0, 0x6}, {0x1, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x3e908574564fbf1a}, 0x4004) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x680500, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xffff, 0xfff1}, {0xffe0, 0x6}, {0x1, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x3e908574564fbf1a}, 0x4004) r9 = syz_open_dev$audion(&(0x7f0000000580), 0x1, 0x20100) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffff0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x401}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x16, &(0x7f0000000100)=""/22, 0x41000, 0x8, '\x00', r3, 0x10, r4, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x20000003, 0x8, 0x7}, 0x10, r5, r0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r9]}, 0x80) [ 2592.263204][T10729] usb 3-1: new high-speed USB device number 108 using dummy_hcd 17:49:34 executing program 5: syz_emit_ethernet(0xce, &(0x7f00000001c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "9cf6f9", 0x98, 0x29, 0x0, @dev, @private2, {[], @name_distributor={{0x98, 0x0, 0x0, 0x0, 0x0, 0xa}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}]}}}}}}, 0x0) [ 2592.653396][T10729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2592.672701][T10729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2592.682516][T10729] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 2592.694929][T10729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2592.712933][T10729] usb 3-1: config 0 descriptor?? [ 2593.188474][T10729] cherry 0003:046A:0027.0083: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.2-1/input0 [ 2593.407547][ T7] usb 3-1: USB disconnect, device number 108 17:49:35 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x0, 0x0, 0x9, {0x9, 0x0, "9882b3ba82a294"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 17:49:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000203030000000000000000e3000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 17:49:35 executing program 5: syz_emit_ethernet(0xce, &(0x7f00000001c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "9cf6f9", 0x98, 0x29, 0x0, @dev, @private2, {[], @name_distributor={{0x98, 0x0, 0x0, 0x0, 0x0, 0xa}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}]}}}}}}, 0x0) 17:49:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}]}}}]}, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 17:49:35 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="02010000a527bd40eb030200c0ba000000010902114901000000080904000001d98fb100090581"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "90ed322d", "c82eabea"}}, 0x0}, &(0x7f0000000b00)={0x84, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x40, 0x22, 0x45, {0x45, 0x6, "1b1999e554db26dac191b317f8d62e3252bbd13db658c44a3c72c9c0d4e2915f02a502e703d6381715a839d971f874a6dfb981734475fc24408228a37c2d0968c8e41a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x10, &(0x7f0000000180)={0x0, 0x5, 0x37, "fc3f3c405461e8e784879ba87aa6b1f00b98015721f5ec176b0eef50e1d87f89e01ad9f19830d197f30429cef4f7875fd23222e0725362"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1c}}) capset(&(0x7f0000000040), &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r2) ptrace(0xffffffffffffffff, r2) ptrace(0x10, r1) ptrace(0x11, 0x0) ptrace(0x10, r2) ptrace(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:49:35 executing program 4: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x40) 17:49:35 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0xa, 0x3, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @irqchip={0x0, 0x5}}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.numa_stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) mq_notify(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x10, 0x0, @thr={&(0x7f0000000400)="e7fb50f5692b01c37a92677ea1dcb211b4a3ecbe30701c74a85d5cc4be2ee8940d8cf1b5cad0562e411e9f0d9b5493a630642878e4278717e3fd6593fb01e01ed919e6efbf2804f83ffdf2821ff1d4cf96b2053cd8e41e791b18cb3b7bd65216fd7c47a89f40f3e88e0b059ef04340414c8568dd841f1305e0a976b838ab80bb763234d070147cbd913e6becca2e3924e481ff", &(0x7f0000000340)="ed943a3473caacb06979e1106d4fb8624a69c26a3234728482257041129ec20e262db4b4d5b33e92943cbf56160e82ccd4641fcafc599e4d84b22ee3deff9598420b8a92f960ff9cd5347aae8f73e40f5bc9cfe7c84ae4"}}, &(0x7f00000004c0)) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="070d722463ea767f8ce7635f49326594ab075f5aff9bc289e64458020051cf3143924b58710765b76990ad108891fce7620700000000000000ed0704cd9a03e497d000000000000000190000"], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r3, r4, 0x0, 0x8000002b) 17:49:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'hsr0\x00'}) 17:49:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000203030000000000000000e3000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 17:49:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000203030000000000000000e3000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) [ 2594.160887][T11459] 8021q: VLANs not supported on hsr0 17:49:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'hsr0\x00'}) [ 2594.243095][T10729] usb 1-1: new high-speed USB device number 114 using dummy_hcd 17:49:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001200055a"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe04}, {0x0, 0x478}, {&(0x7f0000002a80)=""/4090, 0x1c8}], 0x3, 0x0, 0xa}}], 0x2f3, 0x10000, 0x0) [ 2594.384843][T31602] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2594.436241][T11465] 8021q: VLANs not supported on hsr0 [ 2594.663414][T10729] usb 1-1: config index 0 descriptor too short (expected 18705, got 27) [ 2594.671847][T10729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2594.682609][T10729] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2594.692196][T10729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2594.703231][T10729] usb 1-1: config 0 descriptor?? [ 2594.793307][T31602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2594.812969][T31602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2594.832917][T31602] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 2594.842023][T31602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2594.850421][T10729] rc_core: IR keymap rc-hauppauge not found [ 2594.856658][T10729] Registered IR keymap rc-empty [ 2594.866378][T10729] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2594.889540][T31602] usb 3-1: config 0 descriptor?? [ 2594.913013][T10729] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input219 [ 2595.192870][ C1] igorplugusb 1-1:0.0: receive overflow invalid: 60 [ 2595.412380][T31602] cherry 0003:046A:0027.0084: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.2-1/input0 [ 2595.537742][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 2595.546390][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 [ 2595.629547][T31602] usb 3-1: USB disconnect, device number 109 17:49:37 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="02010000a527bd40eb030200c0ba000000010902114901000000080904000001d98fb100090581"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "90ed322d", "c82eabea"}}, 0x0}, &(0x7f0000000b00)={0x84, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x40, 0x22, 0x45, {0x45, 0x6, "1b1999e554db26dac191b317f8d62e3252bbd13db658c44a3c72c9c0d4e2915f02a502e703d6381715a839d971f874a6dfb981734475fc24408228a37c2d0968c8e41a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x10, &(0x7f0000000180)={0x0, 0x5, 0x37, "fc3f3c405461e8e784879ba87aa6b1f00b98015721f5ec176b0eef50e1d87f89e01ad9f19830d197f30429cef4f7875fd23222e0725362"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1c}}) capset(&(0x7f0000000040), &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r2) ptrace(0xffffffffffffffff, r2) ptrace(0x10, r1) ptrace(0x11, 0x0) ptrace(0x10, r2) ptrace(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:49:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x7200}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 17:49:37 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0xa, 0x3, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @irqchip={0x0, 0x5}}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.numa_stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) mq_notify(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x10, 0x0, @thr={&(0x7f0000000400)="e7fb50f5692b01c37a92677ea1dcb211b4a3ecbe30701c74a85d5cc4be2ee8940d8cf1b5cad0562e411e9f0d9b5493a630642878e4278717e3fd6593fb01e01ed919e6efbf2804f83ffdf2821ff1d4cf96b2053cd8e41e791b18cb3b7bd65216fd7c47a89f40f3e88e0b059ef04340414c8568dd841f1305e0a976b838ab80bb763234d070147cbd913e6becca2e3924e481ff", &(0x7f0000000340)="ed943a3473caacb06979e1106d4fb8624a69c26a3234728482257041129ec20e262db4b4d5b33e92943cbf56160e82ccd4641fcafc599e4d84b22ee3deff9598420b8a92f960ff9cd5347aae8f73e40f5bc9cfe7c84ae4"}}, &(0x7f00000004c0)) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="070d722463ea767f8ce7635f49326594ab075f5aff9bc289e64458020051cf3143924b58710765b76990ad108891fce7620700000000000000ed0704cd9a03e497d000000000000000190000"], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r3, r4, 0x0, 0x8000002b) 17:49:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'hsr0\x00'}) 17:49:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001200055a"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe04}, {0x0, 0x478}, {&(0x7f0000002a80)=""/4090, 0x1c8}], 0x3, 0x0, 0xa}}], 0x2f3, 0x10000, 0x0) 17:49:37 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="02010000a527bd40eb030200c0ba000000010902114901000000080904000001d98fb100090581"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "90ed322d", "c82eabea"}}, 0x0}, &(0x7f0000000b00)={0x84, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x40, 0x22, 0x45, {0x45, 0x6, "1b1999e554db26dac191b317f8d62e3252bbd13db658c44a3c72c9c0d4e2915f02a502e703d6381715a839d971f874a6dfb981734475fc24408228a37c2d0968c8e41a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x10, &(0x7f0000000180)={0x0, 0x5, 0x37, "fc3f3c405461e8e784879ba87aa6b1f00b98015721f5ec176b0eef50e1d87f89e01ad9f19830d197f30429cef4f7875fd23222e0725362"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1c}}) capset(&(0x7f0000000040), &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r2) ptrace(0xffffffffffffffff, r2) ptrace(0x10, r1) ptrace(0x11, 0x0) ptrace(0x10, r2) ptrace(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2596.235360][T11476] 8021q: VLANs not supported on hsr0 [ 2596.248630][T11480] __nla_validate_parse: 68 callbacks suppressed [ 2596.248653][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 17:49:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x7200}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) [ 2596.319600][T11483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2596.344757][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 17:49:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'hsr0\x00'}) [ 2596.384957][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2596.409946][T11483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 17:49:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x7200}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) [ 2596.473225][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2596.535758][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2596.583172][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2596.593069][T31602] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2596.607025][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 17:49:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x7200}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) [ 2596.643493][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2596.669432][T11493] 8021q: VLANs not supported on hsr0 [ 2596.676252][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 17:49:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x7200}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) [ 2596.723049][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 17:49:38 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0xa, 0x3, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @irqchip={0x0, 0x5}}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.numa_stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) mq_notify(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x10, 0x0, @thr={&(0x7f0000000400)="e7fb50f5692b01c37a92677ea1dcb211b4a3ecbe30701c74a85d5cc4be2ee8940d8cf1b5cad0562e411e9f0d9b5493a630642878e4278717e3fd6593fb01e01ed919e6efbf2804f83ffdf2821ff1d4cf96b2053cd8e41e791b18cb3b7bd65216fd7c47a89f40f3e88e0b059ef04340414c8568dd841f1305e0a976b838ab80bb763234d070147cbd913e6becca2e3924e481ff", &(0x7f0000000340)="ed943a3473caacb06979e1106d4fb8624a69c26a3234728482257041129ec20e262db4b4d5b33e92943cbf56160e82ccd4641fcafc599e4d84b22ee3deff9598420b8a92f960ff9cd5347aae8f73e40f5bc9cfe7c84ae4"}}, &(0x7f00000004c0)) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="070d722463ea767f8ce7635f49326594ab075f5aff9bc289e64458020051cf3143924b58710765b76990ad108891fce7620700000000000000ed0704cd9a03e497d000000000000000190000"], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r3, r4, 0x0, 0x8000002b) [ 2597.003639][T31602] usb 3-1: config index 0 descriptor too short (expected 18705, got 27) [ 2597.017659][T31602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2597.042742][T31602] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2597.051840][T31602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2597.097752][T31602] usb 3-1: config 0 descriptor?? 17:49:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001200055a"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe04}, {0x0, 0x478}, {&(0x7f0000002a80)=""/4090, 0x1c8}], 0x3, 0x0, 0xa}}], 0x2f3, 0x10000, 0x0) 17:49:39 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="02010000a527bd40eb030200c0ba000000010902114901000000080904000001d98fb100090581"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "90ed322d", "c82eabea"}}, 0x0}, &(0x7f0000000b00)={0x84, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x40, 0x22, 0x45, {0x45, 0x6, "1b1999e554db26dac191b317f8d62e3252bbd13db658c44a3c72c9c0d4e2915f02a502e703d6381715a839d971f874a6dfb981734475fc24408228a37c2d0968c8e41a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x10, &(0x7f0000000180)={0x0, 0x5, 0x37, "fc3f3c405461e8e784879ba87aa6b1f00b98015721f5ec176b0eef50e1d87f89e01ad9f19830d197f30429cef4f7875fd23222e0725362"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1c}}) capset(&(0x7f0000000040), &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r2) ptrace(0xffffffffffffffff, r2) ptrace(0x10, r1) ptrace(0x11, 0x0) ptrace(0x10, r2) ptrace(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:49:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x7200}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 17:49:39 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="02010000a527bd40eb030200c0ba000000010902114901000000080904000001d98fb100090581"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "90ed322d", "c82eabea"}}, 0x0}, &(0x7f0000000b00)={0x84, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x40, 0x22, 0x45, {0x45, 0x6, "1b1999e554db26dac191b317f8d62e3252bbd13db658c44a3c72c9c0d4e2915f02a502e703d6381715a839d971f874a6dfb981734475fc24408228a37c2d0968c8e41a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x10, &(0x7f0000000180)={0x0, 0x5, 0x37, "fc3f3c405461e8e784879ba87aa6b1f00b98015721f5ec176b0eef50e1d87f89e01ad9f19830d197f30429cef4f7875fd23222e0725362"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1c}}) capset(&(0x7f0000000040), &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r2) ptrace(0xffffffffffffffff, r2) ptrace(0x10, r1) ptrace(0x11, 0x0) ptrace(0x10, r2) ptrace(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:49:39 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0xa, 0x3, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @irqchip={0x0, 0x5}}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.numa_stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) mq_notify(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x10, 0x0, @thr={&(0x7f0000000400)="e7fb50f5692b01c37a92677ea1dcb211b4a3ecbe30701c74a85d5cc4be2ee8940d8cf1b5cad0562e411e9f0d9b5493a630642878e4278717e3fd6593fb01e01ed919e6efbf2804f83ffdf2821ff1d4cf96b2053cd8e41e791b18cb3b7bd65216fd7c47a89f40f3e88e0b059ef04340414c8568dd841f1305e0a976b838ab80bb763234d070147cbd913e6becca2e3924e481ff", &(0x7f0000000340)="ed943a3473caacb06979e1106d4fb8624a69c26a3234728482257041129ec20e262db4b4d5b33e92943cbf56160e82ccd4641fcafc599e4d84b22ee3deff9598420b8a92f960ff9cd5347aae8f73e40f5bc9cfe7c84ae4"}}, &(0x7f00000004c0)) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="070d722463ea767f8ce7635f49326594ab075f5aff9bc289e64458020051cf3143924b58710765b76990ad108891fce7620700000000000000ed0704cd9a03e497d000000000000000190000"], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r3, r4, 0x0, 0x8000002b) [ 2597.283504][T31602] rc_core: IR keymap rc-hauppauge not found [ 2597.289482][T31602] Registered IR keymap rc-empty [ 2597.339321][T31602] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 2597.393858][T31602] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input220 [ 2597.421278][T11512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2597.446472][T11512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2597.602983][ T7] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2597.733099][ C1] igorplugusb 3-1:0.0: receive overflow invalid: 60 [ 2597.963405][ T7] usb 4-1: config index 0 descriptor too short (expected 18705, got 27) [ 2597.971857][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2597.982859][ T7] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2597.992209][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2598.013037][ T7] usb 4-1: config 0 descriptor?? [ 2598.152938][ T7] rc_core: IR keymap rc-hauppauge not found [ 2598.158969][ T7] Registered IR keymap rc-empty [ 2598.165527][ T7] rc rc2: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc2 [ 2598.178197][ T7] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc2/input221 [ 2598.532763][ C0] igorplugusb 4-1:0.0: receive overflow invalid: 60 17:49:40 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="02010000a527bd40eb030200c0ba000000010902114901000000080904000001d98fb100090581"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "90ed322d", "c82eabea"}}, 0x0}, &(0x7f0000000b00)={0x84, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x40, 0x22, 0x45, {0x45, 0x6, "1b1999e554db26dac191b317f8d62e3252bbd13db658c44a3c72c9c0d4e2915f02a502e703d6381715a839d971f874a6dfb981734475fc24408228a37c2d0968c8e41a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x10, &(0x7f0000000180)={0x0, 0x5, 0x37, "fc3f3c405461e8e784879ba87aa6b1f00b98015721f5ec176b0eef50e1d87f89e01ad9f19830d197f30429cef4f7875fd23222e0725362"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1c}}) capset(&(0x7f0000000040), &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r2) ptrace(0xffffffffffffffff, r2) ptrace(0x10, r1) ptrace(0x11, 0x0) ptrace(0x10, r2) ptrace(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:49:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x7200}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 17:49:40 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="02010000a527bd40eb030200c0ba000000010902114901000000080904000001d98fb100090581"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "90ed322d", "c82eabea"}}, 0x0}, &(0x7f0000000b00)={0x84, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x40, 0x22, 0x45, {0x45, 0x6, "1b1999e554db26dac191b317f8d62e3252bbd13db658c44a3c72c9c0d4e2915f02a502e703d6381715a839d971f874a6dfb981734475fc24408228a37c2d0968c8e41a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x10, &(0x7f0000000180)={0x0, 0x5, 0x37, "fc3f3c405461e8e784879ba87aa6b1f00b98015721f5ec176b0eef50e1d87f89e01ad9f19830d197f30429cef4f7875fd23222e0725362"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1c}}) capset(&(0x7f0000000040), &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r2) ptrace(0xffffffffffffffff, r2) ptrace(0x10, r1) ptrace(0x11, 0x0) ptrace(0x10, r2) ptrace(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:49:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001200055a"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe04}, {0x0, 0x478}, {&(0x7f0000002a80)=""/4090, 0x1c8}], 0x3, 0x0, 0xa}}], 0x2f3, 0x10000, 0x0) 17:49:40 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="02010000a527bd40eb030200c0ba000000010902114901000000080904000001d98fb100090581"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "90ed322d", "c82eabea"}}, 0x0}, &(0x7f0000000b00)={0x84, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x40, 0x22, 0x45, {0x45, 0x6, "1b1999e554db26dac191b317f8d62e3252bbd13db658c44a3c72c9c0d4e2915f02a502e703d6381715a839d971f874a6dfb981734475fc24408228a37c2d0968c8e41a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x10, &(0x7f0000000180)={0x0, 0x5, 0x37, "fc3f3c405461e8e784879ba87aa6b1f00b98015721f5ec176b0eef50e1d87f89e01ad9f19830d197f30429cef4f7875fd23222e0725362"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1c}}) capset(&(0x7f0000000040), &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r2) ptrace(0xffffffffffffffff, r2) ptrace(0x10, r1) ptrace(0x11, 0x0) ptrace(0x10, r2) ptrace(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2598.875834][T11530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2598.906313][T11530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 17:49:40 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0xa, 0x3, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @irqchip={0x0, 0x5}}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.numa_stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) mq_notify(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x10, 0x0, @thr={&(0x7f0000000400)="e7fb50f5692b01c37a92677ea1dcb211b4a3ecbe30701c74a85d5cc4be2ee8940d8cf1b5cad0562e411e9f0d9b5493a630642878e4278717e3fd6593fb01e01ed919e6efbf2804f83ffdf2821ff1d4cf96b2053cd8e41e791b18cb3b7bd65216fd7c47a89f40f3e88e0b059ef04340414c8568dd841f1305e0a976b838ab80bb763234d070147cbd913e6becca2e3924e481ff", &(0x7f0000000340)="ed943a3473caacb06979e1106d4fb8624a69c26a3234728482257041129ec20e262db4b4d5b33e92943cbf56160e82ccd4641fcafc599e4d84b22ee3deff9598420b8a92f960ff9cd5347aae8f73e40f5bc9cfe7c84ae4"}}, &(0x7f00000004c0)) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="070d722463ea767f8ce7635f49326594ab075f5aff9bc289e64458020051cf3143924b58710765b76990ad108891fce7620700000000000000ed0704cd9a03e497d000000000000000190000"], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r3, r4, 0x0, 0x8000002b) [ 2598.921105][T11534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2598.959600][T11534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 17:49:40 executing program 1: openat$zero(0xffffff9c, &(0x7f0000000000), 0x460000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x0, 0x268, 0x300, 0x100, 0x268, 0x20c, 0x460, 0x460, 0x20c, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0xffffffff}}}, {{@ipv6={@local, @remote, [], [], 'vcan0\x00', 'ip6_vti0\x00'}, 0x0, 0xec, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendto$unix(r1, &(0x7f0000000040)="14d54d2f3acd34bc5a14b1a743450704748a82b8f9a0c7bdfe02eb77905e2c97f4961f71e0dd30ca7860548dedafe565a26dc7fa30bf5e884c7f04dd402d23cc0cb71aa7ddf17c8894b740867a1f74c3135cdc67d17bb3be629a3aa939051ac335946f145bc8f9027ce54400e24ac7e3801ed6fbf8dec1264c68110039569f8e9fe9f9000c22df67e5baf7ebdbf4b00d92cbaa704d89e2d1ec06e580893654b446e1d8e8202351ee7744377ee3d86fd7babb3dd4e1e4ca6635e1d5d773ffff773da5dd2034b9c5ddf678", 0xca, 0x10, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000001400)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 2599.103138][T31602] usb 6-1: new high-speed USB device number 11 using dummy_hcd 17:49:40 executing program 1: openat$zero(0xffffff9c, &(0x7f0000000000), 0x460000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x0, 0x268, 0x300, 0x100, 0x268, 0x20c, 0x460, 0x460, 0x20c, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0xffffffff}}}, {{@ipv6={@local, @remote, [], [], 'vcan0\x00', 'ip6_vti0\x00'}, 0x0, 0xec, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendto$unix(r1, &(0x7f0000000040)="14d54d2f3acd34bc5a14b1a743450704748a82b8f9a0c7bdfe02eb77905e2c97f4961f71e0dd30ca7860548dedafe565a26dc7fa30bf5e884c7f04dd402d23cc0cb71aa7ddf17c8894b740867a1f74c3135cdc67d17bb3be629a3aa939051ac335946f145bc8f9027ce54400e24ac7e3801ed6fbf8dec1264c68110039569f8e9fe9f9000c22df67e5baf7ebdbf4b00d92cbaa704d89e2d1ec06e580893654b446e1d8e8202351ee7744377ee3d86fd7babb3dd4e1e4ca6635e1d5d773ffff773da5dd2034b9c5ddf678", 0xca, 0x10, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000001400)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 17:49:41 executing program 1: openat$zero(0xffffff9c, &(0x7f0000000000), 0x460000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x0, 0x268, 0x300, 0x100, 0x268, 0x20c, 0x460, 0x460, 0x20c, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0xffffffff}}}, {{@ipv6={@local, @remote, [], [], 'vcan0\x00', 'ip6_vti0\x00'}, 0x0, 0xec, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendto$unix(r1, &(0x7f0000000040)="14d54d2f3acd34bc5a14b1a743450704748a82b8f9a0c7bdfe02eb77905e2c97f4961f71e0dd30ca7860548dedafe565a26dc7fa30bf5e884c7f04dd402d23cc0cb71aa7ddf17c8894b740867a1f74c3135cdc67d17bb3be629a3aa939051ac335946f145bc8f9027ce54400e24ac7e3801ed6fbf8dec1264c68110039569f8e9fe9f9000c22df67e5baf7ebdbf4b00d92cbaa704d89e2d1ec06e580893654b446e1d8e8202351ee7744377ee3d86fd7babb3dd4e1e4ca6635e1d5d773ffff773da5dd2034b9c5ddf678", 0xca, 0x10, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000001400)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 17:49:41 executing program 1: openat$zero(0xffffff9c, &(0x7f0000000000), 0x460000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x0, 0x268, 0x300, 0x100, 0x268, 0x20c, 0x460, 0x460, 0x20c, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0xffffffff}}}, {{@ipv6={@local, @remote, [], [], 'vcan0\x00', 'ip6_vti0\x00'}, 0x0, 0xec, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendto$unix(r1, &(0x7f0000000040)="14d54d2f3acd34bc5a14b1a743450704748a82b8f9a0c7bdfe02eb77905e2c97f4961f71e0dd30ca7860548dedafe565a26dc7fa30bf5e884c7f04dd402d23cc0cb71aa7ddf17c8894b740867a1f74c3135cdc67d17bb3be629a3aa939051ac335946f145bc8f9027ce54400e24ac7e3801ed6fbf8dec1264c68110039569f8e9fe9f9000c22df67e5baf7ebdbf4b00d92cbaa704d89e2d1ec06e580893654b446e1d8e8202351ee7744377ee3d86fd7babb3dd4e1e4ca6635e1d5d773ffff773da5dd2034b9c5ddf678", 0xca, 0x10, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000001400)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 2599.503247][T31602] usb 6-1: config index 0 descriptor too short (expected 18705, got 27) [ 2599.520369][T31602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2599.571174][T31602] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2599.610495][T31602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:49:41 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="02010000a527bd40eb030200c0ba000000010902114901000000080904000001d98fb100090581"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "90ed322d", "c82eabea"}}, 0x0}, &(0x7f0000000b00)={0x84, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x40, 0x22, 0x45, {0x45, 0x6, "1b1999e554db26dac191b317f8d62e3252bbd13db658c44a3c72c9c0d4e2915f02a502e703d6381715a839d971f874a6dfb981734475fc24408228a37c2d0968c8e41a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x10, &(0x7f0000000180)={0x0, 0x5, 0x37, "fc3f3c405461e8e784879ba87aa6b1f00b98015721f5ec176b0eef50e1d87f89e01ad9f19830d197f30429cef4f7875fd23222e0725362"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1c}}) capset(&(0x7f0000000040), &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r2) ptrace(0xffffffffffffffff, r2) ptrace(0x10, r1) ptrace(0x11, 0x0) ptrace(0x10, r2) ptrace(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2599.650762][T31602] usb 6-1: config 0 descriptor?? 17:49:41 executing program 0: openat$zero(0xffffff9c, &(0x7f0000000000), 0x460000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x0, 0x268, 0x300, 0x100, 0x268, 0x20c, 0x460, 0x460, 0x20c, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0xffffffff}}}, {{@ipv6={@local, @remote, [], [], 'vcan0\x00', 'ip6_vti0\x00'}, 0x0, 0xec, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendto$unix(r1, &(0x7f0000000040)="14d54d2f3acd34bc5a14b1a743450704748a82b8f9a0c7bdfe02eb77905e2c97f4961f71e0dd30ca7860548dedafe565a26dc7fa30bf5e884c7f04dd402d23cc0cb71aa7ddf17c8894b740867a1f74c3135cdc67d17bb3be629a3aa939051ac335946f145bc8f9027ce54400e24ac7e3801ed6fbf8dec1264c68110039569f8e9fe9f9000c22df67e5baf7ebdbf4b00d92cbaa704d89e2d1ec06e580893654b446e1d8e8202351ee7744377ee3d86fd7babb3dd4e1e4ca6635e1d5d773ffff773da5dd2034b9c5ddf678", 0xca, 0x10, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000001400)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 2599.824863][T11555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 17:49:41 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="02010000a527bd40eb030200c0ba000000010902114901000000080904000001d98fb100090581"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "90ed322d", "c82eabea"}}, 0x0}, &(0x7f0000000b00)={0x84, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x40, 0x22, 0x45, {0x45, 0x6, "1b1999e554db26dac191b317f8d62e3252bbd13db658c44a3c72c9c0d4e2915f02a502e703d6381715a839d971f874a6dfb981734475fc24408228a37c2d0968c8e41a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x10, &(0x7f0000000180)={0x0, 0x5, 0x37, "fc3f3c405461e8e784879ba87aa6b1f00b98015721f5ec176b0eef50e1d87f89e01ad9f19830d197f30429cef4f7875fd23222e0725362"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1c}}) capset(&(0x7f0000000040), &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r2) ptrace(0xffffffffffffffff, r2) ptrace(0x10, r1) ptrace(0x11, 0x0) ptrace(0x10, r2) ptrace(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:49:41 executing program 1: openat$zero(0xffffff9c, &(0x7f0000000000), 0x460000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x0, 0x268, 0x300, 0x100, 0x268, 0x20c, 0x460, 0x460, 0x20c, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0xffffffff}}}, {{@ipv6={@local, @remote, [], [], 'vcan0\x00', 'ip6_vti0\x00'}, 0x0, 0xec, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendto$unix(r1, &(0x7f0000000040)="14d54d2f3acd34bc5a14b1a743450704748a82b8f9a0c7bdfe02eb77905e2c97f4961f71e0dd30ca7860548dedafe565a26dc7fa30bf5e884c7f04dd402d23cc0cb71aa7ddf17c8894b740867a1f74c3135cdc67d17bb3be629a3aa939051ac335946f145bc8f9027ce54400e24ac7e3801ed6fbf8dec1264c68110039569f8e9fe9f9000c22df67e5baf7ebdbf4b00d92cbaa704d89e2d1ec06e580893654b446e1d8e8202351ee7744377ee3d86fd7babb3dd4e1e4ca6635e1d5d773ffff773da5dd2034b9c5ddf678", 0xca, 0x10, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000001400)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 2599.941095][T11555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2600.063241][T31602] rc_core: IR keymap rc-hauppauge not found [ 2600.069363][T31602] Registered IR keymap rc-empty [ 2600.114117][T11561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2600.132956][T31602] rc rc3: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc3 [ 2600.220008][T31602] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc3/input222 [ 2600.241686][T11561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2600.482874][ C1] igorplugusb 6-1:0.0: receive overflow invalid: 60 17:49:43 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="02010000a527bd40eb030200c0ba000000010902114901000000080904000001d98fb100090581"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "90ed322d", "c82eabea"}}, 0x0}, &(0x7f0000000b00)={0x84, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x40, 0x22, 0x45, {0x45, 0x6, "1b1999e554db26dac191b317f8d62e3252bbd13db658c44a3c72c9c0d4e2915f02a502e703d6381715a839d971f874a6dfb981734475fc24408228a37c2d0968c8e41a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x10, &(0x7f0000000180)={0x0, 0x5, 0x37, "fc3f3c405461e8e784879ba87aa6b1f00b98015721f5ec176b0eef50e1d87f89e01ad9f19830d197f30429cef4f7875fd23222e0725362"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1c}}) capset(&(0x7f0000000040), &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r2) ptrace(0xffffffffffffffff, r2) ptrace(0x10, r1) ptrace(0x11, 0x0) ptrace(0x10, r2) ptrace(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:49:43 executing program 1: openat$zero(0xffffff9c, &(0x7f0000000000), 0x460000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x0, 0x268, 0x300, 0x100, 0x268, 0x20c, 0x460, 0x460, 0x20c, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0xffffffff}}}, {{@ipv6={@local, @remote, [], [], 'vcan0\x00', 'ip6_vti0\x00'}, 0x0, 0xec, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendto$unix(r1, &(0x7f0000000040)="14d54d2f3acd34bc5a14b1a743450704748a82b8f9a0c7bdfe02eb77905e2c97f4961f71e0dd30ca7860548dedafe565a26dc7fa30bf5e884c7f04dd402d23cc0cb71aa7ddf17c8894b740867a1f74c3135cdc67d17bb3be629a3aa939051ac335946f145bc8f9027ce54400e24ac7e3801ed6fbf8dec1264c68110039569f8e9fe9f9000c22df67e5baf7ebdbf4b00d92cbaa704d89e2d1ec06e580893654b446e1d8e8202351ee7744377ee3d86fd7babb3dd4e1e4ca6635e1d5d773ffff773da5dd2034b9c5ddf678", 0xca, 0x10, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000001400)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 17:49:43 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0xa, 0x3, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @irqchip={0x0, 0x5}}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.numa_stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) mq_notify(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x10, 0x0, @thr={&(0x7f0000000400)="e7fb50f5692b01c37a92677ea1dcb211b4a3ecbe30701c74a85d5cc4be2ee8940d8cf1b5cad0562e411e9f0d9b5493a630642878e4278717e3fd6593fb01e01ed919e6efbf2804f83ffdf2821ff1d4cf96b2053cd8e41e791b18cb3b7bd65216fd7c47a89f40f3e88e0b059ef04340414c8568dd841f1305e0a976b838ab80bb763234d070147cbd913e6becca2e3924e481ff", &(0x7f0000000340)="ed943a3473caacb06979e1106d4fb8624a69c26a3234728482257041129ec20e262db4b4d5b33e92943cbf56160e82ccd4641fcafc599e4d84b22ee3deff9598420b8a92f960ff9cd5347aae8f73e40f5bc9cfe7c84ae4"}}, &(0x7f00000004c0)) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="070d722463ea767f8ce7635f49326594ab075f5aff9bc289e64458020051cf3143924b58710765b76990ad108891fce7620700000000000000ed0704cd9a03e497d000000000000000190000"], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r3, r4, 0x0, 0x8000002b) 17:49:43 executing program 0: openat$zero(0xffffff9c, &(0x7f0000000000), 0x460000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x0, 0x268, 0x300, 0x100, 0x268, 0x20c, 0x460, 0x460, 0x20c, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0xffffffff}}}, {{@ipv6={@local, @remote, [], [], 'vcan0\x00', 'ip6_vti0\x00'}, 0x0, 0xec, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendto$unix(r1, &(0x7f0000000040)="14d54d2f3acd34bc5a14b1a743450704748a82b8f9a0c7bdfe02eb77905e2c97f4961f71e0dd30ca7860548dedafe565a26dc7fa30bf5e884c7f04dd402d23cc0cb71aa7ddf17c8894b740867a1f74c3135cdc67d17bb3be629a3aa939051ac335946f145bc8f9027ce54400e24ac7e3801ed6fbf8dec1264c68110039569f8e9fe9f9000c22df67e5baf7ebdbf4b00d92cbaa704d89e2d1ec06e580893654b446e1d8e8202351ee7744377ee3d86fd7babb3dd4e1e4ca6635e1d5d773ffff773da5dd2034b9c5ddf678", 0xca, 0x10, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000001400)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 17:49:43 executing program 2: openat$zero(0xffffff9c, &(0x7f0000000000), 0x460000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x0, 0x268, 0x300, 0x100, 0x268, 0x20c, 0x460, 0x460, 0x20c, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0xffffffff}}}, {{@ipv6={@local, @remote, [], [], 'vcan0\x00', 'ip6_vti0\x00'}, 0x0, 0xec, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendto$unix(r1, &(0x7f0000000040)="14d54d2f3acd34bc5a14b1a743450704748a82b8f9a0c7bdfe02eb77905e2c97f4961f71e0dd30ca7860548dedafe565a26dc7fa30bf5e884c7f04dd402d23cc0cb71aa7ddf17c8894b740867a1f74c3135cdc67d17bb3be629a3aa939051ac335946f145bc8f9027ce54400e24ac7e3801ed6fbf8dec1264c68110039569f8e9fe9f9000c22df67e5baf7ebdbf4b00d92cbaa704d89e2d1ec06e580893654b446e1d8e8202351ee7744377ee3d86fd7babb3dd4e1e4ca6635e1d5d773ffff773da5dd2034b9c5ddf678", 0xca, 0x10, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000001400)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 17:49:43 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="02010000a527bd40eb030200c0ba000000010902114901000000080904000001d98fb100090581"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "90ed322d", "c82eabea"}}, 0x0}, &(0x7f0000000b00)={0x84, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x40, 0x22, 0x45, {0x45, 0x6, "1b1999e554db26dac191b317f8d62e3252bbd13db658c44a3c72c9c0d4e2915f02a502e703d6381715a839d971f874a6dfb981734475fc24408228a37c2d0968c8e41a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x10, &(0x7f0000000180)={0x0, 0x5, 0x37, "fc3f3c405461e8e784879ba87aa6b1f00b98015721f5ec176b0eef50e1d87f89e01ad9f19830d197f30429cef4f7875fd23222e0725362"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1c}}) capset(&(0x7f0000000040), &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r2) ptrace(0xffffffffffffffff, r2) ptrace(0x10, r1) ptrace(0x11, 0x0) ptrace(0x10, r2) ptrace(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2601.555575][T11577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 17:49:43 executing program 1: openat$zero(0xffffff9c, &(0x7f0000000000), 0x460000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x0, 0x268, 0x300, 0x100, 0x268, 0x20c, 0x460, 0x460, 0x20c, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0xffffffff}}}, {{@ipv6={@local, @remote, [], [], 'vcan0\x00', 'ip6_vti0\x00'}, 0x0, 0xec, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendto$unix(r1, &(0x7f0000000040)="14d54d2f3acd34bc5a14b1a743450704748a82b8f9a0c7bdfe02eb77905e2c97f4961f71e0dd30ca7860548dedafe565a26dc7fa30bf5e884c7f04dd402d23cc0cb71aa7ddf17c8894b740867a1f74c3135cdc67d17bb3be629a3aa939051ac335946f145bc8f9027ce54400e24ac7e3801ed6fbf8dec1264c68110039569f8e9fe9f9000c22df67e5baf7ebdbf4b00d92cbaa704d89e2d1ec06e580893654b446e1d8e8202351ee7744377ee3d86fd7babb3dd4e1e4ca6635e1d5d773ffff773da5dd2034b9c5ddf678", 0xca, 0x10, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000001400)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 2601.615822][T11577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 17:49:43 executing program 0: openat$zero(0xffffff9c, &(0x7f0000000000), 0x460000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x0, 0x268, 0x300, 0x100, 0x268, 0x20c, 0x460, 0x460, 0x20c, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0xffffffff}}}, {{@ipv6={@local, @remote, [], [], 'vcan0\x00', 'ip6_vti0\x00'}, 0x0, 0xec, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendto$unix(r1, &(0x7f0000000040)="14d54d2f3acd34bc5a14b1a743450704748a82b8f9a0c7bdfe02eb77905e2c97f4961f71e0dd30ca7860548dedafe565a26dc7fa30bf5e884c7f04dd402d23cc0cb71aa7ddf17c8894b740867a1f74c3135cdc67d17bb3be629a3aa939051ac335946f145bc8f9027ce54400e24ac7e3801ed6fbf8dec1264c68110039569f8e9fe9f9000c22df67e5baf7ebdbf4b00d92cbaa704d89e2d1ec06e580893654b446e1d8e8202351ee7744377ee3d86fd7babb3dd4e1e4ca6635e1d5d773ffff773da5dd2034b9c5ddf678", 0xca, 0x10, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000001400)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 2601.750065][T11587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 17:49:43 executing program 1: r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000200)=@profile={'stack ', '\"ed\x00'}, 0xa) [ 2601.901194][T11587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 17:49:43 executing program 2: openat$zero(0xffffff9c, &(0x7f0000000000), 0x460000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x0, 0x268, 0x300, 0x100, 0x268, 0x20c, 0x460, 0x460, 0x20c, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0xffffffff}}}, {{@ipv6={@local, @remote, [], [], 'vcan0\x00', 'ip6_vti0\x00'}, 0x0, 0xec, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendto$unix(r1, &(0x7f0000000040)="14d54d2f3acd34bc5a14b1a743450704748a82b8f9a0c7bdfe02eb77905e2c97f4961f71e0dd30ca7860548dedafe565a26dc7fa30bf5e884c7f04dd402d23cc0cb71aa7ddf17c8894b740867a1f74c3135cdc67d17bb3be629a3aa939051ac335946f145bc8f9027ce54400e24ac7e3801ed6fbf8dec1264c68110039569f8e9fe9f9000c22df67e5baf7ebdbf4b00d92cbaa704d89e2d1ec06e580893654b446e1d8e8202351ee7744377ee3d86fd7babb3dd4e1e4ca6635e1d5d773ffff773da5dd2034b9c5ddf678", 0xca, 0x10, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000001400)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 17:49:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@random="03ff796659bf", @random="2ffe81fe7df4", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @multicast1}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "1cf07696f352c23ca0981c657b9c45b99846c8e393278a8c", "550e153fd5e2e466b0fde25cf44e52d7b6ff8bb449466515ac5ff699d905f86a"}}}}}}, 0x0) 17:49:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[0x0], &(0x7f0000000240), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000300)={0x0, &(0x7f0000000100)=[{}, {}, {}, {}], r2, 0x0, '\x00', 0x0, 0x4}) [ 2602.098402][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 2602.098425][ T27] audit: type=1400 audit(1688406583.799:694): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=226564 pid=11596 comm="syz-executor.1" 17:49:44 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="02010000a527bd40eb030200c0ba000000010902114901000000080904000001d98fb100090581"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "90ed322d", "c82eabea"}}, 0x0}, &(0x7f0000000b00)={0x84, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x40, 0x22, 0x45, {0x45, 0x6, "1b1999e554db26dac191b317f8d62e3252bbd13db658c44a3c72c9c0d4e2915f02a502e703d6381715a839d971f874a6dfb981734475fc24408228a37c2d0968c8e41a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x10, &(0x7f0000000180)={0x0, 0x5, 0x37, "fc3f3c405461e8e784879ba87aa6b1f00b98015721f5ec176b0eef50e1d87f89e01ad9f19830d197f30429cef4f7875fd23222e0725362"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1c}}) capset(&(0x7f0000000040), &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r2) ptrace(0xffffffffffffffff, r2) ptrace(0x10, r1) ptrace(0x11, 0x0) ptrace(0x10, r2) ptrace(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:49:44 executing program 1: r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000200)=@profile={'stack ', '\"ed\x00'}, 0xa) 17:49:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[0x0], &(0x7f0000000240), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000300)={0x0, &(0x7f0000000100)=[{}, {}, {}, {}], r2, 0x0, '\x00', 0x0, 0x4}) 17:49:44 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0x0, './file0/../file0\x00'}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 17:49:44 executing program 2: openat$zero(0xffffff9c, &(0x7f0000000000), 0x460000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x0, 0x268, 0x300, 0x100, 0x268, 0x20c, 0x460, 0x460, 0x20c, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0xffffffff}}}, {{@ipv6={@local, @remote, [], [], 'vcan0\x00', 'ip6_vti0\x00'}, 0x0, 0xec, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) sendto$unix(r1, &(0x7f0000000040)="14d54d2f3acd34bc5a14b1a743450704748a82b8f9a0c7bdfe02eb77905e2c97f4961f71e0dd30ca7860548dedafe565a26dc7fa30bf5e884c7f04dd402d23cc0cb71aa7ddf17c8894b740867a1f74c3135cdc67d17bb3be629a3aa939051ac335946f145bc8f9027ce54400e24ac7e3801ed6fbf8dec1264c68110039569f8e9fe9f9000c22df67e5baf7ebdbf4b00d92cbaa704d89e2d1ec06e580893654b446e1d8e8202351ee7744377ee3d86fd7babb3dd4e1e4ca6635e1d5d773ffff773da5dd2034b9c5ddf678", 0xca, 0x10, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000001400)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 17:49:44 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0xa, 0x3, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @irqchip={0x0, 0x5}}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.numa_stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}}}, 0x0, 0x0, 0x2d, 0x0, "a0ff517ed3b483ada052825fe2bf418a723607d18778174d0b5657da9b62be7bf8ddf0fcd45caa632496da7119893bdde5d4ee88cf526e0ee0cfae505469c9af41210524197dc3df9d9cb757accdd144"}, 0xd8) mq_notify(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x10, 0x0, @thr={&(0x7f0000000400)="e7fb50f5692b01c37a92677ea1dcb211b4a3ecbe30701c74a85d5cc4be2ee8940d8cf1b5cad0562e411e9f0d9b5493a630642878e4278717e3fd6593fb01e01ed919e6efbf2804f83ffdf2821ff1d4cf96b2053cd8e41e791b18cb3b7bd65216fd7c47a89f40f3e88e0b059ef04340414c8568dd841f1305e0a976b838ab80bb763234d070147cbd913e6becca2e3924e481ff", &(0x7f0000000340)="ed943a3473caacb06979e1106d4fb8624a69c26a3234728482257041129ec20e262db4b4d5b33e92943cbf56160e82ccd4641fcafc599e4d84b22ee3deff9598420b8a92f960ff9cd5347aae8f73e40f5bc9cfe7c84ae4"}}, &(0x7f00000004c0)) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="070d722463ea767f8ce7635f49326594ab075f5aff9bc289e64458020051cf3143924b58710765b76990ad108891fce7620700000000000000ed0704cd9a03e497d000000000000000190000"], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r3, r4, 0x0, 0x8000002b) 17:49:44 executing program 1: r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000200)=@profile={'stack ', '\"ed\x00'}, 0xa) [ 2603.177959][ T27] audit: type=1400 audit(1688406584.879:695): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=226564 pid=11606 comm="syz-executor.1" [ 2603.196780][ C1] vkms_vblank_simulate: vblank timer overrun 17:49:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[0x0], &(0x7f0000000240), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000300)={0x0, &(0x7f0000000100)=[{}, {}, {}, {}], r2, 0x0, '\x00', 0x0, 0x4}) [ 2603.258260][T11617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2603.311173][T11617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2603.327392][ T27] audit: type=1400 audit(1688406585.029:696): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=226564 pid=11620 comm="syz-executor.1" 17:49:45 executing program 1: r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000200)=@profile={'stack ', '\"ed\x00'}, 0xa) [ 2603.365604][T11615] netdevsim netdevsim3: Direct firmware load for ./file0/../file0 failed with error -2 [ 2603.433017][T11615] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0/../file0 17:49:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[0x0], &(0x7f0000000240), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000300)={0x0, &(0x7f0000000100)=[{}, {}, {}, {}], r2, 0x0, '\x00', 0x0, 0x4}) [ 2603.537402][ T27] audit: type=1400 audit(1688406585.239:697): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=226564 pid=11627 comm="syz-executor.1" 17:49:45 executing program 2: mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000001740)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000700)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x5}, 0x18) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r0, 0x1, 0x0, 0x0) getpgrp(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') r3 = getpgrp(0x0) write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) 17:49:45 executing program 1: syz_io_uring_setup(0x7b26, &(0x7f0000000000)={0x0, 0x0, 0x52, 0x0, 0xc7040000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 17:49:46 executing program 1: syz_io_uring_setup(0x7b26, &(0x7f0000000000)={0x0, 0x0, 0x52, 0x0, 0xc7040000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 17:49:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000006600000829bd080c0000dbdf25000000", @ANYRES32=r3, @ANYBLOB="f2ff0100f1ff0f000000ffff08000b000000008008000b00ff01000008000b0004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) symlink(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) unshare(0x6c060000) 17:49:46 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0x0, './file0/../file0\x00'}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 17:49:46 executing program 2: mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000001740)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000700)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x5}, 0x18) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r0, 0x1, 0x0, 0x0) getpgrp(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') r3 = getpgrp(0x0) write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) 17:49:46 executing program 5: mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000001740)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000700)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x5}, 0x18) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r0, 0x1, 0x0, 0x0) getpgrp(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') r3 = getpgrp(0x0) write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) [ 2604.838357][T11647] netdevsim netdevsim3: Direct firmware load for ./file0/../file0 failed with error -2 [ 2604.859088][T11647] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0/../file0 17:49:46 executing program 1: syz_io_uring_setup(0x7b26, &(0x7f0000000000)={0x0, 0x0, 0x52, 0x0, 0xc7040000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 17:49:46 executing program 4: mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000001740)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000700)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x5}, 0x18) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r0, 0x1, 0x0, 0x0) getpgrp(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') r3 = getpgrp(0x0) write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) 17:49:46 executing program 1: syz_io_uring_setup(0x7b26, &(0x7f0000000000)={0x0, 0x0, 0x52, 0x0, 0xc7040000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 17:49:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000a80), 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) epoll_create(0x0) socket$inet6(0xa, 0x0, 0xffffffff) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) 17:49:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000a80), 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) epoll_create(0x0) socket$inet6(0xa, 0x0, 0xffffffff) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) 17:49:47 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0x0, './file0/../file0\x00'}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 17:49:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000a80), 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) epoll_create(0x0) socket$inet6(0xa, 0x0, 0xffffffff) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) [ 2605.806129][T11675] netdevsim netdevsim3: Direct firmware load for ./file0/../file0 failed with error -2 [ 2605.841924][T11675] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0/../file0 17:49:48 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000a80), 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) epoll_create(0x0) socket$inet6(0xa, 0x0, 0xffffffff) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) 17:49:49 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0x0, './file0/../file0\x00'}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 17:49:49 executing program 4: mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000001740)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000700)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x5}, 0x18) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r0, 0x1, 0x0, 0x0) getpgrp(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') r3 = getpgrp(0x0) write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) 17:49:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000a80), 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) epoll_create(0x0) socket$inet6(0xa, 0x0, 0xffffffff) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) 17:49:49 executing program 2: mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000001740)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000700)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x5}, 0x18) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r0, 0x1, 0x0, 0x0) getpgrp(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') r3 = getpgrp(0x0) write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) 17:49:50 executing program 5: mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000001740)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000700)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x5}, 0x18) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r0, 0x1, 0x0, 0x0) getpgrp(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') r3 = getpgrp(0x0) write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) 17:49:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000006600000829bd080c0000dbdf25000000", @ANYRES32=r3, @ANYBLOB="f2ff0100f1ff0f000000ffff08000b000000008008000b00ff01000008000b0004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) symlink(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) unshare(0x6c060000) [ 2608.346667][T11692] netdevsim netdevsim3: Direct firmware load for ./file0/../file0 failed with error -2 [ 2608.371103][T11692] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0/../file0 17:49:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000a80), 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) epoll_create(0x0) socket$inet6(0xa, 0x0, 0xffffffff) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) 17:49:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000a80), 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) epoll_create(0x0) socket$inet6(0xa, 0x0, 0xffffffff) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) 17:49:50 executing program 2: mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000001740)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000700)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x5}, 0x18) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r0, 0x1, 0x0, 0x0) getpgrp(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') r3 = getpgrp(0x0) write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) 17:49:50 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000406d0427c200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x8, {[@local=@item_012={0x1, 0x2, 0x1, "e8"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0x0, "8e2c8aca"}]}}, 0x0}, 0x0) [ 2609.436784][T11718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2609.488290][T11718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 17:49:51 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[@ANYBLOB="7c0000002e002716fffffffffd000077000000", @ANYRES32=r2], 0x7c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 17:49:51 executing program 4: mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000001740)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000700)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x5}, 0x18) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r0, 0x1, 0x0, 0x0) getpgrp(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') r3 = getpgrp(0x0) write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) [ 2609.761910][T11721] __nla_validate_parse: 188 callbacks suppressed [ 2609.761934][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2609.841459][T11722] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. 17:49:51 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[@ANYBLOB="7c0000002e002716fffffffffd000077000000", @ANYRES32=r2], 0x7c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 17:49:51 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@mcast1, 0x0, r2}) [ 2610.050226][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2610.083354][T11728] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. 17:49:51 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[@ANYBLOB="7c0000002e002716fffffffffd000077000000", @ANYRES32=r2], 0x7c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 17:49:51 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@mcast1, 0x0, r2}) [ 2610.180614][T11732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2610.207687][T11732] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. 17:49:52 executing program 5: mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000001740)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000700)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x5}, 0x18) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r0, 0x1, 0x0, 0x0) getpgrp(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') r3 = getpgrp(0x0) write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) 17:49:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000006600000829bd080c0000dbdf25000000", @ANYRES32=r3, @ANYBLOB="f2ff0100f1ff0f000000ffff08000b000000008008000b00ff01000008000b0004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) symlink(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) unshare(0x6c060000) 17:49:52 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@mcast1, 0x0, r2}) 17:49:52 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[@ANYBLOB="7c0000002e002716fffffffffd000077000000", @ANYRES32=r2], 0x7c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 17:49:52 executing program 2: add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) 17:49:52 executing program 4: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={0x0}) [ 2611.208189][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:49:52 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@mcast1, 0x0, r2}) 17:49:52 executing program 2: add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) 17:49:53 executing program 4: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={0x0}) [ 2611.262183][T11740] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. 17:49:53 executing program 1: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={0x0}) 17:49:53 executing program 3: munmap(&(0x7f0000202000/0x2000)=nil, 0x2000) r0 = msgget(0x3, 0x600) msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xf1, 0x800) r1 = msgget$private(0x0, 0x202) msgrcv(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/388], 0x2b, 0x2, 0x1800) msgsnd(r1, &(0x7f0000001440)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="5bb2725268ba86c5a38c45c1e3dd6a9cae4ff392283bb0af012c2b0cc19af2f57079bb2a0b21d28e523719b3157ea74201850083b8ed7e9f1aa67dcb1127765739cb215c97441b71e18d026445cf8294af3b499f089f8c34ce2666606bbd6a2a02c5cebb8a3053a9090000000000000004c60000000000000fff5089ce42699d626e64bf01e7fd96ff43dc2700e8a6a776d34d3fe84d33edde288138a4217e8bff3190b750ec3704b71c8e5f130b5a77eb6699000000"], 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[], 0x61, 0x0) r2 = msgget$private(0x0, 0x1314fd7b681b13df) socketpair(0x1, 0x2, 0x9, &(0x7f0000001dc0)={0xffffffffffffffff}) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r4, &(0x7f0000001200)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRES64=r3], 0x1, 0x7fc) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYRES32], 0x1, 0x800) r5 = fcntl$getown(0xffffffffffffffff, 0x5) msgsnd(r4, &(0x7f0000001280)=ANY=[@ANYRESHEX=r5, @ANYRES32], 0x2, 0x3fb) msgrcv(r4, &(0x7f0000000000)={0x0, ""/41}, 0x31, 0xa67f144a9203658, 0x1800) msgrcv(r4, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000fff4000000000000000000000000000000001a7a525700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a52dc84f35809bbc96082f7872cfc632221c02234ea47d460d0c4b07f810ed03515b5806f27c85ae0fb8ec9099dfa088be862d314fefe480177390e86dca055c8d86bcf03e1a47dd9a2d97821bdf01f0d24548719ab9e0c6ceb184f1489f0ed270b075"], 0x64, 0x1, 0x0) msgrcv(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000750bdf04f9000000006e0500f8ffffffffffff00"/165], 0xb0, 0x3, 0x0) msgrcv(r2, 0x0, 0xffffffffffffffb0, 0x0, 0x0) r6 = msgget(0x1, 0x1) msgrcv(r6, &(0x7f0000000380)={0x0, ""/132}, 0x8c, 0x0, 0x1000) msgsnd(r2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x101, 0x0) msgctl$IPC_RMID(r2, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000008000000000000049e1d0bda7b00000000000efecce479d30f9f3e8000000000000000000000000000000000000000000000000000000000000000000cd68fdde1aff0cf300"/111], 0x67, 0x3, 0x1000) r7 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, &(0x7f0000002e40)={0x0, ""/4134}, 0x102e, 0x0, 0x1800) msgctl$IPC_SET(r7, 0x1, 0xfffffffffffffffe) 17:49:53 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x6, @local, 0x0, 0x0, 'lblc\x00'}, 0x2c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000240)=0xfc, 0x4) r8 = socket(0xa, 0x2, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) bind$packet(r8, &(0x7f0000000380)={0x11, 0x6, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x101d0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x8, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1000}, {}, {0xc48}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0x8, 0x0, 0x3, 0x0, 0x0, 0x200, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000005c0)={0x5, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x3, [{{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @local}}]}, 0x210) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030080000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="0a001800030303030303000008000c0064000000"], 0x30}}, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fchown(r10, 0x0, 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 17:49:53 executing program 4: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={0x0}) 17:49:56 executing program 1: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={0x0}) 17:49:56 executing program 2: add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) 17:49:56 executing program 4: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={0x0}) 17:49:56 executing program 3: munmap(&(0x7f0000202000/0x2000)=nil, 0x2000) r0 = msgget(0x3, 0x600) msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xf1, 0x800) r1 = msgget$private(0x0, 0x202) msgrcv(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/388], 0x2b, 0x2, 0x1800) msgsnd(r1, &(0x7f0000001440)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="5bb2725268ba86c5a38c45c1e3dd6a9cae4ff392283bb0af012c2b0cc19af2f57079bb2a0b21d28e523719b3157ea74201850083b8ed7e9f1aa67dcb1127765739cb215c97441b71e18d026445cf8294af3b499f089f8c34ce2666606bbd6a2a02c5cebb8a3053a9090000000000000004c60000000000000fff5089ce42699d626e64bf01e7fd96ff43dc2700e8a6a776d34d3fe84d33edde288138a4217e8bff3190b750ec3704b71c8e5f130b5a77eb6699000000"], 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[], 0x61, 0x0) r2 = msgget$private(0x0, 0x1314fd7b681b13df) socketpair(0x1, 0x2, 0x9, &(0x7f0000001dc0)={0xffffffffffffffff}) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r4, &(0x7f0000001200)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRES64=r3], 0x1, 0x7fc) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYRES32], 0x1, 0x800) r5 = fcntl$getown(0xffffffffffffffff, 0x5) msgsnd(r4, &(0x7f0000001280)=ANY=[@ANYRESHEX=r5, @ANYRES32], 0x2, 0x3fb) msgrcv(r4, &(0x7f0000000000)={0x0, ""/41}, 0x31, 0xa67f144a9203658, 0x1800) msgrcv(r4, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000fff4000000000000000000000000000000001a7a525700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a52dc84f35809bbc96082f7872cfc632221c02234ea47d460d0c4b07f810ed03515b5806f27c85ae0fb8ec9099dfa088be862d314fefe480177390e86dca055c8d86bcf03e1a47dd9a2d97821bdf01f0d24548719ab9e0c6ceb184f1489f0ed270b075"], 0x64, 0x1, 0x0) msgrcv(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000750bdf04f9000000006e0500f8ffffffffffff00"/165], 0xb0, 0x3, 0x0) msgrcv(r2, 0x0, 0xffffffffffffffb0, 0x0, 0x0) r6 = msgget(0x1, 0x1) msgrcv(r6, &(0x7f0000000380)={0x0, ""/132}, 0x8c, 0x0, 0x1000) msgsnd(r2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x101, 0x0) msgctl$IPC_RMID(r2, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000008000000000000049e1d0bda7b00000000000efecce479d30f9f3e8000000000000000000000000000000000000000000000000000000000000000000cd68fdde1aff0cf300"/111], 0x67, 0x3, 0x1000) r7 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, &(0x7f0000002e40)={0x0, ""/4134}, 0x102e, 0x0, 0x1800) msgctl$IPC_SET(r7, 0x1, 0xfffffffffffffffe) 17:49:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000006600000829bd080c0000dbdf25000000", @ANYRES32=r3, @ANYBLOB="f2ff0100f1ff0f000000ffff08000b000000008008000b00ff01000008000b0004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) symlink(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) unshare(0x6c060000) 17:49:56 executing program 2: add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) 17:49:56 executing program 4: munmap(&(0x7f0000202000/0x2000)=nil, 0x2000) r0 = msgget(0x3, 0x600) msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xf1, 0x800) r1 = msgget$private(0x0, 0x202) msgrcv(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/388], 0x2b, 0x2, 0x1800) msgsnd(r1, &(0x7f0000001440)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="5bb2725268ba86c5a38c45c1e3dd6a9cae4ff392283bb0af012c2b0cc19af2f57079bb2a0b21d28e523719b3157ea74201850083b8ed7e9f1aa67dcb1127765739cb215c97441b71e18d026445cf8294af3b499f089f8c34ce2666606bbd6a2a02c5cebb8a3053a9090000000000000004c60000000000000fff5089ce42699d626e64bf01e7fd96ff43dc2700e8a6a776d34d3fe84d33edde288138a4217e8bff3190b750ec3704b71c8e5f130b5a77eb6699000000"], 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[], 0x61, 0x0) r2 = msgget$private(0x0, 0x1314fd7b681b13df) socketpair(0x1, 0x2, 0x9, &(0x7f0000001dc0)={0xffffffffffffffff}) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r4, &(0x7f0000001200)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRES64=r3], 0x1, 0x7fc) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYRES32], 0x1, 0x800) r5 = fcntl$getown(0xffffffffffffffff, 0x5) msgsnd(r4, &(0x7f0000001280)=ANY=[@ANYRESHEX=r5, @ANYRES32], 0x2, 0x3fb) msgrcv(r4, &(0x7f0000000000)={0x0, ""/41}, 0x31, 0xa67f144a9203658, 0x1800) msgrcv(r4, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000fff4000000000000000000000000000000001a7a525700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a52dc84f35809bbc96082f7872cfc632221c02234ea47d460d0c4b07f810ed03515b5806f27c85ae0fb8ec9099dfa088be862d314fefe480177390e86dca055c8d86bcf03e1a47dd9a2d97821bdf01f0d24548719ab9e0c6ceb184f1489f0ed270b075"], 0x64, 0x1, 0x0) msgrcv(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000750bdf04f9000000006e0500f8ffffffffffff00"/165], 0xb0, 0x3, 0x0) msgrcv(r2, 0x0, 0xffffffffffffffb0, 0x0, 0x0) r6 = msgget(0x1, 0x1) msgrcv(r6, &(0x7f0000000380)={0x0, ""/132}, 0x8c, 0x0, 0x1000) msgsnd(r2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x101, 0x0) msgctl$IPC_RMID(r2, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000008000000000000049e1d0bda7b00000000000efecce479d30f9f3e8000000000000000000000000000000000000000000000000000000000000000000cd68fdde1aff0cf300"/111], 0x67, 0x3, 0x1000) r7 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, &(0x7f0000002e40)={0x0, ""/4134}, 0x102e, 0x0, 0x1800) msgctl$IPC_SET(r7, 0x1, 0xfffffffffffffffe) 17:49:56 executing program 1: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={0x0}) 17:49:56 executing program 2: munmap(&(0x7f0000202000/0x2000)=nil, 0x2000) r0 = msgget(0x3, 0x600) msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000c98310b596a2dfaa9f62026b21f30d9257488eb2d1c2052766402a5acec7569ca2c1a960e5ef924c38c61231b1e8dfbc2cfe80857874f148b2fa835beaed537660e2b2a875000f0863998ace240def8adcddd13c6edc7eccc1e24a65c118badb7b8f5f3cfde1a164ce94f1dc9694a597e7dde817ecff0cc80e1612ac446e8d3b26897531674ac06d0681a7f11247cab54fa3ef7b6f4bda1a33fd87fa4bf673330e4b53703d1d92a41b843e913de61e0353d1171cf2315e5b6fda700bfccb4b2434c4c05c1868127204a9bcb9e25c10b36922da183cd9b968e9d1a04c286bd1c40a96ed80bc4bcd66af2fedeb42980113a57f1558602c1c7dd4c4309c906eb1ef680be9ed15ee0fe906957fffc7f0aea92654048b06952b874acfc63afbd9cf5892177a8f2a52a5e3e1f0d0919c541c6d176f683de14c20503a837a05f41f0ea908e68bf750d2036b1c639e9563499881585f81836e1b7b8deea03537342404d31783d99ad463384e4a72e471521b0f5fbaf0471e19e05556b9bebd395c39d94156ef61ba277bcaf372c0866a2363cd21f00fe80b05b20f9630fe785294400d63ec787d5fbd8d0500c6adc59ad4195996f261f8e307a3db141eb5c873922c3bcd3d17b88e96b9088a3c1c0d6028ebf6625d20b5cfcf93104cd4ca2555e81c626285ba7e1eeb3353060557aef9f94fa9dbde0d6f2defebcbac05239a428d1551f8801f725b00bf6293dc6115aada1d90f015b522a1152f2222bbde5476b8f4237a4dcc3385425d5ad9cae2ef32e8988e539fb92fae6fc5d7a9384cec98d5a9e5441ffa90b39619d24423551affa77070663a938e00b4d86c436482d95112172a2c27d51937e0c5ad52045ddaa2f8d088b3518e57850e334c334ed637356b28e45939c8620eb3704a1abf6aa75eea7266a70c5b95b6c988a1a2779c968b60b9268937bde9e483bb357b3652ded744e97ef9e5f81092b38e49f1f1be06d7d0dd68b3f817091d9f8462fb6fcca0791f9740b9d44e4028999fcb12793de0bffc44ae71c7c972623dae0a59daddb191f90de196a3564ebd9b45abafaf96d931ad5e6b54999e3a74015db3a6c983d5e80d90000000000000000000000000f999f90e300caf67d4de139b06857ee1ce974b316eb504d24cb9b1f4817d63dd4d42bed7d04634e304bfdcad345d263da7d1c9a09f8142d462d3466fd7607ba9a6ac2b358c4fa3458fb28a27911467b7b462fae71a5a12"], 0xf1, 0x800) r1 = msgget$private(0x0, 0x202) msgrcv(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/388], 0x2b, 0x2, 0x1800) msgsnd(r1, &(0x7f0000001440)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="5bb2725268ba86c5a38c45c1e3dd6a9cae4ff392283bb0af012c2b0cc19af2f57079bb2a0b21d28e523719b3157ea74201850083b8ed7e9f1aa67dcb1127765739cb215c97441b71e18d026445cf8294af3b499f089f8c34ce2666606bbd6a2a02c5cebb8a3053a9090000000000000004c60000000000000fff5089ce42699d626e64bf01e7fd96ff43dc2700e8a6a776d34d3fe84d33edde288138a4217e8bff3190b750ec3704b71c8e5f130b5a77eb6699000000"], 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[], 0x61, 0x0) r2 = msgget$private(0x0, 0x1314fd7b681b13df) socketpair(0x1, 0x2, 0x9, &(0x7f0000001dc0)={0xffffffffffffffff}) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r4, &(0x7f0000001200)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRES64=r3], 0x1, 0x7fc) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYRES32], 0x1, 0x800) r5 = fcntl$getown(0xffffffffffffffff, 0x5) msgsnd(r4, &(0x7f0000001280)=ANY=[@ANYRESHEX=r5, @ANYRES32], 0x2, 0x3fb) msgrcv(r4, &(0x7f0000000000)={0x0, ""/41}, 0x31, 0xa67f144a9203658, 0x1800) msgrcv(r4, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000fff4000000000000000000000000000000001a7a525700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a52dc84f35809bbc96082f7872cfc632221c02234ea47d460d0c4b07f810ed03515b5806f27c85ae0fb8ec9099dfa088be862d314fefe480177390e86dca055c8d86bcf03e1a47dd9a2d97821bdf01f0d24548719ab9e0c6ceb184f1489f0ed270b075"], 0x64, 0x1, 0x0) msgrcv(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000750bdf04f9000000006e0500f8ffffffffffff00"/165], 0xb0, 0x3, 0x0) msgrcv(r2, 0x0, 0xffffffffffffffb0, 0x0, 0x0) r6 = msgget(0x1, 0x1) msgrcv(r6, &(0x7f0000000380)={0x0, ""/132}, 0x8c, 0x0, 0x1000) msgsnd(r2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x101, 0x0) msgctl$IPC_RMID(r2, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000008000000000000049e1d0bda7b00000000000efecce479d30f9f3e8000000000000000000000000000000000000000000000000000000000000000000cd68fdde1aff0cf300"/111], 0x67, 0x3, 0x1000) r7 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, &(0x7f0000002e40)={0x0, ""/4134}, 0x102e, 0x0, 0x1800) msgctl$IPC_SET(r7, 0x1, 0xfffffffffffffffe) 17:49:56 executing program 1: munmap(&(0x7f0000202000/0x2000)=nil, 0x2000) r0 = msgget(0x3, 0x600) msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xf1, 0x800) r1 = msgget$private(0x0, 0x202) msgrcv(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/388], 0x2b, 0x2, 0x1800) msgsnd(r1, &(0x7f0000001440)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="5bb2725268ba86c5a38c45c1e3dd6a9cae4ff392283bb0af012c2b0cc19af2f57079bb2a0b21d28e523719b3157ea74201850083b8ed7e9f1aa67dcb1127765739cb215c97441b71e18d026445cf8294af3b499f089f8c34ce2666606bbd6a2a02c5cebb8a3053a9090000000000000004c60000000000000fff5089ce42699d626e64bf01e7fd96ff43dc2700e8a6a776d34d3fe84d33edde288138a4217e8bff3190b750ec3704b71c8e5f130b5a77eb6699000000"], 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[], 0x61, 0x0) r2 = msgget$private(0x0, 0x1314fd7b681b13df) socketpair(0x1, 0x2, 0x9, &(0x7f0000001dc0)={0xffffffffffffffff}) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r4, &(0x7f0000001200)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRES64=r3], 0x1, 0x7fc) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYRES32], 0x1, 0x800) r5 = fcntl$getown(0xffffffffffffffff, 0x5) msgsnd(r4, &(0x7f0000001280)=ANY=[@ANYRESHEX=r5, @ANYRES32], 0x2, 0x3fb) msgrcv(r4, &(0x7f0000000000)={0x0, ""/41}, 0x31, 0xa67f144a9203658, 0x1800) msgrcv(r4, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000fff4000000000000000000000000000000001a7a525700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a52dc84f35809bbc96082f7872cfc632221c02234ea47d460d0c4b07f810ed03515b5806f27c85ae0fb8ec9099dfa088be862d314fefe480177390e86dca055c8d86bcf03e1a47dd9a2d97821bdf01f0d24548719ab9e0c6ceb184f1489f0ed270b075"], 0x64, 0x1, 0x0) msgrcv(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000750bdf04f9000000006e0500f8ffffffffffff00"/165], 0xb0, 0x3, 0x0) msgrcv(r2, 0x0, 0xffffffffffffffb0, 0x0, 0x0) r6 = msgget(0x1, 0x1) msgrcv(r6, &(0x7f0000000380)={0x0, ""/132}, 0x8c, 0x0, 0x1000) msgsnd(r2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x101, 0x0) msgctl$IPC_RMID(r2, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000008000000000000049e1d0bda7b00000000000efecce479d30f9f3e8000000000000000000000000000000000000000000000000000000000000000000cd68fdde1aff0cf300"/111], 0x67, 0x3, 0x1000) r7 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, &(0x7f0000002e40)={0x0, ""/4134}, 0x102e, 0x0, 0x1800) msgctl$IPC_SET(r7, 0x1, 0xfffffffffffffffe) 17:49:56 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x6, @local, 0x0, 0x0, 'lblc\x00'}, 0x2c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000240)=0xfc, 0x4) r8 = socket(0xa, 0x2, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) bind$packet(r8, &(0x7f0000000380)={0x11, 0x6, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x5, 0x4) sendmmsg(r5, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x101d0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x8, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1000}, {}, {0xc48}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0x8, 0x0, 0x3, 0x0, 0x0, 0x200, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000005c0)={0x5, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x3, [{{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @local}}]}, 0x210) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030080000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="0a001800030303030303000008000c0064000000"], 0x30}}, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fchown(r10, 0x0, 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 17:49:56 executing program 3: munmap(&(0x7f0000202000/0x2000)=nil, 0x2000) r0 = msgget(0x3, 0x600) msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xf1, 0x800) r1 = msgget$private(0x0, 0x202) msgrcv(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="00000000000000000000400000000000000000000000000000004ab3000000000000000000000000000000df64b44af0a2c2c7090b4b132deb65b30c058ebeda5bf39bcb13e4ae40ef10678a1311b80a88e606d0c6236a1e5feddb52b34152da074af0a8eea914721d23a6b20424fbad2a65f07e4319669e67bce8e959c10e6be19a7892cff20bdb470d43b04a06da94633356ada36b2d759633899ad3105cf00842e59dff35c3244d7deac29364836f7f54a424dd7263d32bd5bf64882db53607d4057f4baf72f650ff8c95dfbaf89bf96a51785d1c6484c1cfd38533dce5d6e68f7e16c33848a952a0fe70d370fa0c7f63abcbf88bb8d27a77c216ce7ecd69f4be61733438ad8edad3018b178fb9f16bc7af3e5ee0b4692f3eea42d20ca422324e4d4b1b55b2f3a7a49855595680ee11375ec77340dd9cd3ff99d7674ae45e7ff84864723af3cbe309723fc114746e890f6f0d64c2a9c73b7053b78f013992867c0730934c18aa86612f75481ffd6a3aa7ebd4421220118300"/388], 0x2b, 0x2, 0x1800) msgsnd(r1, &(0x7f0000001440)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="5bb2725268ba86c5a38c45c1e3dd6a9cae4ff392283bb0af012c2b0cc19af2f57079bb2a0b21d28e523719b3157ea74201850083b8ed7e9f1aa67dcb1127765739cb215c97441b71e18d026445cf8294af3b499f089f8c34ce2666606bbd6a2a02c5cebb8a3053a9090000000000000004c60000000000000fff5089ce42699d626e64bf01e7fd96ff43dc2700e8a6a776d34d3fe84d33edde288138a4217e8bff3190b750ec3704b71c8e5f130b5a77eb6699000000"], 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[], 0x61, 0x0) r2 = msgget$private(0x0, 0x1314fd7b681b13df) socketpair(0x1, 0x2, 0x9, &(0x7f0000001dc0)={0xffffffffffffffff}) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r4, &(0x7f0000001200)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRES64=r3], 0x1, 0x7fc) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYRES32], 0x1, 0x800) r5 = fcntl$getown(0xffffffffffffffff, 0x5) msgsnd(r4, &(0x7f0000001280)=ANY=[@ANYRESHEX=r5, @ANYRES32], 0x2, 0x3fb) msgrcv(r4, &(0x7f0000000000)={0x0, ""/41}, 0x31, 0xa67f144a9203658, 0x1800) msgrcv(r4, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000fff4000000000000000000000000000000001a7a525700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a52dc84f35809bbc96082f7872cfc632221c02234ea47d460d0c4b07f810ed03515b5806f27c85ae0fb8ec9099dfa088be862d314fefe480177390e86dca055c8d86bcf03e1a47dd9a2d97821bdf01f0d24548719ab9e0c6ceb184f1489f0ed270b075"], 0x64, 0x1, 0x0) msgrcv(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000750bdf04f9000000006e0500f8ffffffffffff00"/165], 0xb0, 0x3, 0x0) msgrcv(r2, 0x0, 0xffffffffffffffb0, 0x0, 0x0) r6 = msgget(0x1, 0x1) msgrcv(r6, &(0x7f0000000380)={0x0, ""/132}, 0x8c, 0x0, 0x1000) msgsnd(r2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x101, 0x0) msgctl$IPC_RMID(r2, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000008000000000000049e1d0bda7b00000000000efecce479d30f9f3e8000000000000000000000000000000000000000000000000000000000000000000cd68fdde1aff0cf300"/111], 0x67, 0x3, 0x1000) r7 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, &(0x7f0000002e40)={0x0, ""/4134}, 0x102e, 0x0, 0x1800) msgctl$IPC_SET(r7, 0x1, 0xfffffffffffffffe) 17:49:57 executing program 4: munmap(&(0x7f0000202000/0x2000)=nil, 0x2000) r0 = msgget(0x3, 0x600) msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000c98310b596a2dfaa9f62026b21f30d9257488eb2d1c2052766402a5acec7569ca2c1a960e5ef924c38c61231b1e8dfbc2cfe80857874f148b2fa835beaed537660e2b2a875000f0863998ace240def8adcddd13c6edc7eccc1e24a65c118badb7b8f5f3cfde1a164ce94f1dc9694a597e7dde817ecff0cc80e1612ac446e8d3b26897531674ac06d0681a7f11247cab54fa3ef7b6f4bda1a33fd87fa4bf673330e4b53703d1d92a41b843e913de61e0353d1171cf2315e5b6fda700bfccb4b2434c4c05c1868127204a9bcb9e25c10b36922da183cd9b968e9d1a04c286bd1c40a96ed80bc4bcd66af2fedeb42980113a57f1558602c1c7dd4c4309c906eb1ef680be9ed15ee0fe906957fffc7f0aea92654048b06952b874acfc63afbd9cf5892177a8f2a52a5e3e1f0d0919c541c6d176f683de14c20503a837a05f41f0ea908e68bf750d2036b1c639e9563499881585f81836e1b7b8deea03537342404d31783d99ad463384e4a72e471521b0f5fbaf0471e19e05556b9bebd395c39d94156ef61ba277bcaf372c0866a2363cd21f00fe80b05b20f9630fe785294400d63ec787d5fbd8d0500c6adc59ad4195996f261f8e307a3db141eb5c873922c3bcd3d17b88e96b9088a3c1c0d6028ebf6625d20b5cfcf93104cd4ca2555e81c626285ba7e1eeb3353060557aef9f94fa9dbde0d6f2defebcbac05239a428d1551f8801f725b00bf6293dc6115aada1d90f015b522a1152f2222bbde5476b8f4237a4dcc3385425d5ad9cae2ef32e8988e539fb92fae6fc5d7a9384cec98d5a9e5441ffa90b39619d24423551affa77070663a938e00b4d86c436482d95112172a2c27d51937e0c5ad52045ddaa2f8d088b3518e57850e334c334ed637356b28e45939c8620eb3704a1abf6aa75eea7266a70c5b95b6c988a1a2779c968b60b9268937bde9e483bb357b3652ded744e97ef9e5f81092b38e49f1f1be06d7d0dd68b3f817091d9f8462fb6fcca0791f9740b9d44e4028999fcb12793de0bffc44ae71c7c972623dae0a59daddb191f90de196a3564ebd9b45abafaf96d931ad5e6b54999e3a74015db3a6c983d5e80d90000000000000000000000000f999f90e300caf67d4de139b06857ee1ce974b316eb504d24cb9b1f4817d63dd4d42bed7d04634e304bfdcad345d263da7d1c9a09f8142d462d3466fd7607ba9a6ac2b358c4fa3458fb28a27911467b7b462fae71a5a12"], 0xf1, 0x800) r1 = msgget$private(0x0, 0x202) msgrcv(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="00000000000000000000400000000000000000000000000000004ab3000000000000000000000000000000df64b44af0a2c2c7090b4b132deb65b30c058ebeda5bf39bcb13e4ae40ef10678a1311b80a88e606d0c6236a1e5feddb52b34152da074af0a8eea914721d23a6b20424fbad2a65f07e4319669e67bce8e959c10e6be19a7892cff20bdb470d43b04a06da94633356ada36b2d759633899ad3105cf00842e59dff35c3244d7deac29364836f7f54a424dd7263d32bd5bf64882db53607d4057f4baf72f650ff8c95dfbaf89bf96a51785d1c6484c1cfd38533dce5d6e68f7e16c33848a952a0fe70d370fa0c7f63abcbf88bb8d27a77c216ce7ecd69f4be61733438ad8edad3018b178fb9f16bc7af3e5ee0b4692f3eea42d20ca422324e4d4b1b55b2f3a7a49855595680ee11375ec77340dd9cd3ff99d7674ae45e7ff84864723af3cbe309723fc114746e890f6f0d64c2a9c73b7053b78f013992867c0730934c18aa86612f75481ffd6a3aa7ebd4421220118300"/388], 0x2b, 0x2, 0x1800) msgsnd(r1, &(0x7f0000001440)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="5bb2725268ba86c5a38c45c1e3dd6a9cae4ff392283bb0af012c2b0cc19af2f57079bb2a0b21d28e523719b3157ea74201850083b8ed7e9f1aa67dcb1127765739cb215c97441b71e18d026445cf8294af3b499f089f8c34ce2666606bbd6a2a02c5cebb8a3053a9090000000000000004c60000000000000fff5089ce42699d626e64bf01e7fd96ff43dc2700e8a6a776d34d3fe84d33edde288138a4217e8bff3190b750ec3704b71c8e5f130b5a77eb6699000000"], 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[], 0x61, 0x0) r2 = msgget$private(0x0, 0x1314fd7b681b13df) socketpair(0x1, 0x2, 0x9, &(0x7f0000001dc0)={0xffffffffffffffff}) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r4, &(0x7f0000001200)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRES64=r3], 0x1, 0x7fc) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYRES32], 0x1, 0x800) r5 = fcntl$getown(0xffffffffffffffff, 0x5) msgsnd(r4, &(0x7f0000001280)=ANY=[@ANYRESHEX=r5, @ANYRES32], 0x2, 0x3fb) msgrcv(r4, &(0x7f0000000000)={0x0, ""/41}, 0x31, 0xa67f144a9203658, 0x1800) msgrcv(r4, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000fff4000000000000000000000000000000001a7a525700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a52dc84f35809bbc96082f7872cfc632221c02234ea47d460d0c4b07f810ed03515b5806f27c85ae0fb8ec9099dfa088be862d314fefe480177390e86dca055c8d86bcf03e1a47dd9a2d97821bdf01f0d24548719ab9e0c6ceb184f1489f0ed270b075"], 0x64, 0x1, 0x0) msgrcv(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000750bdf04f9000000006e0500f8ffffffffffff00"/165], 0xb0, 0x3, 0x0) msgrcv(r2, 0x0, 0xffffffffffffffb0, 0x0, 0x0) r6 = msgget(0x1, 0x1) msgrcv(r6, &(0x7f0000000380)={0x0, ""/132}, 0x8c, 0x0, 0x1000) msgsnd(r2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x101, 0x0) msgctl$IPC_RMID(r2, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000008000000000000049e1d0bda7b00000000000efecce479d30f9f3e8000000000000000000000000000000000000000000000000000000000000000000cd68fdde1aff0cf300"/111], 0x67, 0x3, 0x1000) r7 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, &(0x7f0000002e40)={0x0, ""/4134}, 0x102e, 0x0, 0x1800) msgctl$IPC_SET(r7, 0x1, 0xfffffffffffffffe) 17:49:57 executing program 2: munmap(&(0x7f0000202000/0x2000)=nil, 0x2000) r0 = msgget(0x3, 0x600) msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xf1, 0x800) r1 = msgget$private(0x0, 0x202) msgrcv(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="00000000000000000000400000000000000000000000000000004ab3000000000000000000000000000000df64b44af0a2c2c7090b4b132deb65b30c058ebeda5bf39bcb13e4ae40ef10678a1311b80a88e606d0c6236a1e5feddb52b34152da074af0a8eea914721d23a6b20424fbad2a65f07e4319669e67bce8e959c10e6be19a7892cff20bdb470d43b04a06da94633356ada36b2d759633899ad3105cf00842e59dff35c3244d7deac29364836f7f54a424dd7263d32bd5bf64882db53607d4057f4baf72f650ff8c95dfbaf89bf96a51785d1c6484c1cfd38533dce5d6e68f7e16c33848a952a0fe70d370fa0c7f63abcbf88bb8d27a77c216ce7ecd69f4be61733438ad8edad3018b178fb9f16bc7af3e5ee0b4692f3eea42d20ca422324e4d4b1b55b2f3a7a49855595680ee11375ec77340dd9cd3ff99d7674ae45e7ff84864723af3cbe309723fc114746e890f6f0d64c2a9c73b7053b78f013992867c0730934c18aa86612f75481ffd6a3aa7ebd4421220118300"/388], 0x2b, 0x2, 0x1800) msgsnd(r1, &(0x7f0000001440)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="5bb2725268ba86c5a38c45c1e3dd6a9cae4ff392283bb0af012c2b0cc19af2f57079bb2a0b21d28e523719b3157ea74201850083b8ed7e9f1aa67dcb1127765739cb215c97441b71e18d026445cf8294af3b499f089f8c34ce2666606bbd6a2a02c5cebb8a3053a9090000000000000004c60000000000000fff5089ce42699d626e64bf01e7fd96ff43dc2700e8a6a776d34d3fe84d33edde288138a4217e8bff3190b750ec3704b71c8e5f130b5a77eb6699000000"], 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[], 0x61, 0x0) r2 = msgget$private(0x0, 0x1314fd7b681b13df) socketpair(0x1, 0x2, 0x9, &(0x7f0000001dc0)={0xffffffffffffffff}) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r4, &(0x7f0000001200)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRES64=r3], 0x1, 0x7fc) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYRES32], 0x1, 0x800) r5 = fcntl$getown(0xffffffffffffffff, 0x5) msgsnd(r4, &(0x7f0000001280)=ANY=[@ANYRESHEX=r5, @ANYRES32], 0x2, 0x3fb) msgrcv(r4, &(0x7f0000000000)={0x0, ""/41}, 0x31, 0xa67f144a9203658, 0x1800) msgrcv(r4, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000fff4000000000000000000000000000000001a7a525700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a52dc84f35809bbc96082f7872cfc632221c02234ea47d460d0c4b07f810ed03515b5806f27c85ae0fb8ec9099dfa088be862d314fefe480177390e86dca055c8d86bcf03e1a47dd9a2d97821bdf01f0d24548719ab9e0c6ceb184f1489f0ed270b075"], 0x64, 0x1, 0x0) msgrcv(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000750bdf04f9000000006e0500f8ffffffffffff00"/165], 0xb0, 0x3, 0x0) msgrcv(r2, 0x0, 0xffffffffffffffb0, 0x0, 0x0) r6 = msgget(0x1, 0x1) msgrcv(r6, &(0x7f0000000380)={0x0, ""/132}, 0x8c, 0x0, 0x1000) msgsnd(r2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x101, 0x0) msgctl$IPC_RMID(r2, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000008000000000000049e1d0bda7b00000000000efecce479d30f9f3e8000000000000000000000000000000000000000000000000000000000000000000cd68fdde1aff0cf300"/111], 0x67, 0x3, 0x1000) r7 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, &(0x7f0000002e40)={0x0, ""/4134}, 0x102e, 0x0, 0x1800) msgctl$IPC_SET(r7, 0x1, 0xfffffffffffffffe) 17:49:57 executing program 1: munmap(&(0x7f0000202000/0x2000)=nil, 0x2000) r0 = msgget(0x3, 0x600) msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xf1, 0x800) r1 = msgget$private(0x0, 0x202) msgrcv(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/388], 0x2b, 0x2, 0x1800) msgsnd(r1, &(0x7f0000001440)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="5bb2725268ba86c5a38c45c1e3dd6a9cae4ff392283bb0af012c2b0cc19af2f57079bb2a0b21d28e523719b3157ea74201850083b8ed7e9f1aa67dcb1127765739cb215c97441b71e18d026445cf8294af3b499f089f8c34ce2666606bbd6a2a02c5cebb8a3053a9090000000000000004c60000000000000fff5089ce42699d626e64bf01e7fd96ff43dc2700e8a6a776d34d3fe84d33edde288138a4217e8bff3190b750ec3704b71c8e5f130b5a77eb6699000000"], 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[], 0x61, 0x0) r2 = msgget$private(0x0, 0x1314fd7b681b13df) socketpair(0x1, 0x2, 0x9, &(0x7f0000001dc0)={0xffffffffffffffff}) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r4, &(0x7f0000001200)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRES64=r3], 0x1, 0x7fc) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYRES32], 0x1, 0x800) r5 = fcntl$getown(0xffffffffffffffff, 0x5) msgsnd(r4, &(0x7f0000001280)=ANY=[@ANYRESHEX=r5, @ANYRES32], 0x2, 0x3fb) msgrcv(r4, &(0x7f0000000000)={0x0, ""/41}, 0x31, 0xa67f144a9203658, 0x1800) msgrcv(r4, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000fff4000000000000000000000000000000001a7a525700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a52dc84f35809bbc96082f7872cfc632221c02234ea47d460d0c4b07f810ed03515b5806f27c85ae0fb8ec9099dfa088be862d314fefe480177390e86dca055c8d86bcf03e1a47dd9a2d97821bdf01f0d24548719ab9e0c6ceb184f1489f0ed270b075"], 0x64, 0x1, 0x0) msgrcv(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000750bdf04f9000000006e0500f8ffffffffffff00"/165], 0xb0, 0x3, 0x0) msgrcv(r2, 0x0, 0xffffffffffffffb0, 0x0, 0x0) r6 = msgget(0x1, 0x1) msgrcv(r6, &(0x7f0000000380)={0x0, ""/132}, 0x8c, 0x0, 0x1000) msgsnd(r2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x101, 0x0) msgctl$IPC_RMID(r2, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000008000000000000049e1d0bda7b00000000000efecce479d30f9f3e8000000000000000000000000000000000000000000000000000000000000000000cd68fdde1aff0cf300"/111], 0x67, 0x3, 0x1000) r7 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, &(0x7f0000002e40)={0x0, ""/4134}, 0x102e, 0x0, 0x1800) msgctl$IPC_SET(r7, 0x1, 0xfffffffffffffffe) 17:49:59 executing program 4: munmap(&(0x7f0000202000/0x2000)=nil, 0x2000) r0 = msgget(0x3, 0x600) msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xf1, 0x800) r1 = msgget$private(0x0, 0x202) msgrcv(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/388], 0x2b, 0x2, 0x1800) msgsnd(r1, &(0x7f0000001440)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="5bb2725268ba86c5a38c45c1e3dd6a9cae4ff392283bb0af012c2b0cc19af2f57079bb2a0b21d28e523719b3157ea74201850083b8ed7e9f1aa67dcb1127765739cb215c97441b71e18d026445cf8294af3b499f089f8c34ce2666606bbd6a2a02c5cebb8a3053a9090000000000000004c60000000000000fff5089ce42699d626e64bf01e7fd96ff43dc2700e8a6a776d34d3fe84d33edde288138a4217e8bff3190b750ec3704b71c8e5f130b5a77eb6699000000"], 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[], 0x61, 0x0) r2 = msgget$private(0x0, 0x1314fd7b681b13df) socketpair(0x1, 0x2, 0x9, &(0x7f0000001dc0)={0xffffffffffffffff}) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r4, &(0x7f0000001200)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRES64=r3], 0x1, 0x7fc) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYRES32], 0x1, 0x800) r5 = fcntl$getown(0xffffffffffffffff, 0x5) msgsnd(r4, &(0x7f0000001280)=ANY=[@ANYRESHEX=r5, @ANYRES32], 0x2, 0x3fb) msgrcv(r4, &(0x7f0000000000)={0x0, ""/41}, 0x31, 0xa67f144a9203658, 0x1800) msgrcv(r4, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000fff4000000000000000000000000000000001a7a525700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a52dc84f35809bbc96082f7872cfc632221c02234ea47d460d0c4b07f810ed03515b5806f27c85ae0fb8ec9099dfa088be862d314fefe480177390e86dca055c8d86bcf03e1a47dd9a2d97821bdf01f0d24548719ab9e0c6ceb184f1489f0ed270b075"], 0x64, 0x1, 0x0) msgrcv(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000750bdf04f9000000006e0500f8ffffffffffff00"/165], 0xb0, 0x3, 0x0) msgrcv(r2, 0x0, 0xffffffffffffffb0, 0x0, 0x0) r6 = msgget(0x1, 0x1) msgrcv(r6, &(0x7f0000000380)={0x0, ""/132}, 0x8c, 0x0, 0x1000) msgsnd(r2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x101, 0x0) msgctl$IPC_RMID(r2, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000008000000000000049e1d0bda7b00000000000efecce479d30f9f3e8000000000000000000000000000000000000000000000000000000000000000000cd68fdde1aff0cf300"/111], 0x67, 0x3, 0x1000) r7 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, &(0x7f0000002e40)={0x0, ""/4134}, 0x102e, 0x0, 0x1800) msgctl$IPC_SET(r7, 0x1, 0xfffffffffffffffe) 17:49:59 executing program 2: munmap(&(0x7f0000202000/0x2000)=nil, 0x2000) r0 = msgget(0x3, 0x600) msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000c98310b596a2dfaa9f62026b21f30d9257488eb2d1c2052766402a5acec7569ca2c1a960e5ef924c38c61231b1e8dfbc2cfe80857874f148b2fa835beaed537660e2b2a875000f0863998ace240def8adcddd13c6edc7eccc1e24a65c118badb7b8f5f3cfde1a164ce94f1dc9694a597e7dde817ecff0cc80e1612ac446e8d3b26897531674ac06d0681a7f11247cab54fa3ef7b6f4bda1a33fd87fa4bf673330e4b53703d1d92a41b843e913de61e0353d1171cf2315e5b6fda700bfccb4b2434c4c05c1868127204a9bcb9e25c10b36922da183cd9b968e9d1a04c286bd1c40a96ed80bc4bcd66af2fedeb42980113a57f1558602c1c7dd4c4309c906eb1ef680be9ed15ee0fe906957fffc7f0aea92654048b06952b874acfc63afbd9cf5892177a8f2a52a5e3e1f0d0919c541c6d176f683de14c20503a837a05f41f0ea908e68bf750d2036b1c639e9563499881585f81836e1b7b8deea03537342404d31783d99ad463384e4a72e471521b0f5fbaf0471e19e05556b9bebd395c39d94156ef61ba277bcaf372c0866a2363cd21f00fe80b05b20f9630fe785294400d63ec787d5fbd8d0500c6adc59ad4195996f261f8e307a3db141eb5c873922c3bcd3d17b88e96b9088a3c1c0d6028ebf6625d20b5cfcf93104cd4ca2555e81c626285ba7e1eeb3353060557aef9f94fa9dbde0d6f2defebcbac05239a428d1551f8801f725b00bf6293dc6115aada1d90f015b522a1152f2222bbde5476b8f4237a4dcc3385425d5ad9cae2ef32e8988e539fb92fae6fc5d7a9384cec98d5a9e5441ffa90b39619d24423551affa77070663a938e00b4d86c436482d95112172a2c27d51937e0c5ad52045ddaa2f8d088b3518e57850e334c334ed637356b28e45939c8620eb3704a1abf6aa75eea7266a70c5b95b6c988a1a2779c968b60b9268937bde9e483bb357b3652ded744e97ef9e5f81092b38e49f1f1be06d7d0dd68b3f817091d9f8462fb6fcca0791f9740b9d44e4028999fcb12793de0bffc44ae71c7c972623dae0a59daddb191f90de196a3564ebd9b45abafaf96d931ad5e6b54999e3a74015db3a6c983d5e80d90000000000000000000000000f999f90e300caf67d4de139b06857ee1ce974b316eb504d24cb9b1f4817d63dd4d42bed7d04634e304bfdcad345d263da7d1c9a09f8142d462d3466fd7607ba9a6ac2b358c4fa3458fb28a27911467b7b462fae71a5a12"], 0xf1, 0x800) r1 = msgget$private(0x0, 0x202) msgrcv(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/388], 0x2b, 0x2, 0x1800) msgsnd(r1, &(0x7f0000001440)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="5bb2725268ba86c5a38c45c1e3dd6a9cae4ff392283bb0af012c2b0cc19af2f57079bb2a0b21d28e523719b3157ea74201850083b8ed7e9f1aa67dcb1127765739cb215c97441b71e18d026445cf8294af3b499f089f8c34ce2666606bbd6a2a02c5cebb8a3053a9090000000000000004c60000000000000fff5089ce42699d626e64bf01e7fd96ff43dc2700e8a6a776d34d3fe84d33edde288138a4217e8bff3190b750ec3704b71c8e5f130b5a77eb6699000000"], 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[], 0x61, 0x0) r2 = msgget$private(0x0, 0x1314fd7b681b13df) socketpair(0x1, 0x2, 0x9, &(0x7f0000001dc0)={0xffffffffffffffff}) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r4, &(0x7f0000001200)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRES64=r3], 0x1, 0x7fc) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYRES32], 0x1, 0x800) r5 = fcntl$getown(0xffffffffffffffff, 0x5) msgsnd(r4, &(0x7f0000001280)=ANY=[@ANYRESHEX=r5, @ANYRES32], 0x2, 0x3fb) msgrcv(r4, &(0x7f0000000000)={0x0, ""/41}, 0x31, 0xa67f144a9203658, 0x1800) msgrcv(r4, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000fff4000000000000000000000000000000001a7a525700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a52dc84f35809bbc96082f7872cfc632221c02234ea47d460d0c4b07f810ed03515b5806f27c85ae0fb8ec9099dfa088be862d314fefe480177390e86dca055c8d86bcf03e1a47dd9a2d97821bdf01f0d24548719ab9e0c6ceb184f1489f0ed270b075"], 0x64, 0x1, 0x0) msgrcv(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000750bdf04f9000000006e0500f8ffffffffffff00"/165], 0xb0, 0x3, 0x0) msgrcv(r2, 0x0, 0xffffffffffffffb0, 0x0, 0x0) r6 = msgget(0x1, 0x1) msgrcv(r6, &(0x7f0000000380)={0x0, ""/132}, 0x8c, 0x0, 0x1000) msgsnd(r2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x101, 0x0) msgctl$IPC_RMID(r2, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000008000000000000049e1d0bda7b00000000000efecce479d30f9f3e8000000000000000000000000000000000000000000000000000000000000000000cd68fdde1aff0cf300"/111], 0x67, 0x3, 0x1000) r7 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, &(0x7f0000002e40)={0x0, ""/4134}, 0x102e, 0x0, 0x1800) msgctl$IPC_SET(r7, 0x1, 0xfffffffffffffffe) 17:49:59 executing program 3: munmap(&(0x7f0000202000/0x2000)=nil, 0x2000) r0 = msgget(0x3, 0x600) msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xf1, 0x800) r1 = msgget$private(0x0, 0x202) msgrcv(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/388], 0x2b, 0x2, 0x1800) msgsnd(r1, &(0x7f0000001440)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="5bb2725268ba86c5a38c45c1e3dd6a9cae4ff392283bb0af012c2b0cc19af2f57079bb2a0b21d28e523719b3157ea74201850083b8ed7e9f1aa67dcb1127765739cb215c97441b71e18d026445cf8294af3b499f089f8c34ce2666606bbd6a2a02c5cebb8a3053a9090000000000000004c60000000000000fff5089ce42699d626e64bf01e7fd96ff43dc2700e8a6a776d34d3fe84d33edde288138a4217e8bff3190b750ec3704b71c8e5f130b5a77eb6699000000"], 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[], 0x61, 0x0) r2 = msgget$private(0x0, 0x1314fd7b681b13df) socketpair(0x1, 0x2, 0x9, &(0x7f0000001dc0)={0xffffffffffffffff}) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r4, &(0x7f0000001200)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRES64=r3], 0x1, 0x7fc) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYRES32], 0x1, 0x800) r5 = fcntl$getown(0xffffffffffffffff, 0x5) msgsnd(r4, &(0x7f0000001280)=ANY=[@ANYRESHEX=r5, @ANYRES32], 0x2, 0x3fb) msgrcv(r4, &(0x7f0000000000)={0x0, ""/41}, 0x31, 0xa67f144a9203658, 0x1800) msgrcv(r4, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000fff4000000000000000000000000000000001a7a525700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a52dc84f35809bbc96082f7872cfc632221c02234ea47d460d0c4b07f810ed03515b5806f27c85ae0fb8ec9099dfa088be862d314fefe480177390e86dca055c8d86bcf03e1a47dd9a2d97821bdf01f0d24548719ab9e0c6ceb184f1489f0ed270b075"], 0x64, 0x1, 0x0) msgrcv(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000750bdf04f9000000006e0500f8ffffffffffff00"/165], 0xb0, 0x3, 0x0) msgrcv(r2, 0x0, 0xffffffffffffffb0, 0x0, 0x0) r6 = msgget(0x1, 0x1) msgrcv(r6, &(0x7f0000000380)={0x0, ""/132}, 0x8c, 0x0, 0x1000) msgsnd(r2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x101, 0x0) msgctl$IPC_RMID(r2, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000008000000000000049e1d0bda7b00000000000efecce479d30f9f3e8000000000000000000000000000000000000000000000000000000000000000000cd68fdde1aff0cf300"/111], 0x67, 0x3, 0x1000) r7 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, &(0x7f0000002e40)={0x0, ""/4134}, 0x102e, 0x0, 0x1800) msgctl$IPC_SET(r7, 0x1, 0xfffffffffffffffe) 17:49:59 executing program 1: munmap(&(0x7f0000202000/0x2000)=nil, 0x2000) r0 = msgget(0x3, 0x600) msgsnd(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xf1, 0x800) r1 = msgget$private(0x0, 0x202) msgrcv(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/388], 0x2b, 0x2, 0x1800) msgsnd(r1, &(0x7f0000001440)=ANY=[@ANYRES8=r1, @ANYRES8, @ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="5bb2725268ba86c5a38c45c1e3dd6a9cae4ff392283bb0af012c2b0cc19af2f57079bb2a0b21d28e523719b3157ea74201850083b8ed7e9f1aa67dcb1127765739cb215c97441b71e18d026445cf8294af3b499f089f8c34ce2666606bbd6a2a02c5cebb8a3053a9090000000000000004c60000000000000fff5089ce42699d626e64bf01e7fd96ff43dc2700e8a6a776d34d3fe84d33edde288138a4217e8bff3190b750ec3704b71c8e5f130b5a77eb6699000000"], 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[], 0x61, 0x0) r2 = msgget$private(0x0, 0x1314fd7b681b13df) socketpair(0x1, 0x2, 0x9, &(0x7f0000001dc0)={0xffffffffffffffff}) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r4, &(0x7f0000001200)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRES16, @ANYRES32, @ANYRES64=r3], 0x1, 0x7fc) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYRES32], 0x1, 0x800) r5 = fcntl$getown(0xffffffffffffffff, 0x5) msgsnd(r4, &(0x7f0000001280)=ANY=[@ANYRESHEX=r5, @ANYRES32], 0x2, 0x3fb) msgrcv(r4, &(0x7f0000000000)={0x0, ""/41}, 0x31, 0xa67f144a9203658, 0x1800) msgrcv(r4, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000fff4000000000000000000000000000000001a7a525700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a52dc84f35809bbc96082f7872cfc632221c02234ea47d460d0c4b07f810ed03515b5806f27c85ae0fb8ec9099dfa088be862d314fefe480177390e86dca055c8d86bcf03e1a47dd9a2d97821bdf01f0d24548719ab9e0c6ceb184f1489f0ed270b075"], 0x64, 0x1, 0x0) msgrcv(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000750bdf04f9000000006e0500f8ffffffffffff00"/165], 0xb0, 0x3, 0x0) msgrcv(r2, 0x0, 0xffffffffffffffb0, 0x0, 0x0) r6 = msgget(0x1, 0x1) msgrcv(r6, &(0x7f0000000380)={0x0, ""/132}, 0x8c, 0x0, 0x1000) msgsnd(r2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x101, 0x0) msgctl$IPC_RMID(r2, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000008000000000000049e1d0bda7b00000000000efecce479d30f9f3e8000000000000000000000000000000000000000000000000000000000000000000cd68fdde1aff0cf300"/111], 0x67, 0x3, 0x1000) r7 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, &(0x7f0000002e40)={0x0, ""/4134}, 0x102e, 0x0, 0x1800) msgctl$IPC_SET(r7, 0x1, 0xfffffffffffffffe) [ 2617.400209][T11833] mmap: map_count 28 vma iterator 26 [ 2617.468811][T11833] mm ffff8880313baf80 task_size 4294959104 [ 2617.468811][T11833] get_unmapped_area ffffffff812e9300 [ 2617.468811][T11833] mmap_base 140091979984896 mmap_legacy_base 47540815183872 [ 2617.468811][T11833] pgd ffff8880747ab000 mm_users 4 mm_count 1 pgtables_bytes 69632 map_count 30 [ 2617.468811][T11833] hiwater_rss 8f1 hiwater_vm 370a total_vm 374a locked_vm 0 [ 2617.468811][T11833] pinned_vm 0 data_vm 23cf exec_vm 98 stack_vm 21 [ 2617.468811][T11833] start_code f720c000 end_code f72a1b64 start_data f7360000 end_data f7360000 17:49:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x73, 0x42082) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcb, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80085504, &(0x7f00000000c0)) [ 2617.468811][T11833] start_brk 570bd000 brk 570de000 start_stack ffd59980 [ 2617.468811][T11833] arg_start ffd5aec8 arg_end ffd5aee2 env_start ffd5aee2 env_end ffd5afe3 [ 2617.468811][T11833] binfmt ffffffff8cba33e0 flags 7fd [ 2617.468811][T11833] ioctx_table 0000000000000000 [ 2617.468811][T11833] owner ffff8880761d1dc0 exe_file ffff88802b919400 [ 2617.468811][T11833] notifier_subscriptions 0000000000000000 [ 2617.468811][T11833] numa_next_scan 4295198953 numa_scan_offset 0 numa_scan_seq 0 [ 2617.468811][T11833] tlb_flush_pending 0 [ 2617.468811][T11833] def_flags: 0x0() 17:49:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x73, 0x42082) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcb, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80085504, &(0x7f00000000c0)) [ 2617.713622][T11833] ------------[ cut here ]------------