cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x26, 0x0, 0xc0efc1ac01293840}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008880)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0xa0, 0x0, 0x0, {{0x200000000004, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}}, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x90}, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000002000)='./file0/file0\x00', 0x41, 0x0) 20:39:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000000)={@void, @val, @arp=@generic={0x0, 0x6002, 0x6, 0x0, 0x0, @empty, "", @link_local}}, 0x1e) write$tun(r2, &(0x7f0000002240)={@val, @val, @x25}, 0x11) 20:39:14 executing program 0: syz_clone(0x4e282280, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) [ 3034.088490][T27025] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 3034.128791][T12485] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 3034.185180][T29460] syzkaller1: entered promiscuous mode [ 3034.201192][T29460] syzkaller1: entered allmulticast mode 20:39:14 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x26, 0x0, 0xc0efc1ac01293840}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008880)="45ed6cd3167152655b16d5e22a19a204e3a2e35be3c914849182b830889558cde93bfbc2173d1c53be693e6342d497402037ba07aff75956e8fcac91af7be9dd24c02fbe181bf5e6a4a3f64662b1bfcb28e2563a1a77e92b80a67fcc4c30e80c204d514367afb82936f9680fbf3992267d11fe9889a104264ed82fb5712ec73402b8d05dbfc8feff7433676a913ee91a8faebd2e772eafa344db3bfb42f13d03cad668a9427870faf57cfbf5b77b157225f91d6915e9f789522fee59a58dff2e4eb98638a8c53bfcca248e8929d0df697bff8a9af7d044c256854afb44ad0c479195cb321298fd66d7929193a55affc9adaf7d8c8f3c77d3cd858b983f6420b5893e6963adaed3e0ca926a76c0becc9a1b11234678b1db0bd26ca59ff4bfd9766d91d23341a01125f9525477cb69aa319e22c5f2b98b89364b4b5944781d4b57a01b940a9c3a90bf5b86bedac854594ee1d02ad2af0a2ef17510e39cf75761dc72b818b3698e172d4cf42f08c37029f4b1bee5faa8432dc29787e4ef92b6d4e26844ebbf85c59cbea4a385a4cde825b4e3b7b4661bfcf9298d992b1b90c6a1d913af722f18042a1ce9bd6a39d1e07f5df0a7bad0e113e6a357f84e01af9e16c37fee94d089f74561f624ef65ef31f3d82b53794f4f557d9ea96d85a8c8526af6219e9fcd9d96f8a2bd0911d8aa3e3bc431ce51ba16b276b6f3ef644e9a3754d1035de02b5e59a20de63e825f5c356e1f10a7b521ce0314d410d449bfb2065af1c1c8a85cccf466f2503374623fb1904b8149780c741f533dbc8c8d567aca12573be145e83035ab3b5c5942cec810070e9c43283274b76132995c1ab84ba9e29e3b4da4404302708a084bf20db5995c447e5514fb7d7d13a9af0525b89d1b3d122fad80fc37c497eb2cd5ea27c42af7f519234c9ab7df1b85bb51343420b6c549741276cc8210e39ecc84e08ecc4f91c9bc69e98da7012faac36889b66abaeda0aa41eb22809a3c1d9cc0080e3b42c493d47e871d728e1d933a25da6093b665f590fbb038174d54f2d110d816e6b26dfaa5decd17fb4c393d7ef90453c9e841059a9977933386ad6c32efe51cc9b0aa7acb21c7f51456e3f53cd49828ec5b64bcd997e05de60affdff99f5d73909170d6f04c63a02d10b6bd789a2fb90f4cf922e04c7b8ba571862bd04e2033b07a94c006b86ed425a80878c1e8f28232e9c6904c06a7d5e148972cc404d2da761743fdb05f941df11f0d43f7adeae7cd8f10cad65089559c8ea30dfb047cf121474ddb35f59f3a88c1fae337851963440f829711ae2ee8d5479f760c7a2bfc887905a6199ee525d7b10258aeb021d8e52e2c0381d41d531bbf2e7b9ff2704d2693ae9e5f8f3c9365ad5dd3a581af9bc410252dd7bf3e0de20f4cc237c0caa748b86b49ad4562cc351177e28bfc2c68dd888b81a9170ee51b266923fae833d634494532ac556a59a7192a056480f194badf742a695ff150ec5ab7d9192b398759e033901052e62fb264a8a84d7f4826c6fb8891749019013725b374c68973d9f84b102af13107913d1b287a1b359cbb6b054b971de7e3cc2ec7b5efb743474eb8a108d638022776d9f61ca8000ec485e1d10905c659bc601158125d766c0f2a985eda92134f5dfe75f0cc609a895af7bb349f88bd7addcf7033fd573c7954e2744b1d1edb39e0a29f377939d3273277a66b1841f4bedf2927473b0ba4a0bed6714272aa5995d09bd12f68de80c5ab0e6863a6dd4be08c7358fc9889a990a873c5bb053e51245af5edfd9407136cf4eb5e0e02e05c2311e5dc18af43676c8af8b86e5147eb92a4b5e74ad02c8b849e9e9021eaf0749777eaf3e337c7c56d8e2dd77f7349a8f07c64df09eef2fff48ccd3ebfd6c48bc18bfe7c075679b925962fd833f52e6f41a7154d7163316ecbdc3cc23950abc469c53a18ea885a690051656b158016b9e4dcf82211bdf2c34f6b34aa1d5ee26d185f0d80d8d516485e81551751a7fa512af9e971c8168af8a6261f779281bbdf8eda026ffb1b9daebabc0b714ff4a6412b4f037878abbe3f2efc86cc3adc6a24820fc1ea37633e3da501a98eea69c8a188dbd048348a32b88e878b65820c49fbe3eb6c2a743c64e3fdb6cc56b63fdbd3eb1a143553dfd00fc3f4ec83485316ec7f0c303d8c74a0813f687d6464b51c7f4148e996df715df488447026e472d31c08e6c07515c5701ffcd1c5323fbf4980b02bdd9750b7dd487509533dfcac4b09e7fd5f732bcc25b3ca9cd586a9088309ee8dc00ff4e9e276e68e73b764b59e467e27c33bb6945d1aa1a21186076cfc012ec26c5443f0eddb5b950c45df40e975ab35c852daebd71efdd7c414ddad6e34544812722881229690844750a0e31b8a6a2b310f243cdc136b801e6a88bc72ede620181e977536d34a752711bde7128d25f87ecb2d676201877db528d411146c4cf8e8b707e0634c022be37a97ef30215de8ec295a92019ec8b920e94015209959e1605df7d5d6ee3ef47201f53ffc56b1ba8b4832aa1b4a63a66837a0662e50cd21ac68b6c547c7b4b60fe97ca5a9da5e6b6f30d2ea15feb25fb6b3998fcc69eca3b7efdef44636ca0a3a28d81d0b290c2483d930da616ef0e9cf0f433bfd6f63dcea5c0833df91a7b5fae3888a64a61bd46ad9be38504e01de47e209aba031ea340e0d0ce320e1b840333270f7e0947918b6508c0ab55a6a886c8bb928e9d9f20f14d241cdeacbaaca1583eba2392fc052c519c8a23b472cc05d7b45ce535d328079a27255aba8f0a84258ba3481dbb2213903a7f2de3725b0e13d91d3a0f7691d1b90881f2bb26dbb27d286b67e2dcc5a78c18c1d28c2cd5743352191405a1b4759b53fe58aa7c4e730b26bfbf4af735c515b78948391ab4966c2f59b8128a5b43303f3f1ea4a46ea72a3140b8bb05f8e0be4ccf403edc95d44fa52454731b52fb3a4ba04a3a4863dc539c0e38baf5459ce2b2c43d743ec9761f167b3f0f6442159d6b900e92562dd6c17625a287d7c941976d1a8b51efa25195f99a409a6ef046a494b1c2cd99372052b54dcc8a817aba924d37d031cb27e7272f1ba7890bf56b006086a532b64bdc568370431d0d75183409e6680b5678051bf8c6eab28bd8161b903aa1921d5a077c130e414d184f5bc3037d0704d4b012e4ac4b735af9e1e767cf394cd3acc31f6c07e7a494b2c3270f67b5f3d298a31d0057ff4ebd376dfcca142aeb3b94615a8e3183d1cab864c567ef21cf8f627e352b86fdde8dbcf8c7be9d1af68ce07d25b23a90829a621247f606b56f371c7fb1247b42977d8a9484612c430400619add7dce98266a41aa2580e37bca36c5da627054ee07ce491b4b6c501033116385e9856306409a1b1cf698c81d54a4ccbca140c7e90aaf59e28fdd03c187069d40a0e9605427f67115f343c34601ade3849269fbb2145b44cce9b88181ab3cd27eda64a8ffde484b44330e0e169d8441433cc09a4357395adc1ae8b737df8286a6264d949f015c6fc275a20f154f81a001c82816dd016ff059203c81357b2298d7e349e41a44caec8546e0287a9ee37c239bdafe967543c5b4105b1c4662ae8f4a0b5bba7b924ab253bf895437ef6e079a390eeb26b9a4f2bffefc9d49dc5e99e6a3b0decf0b99bfc098f22dbb0e78d7ee810ecf74aff92c33db408809709602deece98fe335644322109d330ecf20e5e5ce2f96e2add81eb745898f3c26368538e599201438ff040e2102f5a8494dd5f9e208ef2b28daf56e4d35d7d6b1f91363e6d29180a410a84aa0cc9c53f063ac7180460db4c743596c504ef41d805a11bfe82e68346d1990e1afac8cbf05ea06588de0efd80f328a50d1ae9e0ca8f3a21814a2e63ccb3ef2ac6387f34299cf24e84c2fd7e529704cb6670a63c1d2d8b8d0548d75e35792dabafb6d745177465a7fff12558b9340c05785b776cdad453f588a1f4b31a372b8dde81a318451b9268455f412953e1e12c86f4fc3f5d9fcc80f165c0d2c73c1f45e830279944ea10ebccb4ffc522a058ba738682b6a9eab3bf74a98e6740962cc534333067bec09391fdf44d8de906cc23ffc34c82e4a538230640fa378bd663ce42f24ab4ecb88b4ba647c970ea1e5f7cbbcbe1dfc2529bafbac1ca961b58aed3d6443fb470dde78c4985225290e2ea52cabcd0f906451fe79ef5eee342f08ed8efd33babe44463474304d1c6ff2b624ec5e0fbcbfd0696fffddf0f730722a4f80f999bbf2b175a04368ec9bf0ec1511827977498a59370fd5c1ac740fdbaa96300a3a50657fb66d5b3a504f8a3eac6fc4637cff2f9e49b524e4a81233d3ee84f35583ce0451fe986c191452a27b0e4ec3c69f521106d86f5cc1ea9323e1add0887a7e65038779fe90272d291e9c742b148b0447e4b6d788f1f6bf6a311d168ad29750d2ba5e0acec7c2392f5bb7cf16dcae6f89692a7b43347b89b07b2952b081c9407ca78c41fdcb3f4f365d1da0263be0bc6e779d656f686b333b92a861b680bdea791c650d184c0a7b81596ae1ceb88dec5d7bdd00ad65ae18455a8d4150c5c9eedbdeb14a37bc9986318c0c4dc033087c7fd0f4d98f1a1d6061456f06b455ff53a8060da6634208bd1c100b67889cc6c1707debc4e99725fa6d3001846fc25f15cb49edf5a8901bdf613b433516e67f0e57d0cf817645899284bca3df9e1f60f02c050994924305d48011666e4f56a1f39076f7f406ad1f0f412dd16daab25bb9e1ebe03bc0ab7ca9dfcca43e544792de3037ec405a532d9d0080a1672f16820f65bf2b114778045c4b0d71dd6e008a0e2e800f8d5348e71d7ad2de60ad0ee6efe3db2240ff99388e2eee893c1b2fd18d3646a4544104274c7baa2f01fea93e5a50ad28ac123aa8579565983408eee8e94507b7a10452d4e0ef9abc274501fb8458397516207caa86f6d5b75f714cfa820d1632438aabcc3cfeeef23921ef57a3bb3b69b983e386a47f033b56c271040d4fcd3fc8a21f6ea22ed19af8a4ecd0c2087e4c649971f94b136b6ea6b10b9f6eb62fabdc7f97ef0a03804430b4042a29ccac16f405b692a6028762c8cbec1f2da00c7e69847033fd04f23bb5ff38f05de651eca8476f89aaf02d32f2f0243995443b12e0019257e0a9bb773a6e5e81f343bffe499b84b36d274f2d113b9293712f03f8e0362c1026801eebf6d0c3945802707ea7f97c5d49cfe5d12d2463ae4900fab3819dc183dbb2008c69c4959e3680cdb092e47831506b081e5a2689ad764f1784a19e18ea0298a27c1306904fcba3a3127668c69bf44c9769d2f3e36174fd82a4c85a9c065b02102877d13a9d67399958201eb9eaf29a1c9f186512abc61b5890c911ff26c2471764e1d7806b7d19b4da4804ac9af00b89b359a122d93e3de58ef9ca478a3e95a0acbf6c7afa6b3d7779d399091e20961fce1463bc809a0ab175a61e2316f3eb618e271ebb3fb733bda2e1bb8d3d401d1069c442b60a60dbd226c64f7d59f6eaf1b192b54f49f4ef2220cb702d61b92bece08e20ed5cd9d40341749f25173819cb2ecb20ac82cf8628989b333c00a037f67d2b5d72c734cf0a748555087bae6791438bef802d8034e126743d1a6b63a8564ee0b16763de7e6d0e0af6021541d10c7f4d70a88913257a28cc29a27525000a8fea23909e6e5bb32065cf5fe406c72af806d1ead355502fd3a461932a25499b5c4397a2c7d3adddeda934460666acc92e8db1936cfc6343f4b2f3ca46bc27df5b7dd0c069a084d155deaad99d7a8ab7b0f86bacb72177b30bbf7664de81045cf02e0c670cf7716fcaf47f55461d1f8848fff3cb504bd5647b0989a4c7860726b840a822b88f84637644f11a3f5c11a8090eb1237812df2836b03838b87d5259a862ae44adf0248b0e90536f277549701d94924b171975fb07473b21cb19bf8c93eaa74fca32cbf4922d0b6739159273ac6c645dd0ad86abb2bbe4deb36bdbaa9433a0192571bb57d1380694fb051f1f80ad4f336ab79e7cb6a99fa97f3c910e2daad00429b8171e6a5ef849c8f543fc0160adc7e8a0eeda5b19e22ca9a3ec98482c7a8023e44003a17165f56edc35d5f510d935e948916e70c2117596617ebb1355076f09ac13f7e582dbedccef6ea3f2520e109c1d439757ce9536ddea11f49aa4ebdd21a4b41c7b564b7ccfd0913cc4d168a9de3680d99fe9be6a47e039ae90be02af817b94763d8cf8b0771ead7c089fd103afd2345ebb7af19c1a3ae5d501ba218a51b6086e1200f7c2675e1dff1914dd98afdb679e6e97a9719fbd851784815112e511dafb91256a4225b68b4da3a2a5d6f6fde07ed64dba48b74625fc47ef226ebebc8fad71f2294ed5ae6d9d4d4982ea0e04a3ec135165785e26e1ff9da18aac1d3ecadff145deb6e19907bfc94e4762d3afe0bfb99d9b08e9f0fbb1276ee364fca7bb535fa0225ddb0145302437bca80058d57677ee8bd159073274c6b6884d1457b5af7976d426b7677dfe0883fd90722f263cc40f254102dcf9ee8e25e29c8ef7c0740d172e894d950519fb7c9fcf2271c487c0dcf97592196bed806c84207d7c146e72c42fb4d0e4a9583c42417f9bf4bf992921474f7caefdf8e9e9603ab424b38a2d56548f1694f296dd7d66e8bbc969041d8875c6437bbb1e2d157bea90214b2282ddfcef8ebf45de07884cb15eba8645f52aca31d82cdd339e5bd55e568b6156b3d767f994d8fe3efaf902aa719dd4c66dba3ae1bc27f815fffb9e20ea228fa28c66c08ced97970f942ffc91c59329c2172c7799d0a1159baa609e11959f9472ecc4f4d41e7c74982d8bbcc41283536e0f448ee5c9a6bbd963c440d219cbb0a6ae7e7376d66816b31205f9e2f4a2d46c491910436348759b98d8981758994d809bbc48fe4646d8fb5f3bedcb3d6dc21b9def43c82d2a3d5d4675fcc3a3727575f936c25851c7ff610e69a27d791eea95309439b6165fafbcad43a15b2bafeca52c050f142edb42f04ae7f9fc5807bc0b58c29d226928898d4bb94a888d6fe5d46a690535a6e4b88fef85cf5a21110adb0c314844cfb85dd68c1a27ce2cf320b3d2eddb31407598e5c36f5f75309aea1cd1a57372348aae0fe92c73645089fbf6c7658c924fda27012add844e0c41c0ee4a25e8504a72af2b90e542d1b3908ebaf7816e9d405beec93e4047851f860e7ab0a70dac2a3478bc874ffa6b709230d560389354843733f922f6be5ed6bda7c3f803e6c1adc867b464aca20711cf72c5b217c001dc6b083ee9e04b6bb73959071e36c532ff3207f06a3290ea72e8c121cbc03d1ed9725a5184f31dfd2c78e8fd6475081b6f843cb61786b6b6c52ebe640c04cae12d944da840aae4238a41eca0b4514611f118c9d1163d7488e4187bc922775bdac77e4284f9eb887cfa51e7a6b153de975f02c238fc73a63cc6458f7d9f2bf6292979108a28dd89c3b2ec8c59e52a2d57d03e7e72cf23aa13a9f425176336348a1727218b7d40052f2dc98e098f3d3bd01dfae84426a6b8246f476443cc3715670f8050b6a3dd96918c39e673d5b1c346ca2d8f7d15139eae1080ecc2522890a275286373a599ea7c0945589e8f9b1a5f7c8c4d33f4b11798816660243ab890d46934d7fbe4514e679a3b8199e239b190a2e1f6a2af7801d0fb5bac35cc030ad3af63da357c16f6b36dd656d0765aa606c5854bce25d5c537b8dd2f877bd7fbee8386475ebc0179ab69a99af77d2c482e39a33fe680e8b23cccd7c2886d0d4f9c68ca14190d0408b1e6b63419a8764f78f4f4cb990af6bf2bef7fc7e0dd83bc305f4e63d0929ee12f5bb0dab011d8e21c78d935cdddca28a5739f91a85ef44e5c23233ec95ac92ff21b660f7de9f058adb2a0b47d34c7d8929f139df8628472d2b4c67ac7d9e5f0e9356a127085147bd52f6d66dcc0dbabc394acfdc961b0f303bc530352ec7488df48fa9dbe77c59ad52d23285ca028fe4af5f53c10040c3d5a29a38d781178ff13ea4254aa5a1318eb57185068e13722f20828f6792b40d701ec81bb34e2f70d215709d66cdcc9bf35081820517566826745aeabc70909af3a3df98e7eb4e424abe56091179b62a999a6eb4aabfb5e188b7adc6f4d1f3d2e248931d219d6cc44796615ded0bf22303ede70ba7e5badfe7baaa7d7ffd9e58518eb5f56508c18e3dba4c87d2c55e59f1bb49bf48b574955b64e0a14e6c4dcba1fa0b6817668b1fda2e7504045f9a5063f64fcf444f6df42140a972f21f535cb201bf535be58cd34d2e486ca5f5c411bc1e5870f674b8022c72ec4e7b1ac8b3da55e4ff78faa4a9f5eb01106d2f38f08d3423ac5d286868832c36e0200e4ac4fb1fc4eaea5aca5582c04740ebb5d3fdc5b5501e7b41ec9ad6e5b5e9610e16f8a287ba7cf044687d8bf2bfe9ccc3aee87912f7c0ec04881a51da243dc28857d6c345d7b8bc5fb6fd28bbcae4d3b6223592bb67b3d733fdc7ca6024584dbd03c4702de8ee72efd39c5b2c70c764186d0cdc1167fd48191d8ad4fd5124b9ae3c9f5ef92a8a6369542515c5201884e4a7fec4aae372d7c265150acb8c44ff90451c422920beaa08cd0f4bf5fd90192030cfaf3b2d0ad125f1aeeba7ab9d8ad5339317f097915f158ff9138ca4ea0c7a834aec014e78e30a507e91452bc67a7d308817b104957a2062caf7e77f974f98a8e97b68e840dc559d2f002fe41c955c731db3bf670f4209bb6889398d2ebec014d59f252b0bbe36d8547e74fa27c714fd0029121cfd9b1aa1fb2e2d87dcf2b355d44b985d2749fdfe24b6d6c29b80e7d3de243e432cefb34d160ee183ff243fe2042995785d82bfee9bac880f8be41379f8d72cf43e34efc3ee066e856ffeeeef9179e1b2ef7d856202bcddbbd8591925dd2ba52c1b4c7889f0a0459ab8f2864a2ff0e07b30a2b9d27b9a70afdc88157f9ba1a443ca5d2504afd360d59ebeb5badeb7b0ddca7d60ea55c7f9bbf2610cf2131743594fa73eea39454c0599a97cf83781fffc3f7619f477b4be0a24e8aad2d4d9a2f7b481a5998e38ddccfe8cd8d7224460704d4befb5bd2ed889cd049d6449e386d0ffa66774775e7533e97b2fadd714028fac5fb0fddca932ab804d111dc6d75f7886f14a092583c6e0a01c8c26ba1e81821371531dcd6d1a7b02f7ba6630292f98d522eda6f410b7e62fcab8d8601348eba055581cd04344c2a40e6f03de24ee8062b84d14715bf4c8fb41b7113fad284b6f80218999d4bb58e77d14e79118345da333e502edf57bc7889b07029ef02266191fd492dbcac4825d414a5d0d75c898388f59b7fa3664548292ab4b125609571bfd5aedce0ff8b9225bc1792b0b9f9f50ba51fc458237c0200acf19cf247f41a168c5c8be369771be48e51c5730ac895fa9cb3f0a3dd4d68f0990a9967fbd14ce77e6baa459c422cb8ed1f4194b641f1b5618ff00b32c68a2ee356c13851190a2259816601f0913bebeafc3c5c7ac94eec1efa910684d1db8fad05c09c826d85b9141c99a6aae8d5a1d4c143d6b2316fd34d31e15b5edb2cb9b9fa3e198116f742abf1da723f4d37b8c3ed68b207b582da910c0a509d07280642344a3034ffa3f9990a293e5561b900f3eb83a51ca25e78a211cb7c65b984a9ad2e8322a755ba6a1310ab9c3b71747706ee627dd334f55cc6ceaa0bd4ec4a69c244e87a3ee251bf87ef4648346ef38960ca3223e4b488b0ac049f43d9567b8114b53f30cbe8e1cd61c54b9223e0f193930ac4475509a8d1af2b56803d14f644592140c37acdc2c197b47d97aedb15ea4882b4b3ac28871f47b958e052e62e08149b0abca292e9c7c406ec6f96f1ecaafe1488456de6138e00fd15cad24a3bc3ab7e645c4c3ec0a08b6675dce73710562cca536abbfda59012ad0027737ac1932f46e589edc7061ece9914ced3fbab668ffe98768691115dc9f377b1d57dd4fab3915ea8eaf28b7dda7ed69d8b550c09281e91c037cd6eb89a2b52559c5f6381c35f8d7bcd4de963ba7ef89d2425e8f0401021261c24b7e9447261a70a9e7e10048cffa6fc8d4a5aee93d2de57ff2d215a00273752451dd690cef50584c4131f0a84c504b8abbc9ad945a1daf957ce4ccf8dd6b276a62c101d90a4a34eac6aa213ccf9c67dc69ba61acce802d852e91aea3a08ad4d0e56c85d0767e3dcf704409ef9a825592dd85cce24aa586be50bea2fb75bb4b697ae9ee7985f0fdba8f2999c9b06c049880c9fda8ce08f31ee3eba2560e17f14d2395d648c0a432a4027a950c6325f3bf8e5140bbce29c79a033bea270ebabcbdf8c67aecea447955e2a9ebd5136e99f90b37adf3ff578530159bfe6efedd97229eeaa787b756b6f66d4a91ef8bb242dbd8682d533d20d3e7201485307363fad2d1126a59bca577840ef92fa7e39b23d037753eb2ef490e4425731fd6d4ef75c7f67db56e8f46fd580056f55a4406c36f63ea6e0b9fd5a674dc506fa8e29d1b707145ebc94c217948df16b7b52a07e1831103f30b92cd024b3136190863acd0b73236274c4d8ccef12ccab5fd2a4378faecddeb7934f9c42d070651ad12d9cd9d1ee84616d6883aed77610af5ef817ad98551054232a72e0cd4c959450e26bd9e259abcb211d2d94383297db76345c4ce793c101d213b91e403a603c0579ee77b3182cdd549d357297a85859ad3d8e4eb5a7506e8b2e4b3981f928a335a694dfa31eb467f4fac7c28ed5053e5b4c3a1832da7a00ee586c928fcd016362536711d35d992fd55b55780005209f48912406b34befcfba6a9e5323a77f8192f4b0435e61414752d0ca1ec94d1ad35c1629f9e7fd424a3d767fc4d1892d7df7647829a5bed8d2331f99b9dadf98668809e72fa06acedda531f64d7d7e418bac78bca2c02a64b19260377e92d317fe802d375a45ce020647a320bc1c4426ab770a067c9d855eadac98d46055ef8ae9dfe5d638866cb7da134851eb7d24359e76117ecdd9b872a0f8c6791f5b7f50528e27502275987468a333f5807d431cc1d413715aa3bff0d869b5e0a01280d969e43ac30c501fe64187bcf92a7e81d80fa561e425ed449ee8cd8b09e43c1b95b3ba05e02cdc32f94158743cb5f148fa761fca510c41803ef60b3182bcba291dc7a5c19f6ff6e759461261c4f5bbceb7a17ae45d03832aeabe6401fffc7db264d0b88c8450f6c930814ccb33db6889240ac1258853d88265cdcf98e5e6998a9816391b8235b028940ca4405e0bbb13229facc7a71440c7106a980caa372d1078cfb55eb5c02a240583a6334489d5c4d0853d8789a6c22124eafab778a0b17ba9caebd3410cbb4466189b070022256cea1913b19ced5ce5295cac2adcefdce8af884ee429afde08f93bddd8eb3c32bd0fd68d5b32d345e80d39317013084d28a2ff761ba310188267842805f8c12087abaa977104a4fae48153ba1b6bd0909f212707cd1f8c8b0da8b213407bc720c1bff69615dfd276780e2a5e760874e8891460aa6c1738a012921119c45fc2e72a5523318439428823c4bde357e46c9e042864df093302bad39965dcaf4b71f596559a775d5c276fbb31257c1", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0xa0, 0x0, 0x0, {{0x200000000004, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}}, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x90}, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000002000)='./file0/file0\x00', 0x41, 0x0) [ 3034.378911][T12485] usb 4-1: Using ep0 maxpacket: 8 20:39:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000000)={@void, @val, @arp=@generic={0x0, 0x6002, 0x6, 0x0, 0x0, @empty, "", @link_local}}, 0x1e) write$tun(r2, &(0x7f0000002240)={@val, @val, @x25}, 0x11) [ 3034.498904][T12485] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3034.517295][T12485] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3034.529865][T12485] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3034.540331][T12485] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3034.626529][T29475] syzkaller1: entered promiscuous mode [ 3034.632829][T29475] syzkaller1: entered allmulticast mode [ 3034.649165][T27025] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=31.ec [ 3034.662172][T27025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3034.679977][T27025] usb 5-1: Product: syz [ 3034.690121][T27025] usb 5-1: Manufacturer: syz [ 3034.699533][T27025] usb 5-1: SerialNumber: syz [ 3034.715019][T27025] usb 5-1: config 0 descriptor?? [ 3034.794978][T12485] usb 4-1: string descriptor 0 read error: -22 [ 3034.809736][T12485] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3034.848089][T12485] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3035.002430][T27025] usb 5-1: USB disconnect, device number 96 [ 3035.138888][T12485] cdc_ncm 4-1:1.0: bind() failure [ 3035.148729][T12485] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 3035.156297][T12485] cdc_ncm 4-1:1.1: bind() failure [ 3035.173129][T12485] usb 4-1: USB disconnect, device number 63 20:39:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 20:39:23 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 20:39:23 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wg2\x00', &(0x7f0000000040)=@ethtool_ts_info}) 20:39:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000000)={@void, @val, @arp=@generic={0x0, 0x6002, 0x6, 0x0, 0x0, @empty, "", @link_local}}, 0x1e) write$tun(r2, &(0x7f0000002240)={@val, @val, @x25}, 0x11) 20:39:23 executing program 4: io_uring_setup(0x5c3d, &(0x7f0000000040)) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000080), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000002c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x8001) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="d0000000000000000000000000000000130fcf512f3c6e1d54ba63915e718e4f444feb805ca64cbd9b7e5e18730df7728c7e2fd258f3b92cbb5a151c116a99f18817dbd1493ccd4ee5159f0f2d3728945467c7a4161fc28af1d5693643009a19b930047009a5c00e791c3fdc368298fff2770d838365acefedbaf743b68b67840c00546f6c6cb200ce92ff39234b169acd3c072de932b45fd3df766aeaf7734734bd6aa9ad8956c3ae594a353df165c0b0b79f050a2bfdc1c1980f5e2011481a734e0531bb0ced2dc800000000000000e800000000000000000000000000000029dd20bace811ba7c32fc410d7e5a146377eaf8c0c5a6807bf97a3b999889afac641949300171d2c574719a4d900d1accda43e35ab04a5ae5153483df7ca8d53c27bca2744db0c963c0094eada25ab66164e271bfe50eae34ded52540c565943c161f73c44d298866e4c9758cf480530a73453b8be71abb6aa249e4f58698935c4777cceb9dbb135069261f1e380b2a5b8efe8b97583405662c047eaed6d65af1cfe9ad520e9b4dd0e7afedadbb3fbb70b8f7f3045ffcda401baf897e98517c4475f4c819f37a6721126661da7a5edda3900000000000000500900000000000000000000000000001978a0d0d4963779a7d6e70e76f6f1e2250248229fcf3e2f3244a0451d9569e40f7c9ffe16d4caeafd422f1bcbe604ee25b7026fea279c8f422c0f48472aa2644d3f3e330cf270b8d85d621cd635b145155a42bdb3b81853c4ee383f1cc6fe714d06993924cb0521476af172db5d435d7acd76b74467aff7169f5633aaae330b1575bf0e6c9796db1d353e5480af1763031f950ee49802039c0f6cdbaa4db132bf0cbfb3a00d01b71ac15c913c3e7a7cd451a2ed071d7b583b128f1b04f34f03d5f55e050e30e6d2b4d34e972e3d59e50cc24b58719f47cd511b7270665ae3ce10fe48aceba015e9b66b54ea1f0161e80d842c9b66b5d7b69f494efa710e6c92f1581c9c239dbea7587841b9bd024bf5ecbe39af49f0d513af2a6fe701ed0474668aaf380f59c681e5bdac25521de9d9507c2fa0cda8d4040d4958cae808ee31d8586c6242c99e06793a9f567c05944c12d79602e2653ca6f6cac222cc8ed4b6504158037e4cc87774d63652b26acb302d5af3c601d83ff511e46428704b336c3a9b884538600e7226dbaf2e184bf46b8ac502cc69d59f5673c0efd7dd1aa9dea598b3962602c55a4ab6b346dc7cfa7fd7fe416ab846bc520b62ff545bca913cf89f79e7c914b4b758cffd6a41b0596652fc115c56f81434bf07285bed88801b4703fe8f2b0925b519e87341b96c8b8a0264b7061d9657bf0e55baad54a93625608a53e67618eadd48013a317a23b42582d911911f64f32067a0632e2723b267f387945998fecee48eae044b9afc507caa6e3b8756f9fec73cde5495aa69e130399dfdced7741ae62a7466006fd6e2278bea8a33b7b3de16ad193e719d02e8adc4b2a76b9819dee47dddd93919be71fab99964f7d2bc7bfabc141c54e71c4fdbaccc580a9accc33d3740002f0f753a59233d0a726cd5f0509f3523f758bbb042aac9f80ebeda8e78b3d5ddc50d8e60bf38e755674e3f558a4882f5cf0cdaee478670376536bd6704bdfdd5dab19e270c096f56be4e790bca57af03a71874bc6fdb120b7ef4ecd43169fd5ba90a05ec833adc12e3282e0cc2c486c41e8f6a9e4a97c21757141f4e71806ae6f6ebce250a7703785a03f27025f0d81c3e25ca27891ae0df20c20636a7f3b637926c8108bf2a3edf05f8e0cb2000001f6aa57ecbb60d4c93a6954cc6b53290c974960b52efb465396483af2aba2f786ed70edc69d380a786add1755b368fefd3fb74e9f7d56cfe62f05c6e2d8e0eecc5da261d32d78568d17351993d60b768396e72d1f5a057db6c25b26fd0d187900ae838fda612b18fa04c3c0adb6a8b3f8ca0fced07c21a41cbdb73fa80844276f8aa54e145b00091ebd3b317b7c9607fd4a83ad70a1ba17936393d76b278e921254526e40a62a791b48e1e5cec32a607dd1cf20ddf4634ddde7453934348f258d538c3b3e3911bee7238e5ee88567878cca19a89ea7549d82dd09ed1715ad380be41c07c0b1eaaf0ea416fb7aac8f5ed425def7e307a862c3d3518d63af6ae1c11251aec9c50c228ce0a0f1d96e5087442d8d73009ce1ac453b13dec0bd40aec3e1d1dcc31b27a074cb07c6e8c73bb69aae9fbc201ebad9139a512c495c2d6f21dfa1e2651eb5c0157fbee2a53bb3c12375fd7cc2d36bd405d095050607a3e0cfde3d854012f3e54aa4499cd55fa45ee907abf1a2532fd3bc357001a218983c9b02aa2e49bcc74c1ac64f452defe611baf1168c5dcfe496589be8f2e1173de7cd3bcc48ab2b7e7fa83d10501b4e9b9e95135bb603e2ea0b10421630fad8b68cafe36d7a2508a102deb9c4ee10bf61dd01ee2c723731c797055c1783b78d0d96e48d87b88d170e5803d638d05d52e58a95b70e0e888158d00af39ba7b820277f8955bd2abee0c8c91aa3122ec07a3f30ac51c2a066fd72dd40cf7381be05a6bcd92d142767ba090321c68d08c5e8c3ff0e329eb43d7a8b5f26250a3ec937d4bd8a8cfb4234c1ccc8cb2fbab486c89790e84897b27e67b2a3c0650dbba4a53bc5b7ddddea2823b8351e6f3551605930b088194ef2a43b69577b82ef3c4878573b4c59e5628eea5d983e994cc5b50b07856c424139ab908cad7b209d322e0eceb27f6d62f9b9c61671bd8da57cd8ec9db18eb458dba2a0a9354203640d6d23b79c4d189326173efbe40fe402c3f7938caf46bfa23df656accdc085f96cf654e6d167a72c40cd474ad654309d92f05d850ae1782af86a372e91cba7bd93f7ebf507def8155eb4a30a6428fcd95a6ad280955158868b2f222e96a05fdc46534fafcc94389d00e988bc5a00df2e6c17258d3386e2d5b2cebc478bd02bb3a42e7320dfe32a3a6f6618199a034d2074eb4896a8d36984ee49dd24809c1cad1e63e1ba58a339e761778a8a4f947166e719f53c7fe33540de7719d00d70224df61eb108049259f6020dcbebee128359c803743ef1d9dc16157139c371229fb59611e27a29651e34b6586150922d2a13426dd1dff2286cea25cd25aa1c524292bb847cdd6d9fcc39a8fea685e3d98b90396d117290a3e90a45894702b8297fe5a4dc9fd017b1e0edfbfacda2c7941fdb175cdc76a1d27e338a00b1ed93623d337eaa3e355236adc0c623e8b6d6dedc07c8d2938a8a1b3aae2931aeb2a1b63f3dd433215f3088bec2bb93d034fd50654dfd05c52ca1aac0bac432a12fb1b62862d5e924cc71b10eab52d9dd145b62190c00f713fdb686e138c2f0bef8248d9ef4d8a502c8200e909433cf12a63f23ae4b7d98932256ba65ea5e5eea57db0f180324ecc0b2159d076ca888701cf1d3fd2b13eee2a00637210e238c892b12031cb2130fd821b98ec52e4ad73df28e90dd544c5eb97352620cc0b31e1b0521072ae5b7f799a797d006570259855ab88b87a3f314b52d5576debeddd467fe0176c8b7d8b1c44cbefa894b993fd6df414176459abfd4254c69f32a898c777b1de82141f9262b8ee60f4577ed502733ab2117ba0c6b47efc4069f897376cd1df8da42d964fc9a3fc7a2ae50c5683d92be0eb8f32567cfc0a5e02afcc902409df58349d23451eca69458d701781b7d7773f243bb53337e2fade9ec07159a087edff32facf3fcec1bdcaeac3fed65fb23111166f96fab35a81978852bb365eda9469f0ff49ecd386fc69f4776c3d71b4458ba2d741a4a69f4390872ca3b64d00bfd2d879149870fb283307180744ba6232e6f2391ad6b9671052303a37827fbce9eab4debb83e0912169c596e483da85aa9926e020fbd34198add20d4ce2c2982cadad98dc2b41cb9bfbf6ce0cca9c0460084c080bb5ce0b6269b10aebcc2f357f1d1070c677d2a0d9"], 0xb08}}], 0x1, 0x0) io_uring_enter(r2, 0x1fb, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x6040, 0x0) 20:39:23 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x12}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x6}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 20:39:23 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x9, 0x1000, 0x400}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYRES16=r0, @ANYRES64=r1, @ANYBLOB="2000000000000000790800000000000000000000edffffff0000000000000000095a000010000000000000000000000095000000000000009f0c80fc3c45ceb0d7131b7cd8ca5b60afc9de73cbd3282e80553d4a3647c2edaf109eb82a8f181a79fe6c8305c90f84bdd085a8bf170b53b9cdc60bbcccdb749d778e49191e8050dab61413f15deb07dfad75d4d8243ab249cd7da3ad44bc275126cf99eb3771d1278c989520779732aa8b36131645863720a6ee9c9a5a312ec6091bcc95ec010000000000000054c00b4915b5c117e5f97bb6957f10f43bb6ddb637c8478a14aa8db1b0cca8f973f5e2347caaab9e9a1724546dac72eeb16994e63fb7b5d2ae3e259f9d31d06456d2a7d117f6a689eb0593c5f9689fb0f8e39ce4458b5ec05890287336a80358df1c31214139691293143cd941b3d373ba6e457c809595b3046c25437eb7daf4e7bd22909c6f2408394c1b30cf13a6ccf95786689128017dadef58df73282e6f811fe71f14f6cb722021597a258ffc1ecbdeacf872bbe781a5982dd9b37206d9f6dd227c8a2425eb4e02a0b2420699c5d2105b977806008931456781e7d7ff5a3348698c0fab5bf33b99e906b7dc35d7e3e0cc9b889c6da1d9aa7b118a69c3da039b014b04f42b903c09eff5bd6cfeb369f0c7f31499b2e56d597f6c7951778dc40ea16913e0282905000000000000003d8df81f9e314b843cf57b2cd09a7e0c1cca280a82d143f779e2d12d3179f6dc77fb7d5854bb1d89e4fe9b6cc9e100eb19fd312d27e8fb5f7fac40ef03bca0761001b68e06ee9f5482f42564173210ebb918aa2e469fb28bf3d2eb856508cb02eca9a00f733a9d46fe200a9cbca734c3b826a189f55eab1623741ddcbd55aaafcb41bcaaa453633e0e1317678ad302ed4aeb00b06c21085221220c3e18799dd65740dc3658a55a2b0231811b5ff8f0c839a25412850d3e9940e48969a44a652553cda62d0581cdafbe0b3e2c64ceca"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x75) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000c80)=[@text64={0x40, &(0x7f0000000c00)="c4417e6fe3400f790bb9410800000f32b9800000c00f3235004000000f300f01cf66baf80cb854c46f85ef66bafc0ced440f0dc6f36d66b834000f00d066baa100ed", 0x42}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xe3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000280)="c4e2310b0a660f38826f050fc79d00300000c4c15556b943ffffff360f011b8fc868a6ef0036660f38818b34dba25f660f3880520066b8bc000f00d00f017800", 0x40}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) 20:39:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="dbc8a60490787f00000102000000080000000000000000080000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000cd370f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3043.382624][T29484] syzkaller1: entered promiscuous mode [ 3043.388365][T29484] syzkaller1: entered allmulticast mode [ 3043.428464][ T5172] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 3043.698660][ T5172] usb 4-1: Using ep0 maxpacket: 8 20:39:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x9, 0x800, 0x9, 0x8b, 0x8, 0xffffffffffffffff}) 20:39:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x405, 0x0, 0x0, {0x80, 0x0, 0x80}}, 0x1c}}, 0x0) [ 3043.828595][ T5172] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 20:39:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000000)={@void, @val, @arp=@generic={0x0, 0x6002, 0x6, 0x0, 0x0, @empty, "", @link_local}}, 0x1e) write$tun(r2, &(0x7f0000002240)={@val, @val, @x25}, 0x11) [ 3043.875202][ T5172] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 20:39:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x40, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffffffffffffe}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x10000003, 0x0, 0x0, 0x8, 0x7d, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3043.935803][ T5172] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3043.989931][ T5172] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3044.154036][T29516] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 3044.169530][T29514] syzkaller1: entered promiscuous mode [ 3044.178544][T29514] syzkaller1: entered allmulticast mode [ 3044.207052][T29516] picdev_read: 18 callbacks suppressed [ 3044.207187][T29516] kvm: pic: non byte read [ 3044.268905][ T5172] usb 4-1: string descriptor 0 read error: -22 [ 3044.275211][ T5172] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3044.278038][T29516] pic_ioport_write: 6 callbacks suppressed [ 3044.278100][T29516] kvm: pic: level sensitive irq not supported [ 3044.294062][ T5172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3044.323554][T29516] kvm: pic: non byte read [ 3044.328977][T29516] kvm: pic: level sensitive irq not supported [ 3044.329112][T29516] kvm: pic: non byte read [ 3044.348610][T29516] kvm: pic: level sensitive irq not supported [ 3044.355359][T29516] kvm: pic: non byte read [ 3044.367596][T29516] kvm: pic: level sensitive irq not supported [ 3044.367751][T29516] kvm: pic: non byte read [ 3044.382548][T29516] kvm: pic: level sensitive irq not supported [ 3044.382643][T29516] kvm: pic: non byte read [ 3044.396799][T29516] kvm: pic: level sensitive irq not supported [ 3044.396949][T29516] kvm: pic: non byte read [ 3044.409594][T29516] kvm: pic: level sensitive irq not supported [ 3044.409745][T29516] kvm: pic: non byte read [ 3044.423391][T29516] kvm: pic: level sensitive irq not supported [ 3044.423546][T29516] kvm: pic: non byte read [ 3044.628603][ T5172] cdc_ncm 4-1:1.0: bind() failure [ 3044.639855][ T5172] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 3044.646782][ T5172] cdc_ncm 4-1:1.1: bind() failure [ 3044.683241][ T5172] usb 4-1: USB disconnect, device number 64 20:39:34 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, 0x0) 20:39:34 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x200b83, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="240000002400150deeffffff000000", @ANYRES32=0x0, @ANYBLOB="0000ffff0000000000000000"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) 20:39:34 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pipe2$watch_queue(&(0x7f0000000240), 0x80) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000340), 0x1, &(0x7f0000000380)) getpgid(0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x30f}, 0x2, r6}) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x20011, r1, 0x0) 20:39:34 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x1c, r0, 0x1, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 20:39:34 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000407f04ff7f00000000000109022400010000000009040000550300000009219c672ade220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000001040)={0x0, 0x0, 0xf, {0xf, 0x0, "afe19580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000700)={0x1, "fc"}) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 20:39:34 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x0, 0x9}, 0x20) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x82e5e9234e897d5e) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x24}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) ioctl$HIDIOCGSTRING(r0, 0x81044802, &(0x7f00000005c0)) 20:39:34 executing program 5: pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0x6, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0) lstat(&(0x7f0000001640)='./file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0x6, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0) 20:39:34 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6b) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x91020068, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x425, 0x0, 0x0, {0x0, 0x0, 0x1a, 0x0, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) 20:39:34 executing program 5: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7f, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8}}}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000b40), 0x4) [ 3054.791961][T29541] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 3054.820608][T29541] batadv5: entered promiscuous mode [ 3054.908675][T29541] batadv5: entered allmulticast mode [ 3054.919353][T29541] team0: Port device batadv5 added [ 3054.977452][T29547] macvtap1: entered allmulticast mode [ 3055.001669][T29547] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 3055.038859][T29547] team0: Device macvtap1 failed to register rx_handler [ 3055.074807][T29547] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 3055.148352][ T9378] usb 6-1: new high-speed USB device number 49 using dummy_hcd 20:39:35 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6b) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x91020068, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x425, 0x0, 0x0, {0x0, 0x0, 0x1a, 0x0, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) [ 3055.398266][ T9378] usb 6-1: Using ep0 maxpacket: 8 20:39:35 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pipe2$watch_queue(&(0x7f0000000240), 0x80) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000340), 0x1, &(0x7f0000000380)) getpgid(0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x30f}, 0x2, r6}) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x20011, r1, 0x0) 20:39:35 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x0, 0x9}, 0x20) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x82e5e9234e897d5e) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x24}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) ioctl$HIDIOCGSTRING(r0, 0x81044802, &(0x7f00000005c0)) [ 3055.520283][T29551] macvtap1: entered allmulticast mode [ 3055.526009][T29551] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 3055.545612][T27887] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 3055.555134][T27887] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 3055.565205][ T9378] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3055.580387][T29551] team0: Device macvtap1 failed to register rx_handler [ 3055.628293][T29551] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 3055.658630][ T9378] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3055.785482][T29557] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 3055.831648][T29557] batadv6: entered promiscuous mode [ 3055.839973][ T9378] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3055.849761][T29557] batadv6: entered allmulticast mode [ 3055.854737][ T9378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3055.865252][T29557] team0: Port device batadv6 added [ 3055.870930][ T9378] usb 6-1: Product: syz [ 3055.875337][ T9378] usb 6-1: Manufacturer: syz 20:39:35 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6b) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x91020068, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x425, 0x0, 0x0, {0x0, 0x0, 0x1a, 0x0, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) [ 3055.880417][ T9378] usb 6-1: SerialNumber: syz [ 3055.948977][T29549] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3056.007324][T29561] macvtap1: entered allmulticast mode [ 3056.029077][T29561] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 3056.063776][T29561] team0: Device macvtap1 failed to register rx_handler [ 3056.090273][T29561] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 3056.215091][ T9378] usb 6-1: USB disconnect, device number 49 [ 3056.499991][T27887] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 3056.509627][T27887] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled 20:39:43 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0) 20:39:43 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6b) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x91020068, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x425, 0x0, 0x0, {0x0, 0x0, 0x1a, 0x0, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) 20:39:43 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pipe2$watch_queue(&(0x7f0000000240), 0x80) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000340), 0x1, &(0x7f0000000380)) getpgid(0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x30f}, 0x2, r6}) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x20011, r1, 0x0) 20:39:43 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x0, 0x9}, 0x20) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x82e5e9234e897d5e) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x24}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) ioctl$HIDIOCGSTRING(r0, 0x81044802, &(0x7f00000005c0)) 20:39:43 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pipe2$watch_queue(&(0x7f0000000240), 0x80) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000340), 0x1, &(0x7f0000000380)) getpgid(0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x30f}, 0x2, r6}) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x20011, r1, 0x0) 20:39:43 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x39}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x0, 0x80802) r4 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) [ 3064.045176][T29576] macvtap1: entered allmulticast mode [ 3064.115874][T29576] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 3064.237383][T29576] team0: Device macvtap1 failed to register rx_handler [ 3064.276210][T29576] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 3064.522366][T29578] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 3064.533619][T29578] batadv7: entered promiscuous mode [ 3064.542076][T29578] batadv7: entered allmulticast mode [ 3064.551615][T29578] team0: Port device batadv7 added 20:39:44 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x39}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x0, 0x80802) r4 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) 20:39:44 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x39}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x0, 0x80802) r4 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) 20:39:45 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x0, 0x9}, 0x20) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x82e5e9234e897d5e) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x24}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) ioctl$HIDIOCGSTRING(r0, 0x81044802, &(0x7f00000005c0)) 20:39:45 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pipe2$watch_queue(&(0x7f0000000240), 0x80) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000340), 0x1, &(0x7f0000000380)) getpgid(0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x30f}, 0x2, r6}) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x20011, r1, 0x0) 20:39:45 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pipe2$watch_queue(&(0x7f0000000240), 0x80) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000340), 0x1, &(0x7f0000000380)) getpgid(0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x30f}, 0x2, r6}) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x20011, r1, 0x0) 20:39:45 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x39}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x0, 0x80802) r4 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) [ 3065.473433][T29596] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 3065.542647][T27887] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 3065.552100][T27887] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 3065.558761][T29596] batadv8: entered promiscuous mode [ 3065.566913][T29596] batadv8: entered allmulticast mode [ 3065.609172][T29596] team0: Port device batadv8 added [ 3066.249426][T27887] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled [ 3066.259437][T27887] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled 20:39:56 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r3, 0x585, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 20:39:56 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x39}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x0, 0x80802) r4 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) 20:39:56 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x39}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x0, 0x80802) r4 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) 20:39:56 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pipe2$watch_queue(&(0x7f0000000240), 0x80) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000340), 0x1, &(0x7f0000000380)) getpgid(0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x30f}, 0x2, r6}) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x20011, r1, 0x0) 20:39:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x5, 0x0, 0x0) 20:39:56 executing program 4: r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000, 0x7}) 20:39:56 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000240)={0x18, 0x1, 0x0, 0x0, r1}) 20:39:56 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80ffffff}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 20:39:56 executing program 3: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x203, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'macvlan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000acc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)='{', 0x1}], 0x1}}], 0x34000, 0x1000000) 20:39:56 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000240)={0x18, 0x1, 0x0, 0x0, r1}) 20:39:56 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000240)={0x18, 0x1, 0x0, 0x0, r1}) 20:39:57 executing program 0: write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) r1 = gettid() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14, 0x0, @tid=r1}, &(0x7f0000000040)=0x0) nanosleep(&(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 20:40:02 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r3, 0x585, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 20:40:02 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x39}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x0, 0x80802) r4 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) 20:40:02 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000240)={0x18, 0x1, 0x0, 0x0, r1}) 20:40:02 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) 20:40:02 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x22, &(0x7f00000000c0), 0x4) 20:40:02 executing program 0: write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) r1 = gettid() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14, 0x0, @tid=r1}, &(0x7f0000000040)=0x0) nanosleep(&(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 20:40:02 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x4000) 20:40:02 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc22e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0x8, "84"}, @main=@item_4={0x3, 0x0, 0x0, "2e4b58e9"}]}}, 0x0}, 0x0) 20:40:02 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)="3f9ebe239545703482", 0x9}], 0x1, 0x81806, 0x0) r2 = signalfd4(r1, &(0x7f0000000100)={[0x3ff]}, 0x8, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x100000000000042) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/4\x00') ioctl$TCXONC(r3, 0x5509, 0x0) syz_io_uring_setup(0x37c3, &(0x7f0000000080)={0x0, 0x7784, 0x0, 0x0, 0x2b6, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) tgkill(r4, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0a1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xd0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000580)={{0x401, 0x1}, 0x100, './file0\x00'}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x3, 0xb9c, "1dcc79dc871c727f5161ac2a8e4c000200000000000002513ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 3083.061031][T29652] loop7: detected capacity change from 0 to 1036 20:40:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) dup(0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="83c2963356c6052002929a179cbf4d77c6aa2a1e213452a6f16eba93fcbaccaa140c77", 0x23}, {&(0x7f0000000080)="5e022ba01c28fc3111b0023a78b6f00eee22193bad10a18c454049bde50cd67710652eadb8a3791c4ca6375c8a86ccc0fae20f7720c7a38617bfd3d6", 0x3c}, {&(0x7f0000000100)="73f36d78f2f6ea8d90a535fca15096f94b5982ce9e3831205f449a3750024c792b8027b98812778a96a4c077", 0x2c}], 0x3, &(0x7f0000000180), 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x58}}, {{&(0x7f0000001cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002040)=[{0x0}, {0x0}], 0x2, &(0x7f0000002840)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}], 0xa0}}], 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc60100000000a000000053582c137153e370a48018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) 20:40:03 executing program 0: write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) r1 = gettid() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14, 0x0, @tid=r1}, &(0x7f0000000040)=0x0) nanosleep(&(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) [ 3083.287918][T29662] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3083.335220][T29662] netlink: 116368 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3083.380001][T29507] usb 4-1: new high-speed USB device number 65 using dummy_hcd 20:40:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) dup(0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="83c2963356c6052002929a179cbf4d77c6aa2a1e213452a6f16eba93fcbaccaa140c77", 0x23}, {&(0x7f0000000080)="5e022ba01c28fc3111b0023a78b6f00eee22193bad10a18c454049bde50cd67710652eadb8a3791c4ca6375c8a86ccc0fae20f7720c7a38617bfd3d6", 0x3c}, {&(0x7f0000000100)="73f36d78f2f6ea8d90a535fca15096f94b5982ce9e3831205f449a3750024c792b8027b98812778a96a4c077", 0x2c}], 0x3, &(0x7f0000000180), 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x58}}, {{&(0x7f0000001cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002040)=[{0x0}, {0x0}], 0x2, &(0x7f0000002840)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}], 0xa0}}], 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc60100000000a000000053582c137153e370a48018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) [ 3083.529078][T29669] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3083.564536][T29669] netlink: 116368 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3083.798693][T29507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3083.828325][T29507] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3083.848222][T29507] usb 4-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 3083.857329][T29507] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3083.889658][T29507] usb 4-1: config 0 descriptor?? [ 3084.371327][T29507] lg-g15 0003:046D:C22E.0025: unknown main item tag 0x0 [ 3084.390334][T29507] lg-g15 0003:046D:C22E.0025: hidraw0: USB HID v0.00 Device [HID 046d:c22e] on usb-dummy_hcd.3-1/input0 [ 3084.573923][ T5172] usb 4-1: USB disconnect, device number 65 [ 3086.829947][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3086.836328][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 20:40:13 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r3, 0x585, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 20:40:13 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)="3f9ebe239545703482", 0x9}], 0x1, 0x81806, 0x0) r2 = signalfd4(r1, &(0x7f0000000100)={[0x3ff]}, 0x8, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x100000000000042) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/4\x00') ioctl$TCXONC(r3, 0x5509, 0x0) syz_io_uring_setup(0x37c3, &(0x7f0000000080)={0x0, 0x7784, 0x0, 0x0, 0x2b6, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) tgkill(r4, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0a1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xd0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000580)={{0x401, 0x1}, 0x100, './file0\x00'}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x3, 0xb9c, "1dcc79dc871c727f5161ac2a8e4c000200000000000002513ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 20:40:13 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)="3f9ebe239545703482", 0x9}], 0x1, 0x81806, 0x0) r2 = signalfd4(r1, &(0x7f0000000100)={[0x3ff]}, 0x8, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x100000000000042) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/4\x00') ioctl$TCXONC(r3, 0x5509, 0x0) syz_io_uring_setup(0x37c3, &(0x7f0000000080)={0x0, 0x7784, 0x0, 0x0, 0x2b6, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) tgkill(r4, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0a1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xd0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000580)={{0x401, 0x1}, 0x100, './file0\x00'}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x3, 0xb9c, "1dcc79dc871c727f5161ac2a8e4c000200000000000002513ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 20:40:13 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) dup(0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="83c2963356c6052002929a179cbf4d77c6aa2a1e213452a6f16eba93fcbaccaa140c77", 0x23}, {&(0x7f0000000080)="5e022ba01c28fc3111b0023a78b6f00eee22193bad10a18c454049bde50cd67710652eadb8a3791c4ca6375c8a86ccc0fae20f7720c7a38617bfd3d6", 0x3c}, {&(0x7f0000000100)="73f36d78f2f6ea8d90a535fca15096f94b5982ce9e3831205f449a3750024c792b8027b98812778a96a4c077", 0x2c}], 0x3, &(0x7f0000000180), 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x58}}, {{&(0x7f0000001cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002040)=[{0x0}, {0x0}], 0x2, &(0x7f0000002840)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}], 0xa0}}], 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc60100000000a000000053582c137153e370a48018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) 20:40:13 executing program 0: write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) r1 = gettid() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14, 0x0, @tid=r1}, &(0x7f0000000040)=0x0) nanosleep(&(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 20:40:13 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc22e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0x8, "84"}, @main=@item_4={0x3, 0x0, 0x0, "2e4b58e9"}]}}, 0x0}, 0x0) [ 3093.510849][T29686] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3093.525506][T29686] netlink: 116368 bytes leftover after parsing attributes in process `syz-executor.5'. 20:40:13 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) dup(0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="83c2963356c6052002929a179cbf4d77c6aa2a1e213452a6f16eba93fcbaccaa140c77", 0x23}, {&(0x7f0000000080)="5e022ba01c28fc3111b0023a78b6f00eee22193bad10a18c454049bde50cd67710652eadb8a3791c4ca6375c8a86ccc0fae20f7720c7a38617bfd3d6", 0x3c}, {&(0x7f0000000100)="73f36d78f2f6ea8d90a535fca15096f94b5982ce9e3831205f449a3750024c792b8027b98812778a96a4c077", 0x2c}], 0x3, &(0x7f0000000180), 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x58}}, {{&(0x7f0000001cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002040)=[{0x0}, {0x0}], 0x2, &(0x7f0000002840)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}], 0xa0}}], 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc60100000000a000000053582c137153e370a48018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) [ 3093.579715][T29679] loop7: detected capacity change from 0 to 1036 [ 3093.740155][T29694] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 3093.759163][ T9378] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 3093.775811][T29694] netlink: 116368 bytes leftover after parsing attributes in process `syz-executor.5'. 20:40:13 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)="3f9ebe239545703482", 0x9}], 0x1, 0x81806, 0x0) r2 = signalfd4(r1, &(0x7f0000000100)={[0x3ff]}, 0x8, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x100000000000042) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/4\x00') ioctl$TCXONC(r3, 0x5509, 0x0) syz_io_uring_setup(0x37c3, &(0x7f0000000080)={0x0, 0x7784, 0x0, 0x0, 0x2b6, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) tgkill(r4, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0a1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xd0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000580)={{0x401, 0x1}, 0x100, './file0\x00'}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x3, 0xb9c, "1dcc79dc871c727f5161ac2a8e4c000200000000000002513ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 20:40:13 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)="3f9ebe239545703482", 0x9}], 0x1, 0x81806, 0x0) r2 = signalfd4(r1, &(0x7f0000000100)={[0x3ff]}, 0x8, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x100000000000042) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/4\x00') ioctl$TCXONC(r3, 0x5509, 0x0) syz_io_uring_setup(0x37c3, &(0x7f0000000080)={0x0, 0x7784, 0x0, 0x0, 0x2b6, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) tgkill(r4, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0a1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xd0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000580)={{0x401, 0x1}, 0x100, './file0\x00'}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x3, 0xb9c, "1dcc79dc871c727f5161ac2a8e4c000200000000000002513ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 20:40:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)="3f9ebe239545703482", 0x9}], 0x1, 0x81806, 0x0) r2 = signalfd4(r1, &(0x7f0000000100)={[0x3ff]}, 0x8, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x100000000000042) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/4\x00') ioctl$TCXONC(r3, 0x5509, 0x0) syz_io_uring_setup(0x37c3, &(0x7f0000000080)={0x0, 0x7784, 0x0, 0x0, 0x2b6, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) tgkill(r4, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0a1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xd0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000580)={{0x401, 0x1}, 0x100, './file0\x00'}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x3, 0xb9c, "1dcc79dc871c727f5161ac2a8e4c000200000000000002513ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 20:40:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)="3f9ebe239545703482", 0x9}], 0x1, 0x81806, 0x0) r2 = signalfd4(r1, &(0x7f0000000100)={[0x3ff]}, 0x8, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x100000000000042) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/4\x00') ioctl$TCXONC(r3, 0x5509, 0x0) syz_io_uring_setup(0x37c3, &(0x7f0000000080)={0x0, 0x7784, 0x0, 0x0, 0x2b6, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) tgkill(r4, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0a1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xd0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000580)={{0x401, 0x1}, 0x100, './file0\x00'}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x3, 0xb9c, "1dcc79dc871c727f5161ac2a8e4c000200000000000002513ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 20:40:14 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)="3f9ebe239545703482", 0x9}], 0x1, 0x81806, 0x0) r2 = signalfd4(r1, &(0x7f0000000100)={[0x3ff]}, 0x8, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x100000000000042) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/4\x00') ioctl$TCXONC(r3, 0x5509, 0x0) syz_io_uring_setup(0x37c3, &(0x7f0000000080)={0x0, 0x7784, 0x0, 0x0, 0x2b6, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) tgkill(r4, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0a1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xd0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000580)={{0x401, 0x1}, 0x100, './file0\x00'}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x3, 0xb9c, "1dcc79dc871c727f5161ac2a8e4c000200000000000002513ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 3094.124536][T29706] loop7: detected capacity change from 0 to 1036 [ 3094.139978][ T9378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3094.155845][ T9378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3094.212275][ T9378] usb 4-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 3094.238817][ T9378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3094.266211][ T9378] usb 4-1: config 0 descriptor?? [ 3094.761408][ T9378] lg-g15 0003:046D:C22E.0026: unknown main item tag 0x0 [ 3094.770884][ T9378] lg-g15 0003:046D:C22E.0026: hidraw0: USB HID v0.00 Device [HID 046d:c22e] on usb-dummy_hcd.3-1/input0 [ 3094.977616][ T9378] usb 4-1: USB disconnect, device number 66 20:40:20 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r3, 0x585, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 20:40:20 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)="3f9ebe239545703482", 0x9}], 0x1, 0x81806, 0x0) r2 = signalfd4(r1, &(0x7f0000000100)={[0x3ff]}, 0x8, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x100000000000042) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/4\x00') ioctl$TCXONC(r3, 0x5509, 0x0) syz_io_uring_setup(0x37c3, &(0x7f0000000080)={0x0, 0x7784, 0x0, 0x0, 0x2b6, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) tgkill(r4, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0a1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xd0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000580)={{0x401, 0x1}, 0x100, './file0\x00'}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x3, 0xb9c, "1dcc79dc871c727f5161ac2a8e4c000200000000000002513ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 20:40:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)="3f9ebe239545703482", 0x9}], 0x1, 0x81806, 0x0) r2 = signalfd4(r1, &(0x7f0000000100)={[0x3ff]}, 0x8, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x100000000000042) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/4\x00') ioctl$TCXONC(r3, 0x5509, 0x0) syz_io_uring_setup(0x37c3, &(0x7f0000000080)={0x0, 0x7784, 0x0, 0x0, 0x2b6, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) tgkill(r4, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0a1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xd0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000580)={{0x401, 0x1}, 0x100, './file0\x00'}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x3, 0xb9c, "1dcc79dc871c727f5161ac2a8e4c000200000000000002513ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 20:40:20 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)="3f9ebe239545703482", 0x9}], 0x1, 0x81806, 0x0) r2 = signalfd4(r1, &(0x7f0000000100)={[0x3ff]}, 0x8, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x100000000000042) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/4\x00') ioctl$TCXONC(r3, 0x5509, 0x0) syz_io_uring_setup(0x37c3, &(0x7f0000000080)={0x0, 0x7784, 0x0, 0x0, 0x2b6, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) tgkill(r4, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0a1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xd0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000580)={{0x401, 0x1}, 0x100, './file0\x00'}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x3, 0xb9c, "1dcc79dc871c727f5161ac2a8e4c000200000000000002513ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 20:40:20 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)="3f9ebe239545703482", 0x9}], 0x1, 0x81806, 0x0) r2 = signalfd4(r1, &(0x7f0000000100)={[0x3ff]}, 0x8, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x100000000000042) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/4\x00') ioctl$TCXONC(r3, 0x5509, 0x0) syz_io_uring_setup(0x37c3, &(0x7f0000000080)={0x0, 0x7784, 0x0, 0x0, 0x2b6, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) tgkill(r4, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0a1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xd0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000580)={{0x401, 0x1}, 0x100, './file0\x00'}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x3, 0xb9c, "1dcc79dc871c727f5161ac2a8e4c000200000000000002513ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 20:40:20 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc22e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0x8, "84"}, @main=@item_4={0x3, 0x0, 0x0, "2e4b58e9"}]}}, 0x0}, 0x0) [ 3100.090263][T29719] loop7: detected capacity change from 0 to 1036 20:40:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0) [ 3100.378637][ T9378] usb 4-1: new high-speed USB device number 67 using dummy_hcd 20:40:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="1bf81bb9eb"], 0x20000600}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) 20:40:20 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mlock(&(0x7f0000183000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x9) [ 3100.561384][T29740] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 20:40:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000ac0)="2806eba4c1b338ff7c68ced5317695f4f50b9ffd906a77", 0x17}, {&(0x7f0000000b00)="aa3eb4ba6c64d53a443604f95793367cd2f2e4751855f0292e47e4ea644afe61af", 0x21}], 0x2}}], 0x1, 0x0) 20:40:20 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040), 0x50eca7f6e65685f) [ 3100.609247][T29719] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3100.624516][T29719] Buffer I/O error on dev loop7, logical block 1, async page read [ 3100.640701][T29740] 8021q: adding VLAN 0 to HW filter on device bond4 [ 3100.739103][ T9378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3100.757173][ T9378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3100.768600][T29719] Dev loop7: unable to read RDB block 8 [ 3100.774862][ T9378] usb 4-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 3100.784992][ T9378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:40:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x7f, 0x3ffdcf, 0xf60}, 0x48) [ 3100.821031][ T9378] usb 4-1: config 0 descriptor?? [ 3100.834351][T29719] loop7: unable to read partition table [ 3100.878872][T29744] bond4: (slave ip6gretap1): making interface the new active one [ 3100.888369][T29719] loop7: partition table beyond EOD, truncated [ 3100.923104][T29744] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 3100.955601][T25045] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 3100.963356][T29719] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 3101.329185][ T9378] lg-g15 0003:046D:C22E.0027: unknown main item tag 0x0 [ 3101.353197][ T9378] lg-g15 0003:046D:C22E.0027: hidraw0: USB HID v0.00 Device [HID 046d:c22e] on usb-dummy_hcd.3-1/input0 [ 3101.558831][ T9378] usb 4-1: USB disconnect, device number 67 20:40:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)="3f9ebe239545703482", 0x9}], 0x1, 0x81806, 0x0) r2 = signalfd4(r1, &(0x7f0000000100)={[0x3ff]}, 0x8, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x100000000000042) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/4\x00') ioctl$TCXONC(r3, 0x5509, 0x0) syz_io_uring_setup(0x37c3, &(0x7f0000000080)={0x0, 0x7784, 0x0, 0x0, 0x2b6, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) tgkill(r4, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0a1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xd0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000580)={{0x401, 0x1}, 0x100, './file0\x00'}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x3, 0xb9c, "1dcc79dc871c727f5161ac2a8e4c000200000000000002513ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 20:40:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="1bf81bb9eb"], 0x20000600}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) 20:40:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x7f, 0x3ffdcf, 0xf60}, 0x48) 20:40:30 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mlock(&(0x7f0000183000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x9) 20:40:30 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc22e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0x8, "84"}, @main=@item_4={0x3, 0x0, 0x0, "2e4b58e9"}]}}, 0x0}, 0x0) 20:40:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="1bf81bb9eb"], 0x20000600}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) [ 3110.581747][T29765] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 3110.591078][T29763] loop7: detected capacity change from 0 to 1036 [ 3110.664775][T29765] 8021q: adding VLAN 0 to HW filter on device bond5 20:40:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x7f, 0x3ffdcf, 0xf60}, 0x48) [ 3110.807743][T29770] bond5: (slave ip6gretap2): making interface the new active one [ 3110.838949][T25045] usb 4-1: new high-speed USB device number 68 using dummy_hcd 20:40:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x7f, 0x3ffdcf, 0xf60}, 0x48) [ 3110.917913][T29770] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 3110.948712][T28791] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready 20:40:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="1bf81bb9eb"], 0x20000600}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) [ 3111.159905][T29763] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3111.192103][T29763] Buffer I/O error on dev loop7, logical block 0, async page read [ 3111.208647][T25045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3111.220734][T29763] ldm_validate_partition_table(): Disk read failed. [ 3111.227653][T29780] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 3111.233468][T25045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 20:40:31 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000800)={0x41, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000800)={0x41, 0x0, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000004c0)={&(0x7f00000001c0), 0x10, &(0x7f0000000440)=[{&(0x7f0000000240)='7', 0x1}], 0x300}, 0x0) [ 3111.257174][T29763] Dev loop7: unable to read RDB block 0 [ 3111.278511][T29763] loop7: unable to read partition table [ 3111.288842][T29763] loop7: partition table beyond EOD, truncated [ 3111.302097][T25045] usb 4-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 3111.318935][T29763] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 3111.360607][T25045] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:40:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 3111.434544][T29780] 8021q: adding VLAN 0 to HW filter on device bond6 [ 3111.450954][T25045] usb 4-1: config 0 descriptor?? 20:40:31 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) [ 3111.577682][T29782] bond6: (slave ip6gretap3): making interface the new active one 20:40:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}]}, 0x58}}, 0x0) [ 3111.661119][T29782] bond6: (slave ip6gretap3): Enslaving as an active interface with an up link [ 3111.693129][ T9378] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready 20:40:31 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 20:40:31 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) io_setup(0x5ff, &(0x7f0000000040)=0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="100000000100"/16, 0x10}]) 20:40:31 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mlock(&(0x7f0000183000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x9) [ 3111.975025][T25045] lg-g15 0003:046D:C22E.0028: unknown main item tag 0x0 [ 3111.993757][T25045] lg-g15 0003:046D:C22E.0028: hidraw0: USB HID v0.00 Device [HID 046d:c22e] on usb-dummy_hcd.3-1/input0 [ 3112.209054][T25045] usb 4-1: USB disconnect, device number 68 20:40:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) [ 3118.906445][T29805] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3118.933935][T29805] 8021q: adding VLAN 0 to HW filter on device bond5 [ 3118.974131][T29805] bond5: (slave ip6gretap1): making interface the new active one [ 3118.984873][T29805] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 3118.995734][T25045] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready 20:40:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="1bf81bb9eb"], 0x20000600}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) 20:40:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="1bf81bb9eb"], 0x20000600}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) 20:40:40 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mlock(&(0x7f0000183000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x9) 20:40:40 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000002c0)) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socket$packet(0x11, 0x0, 0x300) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000300)={"3bb0d1950917cfa28ec7cf9cf8f987c3a55e60df932b4ee045accb435aed5cba"}) ftruncate(0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_open_procfs(0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x10, 0x4004, @fd_index, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000540)="ce60dd68ac5ab5c31e677b3f67721541e0110220074635e88355aa7504e19f747aee172546988afcd75bb9a9d4ba498a7f89f40eb34b208a470cc9893b93d15027711d3c099879c31685dc31d83f36797e", 0xfffffffffffffef2}, {&(0x7f0000000600)="d90ceccf708f68e23eba0b6b2293df28fdb43f9f25b85d7d79d79897ca3212f93ea01477e0", 0x25}, {&(0x7f0000000640)="2046eb1062e0662489f463cc87aade26253eebda627068ec14f0fd4250eca8c48a299cb0e839823ce4eded1d6e70312ff7dbd8e267809642c7127d4c50ee97f699adbf84f75cd1e3f9ef6e428ffb5fbf7eb75b566c27300eda8c662ca41db4fabfbb4472c1ede9245e735d8f5a4cc53f14ac03fa59188b9aed953276cb02ac2e19d8992d5522a2905041681d9d9f73b1a99237eb827c27341645fd8c6881b33c4dcb6254dd56e71bf1fcce207efbb97bdf3e03c1831c0dec22b7ce5a5fbd2d28b868ee3624f09d85c9884e1292cb3e8ad78044edf310a851d1d0307c97481e1c", 0xe0}, {&(0x7f0000000400)="76a34667fe1ec2a47c40bbc49c7e987231f8b5ca23261446a93ca707449d3c87160d68bd5d2c42a185d0b5fb0dce5c025253abfab360887746d82890962f3e23f027403053f92745fe7adc5a38cacc0b5943db813769e50b9fcf532de5a2d02519180dc7310986437958f0d23c5900226bfa07afe31df6b469a790f50dbf24bcacc63c2cd936", 0x86}, {&(0x7f0000000880)="6b5888ce9bb895d0610a036582482ea0c07af7df7bbb412cf12c16b5ba777b7fa6fad4d8c739af96ffbcd63b864ea9720a6cc6234bca29d7765d4a9fab872f4a65c20167fa3b7679b6a2c8848b10385f8334729bf77ffb884eabd1224b997a0cd8c4a9a626d071e5c027dba639bc0a008f7cee653e5d4bb8ea59488181c5a2dc48886540cbaaffc7a98291d061a844ac44f02528f2b409e0a0837833082e32", 0x9f}, {&(0x7f0000000940)="c94ed581adce6a3aadf3155fd0cc82924b2abb894017c9a50d10692b3afc47580bf9d76426bd5e88c85700af263be902004906518bdfb60e4bc7591a7ce49571102fac8165325243a5461413693c579c8ce181dd0658782e90fc09a99ae4aa9d0a65f7b2814dc00864de7fa74eae5bf2fc79e1dc5fc23154b05eb4309a34bc121579f632dbfdb5194a882698ba5e3033cae09a6fb21f19ca1ea5e2b47163f37d15768adb787e9b9b94505d190a07e330a229b0ab102cc7aa8779fc23bd65f1ceaeb41b", 0xc3}, {&(0x7f0000000800)="9b05dab0d1ff107c274b13de02954cd95962323723a85fc66058a51c2372b1a2ab12d7044d0c3e197fc0413dcbc50d77c62d0c4c0e700cf4", 0x38}, {0x0}, {&(0x7f0000000a40)="d424d677cc3d6266c59858f34e22ae3a0f196cf420a06a424d2a7f4a42ffa72cd9eedaa734f19ec1bc9000acea93ad753c2a7dec1ff534004c36542910be230e6c6679d1ca7026080b4265c8a6ee4fd31bab462a34c2281cfe5745a99a2614d6eda9f870f46239d57a43299a5998992bc23042b68a3dab23c0cbbb575f306ef9531d469eb9c5a7e1e66b197c2033d4ffb6519f24d4983423548681f34baaf63323d887a8bc1c4a", 0xa7}], 0x9, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1e00) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 20:40:40 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 20:40:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) 20:40:40 executing program 3: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5967f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 3120.110135][T29810] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 20:40:40 executing program 0: io_uring_setup(0x5c3d, &(0x7f0000000040)) syz_open_dev$sndctrl(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f00000002c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0xb08}}], 0x1, 0x0) io_uring_enter(r0, 0x1fb, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x6040, 0x0) 20:40:40 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = epoll_create1(0x0) socket(0x1, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000300)={r6, 0x1, 0x0, 0x40f}) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000980)={0x1f, @fixed, 0x4}, 0xa) io_uring_enter(r8, 0x74d, 0x1210, 0x14, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000800)={'syz_tun\x00', 0x20}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r9 = syz_clone(0x8014000, &(0x7f0000000440)="2a43d729c0fc437802f5ab1e4348af73f09e2a7c314e8c6c3e5c3aa9d21c21ac574603b93387717e12b410da1b991a8cce1f407d477004022418a11c662b567cffc274bc2bd1e3909683853e3574e515474b7e5f3327311a9b83e113d04e770cabd548f1af9d4d52d92c70267b73b171e159f8ed556a37a584f11b9c18d42475943cb742db749adb4faba8a398befa374b4b669f5a7680e7bf35d117c909b83f6df6b85c8a97b44adc08c3004db49fba72d58c2cc17b30a9aa2c7240eb46f2b877c3bf83e0bdbc4c2ee5a41509e4a00ae20ab0e85388d7a57963", 0xda, &(0x7f00000003c0), &(0x7f0000000540), &(0x7f0000000580)="ac0baae0ec47da85a1c64d5917dfe9c965430f3fa691aa65988a534011281e2cf96895e5eddb30b5db33bee98ba8bc2f2a65279d2332d9504436cf9bd6aeb420b05a0c94de0d6614108b8fa1f55db961e27ab2c9d598509d23c283694d002ba1c6ce80d1eb515a49ced288dc251b12d0eae3d281ef7aa5c599dbc13b60eb0cbdd6d21fd5e7e12071bdae576701f0033eb68572527f76765b2023041442b8a8b0009523165e1f1656b3b8effd291e5d7af00d6888fd966b4f5df75fb1c171ddc62234b73ecdf6a714efddc3f36d6a4196356d34adc44daee2230b7a126e8c8e850912") r10 = memfd_create(&(0x7f0000000680)='{.@\x00', 0x4) kcmp$KCMP_EPOLL_TFD(r7, r9, 0x7, r10, &(0x7f00000006c0)={0xffffffffffffffff, r5, 0x1000}) syz_open_procfs(r7, &(0x7f0000000180)='net/ip_vs_stats_percpu\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$nl_route(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="201600001e00100026bd700afbdb07000000", @ANYRES32=0x0, @ANYBLOB="0800000082380000"], 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4008) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x0, @private=0xa010100}, 0x4, 0x0, 0x0, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) [ 3120.361218][T29810] 8021q: adding VLAN 0 to HW filter on device bond7 [ 3120.509593][T29820] bond7: (slave ip6gretap4): making interface the new active one [ 3120.602188][T29820] bond7: (slave ip6gretap4): Enslaving as an active interface with an up link [ 3120.654292][T29822] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 20:40:40 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) chdir(&(0x7f0000004340)='./file0\x00') ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000066c0)={0x50, 0x0, r1, {0x7, 0x21}}, 0x50) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f00000063c0)={0x10, 0x0, r2}, 0x10) 20:40:40 executing program 0: io_uring_setup(0x5c3d, &(0x7f0000000040)) syz_open_dev$sndctrl(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f00000002c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0xb08}}], 0x1, 0x0) io_uring_enter(r0, 0x1fb, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x6040, 0x0) [ 3120.778557][T29822] 8021q: adding VLAN 0 to HW filter on device bond6 [ 3120.854347][T29828] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 3120.870198][T29828] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 3120.891434][T29828] bond6: (slave wireguard0): making interface the new active one [ 3120.902653][T29828] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 3121.021982][T29830] bond6 (unregistering): (slave wireguard0): Releasing backup interface [ 3121.053226][T29830] bond6 (unregistering): Released all slaves [ 3121.100682][T29507] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready 20:40:41 executing program 3: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5967f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 3121.275357][T29848] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3121.323795][T29848] 8021q: adding VLAN 0 to HW filter on device bond6 [ 3121.365149][T29850] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 3121.429106][T29850] bond6: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 3121.447895][T29850] bond6: (slave wireguard1): making interface the new active one [ 3121.462001][T29850] bond6: (slave wireguard1): Enslaving as an active interface with an up link [ 3121.507696][T29848] bond6 (unregistering): (slave wireguard1): Releasing backup interface [ 3121.540160][T29848] bond6 (unregistering): Released all slaves [ 3128.522870][T29854] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3128.551285][T29854] 8021q: adding VLAN 0 to HW filter on device bond6 [ 3128.588013][T29854] bond6: (slave ip6gretap2): making interface the new active one [ 3128.599599][T29854] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 3128.609007][T28791] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready 20:40:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="1bf81bb9eb"], 0x20000600}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) 20:40:48 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="85dd25fe05e8"}, 0x7, &(0x7f00000002c0)=[{&(0x7f0000000140)="dd1d4d348677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 20:40:48 executing program 0: io_uring_setup(0x5c3d, &(0x7f0000000040)) syz_open_dev$sndctrl(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f00000002c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0xb08}}], 0x1, 0x0) io_uring_enter(r0, 0x1fb, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x6040, 0x0) 20:40:48 executing program 3: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5967f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 20:40:48 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @local}, {0xa, 0x0, 0x0, @private1}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) 20:40:48 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) chdir(&(0x7f0000004340)='./file0\x00') ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000066c0)={0x50, 0x0, r1, {0x7, 0x21}}, 0x50) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f00000063c0)={0x10, 0x0, r2}, 0x10) 20:40:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x84}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_FLAGS={0x8}]}, 0x20}}, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="9d3a3d962ab2363c96b024b8198b0960d9cd8f221402d7455098a76f228db115894938402f19d98415f1f2932496b5e97f42882605ce2281e90d838baea903c80ea1809bde88144025d323ccd4f6a7a6747070de77943a512e32fca686e91ee0a7f2d1a3eed17ccbef17f8e2c3232df8792b2a2d497dbbb67973b95d0dd034be08de414c3aa13c78ec016bad0643d78881e77eb12aa75a5470005bb0d50b9336c34f8d735cfbbae71ad9a7b2609b41f6") shmctl$IPC_SET(r2, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000004440)) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in, @in6=@initdev}}, {{@in=@multicast1}, 0x0, @in=@private}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x8005}, 0x40800) statx(0xffffffffffffff9c, &(0x7f0000004480)='./file0\x00', 0x100, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)='([', 0x2}, {0x0}], 0x2, 0x0, 0x0, 0x10}}, {{&(0x7f00000014c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a00)=[{0x0}], 0x1}}, {{&(0x7f0000001d40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001e80), 0x0, 0x0, 0x0, 0x40840}}, {{&(0x7f0000002100)=@abs, 0x6e, &(0x7f0000002200)=[{0x0}], 0x1, &(0x7f0000002280)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x90, 0x90}}, {{&(0x7f0000002380)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x60}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000003ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004100)=[{0x0}], 0x1, &(0x7f00000045c0)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0xc0, 0x4040}}, {{&(0x7f0000004700)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8010}}], 0x8, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003c000b05d25a806f8c6394f90124fc60100000000a000000053582c137153e370a48018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 20:40:48 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000000)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) [ 3128.849169][T29864] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3128.938576][T29864] 8021q: adding VLAN 0 to HW filter on device bond6 [ 3128.973406][T29869] bond6: (slave wireguard2): The slave device specified does not support setting the MAC address 20:40:49 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff8000/0x3000)=nil, 0x1000, 0x0, 0x13, r0, 0x82000000) [ 3129.001749][T29869] bond6: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 3129.025831][T29875] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 20:40:49 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x10000001}) [ 3129.087605][T29875] netlink: 194480 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3129.104466][T29869] bond6: (slave wireguard2): making interface the new active one 20:40:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg(r1, &(0x7f0000007a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[{0x18, 0x117, 0x2, "04"}], 0x18}}], 0x2, 0x0) [ 3129.141672][T29869] bond6: (slave wireguard2): Enslaving as an active interface with an up link 20:40:49 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) [ 3129.232610][T29864] bond6 (unregistering): (slave wireguard2): Releasing backup interface [ 3129.296858][T29864] bond6 (unregistering): Released all slaves [ 3135.208376][T29891] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3135.217436][T29891] bond7 (uninitialized): Released all slaves 20:40:56 executing program 0: io_uring_setup(0x5c3d, &(0x7f0000000040)) syz_open_dev$sndctrl(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f00000002c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="d0000000000000000000000000000000130fcf512f3c6e1d54ba63915e718e4f444feb805ca64cbd9b7e5e18730df7728c7e2fd258f3b92cbb5a151c116a99f18817dbd1493ccd4ee5159f0f2d3728945467c7a4161fc28af1d5693643009a19b930047009a5c00e791c3fdc368298fff2770d838365acefedbaf743b68b67840c00546f6c6cb200ce92ff39234b169acd3c072de932b45fd3df766aeaf7734734bd6aa9ad8956c3ae594a353df165c0b0b79f050a2bfdc1c1980f5e2011481a734e0531bb0ced2dc800000000000000e800000000000000000000000000000029dd20bace811ba7c32fc410d7e5a146377eaf8c0c5a6807bf97a3b999889afac641949300171d2c574719a4d900d1accda43e35ab04a5ae5153483df7ca8d53c27bca2744db0c963c0094eada25ab66164e271bfe50eae34ded52540c565943c161f73c44d298866e4c9758cf480530a73453b8be71abb6aa249e4f58698935c4777cceb9dbb135069261f1e380b2a5b8efe8b97583405662c047eaed6d65af1cfe9ad520e9b4dd0e7afedadbb3fbb70b8f7f3045ffcda401baf897e98517c4475f4c819f37a6721126661da7a5edda3900000000000000500900000000000000000000000000001978a0d0d4963779a7d6e70e76f6f1e2250248229fcf3e2f3244a0451d9569e40f7c9ffe16d4caeafd422f1bcbe604ee25b7026fea279c8f422c0f48472aa2644d3f3e330cf270b8d85d621cd635b145155a42bdb3b81853c4ee383f1cc6fe714d06993924cb0521476af172db5d435d7acd76b74467aff7169f5633aaae330b1575bf0e6c9796db1d353e5480af1763031f950ee49802039c0f6cdbaa4db132bf0cbfb3a00d01b71ac15c913c3e7a7cd451a2ed071d7b583b128f1b04f34f03d5f55e050e30e6d2b4d34e972e3d59e50cc24b58719f47cd511b7270665ae3ce10fe48aceba015e9b66b54ea1f0161e80d842c9b66b5d7b69f494efa710e6c92f1581c9c239dbea7587841b9bd024bf5ecbe39af49f0d513af2a6fe701ed0474668aaf380f59c681e5bdac25521de9d9507c2fa0cda8d4040d4958cae808ee31d8586c6242c99e06793a9f567c05944c12d79602e2653ca6f6cac222cc8ed4b6504158037e4cc87774d63652b26acb302d5af3c601d83ff511e46428704b336c3a9b884538600e7226dbaf2e184bf46b8ac502cc69d59f5673c0efd7dd1aa9dea598b3962602c55a4ab6b346dc7cfa7fd7fe416ab846bc520b62ff545bca913cf89f79e7c914b4b758cffd6a41b0596652fc115c56f81434bf07285bed88801b4703fe8f2b0925b519e87341b96c8b8a0264b7061d9657bf0e55baad54a93625608a53e67618eadd48013a317a23b42582d911911f64f32067a0632e2723b267f387945998fecee48eae044b9afc507caa6e3b8756f9fec73cde5495aa69e130399dfdced7741ae62a7466006fd6e2278bea8a33b7b3de16ad193e719d02e8adc4b2a76b9819dee47dddd93919be71fab99964f7d2bc7bfabc141c54e71c4fdbaccc580a9accc33d3740002f0f753a59233d0a726cd5f0509f3523f758bbb042aac9f80ebeda8e78b3d5ddc50d8e60bf38e755674e3f558a4882f5cf0cdaee478670376536bd6704bdfdd5dab19e270c096f56be4e790bca57af03a71874bc6fdb120b7ef4ecd43169fd5ba90a05ec833adc12e3282e0cc2c486c41e8f6a9e4a97c21757141f4e71806ae6f6ebce250a7703785a03f27025f0d81c3e25ca27891ae0df20c20636a7f3b637926c8108bf2a3edf05f8e0cb2000001f6aa57ecbb60d4c93a6954cc6b53290c974960b52efb465396483af2aba2f786ed70edc69d380a786add1755b368fefd3fb74e9f7d56cfe62f05c6e2d8e0eecc5da261d32d78568d17351993d60b768396e72d1f5a057db6c25b26fd0d187900ae838fda612b18fa04c3c0adb6a8b3f8ca0fced07c21a41cbdb73fa80844276f8aa54e145b00091ebd3b317b7c9607fd4a83ad70a1ba17936393d76b278e921254526e40a62a791b48e1e5cec32a607dd1cf20ddf4634ddde7453934348f258d538c3b3e3911bee7238e5ee88567878cca19a89ea7549d82dd09ed1715ad380be41c07c0b1eaaf0ea416fb7aac8f5ed425def7e307a862c3d3518d63af6ae1c11251aec9c50c228ce0a0f1d96e5087442d8d73009ce1ac453b13dec0bd40aec3e1d1dcc31b27a074cb07c6e8c73bb69aae9fbc201ebad9139a512c495c2d6f21dfa1e2651eb5c0157fbee2a53bb3c12375fd7cc2d36bd405d095050607a3e0cfde3d854012f3e54aa4499cd55fa45ee907abf1a2532fd3bc357001a218983c9b02aa2e49bcc74c1ac64f452defe611baf1168c5dcfe496589be8f2e1173de7cd3bcc48ab2b7e7fa83d10501b4e9b9e95135bb603e2ea0b10421630fad8b68cafe36d7a2508a102deb9c4ee10bf61dd01ee2c723731c797055c1783b78d0d96e48d87b88d170e5803d638d05d52e58a95b70e0e888158d00af39ba7b820277f8955bd2abee0c8c91aa3122ec07a3f30ac51c2a066fd72dd40cf7381be05a6bcd92d142767ba090321c68d08c5e8c3ff0e329eb43d7a8b5f26250a3ec937d4bd8a8cfb4234c1ccc8cb2fbab486c89790e84897b27e67b2a3c0650dbba4a53bc5b7ddddea2823b8351e6f3551605930b088194ef2a43b69577b82ef3c4878573b4c59e5628eea5d983e994cc5b50b07856c424139ab908cad7b209d322e0eceb27f6d62f9b9c61671bd8da57cd8ec9db18eb458dba2a0a9354203640d6d23b79c4d189326173efbe40fe402c3f7938caf46bfa23df656accdc085f96cf654e6d167a72c40cd474ad654309d92f05d850ae1782af86a372e91cba7bd93f7ebf507def8155eb4a30a6428fcd95a6ad280955158868b2f222e96a05fdc46534fafcc94389d00e988bc5a00df2e6c17258d3386e2d5b2cebc478bd02bb3a42e7320dfe32a3a6f6618199a034d2074eb4896a8d36984ee49dd24809c1cad1e63e1ba58a339e761778a8a4f947166e719f53c7fe33540de7719d00d70224df61eb108049259f6020dcbebee128359c803743ef1d9dc16157139c371229fb59611e27a29651e34b6586150922d2a13426dd1dff2286cea25cd25aa1c524292bb847cdd6d9fcc39a8fea685e3d98b90396d117290a3e90a45894702b8297fe5a4dc9fd017b1e0edfbfacda2c7941fdb175cdc76a1d27e338a00b1ed93623d337eaa3e355236adc0c623e8b6d6dedc07c8d2938a8a1b3aae2931aeb2a1b63f3dd433215f3088bec2bb93d034fd50654dfd05c52ca1aac0bac432a12fb1b62862d5e924cc71b10eab52d9dd145b62190c00f713fdb686e138c2f0bef8248d9ef4d8a502c8200e909433cf12a63f23ae4b7d98932256ba65ea5e5eea57db0f180324ecc0b2159d076ca888701cf1d3fd2b13eee2a00637210e238c892b12031cb2130fd821b98ec52e4ad73df28e90dd544c5eb97352620cc0b31e1b0521072ae5b7f799a797d006570259855ab88b87a3f314b52d5576debeddd467fe0176c8b7d8b1c44cbefa894b993fd6df414176459abfd4254c69f32a898c777b1de82141f9262b8ee60f4577ed502733ab2117ba0c6b47efc4069f897376cd1df8da42d964fc9a3fc7a2ae50c5683d92be0eb8f32567cfc0a5e02afcc902409df58349d23451eca69458d701781b7d7773f243bb53337e2fade9ec07159a087edff32facf3fcec1bdcaeac3fed65fb23111166f96fab35a81978852bb365eda9469f0ff49ecd386fc69f4776c3d71b4458ba2d741a4a69f4390872ca3b64d00bfd2d879149870fb283307180744ba6232e6f2391ad6b9671052303a37827fbce9eab4debb83e0912169c596e483da85aa9926e020fbd34198add20d4ce2c2982cadad98dc2b41cb9bfbf6ce0cca9c0460084c080bb5ce0b6269b10aebcc2f357f1d1070c677d2a0d9"], 0xb08}}], 0x1, 0x0) io_uring_enter(r0, 0x1fb, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x6040, 0x0) 20:40:56 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007e, 0x0) 20:40:56 executing program 2: syz_usbip_server_init(0x5) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$incfs(0xffffffffffffffff, 0x0, 0x185000, 0x24) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, 0x0) socket$packet(0x11, 0x3, 0x300) getpeername$packet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) 20:40:56 executing program 3: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5967f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 20:40:56 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) chdir(&(0x7f0000004340)='./file0\x00') ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000066c0)={0x50, 0x0, r1, {0x7, 0x21}}, 0x50) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f00000063c0)={0x10, 0x0, r2}, 0x10) [ 3136.329602][T29903] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 20:40:56 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007e, 0x0) 20:40:56 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007e, 0x0) [ 3136.410709][T29906] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 3136.417993][T29906] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) 20:40:56 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007e, 0x0) [ 3136.522819][T29906] vhci_hcd vhci_hcd.0: Device attached [ 3136.532641][T29903] 8021q: adding VLAN 0 to HW filter on device bond6 [ 3136.562989][T29907] vhci_hcd: connection closed [ 3136.569456][T27857] vhci_hcd: stop threads [ 3136.609639][T27857] vhci_hcd: release socket 20:40:56 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007e, 0x0) [ 3136.642823][T27857] vhci_hcd: disconnect device [ 3136.650690][T29908] bond6: (slave wireguard3): The slave device specified does not support setting the MAC address [ 3136.675436][T29908] bond6: (slave wireguard3): Setting fail_over_mac to active for active-backup mode [ 3136.695862][T29908] bond6: (slave wireguard3): making interface the new active one [ 3136.707192][T29908] bond6: (slave wireguard3): Enslaving as an active interface with an up link 20:40:56 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x44) write$dsp(r0, &(0x7f0000000280)=';', 0x1) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)=0x8dace91) 20:40:56 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059965240450c3e61887c000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000003280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f00000027c0)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0}) [ 3136.801304][T29915] bond6 (unregistering): (slave wireguard3): Releasing backup interface [ 3136.862835][T29915] bond6 (unregistering): Released all slaves 20:40:56 executing program 0: sendto$l2tp(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) 20:40:56 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f00000000c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/232, &(0x7f0000000500)=""/73, &(0x7f00000002c0)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)) 20:40:57 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000080)={0x0, [[0xfffffffe], [0x8001], [0x2]], '\x00', [], '\x00', 0xffff}) 20:40:57 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0x40095505, 0x20000000) 20:40:57 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) chdir(&(0x7f0000004340)='./file0\x00') ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000066c0)={0x50, 0x0, r1, {0x7, 0x21}}, 0x50) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f00000063c0)={0x10, 0x0, r2}, 0x10) 20:40:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2261, 0x0) write$binfmt_aout(r0, &(0x7f0000000c80)=ANY=[], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "000016000000000000000000000000000400"}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffa, 0x0, "000000e4000000004f54a2bda0c941e200"}) [ 3137.178512][T28791] usb 5-1: new high-speed USB device number 97 using dummy_hcd 20:40:57 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090247000101000000090400000002060000052406"], 0x0) [ 3137.558917][T28791] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=7c.88 [ 3137.572674][T28791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3137.606903][T28791] usb 5-1: config 0 descriptor?? [ 3137.608432][ T5172] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 3137.678773][T28791] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 3137.979485][ T5172] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3138.148430][ T5172] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3138.158497][ T5172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3138.166671][ T5172] usb 3-1: Product: syz [ 3138.171171][ T5172] usb 3-1: Manufacturer: syz [ 3138.175977][ T5172] usb 3-1: SerialNumber: syz [ 3138.230598][ T5172] usb 3-1: bad CDC descriptors [ 3138.444439][T25045] usb 3-1: USB disconnect, device number 53 [ 3138.758686][T28791] gspca_sonixj: reg_w1 err -71 [ 3138.818974][T28791] sonixj: probe of 5-1:0.0 failed with error -71 [ 3138.835850][T28791] usb 5-1: USB disconnect, device number 97 20:41:06 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007e, 0x0) 20:41:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x0, 0x1}) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x703, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x34000600}}}}]}, 0x78}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) 20:41:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x3, 0x0, &(0x7f0000000040)) 20:41:06 executing program 5: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) openat$null(0xffffff9c, 0x0, 0x94000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x8000000803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x80000000}, 0x0, &(0x7f0000000380)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) unshare(0x0) timer_create(0x3, 0x0, &(0x7f0000000040)) unshare(0x0) unshare(0x60020200) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x0, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x3f, 0x5, 0x0, 0x0, 0x2, 0x14}, [@FRA_SRC={0x8, 0x2, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x60000001}, 0x80) unshare(0x28020200) unshare(0x8040a00) close(0xffffffffffffffff) 20:41:06 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000001140)='./file0\x00', 0x0, 0x10}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f00000001c0)={"fec60b86afeabd2a885862f1d0c6ae4d63173dae6373672baa4dd6d58bbe183f0ebd0b5cee84e04388e3a88f39c5fbc37953f989524d429c7d5e333d0892dc73984f9e7ab74a8a82382fbf939c5ac20a8b4dab191acc4d655e74a4524280a7d8f555d0478b98da6c36e4cd211a9f18fe3e2c3fbc0c1ef82f28a509de4c71b78cb9c60cfacf6524ffe71b57b8144c0e00e1dcc7fa33da96f93bb6cc647cf6e55f742764763778c3647850b24bd1c83b00da34cfacbb3c765990640b78ef2c9080d50df71d2634d57584b676f8b3151af6fa4936292f4d747c9f15d185c06458755b4ad38f2ca844f3e5db42bbf8079ffd6c67879b52d97f9be0664cbeefcee09457adb1dd448c4a5ab5f8a7b27e83207ee3d0470df181bee84e4e4d909b581efbc1f5459907acf5ea0c22d44a70fdb86920b004cd62c2342735b4248bddda0de9c3ab0302091209401af7413d6aeb1af4df9a0d630c1a33e1e745064ecb5ba94ca0f6e5ff117fccf81f0538090e4f3409e348047044aceb6ecfc69831756b3742ddbcd3b5e2d1b3c811da6921f0816fe640d33ba228f63a978042f6c2846a15c13d0e0ef9dd4143b0e94e728cc9fff00264e2648be9780672e8a2badcbe372b85c1d3f9e5cff03c390c3da5fd9112c88079958c10075e93aef7131b40c70c5a54bac4f345e3723702c3ab701968f772d0f6ccf1257f3c75c3109c4140feded5f80f5664cb1e4b1736f2c271340f6c593b020f5e04c04fd46d5bc27d880f43eab5f6997f5ee393837fa81a9f49d8d5f92a2a18bc9264dd12f35f98329cae01b18551ffd4abbaba5846d61b0d0183ab3dff06bc7fcf0de62f80fcc0d87d71b3e618baeb20bd4eca45bb3a4936d6147aa90c63dda4497378aa7745f6dac3c8268f43c6eea5f3f424f073527855d1f6702eb095d6452502256e3126441771b4ccf50836de4ef3edb37973c73fd5921d4675a00ee92728c62aa7a1258da0b40c70d8e5573429f024c4e53c57b5c3d47cd63669b1008f0604c81f65df151bf16e489e8246868f5c752c5d7bca4ecc2f8dd50d3b3082be271f7a6b72b88f0fed0f4e57e7f75b43299e43a1ed13c2e7130839dfaf2cde02200795a4a89bfd3a6060a0ed2e49f92d843996c45824d1bb309e2a3ae5ff2cc2afac571023957aa060ae304a5474fea8e83aa8d1f7cea1542ba34dff1eedd99a2684395638ac23dafccf634095adb799c35b5841e478a37356019231cae902f8113f0cb2930987dad22f33756a02a977acf56963b69a19404bc1808fb0f3cbbb07b6294c2528760433ab045af15b98d94f380c6588296882815dcec1d4a244425a0e219461b8cd8ea1edc6931697f4e939a79322c7a65d97ae044179bb2e5ca56e9d0f32b503efe63940b319132684b572d7b890314049360b73de2fdf558229b852b0c3ddbec011509aa2974b"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000180)) r3 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r3, &(0x7f0000001040)=[{{&(0x7f0000000600)=@nl=@unspec, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000680)=""/160, 0xa0}, {&(0x7f0000000740)=""/196, 0xc4}, {&(0x7f0000000840)=""/68, 0x44}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f00000009c0)=""/203, 0xcb}, {&(0x7f0000000ac0)=""/32, 0x20}, {&(0x7f0000000b00)=""/213, 0xd5}], 0x7, &(0x7f0000002040)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000c80)=@can, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d00)=""/166, 0xa6}, {&(0x7f0000000dc0)=""/89, 0x59}, {&(0x7f0000000e40)=""/5, 0x5}, {&(0x7f0000000e80)=""/87, 0x57}, {&(0x7f0000000f00)=""/65, 0x41}], 0x5, &(0x7f0000001000)=""/39, 0x27}, 0x28d57188}], 0x2, 0x8002, &(0x7f00000010c0)={0x0, 0x989680}) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x8800) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0x74000000) socket$nl_route(0x10, 0x3, 0x0) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@mcast1, 0x79}) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x1a4) 20:41:06 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x0, 0x3, 0x20000000, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a4, &(0x7f00000000c0)={{@my=0x1}, @hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x0, 0x3, 0x20000000, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7aa, &(0x7f00000000c0)={{@my=0x1}, @hyper}) 20:41:06 executing program 0: unshare(0x40000200) unshare(0x4000000) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xd6d, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) unshare(0x40000) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00645a50e9c53a8b2449740000000000000017ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x54}}, 0x0) unshare(0x40000000) bind(r4, &(0x7f00000001c0)=@generic={0x26, "5c24836058f4dc6debe2abc7f9d3b08c34a372534e64cee7d57ee4064f21fd87c97c371982ca7b8682a973467bff4ace2a353517853e0b717a81cf7273be114a8e8731e3f4a741e1dbf7c5d2a26d301337c47be7cebbe30ccd989603041fd984bc57bb2e12d9d8e2e1f67f4e14b6cfa9abc342b3b276c4ab7e7cf08e03be"}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0xfffffffffffffe70, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x78b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0x0, 0x0, 0x80000000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0x7c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0xae) [ 3146.812552][T29958] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 20:41:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003bc0)=[{{&(0x7f0000000240)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f00000026c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}}, {{&(0x7f0000002740)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x4000}}], 0x2, 0x0) [ 3146.888782][T29958] team0: Caught tx_queue_len zero misconfig 20:41:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x846512678b3a18b2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@val={0x6803}, @val={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2000, 0x0, 0x2f, 0x0, @private=0x3, @remote}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0x2e) 20:41:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x0, 0x1}) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x703, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x34000600}}}}]}, 0x78}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) [ 3147.184022][T29975] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3147.211666][T29975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3147.316406][T29976] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 20:41:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xa, 0x7b, 0xa, 0xff00}}, &(0x7f0000000180)='GPL\x00', 0x2, 0xfd13, &(0x7f0000000000)=""/184, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2bd, 0x10, &(0x7f0000000000), 0x34}, 0x48) 20:41:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x0, 0x1}) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x703, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x34000600}}}}]}, 0x78}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) [ 3147.710411][T29985] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3148.259882][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3148.266470][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 20:41:20 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007e, 0x0) 20:41:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x0, 0x0, 0x1}) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x703, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x34000600}}}}]}, 0x78}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) 20:41:20 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000001140)='./file0\x00', 0x0, 0x10}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f00000001c0)={"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"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000180)) r3 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r3, &(0x7f0000001040)=[{{&(0x7f0000000600)=@nl=@unspec, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000680)=""/160, 0xa0}, {&(0x7f0000000740)=""/196, 0xc4}, {&(0x7f0000000840)=""/68, 0x44}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f00000009c0)=""/203, 0xcb}, {&(0x7f0000000ac0)=""/32, 0x20}, {&(0x7f0000000b00)=""/213, 0xd5}], 0x7, &(0x7f0000002040)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000c80)=@can, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d00)=""/166, 0xa6}, {&(0x7f0000000dc0)=""/89, 0x59}, {&(0x7f0000000e40)=""/5, 0x5}, {&(0x7f0000000e80)=""/87, 0x57}, {&(0x7f0000000f00)=""/65, 0x41}], 0x5, &(0x7f0000001000)=""/39, 0x27}, 0x28d57188}], 0x2, 0x8002, &(0x7f00000010c0)={0x0, 0x989680}) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x8800) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0x74000000) socket$nl_route(0x10, 0x3, 0x0) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@mcast1, 0x79}) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x1a4) 20:41:20 executing program 4: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x8) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0xfffffdea) splice(r0, 0x0, r4, 0x0, 0x2000000000a, 0x0) 20:41:20 executing program 5: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) openat$null(0xffffff9c, 0x0, 0x94000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x8000000803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x80000000}, 0x0, &(0x7f0000000380)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) unshare(0x0) timer_create(0x3, 0x0, &(0x7f0000000040)) unshare(0x0) unshare(0x60020200) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x0, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x3f, 0x5, 0x0, 0x0, 0x2, 0x14}, [@FRA_SRC={0x8, 0x2, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x60000001}, 0x80) unshare(0x28020200) unshare(0x8040a00) close(0xffffffffffffffff) 20:41:20 executing program 0: unshare(0x40000200) unshare(0x4000000) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xd6d, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) unshare(0x40000) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00645a50e9c53a8b2449740000000000000017ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x54}}, 0x0) unshare(0x40000000) bind(r4, &(0x7f00000001c0)=@generic={0x26, "5c24836058f4dc6debe2abc7f9d3b08c34a372534e64cee7d57ee4064f21fd87c97c371982ca7b8682a973467bff4ace2a353517853e0b717a81cf7273be114a8e8731e3f4a741e1dbf7c5d2a26d301337c47be7cebbe30ccd989603041fd984bc57bb2e12d9d8e2e1f67f4e14b6cfa9abc342b3b276c4ab7e7cf08e03be"}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0xfffffffffffffe70, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x78b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0x0, 0x0, 0x80000000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0x7c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0xae) 20:41:20 executing program 4: unshare(0x40000200) unshare(0x4000000) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xd6d, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) unshare(0x40000) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00645a50e9c53a8b2449740000000000000017ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x54}}, 0x0) unshare(0x40000000) bind(r4, &(0x7f00000001c0)=@generic={0x26, "5c24836058f4dc6debe2abc7f9d3b08c34a372534e64cee7d57ee4064f21fd87c97c371982ca7b8682a973467bff4ace2a353517853e0b717a81cf7273be114a8e8731e3f4a741e1dbf7c5d2a26d301337c47be7cebbe30ccd989603041fd984bc57bb2e12d9d8e2e1f67f4e14b6cfa9abc342b3b276c4ab7e7cf08e03be"}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0xfffffffffffffe70, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x78b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0x0, 0x0, 0x80000000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0x7c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0xae) [ 3160.222768][T29997] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 20:41:20 executing program 3: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) openat$null(0xffffff9c, 0x0, 0x94000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x8000000803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x80000000}, 0x0, &(0x7f0000000380)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) unshare(0x0) timer_create(0x3, 0x0, &(0x7f0000000040)) unshare(0x0) unshare(0x60020200) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x0, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x3f, 0x5, 0x0, 0x0, 0x2, 0x14}, [@FRA_SRC={0x8, 0x2, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x60000001}, 0x80) unshare(0x28020200) unshare(0x8040a00) close(0xffffffffffffffff) 20:41:23 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000001140)='./file0\x00', 0x0, 0x10}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f00000001c0)={"fec60b86afeabd2a885862f1d0c6ae4d63173dae6373672baa4dd6d58bbe183f0ebd0b5cee84e04388e3a88f39c5fbc37953f989524d429c7d5e333d0892dc73984f9e7ab74a8a82382fbf939c5ac20a8b4dab191acc4d655e74a4524280a7d8f555d0478b98da6c36e4cd211a9f18fe3e2c3fbc0c1ef82f28a509de4c71b78cb9c60cfacf6524ffe71b57b8144c0e00e1dcc7fa33da96f93bb6cc647cf6e55f742764763778c3647850b24bd1c83b00da34cfacbb3c765990640b78ef2c9080d50df71d2634d57584b676f8b3151af6fa4936292f4d747c9f15d185c06458755b4ad38f2ca844f3e5db42bbf8079ffd6c67879b52d97f9be0664cbeefcee09457adb1dd448c4a5ab5f8a7b27e83207ee3d0470df181bee84e4e4d909b581efbc1f5459907acf5ea0c22d44a70fdb86920b004cd62c2342735b4248bddda0de9c3ab0302091209401af7413d6aeb1af4df9a0d630c1a33e1e745064ecb5ba94ca0f6e5ff117fccf81f0538090e4f3409e348047044aceb6ecfc69831756b3742ddbcd3b5e2d1b3c811da6921f0816fe640d33ba228f63a978042f6c2846a15c13d0e0ef9dd4143b0e94e728cc9fff00264e2648be9780672e8a2badcbe372b85c1d3f9e5cff03c390c3da5fd9112c88079958c10075e93aef7131b40c70c5a54bac4f345e3723702c3ab701968f772d0f6ccf1257f3c75c3109c4140feded5f80f5664cb1e4b1736f2c271340f6c593b020f5e04c04fd46d5bc27d880f43eab5f6997f5ee393837fa81a9f49d8d5f92a2a18bc9264dd12f35f98329cae01b18551ffd4abbaba5846d61b0d0183ab3dff06bc7fcf0de62f80fcc0d87d71b3e618baeb20bd4eca45bb3a4936d6147aa90c63dda4497378aa7745f6dac3c8268f43c6eea5f3f424f073527855d1f6702eb095d6452502256e3126441771b4ccf50836de4ef3edb37973c73fd5921d4675a00ee92728c62aa7a1258da0b40c70d8e5573429f024c4e53c57b5c3d47cd63669b1008f0604c81f65df151bf16e489e8246868f5c752c5d7bca4ecc2f8dd50d3b3082be271f7a6b72b88f0fed0f4e57e7f75b43299e43a1ed13c2e7130839dfaf2cde02200795a4a89bfd3a6060a0ed2e49f92d843996c45824d1bb309e2a3ae5ff2cc2afac571023957aa060ae304a5474fea8e83aa8d1f7cea1542ba34dff1eedd99a2684395638ac23dafccf634095adb799c35b5841e478a37356019231cae902f8113f0cb2930987dad22f33756a02a977acf56963b69a19404bc1808fb0f3cbbb07b6294c2528760433ab045af15b98d94f380c6588296882815dcec1d4a244425a0e219461b8cd8ea1edc6931697f4e939a79322c7a65d97ae044179bb2e5ca56e9d0f32b503efe63940b319132684b572d7b890314049360b73de2fdf558229b852b0c3ddbec011509aa2974b"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000180)) r3 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r3, &(0x7f0000001040)=[{{&(0x7f0000000600)=@nl=@unspec, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000680)=""/160, 0xa0}, {&(0x7f0000000740)=""/196, 0xc4}, {&(0x7f0000000840)=""/68, 0x44}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f00000009c0)=""/203, 0xcb}, {&(0x7f0000000ac0)=""/32, 0x20}, {&(0x7f0000000b00)=""/213, 0xd5}], 0x7, &(0x7f0000002040)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000c80)=@can, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d00)=""/166, 0xa6}, {&(0x7f0000000dc0)=""/89, 0x59}, {&(0x7f0000000e40)=""/5, 0x5}, {&(0x7f0000000e80)=""/87, 0x57}, {&(0x7f0000000f00)=""/65, 0x41}], 0x5, &(0x7f0000001000)=""/39, 0x27}, 0x28d57188}], 0x2, 0x8002, &(0x7f00000010c0)={0x0, 0x989680}) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x8800) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0x74000000) socket$nl_route(0x10, 0x3, 0x0) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@mcast1, 0x79}) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x1a4) 20:41:26 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000001140)='./file0\x00', 0x0, 0x10}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f00000001c0)={"fec60b86afeabd2a885862f1d0c6ae4d63173dae6373672baa4dd6d58bbe183f0ebd0b5cee84e04388e3a88f39c5fbc37953f989524d429c7d5e333d0892dc73984f9e7ab74a8a82382fbf939c5ac20a8b4dab191acc4d655e74a4524280a7d8f555d0478b98da6c36e4cd211a9f18fe3e2c3fbc0c1ef82f28a509de4c71b78cb9c60cfacf6524ffe71b57b8144c0e00e1dcc7fa33da96f93bb6cc647cf6e55f742764763778c3647850b24bd1c83b00da34cfacbb3c765990640b78ef2c9080d50df71d2634d57584b676f8b3151af6fa4936292f4d747c9f15d185c06458755b4ad38f2ca844f3e5db42bbf8079ffd6c67879b52d97f9be0664cbeefcee09457adb1dd448c4a5ab5f8a7b27e83207ee3d0470df181bee84e4e4d909b581efbc1f5459907acf5ea0c22d44a70fdb86920b004cd62c2342735b4248bddda0de9c3ab0302091209401af7413d6aeb1af4df9a0d630c1a33e1e745064ecb5ba94ca0f6e5ff117fccf81f0538090e4f3409e348047044aceb6ecfc69831756b3742ddbcd3b5e2d1b3c811da6921f0816fe640d33ba228f63a978042f6c2846a15c13d0e0ef9dd4143b0e94e728cc9fff00264e2648be9780672e8a2badcbe372b85c1d3f9e5cff03c390c3da5fd9112c88079958c10075e93aef7131b40c70c5a54bac4f345e3723702c3ab701968f772d0f6ccf1257f3c75c3109c4140feded5f80f5664cb1e4b1736f2c271340f6c593b020f5e04c04fd46d5bc27d880f43eab5f6997f5ee393837fa81a9f49d8d5f92a2a18bc9264dd12f35f98329cae01b18551ffd4abbaba5846d61b0d0183ab3dff06bc7fcf0de62f80fcc0d87d71b3e618baeb20bd4eca45bb3a4936d6147aa90c63dda4497378aa7745f6dac3c8268f43c6eea5f3f424f073527855d1f6702eb095d6452502256e3126441771b4ccf50836de4ef3edb37973c73fd5921d4675a00ee92728c62aa7a1258da0b40c70d8e5573429f024c4e53c57b5c3d47cd63669b1008f0604c81f65df151bf16e489e8246868f5c752c5d7bca4ecc2f8dd50d3b3082be271f7a6b72b88f0fed0f4e57e7f75b43299e43a1ed13c2e7130839dfaf2cde02200795a4a89bfd3a6060a0ed2e49f92d843996c45824d1bb309e2a3ae5ff2cc2afac571023957aa060ae304a5474fea8e83aa8d1f7cea1542ba34dff1eedd99a2684395638ac23dafccf634095adb799c35b5841e478a37356019231cae902f8113f0cb2930987dad22f33756a02a977acf56963b69a19404bc1808fb0f3cbbb07b6294c2528760433ab045af15b98d94f380c6588296882815dcec1d4a244425a0e219461b8cd8ea1edc6931697f4e939a79322c7a65d97ae044179bb2e5ca56e9d0f32b503efe63940b319132684b572d7b890314049360b73de2fdf558229b852b0c3ddbec011509aa2974b"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000180)) r3 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r3, &(0x7f0000001040)=[{{&(0x7f0000000600)=@nl=@unspec, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000680)=""/160, 0xa0}, {&(0x7f0000000740)=""/196, 0xc4}, {&(0x7f0000000840)=""/68, 0x44}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f00000009c0)=""/203, 0xcb}, {&(0x7f0000000ac0)=""/32, 0x20}, {&(0x7f0000000b00)=""/213, 0xd5}], 0x7, &(0x7f0000002040)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000c80)=@can, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d00)=""/166, 0xa6}, {&(0x7f0000000dc0)=""/89, 0x59}, {&(0x7f0000000e40)=""/5, 0x5}, {&(0x7f0000000e80)=""/87, 0x57}, {&(0x7f0000000f00)=""/65, 0x41}], 0x5, &(0x7f0000001000)=""/39, 0x27}, 0x28d57188}], 0x2, 0x8002, &(0x7f00000010c0)={0x0, 0x989680}) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x8800) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0x74000000) socket$nl_route(0x10, 0x3, 0x0) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@mcast1, 0x79}) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x1a4) 20:41:27 executing program 5: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) openat$null(0xffffff9c, 0x0, 0x94000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x8000000803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x80000000}, 0x0, &(0x7f0000000380)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) unshare(0x0) timer_create(0x3, 0x0, &(0x7f0000000040)) unshare(0x0) unshare(0x60020200) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x0, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x3f, 0x5, 0x0, 0x0, 0x2, 0x14}, [@FRA_SRC={0x8, 0x2, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x60000001}, 0x80) unshare(0x28020200) unshare(0x8040a00) close(0xffffffffffffffff) 20:41:27 executing program 0: unshare(0x40000200) unshare(0x4000000) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xd6d, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) unshare(0x40000) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00645a50e9c53a8b2449740000000000000017ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x54}}, 0x0) unshare(0x40000000) bind(r4, &(0x7f00000001c0)=@generic={0x26, "5c24836058f4dc6debe2abc7f9d3b08c34a372534e64cee7d57ee4064f21fd87c97c371982ca7b8682a973467bff4ace2a353517853e0b717a81cf7273be114a8e8731e3f4a741e1dbf7c5d2a26d301337c47be7cebbe30ccd989603041fd984bc57bb2e12d9d8e2e1f67f4e14b6cfa9abc342b3b276c4ab7e7cf08e03be"}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0xfffffffffffffe70, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x78b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0x0, 0x0, 0x80000000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0x7c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0xae) 20:41:43 executing program 0: unshare(0x40000200) unshare(0x4000000) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xd6d, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) unshare(0x40000) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00645a50e9c53a8b2449740000000000000017ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x54}}, 0x0) unshare(0x40000000) bind(r4, &(0x7f00000001c0)=@generic={0x26, "5c24836058f4dc6debe2abc7f9d3b08c34a372534e64cee7d57ee4064f21fd87c97c371982ca7b8682a973467bff4ace2a353517853e0b717a81cf7273be114a8e8731e3f4a741e1dbf7c5d2a26d301337c47be7cebbe30ccd989603041fd984bc57bb2e12d9d8e2e1f67f4e14b6cfa9abc342b3b276c4ab7e7cf08e03be"}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0xfffffffffffffe70, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x78b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0x0, 0x0, 0x80000000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0x7c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0xae) 20:41:43 executing program 1: syz_emit_ethernet(0x7a, &(0x7f00000010c0)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "255fcf", 0x44, 0x3c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2}}}}, 0x0) 20:41:43 executing program 5: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) openat$null(0xffffff9c, 0x0, 0x94000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x8000000803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x80000000}, 0x0, &(0x7f0000000380)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) unshare(0x0) timer_create(0x3, 0x0, &(0x7f0000000040)) unshare(0x0) unshare(0x60020200) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x0, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x3f, 0x5, 0x0, 0x0, 0x2, 0x14}, [@FRA_SRC={0x8, 0x2, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x60000001}, 0x80) unshare(0x28020200) unshare(0x8040a00) close(0xffffffffffffffff) 20:41:43 executing program 3: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) openat$null(0xffffff9c, 0x0, 0x94000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x8000000803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x80000000}, 0x0, &(0x7f0000000380)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) unshare(0x0) timer_create(0x3, 0x0, &(0x7f0000000040)) unshare(0x0) unshare(0x60020200) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x0, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x3f, 0x5, 0x0, 0x0, 0x2, 0x14}, [@FRA_SRC={0x8, 0x2, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x60000001}, 0x80) unshare(0x28020200) unshare(0x8040a00) close(0xffffffffffffffff) 20:41:43 executing program 4: unshare(0x40000200) unshare(0x4000000) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xd6d, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) unshare(0x40000) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00645a50e9c53a8b2449740000000000000017ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x54}}, 0x0) unshare(0x40000000) bind(r4, &(0x7f00000001c0)=@generic={0x26, "5c24836058f4dc6debe2abc7f9d3b08c34a372534e64cee7d57ee4064f21fd87c97c371982ca7b8682a973467bff4ace2a353517853e0b717a81cf7273be114a8e8731e3f4a741e1dbf7c5d2a26d301337c47be7cebbe30ccd989603041fd984bc57bb2e12d9d8e2e1f67f4e14b6cfa9abc342b3b276c4ab7e7cf08e03be"}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0xfffffffffffffe70, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x78b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0x0, 0x0, 0x80000000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0x7c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0xae) 20:41:43 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001740)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b16, 0x0) [ 3183.508480][T30052] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 3183.778576][T30052] usb 3-1: Using ep0 maxpacket: 8 [ 3183.928874][T30052] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3183.940334][T30052] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3183.952098][T30052] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3183.962780][T30052] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3183.973471][T30052] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3184.005698][T30052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:41:44 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 3184.061471][T30052] usb 3-1: config 0 descriptor?? 20:41:44 executing program 3: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) openat$null(0xffffff9c, 0x0, 0x94000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x8000000803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x80000000}, 0x0, &(0x7f0000000380)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) unshare(0x0) timer_create(0x3, 0x0, &(0x7f0000000040)) unshare(0x0) unshare(0x60020200) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x0, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x3f, 0x5, 0x0, 0x0, 0x2, 0x14}, [@FRA_SRC={0x8, 0x2, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x60000001}, 0x80) unshare(0x28020200) unshare(0x8040a00) close(0xffffffffffffffff) 20:41:44 executing program 4: unshare(0x40000200) unshare(0x4000000) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xd6d, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) unshare(0x40000) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00645a50e9c53a8b2449740000000000000017ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x54}}, 0x0) unshare(0x40000000) bind(r4, &(0x7f00000001c0)=@generic={0x26, "5c24836058f4dc6debe2abc7f9d3b08c34a372534e64cee7d57ee4064f21fd87c97c371982ca7b8682a973467bff4ace2a353517853e0b717a81cf7273be114a8e8731e3f4a741e1dbf7c5d2a26d301337c47be7cebbe30ccd989603041fd984bc57bb2e12d9d8e2e1f67f4e14b6cfa9abc342b3b276c4ab7e7cf08e03be"}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0xfffffffffffffe70, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x78b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0x0, 0x0, 0x80000000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffa}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0x7c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0xae) 20:41:44 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) [ 3184.209525][T30098] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 20:41:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r0, &(0x7f0000002700)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f000000a840)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f000000c880)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000067c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000008800)={0x2020}, 0x2020) [ 3184.348657][T30052] usb 3-1: usb_control_msg returned -32 [ 3184.354521][T30052] usbtmc 3-1:0.0: can't read capabilities 20:41:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) timer_create(0x0, 0x0, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) r6 = open(0x0, 0x141a42, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x800000080000016) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r7, 0x5015, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept4$tipc(r3, 0x0, &(0x7f00000010c0), 0x400) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)}, {&(0x7f0000000300)="179a56a713e0ee13ff4e1452081fcabab7cedf29a5669c8b0d109bcb6b14e55e26227facc462d830dcc6215f486271a4acde6c1a2cd0f09f44d78ecce019bfdba387e1c3e9da9e75dbd305699720fe6289aedda42f5ee7324f9f24c32ac0b7edeb6155bf5b6f43", 0x67}, {&(0x7f0000000280)="b717e97ebaa6ec8c2216d9c675eb742dede6048d634f768e58ee20fbfb3c0412", 0x20}, {&(0x7f0000000380)="8c8f0956a0674feec88b5d012891cbc0c1972d5faee6fb09256afd629e440f1a8c4345fbc19dd2dd193727a3fc36e84400aca7a0685d5ca4c77e0b163e49c753e68529db7adce69af0e7b057a0d7e071b84c1b8b5c0da643f906a00246daf9298b0e546c2d033115ed8804", 0x6b}, {&(0x7f0000000480)="2e41be5097ecf1ae7d236a3c48954c43acfcaaea5ca60918cff1b18740fc1e162c46c41acb036f66ae66c8f5a17274bd757269eca2fc4d51cb7e6b7c3ab77407edfbbaf19aaa2fb522e823ae81ec675bdd43f8ff3be87c6e2762cda25f43ae94e244c6d69bb25d6ae0da1e689260a9e35b0be51cd99689e748c4fac8cc44157571af4e3a3d9a466d2ed559edca31e21c34da55a8d981e97a494c78b6343a19fa3125a564bdaa2f5dbc35e714d11573d4d188db5cb0fc23", 0xb7}], 0x5, 0x0, 0x0, 0x800}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x8000}}], 0x2, 0x90) write$sndseq(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 3184.698556][T30117] usbtmc 3-1:0.0: usbtmc488_ioctl_trigger returned -71 20:41:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x14, 0x2, [{0x2}, {}]}]}, 0x34}}, 0x0) [ 3186.209100][T30055] usb 3-1: USB disconnect, device number 54 20:41:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0002000000000000270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f0000f5000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65"], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000f1ff000000000f0000000a000100726f757465000000600002005c000600580001000b00010073616d706c6500002c00028008000500000000000800030004000000180002"], 0x90}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20:41:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000010600000000000000000a20000000000a01000000000004000008000000000900010073797a300000000070000000120a0100001000000000000000000000040004800900020073797a30000000000900e0ff73797a3000000000080003"], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 20:41:55 executing program 3: setpgid(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0xc0000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) 20:41:55 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101) r1 = dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="f8ffffff28fb000000000000ff0f00008843ce486a374fb1a348184700000800000100e700000000000000242555001000008500", @ANYBLOB="00f2155ce3d13a8cf04ab6b52d47960ecb24fb8af7576d413a0dc69ac55d26b80004000000950020"], &(0x7f0000000200)='syzkaller\x00', 0x8000, 0x1a, &(0x7f0000000280)=""/26, 0x0, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x5, 0x1, 0x5}, 0x10}, 0x80) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000000c0)={0x1, 0x10001, 0x41, &(0x7f0000000700)=""/65}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/101, 0x65}], 0x2, 0x6, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udplite\x00') preadv2(r3, &(0x7f0000000400)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/101, 0x65}], 0x2, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@getchain={0x4c, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {0xd, 0x10}, {0x7, 0x7}}, [{0x8, 0xb, 0xc58d}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x200}, {0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) pipe(&(0x7f0000000900)={0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udplite\x00') preadv2(r5, &(0x7f0000000400)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/101, 0x65}], 0x2, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@getchain={0x44, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {0xd, 0x10}, {0x7, 0x7}}, [{0x8, 0xb, 0xc58d}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x200}, {0x8}]}, 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000100)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x8c}, @ldst={0x2, 0x2, 0x1, 0x5, 0xa, 0xc, 0xffffffffffffffff}], &(0x7f0000000140)='GPL\x00', 0xfee, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f0000000540)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x0, 0x9, 0x3}, 0x10, 0x1484c, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r3, r4, 0xffffffffffffffff, r5]}, 0x80) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x800, 0x25, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffff7}, {}, {0x100000}}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) pread64(r1, &(0x7f0000000780)=""/184, 0xb8, 0xb32e) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='nv\x00', 0x3) write$binfmt_script(r6, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) syz_io_uring_setup(0x49f6, &(0x7f0000000440)={0x0, 0x1f6c, 0x60, 0x2, 0x18b, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f00000004c0)) sendfile(r2, r6, 0x0, 0x8000002a) 20:41:55 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) timer_create(0x0, 0x0, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) r6 = open(0x0, 0x141a42, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x800000080000016) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r7, 0x5015, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept4$tipc(r3, 0x0, &(0x7f00000010c0), 0x400) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)}, {&(0x7f0000000300)="179a56a713e0ee13ff4e1452081fcabab7cedf29a5669c8b0d109bcb6b14e55e26227facc462d830dcc6215f486271a4acde6c1a2cd0f09f44d78ecce019bfdba387e1c3e9da9e75dbd305699720fe6289aedda42f5ee7324f9f24c32ac0b7edeb6155bf5b6f43", 0x67}, {&(0x7f0000000280)="b717e97ebaa6ec8c2216d9c675eb742dede6048d634f768e58ee20fbfb3c0412", 0x20}, {&(0x7f0000000380)="8c8f0956a0674feec88b5d012891cbc0c1972d5faee6fb09256afd629e440f1a8c4345fbc19dd2dd193727a3fc36e84400aca7a0685d5ca4c77e0b163e49c753e68529db7adce69af0e7b057a0d7e071b84c1b8b5c0da643f906a00246daf9298b0e546c2d033115ed8804", 0x6b}, {&(0x7f0000000480)="2e41be5097ecf1ae7d236a3c48954c43acfcaaea5ca60918cff1b18740fc1e162c46c41acb036f66ae66c8f5a17274bd757269eca2fc4d51cb7e6b7c3ab77407edfbbaf19aaa2fb522e823ae81ec675bdd43f8ff3be87c6e2762cda25f43ae94e244c6d69bb25d6ae0da1e689260a9e35b0be51cd99689e748c4fac8cc44157571af4e3a3d9a466d2ed559edca31e21c34da55a8d981e97a494c78b6343a19fa3125a564bdaa2f5dbc35e714d11573d4d188db5cb0fc23", 0xb7}], 0x5, 0x0, 0x0, 0x800}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x8000}}], 0x2, 0x90) write$sndseq(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 20:41:55 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001740)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b16, 0x0) [ 3195.748911][T30154] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. 20:41:55 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x1f, 0x22, 0x99, 0x40, 0x2040, 0x1801, 0x4699, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa4, 0x3b, 0x91, 0x0, [], [{{0x9, 0x5, 0x4}}]}}]}}]}}, 0x0) [ 3196.018482][T30055] usb 3-1: new high-speed USB device number 55 using dummy_hcd 20:41:56 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101) r1 = dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="f8ffffff28fb000000000000ff0f00008843ce486a374fb1a348184700000800000100e700000000000000242555001000008500", @ANYBLOB="00f2155ce3d13a8cf04ab6b52d47960ecb24fb8af7576d413a0dc69ac55d26b80004000000950020"], &(0x7f0000000200)='syzkaller\x00', 0x8000, 0x1a, &(0x7f0000000280)=""/26, 0x0, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x5, 0x1, 0x5}, 0x10}, 0x80) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000000c0)={0x1, 0x10001, 0x41, &(0x7f0000000700)=""/65}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/101, 0x65}], 0x2, 0x6, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udplite\x00') preadv2(r3, &(0x7f0000000400)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/101, 0x65}], 0x2, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@getchain={0x4c, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {0xd, 0x10}, {0x7, 0x7}}, [{0x8, 0xb, 0xc58d}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x200}, {0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) pipe(&(0x7f0000000900)={0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udplite\x00') preadv2(r5, &(0x7f0000000400)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/101, 0x65}], 0x2, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@getchain={0x44, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {0xd, 0x10}, {0x7, 0x7}}, [{0x8, 0xb, 0xc58d}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x200}, {0x8}]}, 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000100)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x8c}, @ldst={0x2, 0x2, 0x1, 0x5, 0xa, 0xc, 0xffffffffffffffff}], &(0x7f0000000140)='GPL\x00', 0xfee, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f0000000540)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x0, 0x9, 0x3}, 0x10, 0x1484c, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r3, r4, 0xffffffffffffffff, r5]}, 0x80) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x800, 0x25, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffff7}, {}, {0x100000}}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) pread64(r1, &(0x7f0000000780)=""/184, 0xb8, 0xb32e) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='nv\x00', 0x3) write$binfmt_script(r6, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) syz_io_uring_setup(0x49f6, &(0x7f0000000440)={0x0, 0x1f6c, 0x60, 0x2, 0x18b, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f00000004c0)) sendfile(r2, r6, 0x0, 0x8000002a) [ 3196.298255][T30055] usb 3-1: Using ep0 maxpacket: 8 [ 3196.408278][ T5172] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 3196.418508][T30055] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3196.452020][T30055] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3196.501261][T30055] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3196.538227][T30055] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 20:41:56 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101) r1 = dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="f8ffffff28fb000000000000ff0f00008843ce486a374fb1a348184700000800000100e700000000000000242555001000008500", @ANYBLOB="00f2155ce3d13a8cf04ab6b52d47960ecb24fb8af7576d413a0dc69ac55d26b80004000000950020"], &(0x7f0000000200)='syzkaller\x00', 0x8000, 0x1a, &(0x7f0000000280)=""/26, 0x0, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x5, 0x1, 0x5}, 0x10}, 0x80) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000000c0)={0x1, 0x10001, 0x41, &(0x7f0000000700)=""/65}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/101, 0x65}], 0x2, 0x6, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udplite\x00') preadv2(r3, &(0x7f0000000400)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/101, 0x65}], 0x2, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@getchain={0x4c, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {0xd, 0x10}, {0x7, 0x7}}, [{0x8, 0xb, 0xc58d}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x200}, {0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) pipe(&(0x7f0000000900)={0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udplite\x00') preadv2(r5, &(0x7f0000000400)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/101, 0x65}], 0x2, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@getchain={0x44, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {0xd, 0x10}, {0x7, 0x7}}, [{0x8, 0xb, 0xc58d}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x200}, {0x8}]}, 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000100)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x8c}, @ldst={0x2, 0x2, 0x1, 0x5, 0xa, 0xc, 0xffffffffffffffff}], &(0x7f0000000140)='GPL\x00', 0xfee, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f0000000540)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x0, 0x9, 0x3}, 0x10, 0x1484c, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r3, r4, 0xffffffffffffffff, r5]}, 0x80) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x800, 0x25, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffff7}, {}, {0x100000}}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) pread64(r1, &(0x7f0000000780)=""/184, 0xb8, 0xb32e) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='nv\x00', 0x3) write$binfmt_script(r6, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) syz_io_uring_setup(0x49f6, &(0x7f0000000440)={0x0, 0x1f6c, 0x60, 0x2, 0x18b, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f00000004c0)) sendfile(r2, r6, 0x0, 0x8000002a) [ 3196.557398][T30055] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3196.568421][T30055] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3196.581988][T30055] usb 3-1: config 0 descriptor?? 20:41:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000580)=""/231, 0xe7, 0x1) [ 3196.789020][ T5172] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 20:41:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000580)=""/231, 0xe7, 0x1) [ 3196.858532][T30055] usb 3-1: usb_control_msg returned -32 [ 3196.864334][T30055] usbtmc 3-1:0.0: can't read capabilities 20:41:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000580)=""/231, 0xe7, 0x1) [ 3196.968756][ T5172] usb 6-1: New USB device found, idVendor=2040, idProduct=1801, bcdDevice=46.99 [ 3196.983622][ T5172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3197.005291][ T5172] usb 6-1: Product: syz [ 3197.057850][ T5172] usb 6-1: Manufacturer: syz [ 3197.081837][ T5172] usb 6-1: SerialNumber: syz [ 3197.166793][ T5172] usb 6-1: config 0 descriptor?? [ 3197.231113][ T5172] smsusb:smsusb_probe: board id=7, interface number 0 [ 3197.250966][T30185] usbtmc 3-1:0.0: usbtmc488_ioctl_trigger returned -71 [ 3197.268627][ T5172] smsusb:smsusb_probe: Device initialized with return code -19 [ 3197.446007][ T5172] usb 6-1: USB disconnect, device number 50 [ 3198.733788][T25046] usb 3-1: USB disconnect, device number 55 [ 3204.205329][T30189] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3204.250006][T30189] veth23: entered allmulticast mode [ 3204.261007][T30189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3204.290008][T30189] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3204.308388][T30189] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 20:42:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0002000000000000270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f0000f5000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65"], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000f1ff000000000f0000000a000100726f757465000000600002005c000600580001000b00010073616d706c6500002c00028008000500000000000800030004000000180002"], 0x90}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20:42:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) timer_create(0x0, 0x0, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) r6 = open(0x0, 0x141a42, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x800000080000016) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r7, 0x5015, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept4$tipc(r3, 0x0, &(0x7f00000010c0), 0x400) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)}, {&(0x7f0000000300)="179a56a713e0ee13ff4e1452081fcabab7cedf29a5669c8b0d109bcb6b14e55e26227facc462d830dcc6215f486271a4acde6c1a2cd0f09f44d78ecce019bfdba387e1c3e9da9e75dbd305699720fe6289aedda42f5ee7324f9f24c32ac0b7edeb6155bf5b6f43", 0x67}, {&(0x7f0000000280)="b717e97ebaa6ec8c2216d9c675eb742dede6048d634f768e58ee20fbfb3c0412", 0x20}, {&(0x7f0000000380)="8c8f0956a0674feec88b5d012891cbc0c1972d5faee6fb09256afd629e440f1a8c4345fbc19dd2dd193727a3fc36e84400aca7a0685d5ca4c77e0b163e49c753e68529db7adce69af0e7b057a0d7e071b84c1b8b5c0da643f906a00246daf9298b0e546c2d033115ed8804", 0x6b}, {&(0x7f0000000480)="2e41be5097ecf1ae7d236a3c48954c43acfcaaea5ca60918cff1b18740fc1e162c46c41acb036f66ae66c8f5a17274bd757269eca2fc4d51cb7e6b7c3ab77407edfbbaf19aaa2fb522e823ae81ec675bdd43f8ff3be87c6e2762cda25f43ae94e244c6d69bb25d6ae0da1e689260a9e35b0be51cd99689e748c4fac8cc44157571af4e3a3d9a466d2ed559edca31e21c34da55a8d981e97a494c78b6343a19fa3125a564bdaa2f5dbc35e714d11573d4d188db5cb0fc23", 0xb7}], 0x5, 0x0, 0x0, 0x800}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x8000}}], 0x2, 0x90) write$sndseq(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 20:42:04 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000580)=""/231, 0xe7, 0x1) 20:42:04 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x1f, 0x22, 0x99, 0x40, 0x2040, 0x1801, 0x4699, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa4, 0x3b, 0x91, 0x0, [], [{{0x9, 0x5, 0x4}}]}}]}}]}}, 0x0) 20:42:04 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001740)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b16, 0x0) 20:42:04 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101) r1 = dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="f8ffffff28fb000000000000ff0f00008843ce486a374fb1a348184700000800000100e700000000000000242555001000008500", @ANYBLOB="00f2155ce3d13a8cf04ab6b52d47960ecb24fb8af7576d413a0dc69ac55d26b80004000000950020"], &(0x7f0000000200)='syzkaller\x00', 0x8000, 0x1a, &(0x7f0000000280)=""/26, 0x0, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x5, 0x1, 0x5}, 0x10}, 0x80) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000000c0)={0x1, 0x10001, 0x41, &(0x7f0000000700)=""/65}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/101, 0x65}], 0x2, 0x6, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udplite\x00') preadv2(r3, &(0x7f0000000400)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/101, 0x65}], 0x2, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@getchain={0x4c, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {0xd, 0x10}, {0x7, 0x7}}, [{0x8, 0xb, 0xc58d}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x200}, {0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) pipe(&(0x7f0000000900)={0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udplite\x00') preadv2(r5, &(0x7f0000000400)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/101, 0x65}], 0x2, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@getchain={0x44, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {0xd, 0x10}, {0x7, 0x7}}, [{0x8, 0xb, 0xc58d}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x200}, {0x8}]}, 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000100)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x8c}, @ldst={0x2, 0x2, 0x1, 0x5, 0xa, 0xc, 0xffffffffffffffff}], &(0x7f0000000140)='GPL\x00', 0xfee, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f0000000540)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x0, 0x9, 0x3}, 0x10, 0x1484c, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r3, r4, 0xffffffffffffffff, r5]}, 0x80) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x800, 0x25, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffff7}, {}, {0x100000}}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) pread64(r1, &(0x7f0000000780)=""/184, 0xb8, 0xb32e) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='nv\x00', 0x3) write$binfmt_script(r6, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) syz_io_uring_setup(0x49f6, &(0x7f0000000440)={0x0, 0x1f6c, 0x60, 0x2, 0x18b, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f00000004c0)) sendfile(r2, r6, 0x0, 0x8000002a) 20:42:04 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xffffffe0, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "80625aba"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "494e9e64"}, 0x0, 0x1, {0x0}}) [ 3204.698542][T30055] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 3204.718562][T25046] usb 6-1: new high-speed USB device number 51 using dummy_hcd 20:42:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f00000000c0)={'macvlan0\x00'}) [ 3204.988296][T30055] usb 3-1: Using ep0 maxpacket: 8 [ 3205.128476][T30055] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3205.139797][T30055] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3205.151368][T25046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 3205.161655][T30055] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3205.172630][T30055] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3205.183083][T30055] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3205.192792][T30055] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3205.231885][T30055] usb 3-1: config 0 descriptor?? 20:42:05 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x35, 0x2e, 0xe1, 0x40, 0x5e1, 0x893, 0x7906, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x61, 0x63}}]}}]}}, 0x0) [ 3205.338313][T25046] usb 6-1: New USB device found, idVendor=2040, idProduct=1801, bcdDevice=46.99 [ 3205.354263][T25046] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3205.391202][T25046] usb 6-1: Product: syz [ 3205.415366][T25046] usb 6-1: Manufacturer: syz [ 3205.429525][T25046] usb 6-1: SerialNumber: syz [ 3205.464783][T25046] usb 6-1: config 0 descriptor?? 20:42:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xffffffe0, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "80625aba"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "494e9e64"}, 0x0, 0x1, {0x0}}) [ 3205.518426][T30055] usb 3-1: usb_control_msg returned -32 [ 3205.525021][T30055] usbtmc 3-1:0.0: can't read capabilities [ 3205.553228][T25046] smsusb:smsusb_probe: board id=7, interface number 0 [ 3205.578337][T25046] smsusb:smsusb_probe: Device initialized with return code -19 [ 3205.658477][T30143] usb 5-1: new high-speed USB device number 98 using dummy_hcd 20:42:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) timer_create(0x0, 0x0, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) r6 = open(0x0, 0x141a42, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x800000080000016) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r7, 0x5015, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept4$tipc(r3, 0x0, &(0x7f00000010c0), 0x400) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)}, {&(0x7f0000000300)="179a56a713e0ee13ff4e1452081fcabab7cedf29a5669c8b0d109bcb6b14e55e26227facc462d830dcc6215f486271a4acde6c1a2cd0f09f44d78ecce019bfdba387e1c3e9da9e75dbd305699720fe6289aedda42f5ee7324f9f24c32ac0b7edeb6155bf5b6f43", 0x67}, {&(0x7f0000000280)="b717e97ebaa6ec8c2216d9c675eb742dede6048d634f768e58ee20fbfb3c0412", 0x20}, {&(0x7f0000000380)="8c8f0956a0674feec88b5d012891cbc0c1972d5faee6fb09256afd629e440f1a8c4345fbc19dd2dd193727a3fc36e84400aca7a0685d5ca4c77e0b163e49c753e68529db7adce69af0e7b057a0d7e071b84c1b8b5c0da643f906a00246daf9298b0e546c2d033115ed8804", 0x6b}, {&(0x7f0000000480)="2e41be5097ecf1ae7d236a3c48954c43acfcaaea5ca60918cff1b18740fc1e162c46c41acb036f66ae66c8f5a17274bd757269eca2fc4d51cb7e6b7c3ab77407edfbbaf19aaa2fb522e823ae81ec675bdd43f8ff3be87c6e2762cda25f43ae94e244c6d69bb25d6ae0da1e689260a9e35b0be51cd99689e748c4fac8cc44157571af4e3a3d9a466d2ed559edca31e21c34da55a8d981e97a494c78b6343a19fa3125a564bdaa2f5dbc35e714d11573d4d188db5cb0fc23", 0xb7}], 0x5, 0x0, 0x0, 0x800}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x8000}}], 0x2, 0x90) write$sndseq(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 3205.865266][T25046] usb 6-1: USB disconnect, device number 51 [ 3205.938502][T30223] usbtmc 3-1:0.0: usbtmc488_ioctl_trigger returned -71 [ 3206.179612][T30143] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=79.06 [ 3206.204560][T30143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3206.218236][T30143] usb 5-1: Product: syz [ 3206.222759][T30143] usb 5-1: Manufacturer: syz [ 3206.227663][T30143] usb 5-1: SerialNumber: syz [ 3206.245627][T30143] usb 5-1: config 0 descriptor?? 20:42:06 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x1f, 0x22, 0x99, 0x40, 0x2040, 0x1801, 0x4699, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa4, 0x3b, 0x91, 0x0, [], [{{0x9, 0x5, 0x4}}]}}]}}]}}, 0x0) [ 3206.291274][T30143] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 3206.297476][T30143] usb 5-1: selecting invalid altsetting 1 [ 3206.508510][T30143] gspca_stk014: reg_r err -71 [ 3206.513545][T30143] stk014: probe of 5-1:0.0 failed with error -71 [ 3206.558715][T30143] usb 5-1: USB disconnect, device number 98 [ 3206.748447][ T5172] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 3207.118505][ T5172] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 3207.298682][ T5172] usb 6-1: New USB device found, idVendor=2040, idProduct=1801, bcdDevice=46.99 [ 3207.307778][ T5172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3207.328241][ T5172] usb 6-1: Product: syz [ 3207.332456][ T5172] usb 6-1: Manufacturer: syz [ 3207.337085][ T5172] usb 6-1: SerialNumber: syz [ 3207.368955][ T5172] usb 6-1: config 0 descriptor?? [ 3207.406707][T30054] usb 3-1: USB disconnect, device number 56 [ 3207.412631][ T5172] smsusb:smsusb_probe: board id=7, interface number 0 [ 3207.428657][ T5172] smsusb:smsusb_probe: Device initialized with return code -19 [ 3207.646345][T29507] usb 6-1: USB disconnect, device number 52 [ 3209.700057][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3209.706425][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 [ 3214.901522][T30233] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3214.924807][T30233] veth25: entered allmulticast mode [ 3214.954020][T30234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3214.965664][T30234] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3214.975709][T30234] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 20:42:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0002000000000000270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f0000f5000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65"], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000f1ff000000000f0000000a000100726f757465000000600002005c000600580001000b00010073616d706c6500002c00028008000500000000000800030004000000180002"], 0x90}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20:42:15 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xffffffe0, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "80625aba"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "494e9e64"}, 0x0, 0x1, {0x0}}) 20:42:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xffffffe0, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "80625aba"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "494e9e64"}, 0x0, 0x1, {0x0}}) 20:42:15 executing program 4: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x1, @tid=0xffffffffffffffff}) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x6}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x3, 0x1, &(0x7f0000000140), &(0x7f0000000240)) mq_timedsend(r0, &(0x7f0000000180)="b890c7485a17e5fb66efb629d6a9eb51cbd2d78cc3519feb7e82283f9b4cc143985ca11bec5eec6880a28f289d575c476d752c0810dff7c3622d19e5f8de315cf8f39b4fcf62d80b7df6d447b584a9ac95891f9d7d28eef9a7f10f944e3d2f51b1fc466c0b0447a0e066cb8644805b16bcac75564daa9947b19c67b1d2fbfd653dab0e20d13a852a9749d8e4babcd9e958e6c428f8874e8d46180cb59f618178", 0xa0, 0x0, &(0x7f0000000080)={r2, r3+10000000}) epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x80) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xff}}]}, 0x1c}}, 0x0) ppoll(&(0x7f0000000280)=[{r4, 0x6480}, {r1, 0x2}, {r1, 0xc}], 0x3, &(0x7f0000000300), &(0x7f0000000340)={[0xbd2]}, 0x8) 20:42:15 executing program 2: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001740)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b16, 0x0) 20:42:15 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x1f, 0x22, 0x99, 0x40, 0x2040, 0x1801, 0x4699, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa4, 0x3b, 0x91, 0x0, [], [{{0x9, 0x5, 0x4}}]}}]}}]}}, 0x0) 20:42:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) 20:42:15 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x8, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x0, 0x0}]}) [ 3215.438889][T29507] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 3215.448397][T30054] usb 3-1: new high-speed USB device number 57 using dummy_hcd 20:42:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xffffffe0, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "80625aba"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "494e9e64"}, 0x0, 0x1, {0x0}}) 20:42:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xffffffe0, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "80625aba"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "494e9e64"}, 0x0, 0x1, {0x0}}) 20:42:15 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xffffffe0, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "80625aba"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "494e9e64"}, 0x0, 0x1, {0x0}}) [ 3215.688711][T25046] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 3215.698677][T30054] usb 3-1: Using ep0 maxpacket: 8 [ 3215.808515][T29507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 3215.858790][T30054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3215.877536][T30054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3215.903658][T30054] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3215.927153][T30054] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3215.948554][T25046] usb 5-1: Using ep0 maxpacket: 32 [ 3215.956271][T30054] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3215.976956][T30054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3215.978601][T29507] usb 6-1: New USB device found, idVendor=2040, idProduct=1801, bcdDevice=46.99 [ 3215.993778][T29507] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 20:42:16 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10012, r4, 0x0) r5 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffdea) splice(r0, 0x0, r5, 0x0, 0x100002000000000a, 0x0) [ 3216.020559][T30054] usb 3-1: config 0 descriptor?? [ 3216.045453][T29507] usb 6-1: Product: syz [ 3216.063259][T29507] usb 6-1: Manufacturer: syz [ 3216.074481][T29507] usb 6-1: SerialNumber: syz [ 3216.103178][T29507] usb 6-1: config 0 descriptor?? [ 3216.119008][T25046] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3216.133941][T25046] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 3216.151612][T29507] smsusb:smsusb_probe: board id=7, interface number 0 [ 3216.157942][T25046] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3216.183698][T29507] smsusb:smsusb_probe: Device initialized with return code -19 [ 3216.289531][T30054] usb 3-1: usb_control_msg returned -32 [ 3216.295267][T30054] usbtmc 3-1:0.0: can't read capabilities [ 3216.375169][T30054] usb 6-1: USB disconnect, device number 53 [ 3216.587927][T25046] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3216.597121][T25046] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3216.605981][T25046] usb 5-1: Product: syz [ 3216.611100][T25046] usb 5-1: SerialNumber: syz [ 3216.668829][T30271] usbtmc 3-1:0.0: usbtmc488_ioctl_trigger returned -71 [ 3216.978643][T25046] usb 5-1: 0:2 : does not exist [ 3217.017754][T25046] usb 5-1: USB disconnect, device number 99 [ 3218.155316][T25046] usb 3-1: USB disconnect, device number 57 [ 3227.622314][T30273] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3227.647220][T30273] veth27: entered allmulticast mode 20:42:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0002000000000000270012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f0000f5000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65"], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000f1ff000000000f0000000a000100726f757465000000600002005c000600580001000b00010073616d706c6500002c00028008000500000000000800030004000000180002"], 0x90}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20:42:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 20:42:27 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) signalfd(r0, &(0x7f00000002c0), 0x8) r1 = syz_open_dev$vcsa(&(0x7f0000000240), 0x6, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r3 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000057e00)={0x0, [], 0x0, "65da1eea9f6c19"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000058e00)={0x0, 0x0, "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", "4524d1ece1a1cdd495eb73cb0178981c216232f6f7a0f2f09d8305461fed6fcd67f8e9ade662eeec98004340a28c340265c70ba15374919dd0241b9d88f0afe259eef830665b96d95bc8d29f984c1337e9273062851c9bd3de27cfe0ddca61aff71c413b67be9e5d1d3c3ec79dd25ce8fcc7ff341af64aeebe7b8cfe28ac11984f11f72e3959907a88ce2e34303132eb7b011d4d64981b58377d9d3e9af4e81ddb1abf0aad4a3ebe944f33a2c6786558dc291e9a185dff762a0d5e40066e9ec999d3fa7ce328a51c84d65fef2fdedeb53e15cb0cb7229713d40c5c08be68fc6896ff747ac5ca77c1fc7b07c377661d7b241374cbcb6da8328a7913549ea4e33c8e91eae816f38083a31b326cec27d5bed1b17687e56274994d53e3be99ef280a0395dead374c00cf9a8d664f351f8ed5274eee2219eeedb24fde85ed7234190e838b1cc484bebfd9cae1fe8c80208e5499c78bcfbc1a622a7d86991505c95a0895c790f2066655604b678a499349a71f42a98c0d1dba0a421d34a5132ab30256393beefc258ad37d00683d0f8bc6cde5c96b7a0771f8d855386fde9b49ae8874c5f4e3970599601d91cc2c0d72df7fa8ba325c1aeafac30f43a5aa5358b2adbd4b1fdfffb42787dbea64ed8bfb9da43e007f54fb54fdd85187a5b47c1d873a987e0c245a997f63eb4af17a7a6f9809db4258c0d4f6358ddf2471dc4f98f7b02742e6e4ec909a67453111f7317f75314b48cc1f90bc18ed60874b615aff5cc9c6160aff73ac7811c4342299fc41ba6bbfb2a7532c89fa13eff3f9e29bfc374780dad9072b3e1aab78f0284849bd1ebcc23d16fd5cdf2d43f06bcab5da1cb57cd3786ab46c7089eef816f1529b8e9de67b6bc7bd8892f957f3e350adaa3602160f172c56736f0ca6a343607447a05fb5671d44dc4270b628a3a11c05c5ff3aa827d4c19be16207d2341e0a0e76e75ce5729cf65669b4a06d3e4461ad09d8d48e76c5fb6dc3d98958e14c816c4825b49ba9854a54faf6ff154556776316370d36f450f8ad8e55e5776120b6dae4ae5073b5999b5989f2b5d89b69e72f146e57b6e4f602626e1f34f4212f5714a3c7fd508c516080fd498f1192538f52fea01d3fca1e424903b862347237e73a9138de1108dbe217b696448be5d1902a58643e2301bf262218f601bb0f6bfabc5a0219b36b944fa5d299e64d35f2047de6eea15b4b5427fe144f5fb1e60c9d36a101f1734e84eff199cfe5233b4bf9b0eb8bb7a8e9114975f5d493c8f2804aa0e3c9c5d73e5d064f70615dbef582c94ee67cb96d39f2390861002f8ff285a0a886e68d8f42ef5f9058fbc5324fbbb720144041657b392ce85dd00a00b8a6ceaa40537ff3d11f52088b7ee4cc7515f19597fb270ad4e574467985c97c15ae9386eedc05f2ff60cbff1e862e3bafd0fe51239337c439aa7d335f2353d2696896f4a2f3ee007016521c4d69e24437c7d9aa6c5575bb9bac31603524d06afcf6411b4d9b445c3f4a733e9d0091b3bc17ec64581973768f14003db136fa30d6d64b0b99f16d1a65597ffb184e83e0df8147495452b240f551793b356d002c7e47e935fc5c20eca31773b7bb2c3dc039326ef835fdcab8895983639e12e0aa575ee5f5f1a6f6775a916476feefe883bceb63e59d1b1145b21865318d8a0cd5af1eca120b05387cab4ff096e88f4420fbbd3a7ac43b636008aca3cb00e2eabd48410d53afb126bdd042f7b47b5627fde4095478e1426a8e0afe76c5789724880fd5893835f6b18f2719c1b6b62fad6d1e31b4598629852cc6c0fcac6226596359badf75388079aa612f00e7e700909216ca159fcc768264c56c8416f6d6c1c390b93322d021f11f40e5002b56343916c1735958525ad139ac37f701938377f2d372f1d112a98c29102b6e892f660e9599bd06607af1a7521067bcee1a4d42a50f3696eb1052a23f9156d27685c47e92800e99e7d5199beb0be66076701d61aff8206dff31140fd3946b713af9e29ec67be8883e5a30c9f83680b37c6dffaaf8eeb6a7bde7b6ce7cda01bd38ca74d742c8b39bb101ad6183d0d34e05e647412b2d98f3dc7bb6aeb2e5f79e3d9ae505260941f1f9de675910ce1ab8ec890e1f197e2eaa3742a61aa9ec104de627d6551a0ad82470b4ef64eb81612223b7e6bfa0f2beda3a4013b8c71b255154a72758a91e11daf3b57ae5f4e48e175db7f1004938e57556f34c69538317750f94dba236d8824ecb1ef82bc504b52b79b01fb14fc455f94834584dd19977371688c2be27c3d2c314644a6ec5d38d5fceac833978fd2fb1a85468f1186963840957fd927a6ce9e10341850d3debc3b6079a562f7b89c229e7831a75db357e24fe7601d11dc7e484c619a48a9fe794a82370f312749cc7f4222fc84b2f52b67ccccbf1e0897a36fffc0f99f7c4ce533df3a5caa05689b1e9970d2199059b448b0a3123087a5d9b9029da466e380b695b3c507b8f5d84ef37e39fd4deb3a13290b6dc7292db04e113475353eccdc15141da7133ac0438d5eb3076ed6c103b71f80ab3fb07ba5d2d389e76a474c074bff1513792e5a0ea2b648aa5dc37b637dc4392b4deeee4528c5e57995edb7452f9ddeda7b863b20c62bb84c1cf8753dfc66ce2a95e8ccf8078af8071ba84139195249a3ce12517e1a347fc94ddf4cff5d47546ce3d15504213cf7e1fd7ccb784ed797be018c02233a00bb22432a54e23ebee0c3cd46cf1eee21a7c42555322132c7fb881eef4a590b8b5976fa6cd9acb561dd88a7f89ac31a3286e13d71a5c960ea4961a0e96efc011220f4eb2d8891aa1cac2b7245d21642399bfb1a90ca4ebfcbbfb2893d3009acb9bc23dea1902a47da4551fee410b450c2d911368cc153455affdb6866b8092ac9ffafe22d0c6cf7f890b4e497674b8d386ecddd7713ce38977de52f4273453510ab455255659b813fd8c373cb8efe2db2542f1feec06d0efc9cda1d4f86d13fdc4a0fdb307c7849fe004c3fcd26d8b30d26f7326bb09b401e923c868fe7f8e5ab3ef932a82a039e2eaccc2958b4329bc96fd777ad2d95d0c312c38ce864e35b869c3ca892b50cef9fd0d56824f99a5816b29ab4ff8a9034e659f2bee233146e82a4fd48f26ec9a4b43087a4015b77754cd1ae1dd6ba1282a24ca5cc3f787dce34c7cd705f084bf1b18fb94ac8803d8a21463955bf0c34cd1a96418e79fe6e38e0a1dd9278541230ffb32fdf9b19ae51e91b566c88a01974da014493163ded2392e5c595e971fcbb0227aee9710e5b791a8af94f6e79f1a0c722fd6ef9f0026a16b940e76dc0d816e93a8025b6e85d0e47ae5fbc45d61c214504d07c79a3cde1abec417d0b28e3960a6a53f34b0fd4f264418f4ea81c819c67952386f010b427661495ddf37f67bad0c9c1fd0235cadc7f9299307ebf65f2b34215ea836756f8d473cdaaf300ab5a09fe60a27b3d8da930f0221a5fd7d4aabe7a4c6b9345bfc60062df933a3d76f6f310efdb8bda3aaf6689c0959a3b882bee580ea9f57f75abf5162f7d6ad60759d70f20771133a9aab626b53a4bc75723996f81454cebba4e45438963ba913af3bdde53985d98dc8fe0a4d732d49986ea2c87d20f19e41539bb5005b34625558b5262a94d2dd9581faa8423374ba2e2e70473c898586d0f6d9a1f6626c7f0140e4cf2a5333110423c0601d3d1a1bc8093d6abb3cd65c08506ca6b8cf14c602de67696f3b49d3df480babd22ce4e5e6e4e85e5d2baab542aaee21423ac5b15048a3d2c89baee4badec9633e20cf1c1a7ff28c5e90460576adb77b4e4fea61a30a5cb76c5d1697185194d0383bc6b501f97e6d41bb0394c6d59f340db6286d821c2bb0aba19927c08ccfd07a54b43c58d85993fa77fc384bfe5de6fcc68cf9dd9b6c8aa81575e381b3f1bcc8ddcaaf0a6da7c9a9c18dbf49f2046f2cf47ff48b6f6f47ec7b63ee733d0f0dff888ee4ad6214da09d35cb61f76f34ddfdd9a19e4e4b1ab42bd36a8159521b597dec6d58b807c7f82ed8b5ab978ce777f4823f87a49466bdbe811895f720b3d37525230ccd3ea49e811f319f4922edd3a44c25b3ed8056f68b5ed714127e1210c8059155e4f7f7cb2a09f28a51977680530c403b09706634df43c906cd4529eb5382164cb5dbad2a9b73bae0a5b4a5d71b4fddc9e89139b8fb9ffccd55a289d7613ac4b24b75aaabf34f75275330f58e708ed55ee61a023ad756c00e3ed1ab729f838f18649967de81aa3a46a36ed182d5a8baab805e4f6b2ca9a58e512f8877903b1835808cf8de8504bea530efa2d96770ed465ab0d8dd4d075669adc010790d2f2fc3f3756140da5b0beead3433d07332c65531d9323d8c291006116de8f563880529ca2ca3195e2142d03d5e683ad6d8b274a29f06f87f401c6f565db39cb2304996ab3df3f8030b7cc2d43c744d372fc65df08b0cf826deb81e2f29d7c50678e5bcae0a0829059532ec4dcdce27c41e3af6d1375a910857e34aaa0c1ba9b7aebf33121df42ecd27b0d874675490022b823a5b02de426dcc93fd2cabc679b8bcfc5e6dbf4cfd76515071c4100e06c8bd9af2a8b21c9e50907d79b81dee285cbedd439d7c0fd4f582aafaad20e5df2eea989392a1b5e1896ff5d83339a2c38fd77a62aaa914386f9cf11069d8e47d66465558db5c03cebfee7643be7de33685d2d0fcee3184e49d8643c3c3a110fbeb84075186ae701b5a7cd704bb9a4bd91bb6f843eadb08e9ad4faddfebefcda55e2315ded082d72470ac596e1f491ae61771d9595f1f3993115b44ab8f9d4082e4a188f08dafbccbbe31e2b093c51c7cd6156aac7f4e2baa3de240af7d5407d59ea81723f7b8ce23fc70269c3e69174c043166f2fea93f8969cdf38ad78174102bf72653c788dba2afd5cdb809283ac9c525285f68ff915f619f6bdd201a8f6ac5ee70d9deb4a5c84c5d6572efe620d61c6a138ffa907d36a8431adf112e9e4124ace9e6c3f3b0df28be99783fd71c495145375e6f4fcc516544509b8cd910be035d9152f3d4620fc85c5a56b2e3a055a83af8a0ce75f7f70e3515d974b40c53c56b21c716e07c6c3b5d8472956f13a07f6aac7beafe7cf1c584b37a739d1d1171c66278922a36358352ddff0f64676de06668a66bd9515c392f419a4dc2228266f4c8240a27fc86aa67b4e26ba0164db204657c65eee09726ca209ff4c7959faf9c7aac75b18bb7c35de8521d66596b5d93d1d1509ad21c554f4063eaa6a3ee14b6b6198205a1aec9862d49e88b1e2650758dd191cb80debe2ca891e47d7561e98b8328da75f7c82e19bd8b0707df95e3bb9b1ee3d6ddbb6d8f39b330be0df4e44760f4b75531858e8b9db4db3cd855efe3d00bf4b8228e06d9870ddf84771e64e37f82514"}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r3, 0x0, 0x100000000000042) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x1b, {}, 0x0, 0x0, 0xffffffff, 0x0, "1dcc79dc871c727f5161ac2a8e4cc9840bf9758bd451be073ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9", [0x0, 0x804]}) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) 20:42:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4068aea3, &(0x7f0000000280)={{0x0, 0x0, 0x80}, "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", "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"}) 20:42:27 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x8, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x0, 0x0}]}) 20:42:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070200"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024001d0d00"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff000000000b0001006d756c7469710000080002"], 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd1d, 0x0, 0x0, {0x0, 0x0, 0x1100, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}]}, 0x40}}, 0x40000) [ 3227.666179][T30273] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3227.677900][T30273] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3227.688016][T30273] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3227.750428][T30276] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 20:42:27 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xee00, 0x0, 0x400) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r7, 0x0, 0x0) write$6lowpan_enable(r7, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x50, r6, 0x100000001) write$cgroup_pid(r1, &(0x7f0000000100)=0xffffffffffffffff, 0x12) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x803dc, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 20:42:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) [ 3227.801531][T30281] loop7: detected capacity change from 0 to 1036 20:42:27 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) [ 3227.996135][T30294] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 20:42:28 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000602bf640200e010100000100030109021b00010000000009040000013026d1000905010020"], 0x0) [ 3228.118258][T30054] usb 5-1: new high-speed USB device number 100 using dummy_hcd 20:42:28 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) signalfd(r0, &(0x7f00000002c0), 0x8) r1 = syz_open_dev$vcsa(&(0x7f0000000240), 0x6, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r3 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000057e00)={0x0, [], 0x0, "65da1eea9f6c19"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000058e00)={0x0, 0x0, "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", "4524d1ece1a1cdd495eb73cb0178981c216232f6f7a0f2f09d8305461fed6fcd67f8e9ade662eeec98004340a28c340265c70ba15374919dd0241b9d88f0afe259eef830665b96d95bc8d29f984c1337e9273062851c9bd3de27cfe0ddca61aff71c413b67be9e5d1d3c3ec79dd25ce8fcc7ff341af64aeebe7b8cfe28ac11984f11f72e3959907a88ce2e34303132eb7b011d4d64981b58377d9d3e9af4e81ddb1abf0aad4a3ebe944f33a2c6786558dc291e9a185dff762a0d5e40066e9ec999d3fa7ce328a51c84d65fef2fdedeb53e15cb0cb7229713d40c5c08be68fc6896ff747ac5ca77c1fc7b07c377661d7b241374cbcb6da8328a7913549ea4e33c8e91eae816f38083a31b326cec27d5bed1b17687e56274994d53e3be99ef280a0395dead374c00cf9a8d664f351f8ed5274eee2219eeedb24fde85ed7234190e838b1cc484bebfd9cae1fe8c80208e5499c78bcfbc1a622a7d86991505c95a0895c790f2066655604b678a499349a71f42a98c0d1dba0a421d34a5132ab30256393beefc258ad37d00683d0f8bc6cde5c96b7a0771f8d855386fde9b49ae8874c5f4e3970599601d91cc2c0d72df7fa8ba325c1aeafac30f43a5aa5358b2adbd4b1fdfffb42787dbea64ed8bfb9da43e007f54fb54fdd85187a5b47c1d873a987e0c245a997f63eb4af17a7a6f9809db4258c0d4f6358ddf2471dc4f98f7b02742e6e4ec909a67453111f7317f75314b48cc1f90bc18ed60874b615aff5cc9c6160aff73ac7811c4342299fc41ba6bbfb2a7532c89fa13eff3f9e29bfc374780dad9072b3e1aab78f0284849bd1ebcc23d16fd5cdf2d43f06bcab5da1cb57cd3786ab46c7089eef816f1529b8e9de67b6bc7bd8892f957f3e350adaa3602160f172c56736f0ca6a343607447a05fb5671d44dc4270b628a3a11c05c5ff3aa827d4c19be16207d2341e0a0e76e75ce5729cf65669b4a06d3e4461ad09d8d48e76c5fb6dc3d98958e14c816c4825b49ba9854a54faf6ff154556776316370d36f450f8ad8e55e5776120b6dae4ae5073b5999b5989f2b5d89b69e72f146e57b6e4f602626e1f34f4212f5714a3c7fd508c516080fd498f1192538f52fea01d3fca1e424903b862347237e73a9138de1108dbe217b696448be5d1902a58643e2301bf262218f601bb0f6bfabc5a0219b36b944fa5d299e64d35f2047de6eea15b4b5427fe144f5fb1e60c9d36a101f1734e84eff199cfe5233b4bf9b0eb8bb7a8e9114975f5d493c8f2804aa0e3c9c5d73e5d064f70615dbef582c94ee67cb96d39f2390861002f8ff285a0a886e68d8f42ef5f9058fbc5324fbbb720144041657b392ce85dd00a00b8a6ceaa40537ff3d11f52088b7ee4cc7515f19597fb270ad4e574467985c97c15ae9386eedc05f2ff60cbff1e862e3bafd0fe51239337c439aa7d335f2353d2696896f4a2f3ee007016521c4d69e24437c7d9aa6c5575bb9bac31603524d06afcf6411b4d9b445c3f4a733e9d0091b3bc17ec64581973768f14003db136fa30d6d64b0b99f16d1a65597ffb184e83e0df8147495452b240f551793b356d002c7e47e935fc5c20eca31773b7bb2c3dc039326ef835fdcab8895983639e12e0aa575ee5f5f1a6f6775a916476feefe883bceb63e59d1b1145b21865318d8a0cd5af1eca120b05387cab4ff096e88f4420fbbd3a7ac43b636008aca3cb00e2eabd48410d53afb126bdd042f7b47b5627fde4095478e1426a8e0afe76c5789724880fd5893835f6b18f2719c1b6b62fad6d1e31b4598629852cc6c0fcac6226596359badf75388079aa612f00e7e700909216ca159fcc768264c56c8416f6d6c1c390b93322d021f11f40e5002b56343916c1735958525ad139ac37f701938377f2d372f1d112a98c29102b6e892f660e9599bd06607af1a7521067bcee1a4d42a50f3696eb1052a23f9156d27685c47e92800e99e7d5199beb0be66076701d61aff8206dff31140fd3946b713af9e29ec67be8883e5a30c9f83680b37c6dffaaf8eeb6a7bde7b6ce7cda01bd38ca74d742c8b39bb101ad6183d0d34e05e647412b2d98f3dc7bb6aeb2e5f79e3d9ae505260941f1f9de675910ce1ab8ec890e1f197e2eaa3742a61aa9ec104de627d6551a0ad82470b4ef64eb81612223b7e6bfa0f2beda3a4013b8c71b255154a72758a91e11daf3b57ae5f4e48e175db7f1004938e57556f34c69538317750f94dba236d8824ecb1ef82bc504b52b79b01fb14fc455f94834584dd19977371688c2be27c3d2c314644a6ec5d38d5fceac833978fd2fb1a85468f1186963840957fd927a6ce9e10341850d3debc3b6079a562f7b89c229e7831a75db357e24fe7601d11dc7e484c619a48a9fe794a82370f312749cc7f4222fc84b2f52b67ccccbf1e0897a36fffc0f99f7c4ce533df3a5caa05689b1e9970d2199059b448b0a3123087a5d9b9029da466e380b695b3c507b8f5d84ef37e39fd4deb3a13290b6dc7292db04e113475353eccdc15141da7133ac0438d5eb3076ed6c103b71f80ab3fb07ba5d2d389e76a474c074bff1513792e5a0ea2b648aa5dc37b637dc4392b4deeee4528c5e57995edb7452f9ddeda7b863b20c62bb84c1cf8753dfc66ce2a95e8ccf8078af8071ba84139195249a3ce12517e1a347fc94ddf4cff5d47546ce3d15504213cf7e1fd7ccb784ed797be018c02233a00bb22432a54e23ebee0c3cd46cf1eee21a7c42555322132c7fb881eef4a590b8b5976fa6cd9acb561dd88a7f89ac31a3286e13d71a5c960ea4961a0e96efc011220f4eb2d8891aa1cac2b7245d21642399bfb1a90ca4ebfcbbfb2893d3009acb9bc23dea1902a47da4551fee410b450c2d911368cc153455affdb6866b8092ac9ffafe22d0c6cf7f890b4e497674b8d386ecddd7713ce38977de52f4273453510ab455255659b813fd8c373cb8efe2db2542f1feec06d0efc9cda1d4f86d13fdc4a0fdb307c7849fe004c3fcd26d8b30d26f7326bb09b401e923c868fe7f8e5ab3ef932a82a039e2eaccc2958b4329bc96fd777ad2d95d0c312c38ce864e35b869c3ca892b50cef9fd0d56824f99a5816b29ab4ff8a9034e659f2bee233146e82a4fd48f26ec9a4b43087a4015b77754cd1ae1dd6ba1282a24ca5cc3f787dce34c7cd705f084bf1b18fb94ac8803d8a21463955bf0c34cd1a96418e79fe6e38e0a1dd9278541230ffb32fdf9b19ae51e91b566c88a01974da014493163ded2392e5c595e971fcbb0227aee9710e5b791a8af94f6e79f1a0c722fd6ef9f0026a16b940e76dc0d816e93a8025b6e85d0e47ae5fbc45d61c214504d07c79a3cde1abec417d0b28e3960a6a53f34b0fd4f264418f4ea81c819c67952386f010b427661495ddf37f67bad0c9c1fd0235cadc7f9299307ebf65f2b34215ea836756f8d473cdaaf300ab5a09fe60a27b3d8da930f0221a5fd7d4aabe7a4c6b9345bfc60062df933a3d76f6f310efdb8bda3aaf6689c0959a3b882bee580ea9f57f75abf5162f7d6ad60759d70f20771133a9aab626b53a4bc75723996f81454cebba4e45438963ba913af3bdde53985d98dc8fe0a4d732d49986ea2c87d20f19e41539bb5005b34625558b5262a94d2dd9581faa8423374ba2e2e70473c898586d0f6d9a1f6626c7f0140e4cf2a5333110423c0601d3d1a1bc8093d6abb3cd65c08506ca6b8cf14c602de67696f3b49d3df480babd22ce4e5e6e4e85e5d2baab542aaee21423ac5b15048a3d2c89baee4badec9633e20cf1c1a7ff28c5e90460576adb77b4e4fea61a30a5cb76c5d1697185194d0383bc6b501f97e6d41bb0394c6d59f340db6286d821c2bb0aba19927c08ccfd07a54b43c58d85993fa77fc384bfe5de6fcc68cf9dd9b6c8aa81575e381b3f1bcc8ddcaaf0a6da7c9a9c18dbf49f2046f2cf47ff48b6f6f47ec7b63ee733d0f0dff888ee4ad6214da09d35cb61f76f34ddfdd9a19e4e4b1ab42bd36a8159521b597dec6d58b807c7f82ed8b5ab978ce777f4823f87a49466bdbe811895f720b3d37525230ccd3ea49e811f319f4922edd3a44c25b3ed8056f68b5ed714127e1210c8059155e4f7f7cb2a09f28a51977680530c403b09706634df43c906cd4529eb5382164cb5dbad2a9b73bae0a5b4a5d71b4fddc9e89139b8fb9ffccd55a289d7613ac4b24b75aaabf34f75275330f58e708ed55ee61a023ad756c00e3ed1ab729f838f18649967de81aa3a46a36ed182d5a8baab805e4f6b2ca9a58e512f8877903b1835808cf8de8504bea530efa2d96770ed465ab0d8dd4d075669adc010790d2f2fc3f3756140da5b0beead3433d07332c65531d9323d8c291006116de8f563880529ca2ca3195e2142d03d5e683ad6d8b274a29f06f87f401c6f565db39cb2304996ab3df3f8030b7cc2d43c744d372fc65df08b0cf826deb81e2f29d7c50678e5bcae0a0829059532ec4dcdce27c41e3af6d1375a910857e34aaa0c1ba9b7aebf33121df42ecd27b0d874675490022b823a5b02de426dcc93fd2cabc679b8bcfc5e6dbf4cfd76515071c4100e06c8bd9af2a8b21c9e50907d79b81dee285cbedd439d7c0fd4f582aafaad20e5df2eea989392a1b5e1896ff5d83339a2c38fd77a62aaa914386f9cf11069d8e47d66465558db5c03cebfee7643be7de33685d2d0fcee3184e49d8643c3c3a110fbeb84075186ae701b5a7cd704bb9a4bd91bb6f843eadb08e9ad4faddfebefcda55e2315ded082d72470ac596e1f491ae61771d9595f1f3993115b44ab8f9d4082e4a188f08dafbccbbe31e2b093c51c7cd6156aac7f4e2baa3de240af7d5407d59ea81723f7b8ce23fc70269c3e69174c043166f2fea93f8969cdf38ad78174102bf72653c788dba2afd5cdb809283ac9c525285f68ff915f619f6bdd201a8f6ac5ee70d9deb4a5c84c5d6572efe620d61c6a138ffa907d36a8431adf112e9e4124ace9e6c3f3b0df28be99783fd71c495145375e6f4fcc516544509b8cd910be035d9152f3d4620fc85c5a56b2e3a055a83af8a0ce75f7f70e3515d974b40c53c56b21c716e07c6c3b5d8472956f13a07f6aac7beafe7cf1c584b37a739d1d1171c66278922a36358352ddff0f64676de06668a66bd9515c392f419a4dc2228266f4c8240a27fc86aa67b4e26ba0164db204657c65eee09726ca209ff4c7959faf9c7aac75b18bb7c35de8521d66596b5d93d1d1509ad21c554f4063eaa6a3ee14b6b6198205a1aec9862d49e88b1e2650758dd191cb80debe2ca891e47d7561e98b8328da75f7c82e19bd8b0707df95e3bb9b1ee3d6ddbb6d8f39b330be0df4e44760f4b75531858e8b9db4db3cd855efe3d00bf4b8228e06d9870ddf84771e64e37f82514"}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r3, 0x0, 0x100000000000042) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x1b, {}, 0x0, 0x0, 0xffffffff, 0x0, "1dcc79dc871c727f5161ac2a8e4cc9840bf9758bd451be073ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9", [0x0, 0x804]}) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) [ 3228.388416][T30054] usb 5-1: Using ep0 maxpacket: 32 20:42:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) [ 3228.408569][T25046] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 3228.525364][T30307] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3228.535394][T30054] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3228.563256][T30054] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 3228.613360][T30054] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3228.998858][T25046] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.00 [ 3229.008373][T25046] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 3229.016487][T25046] usb 6-1: Manufacturer: syz [ 3229.021460][T25046] usb 6-1: SerialNumber: syz [ 3229.029189][T25046] usb 6-1: config 0 descriptor?? [ 3229.073787][T25046] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input81 [ 3229.098413][T30054] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3229.107503][T30054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3229.138249][T30054] usb 5-1: Product: syz [ 3229.142513][T30054] usb 5-1: SerialNumber: syz [ 3229.278710][T25046] usb 6-1: USB disconnect, device number 54 [ 3229.498448][T30054] usb 5-1: 0:2 : does not exist [ 3229.547606][T30054] usb 5-1: USB disconnect, device number 100 20:42:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) 20:42:37 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xee00, 0x0, 0x400) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r7, 0x0, 0x0) write$6lowpan_enable(r7, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x50, r6, 0x100000001) write$cgroup_pid(r1, &(0x7f0000000100)=0xffffffffffffffff, 0x12) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x803dc, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 20:42:37 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) signalfd(r0, &(0x7f00000002c0), 0x8) r1 = syz_open_dev$vcsa(&(0x7f0000000240), 0x6, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r3 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000057e00)={0x0, [], 0x0, "65da1eea9f6c19"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000058e00)={0x0, 0x0, "66310df55ddd68c1a4e139c47788637ab26cdcbd93b170cbe2524ca3bf1668d563152ff9503e27fcf070dc3212aac2828c9e21d3301b691042be7ec4bee70f6c147d5741da78e279b735c8023894ae7034448bc09c56415adf4c78d184105b20b5eb3558f242b6e01a0e29dc7339df2cbb9636a036e68001d719b0ab6a20dd1d2e575cb9c8cd0f8f8cc74153361c6e1e67daa1ded9c1c15f7b70c26763756148d4804909c6c1d178c5cff99dfe867d1e2ad68d670b3d8da5d401fae003a84628936fa2f158394dfd2493ae509ad5461982217b96a7a4bd4edbc2c6ef235e5534ac0127f205b2b93c1b00bd8a3ed969c3cfac87a92e9272401aa9853192ffd3db", "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"}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r3, 0x0, 0x100000000000042) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x1b, {}, 0x0, 0x0, 0xffffffff, 0x0, "1dcc79dc871c727f5161ac2a8e4cc9840bf9758bd451be073ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9", [0x0, 0x804]}) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) 20:42:37 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x8, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x0, 0x0}]}) 20:42:37 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xee00, 0x0, 0x400) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r7, 0x0, 0x0) write$6lowpan_enable(r7, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x50, r6, 0x100000001) write$cgroup_pid(r1, &(0x7f0000000100)=0xffffffffffffffff, 0x12) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x803dc, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 20:42:37 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xee00, 0x0, 0x400) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r7, 0x0, 0x0) write$6lowpan_enable(r7, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x50, r6, 0x100000001) write$cgroup_pid(r1, &(0x7f0000000100)=0xffffffffffffffff, 0x12) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x803dc, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) [ 3237.097194][T30319] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3237.358708][T30143] usb 5-1: new high-speed USB device number 101 using dummy_hcd 20:42:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) [ 3237.618915][T30143] usb 5-1: Using ep0 maxpacket: 32 [ 3237.738587][T30143] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3237.768546][T30143] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 3237.843572][T30143] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3237.854103][T30332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 20:42:38 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) signalfd(r0, &(0x7f00000002c0), 0x8) r1 = syz_open_dev$vcsa(&(0x7f0000000240), 0x6, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r3 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000057e00)={0x0, [], 0x0, "65da1eea9f6c19"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000058e00)={0x0, 0x0, "66310df55ddd68c1a4e139c47788637ab26cdcbd93b170cbe2524ca3bf1668d563152ff9503e27fcf070dc3212aac2828c9e21d3301b691042be7ec4bee70f6c147d5741da78e279b735c8023894ae7034448bc09c56415adf4c78d184105b20b5eb3558f242b6e01a0e29dc7339df2cbb9636a036e68001d719b0ab6a20dd1d2e575cb9c8cd0f8f8cc74153361c6e1e67daa1ded9c1c15f7b70c26763756148d4804909c6c1d178c5cff99dfe867d1e2ad68d670b3d8da5d401fae003a84628936fa2f158394dfd2493ae509ad5461982217b96a7a4bd4edbc2c6ef235e5534ac0127f205b2b93c1b00bd8a3ed969c3cfac87a92e9272401aa9853192ffd3db", "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"}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r3, 0x0, 0x100000000000042) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x1b, {}, 0x0, 0x0, 0xffffffff, 0x0, "1dcc79dc871c727f5161ac2a8e4cc9840bf9758bd451be073ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9", [0x0, 0x804]}) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) 20:42:38 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xee00, 0x0, 0x400) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r7, 0x0, 0x0) write$6lowpan_enable(r7, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x50, r6, 0x100000001) write$cgroup_pid(r1, &(0x7f0000000100)=0xffffffffffffffff, 0x12) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x803dc, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 20:42:38 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xee00, 0x0, 0x400) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r7, 0x0, 0x0) write$6lowpan_enable(r7, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x50, r6, 0x100000001) write$cgroup_pid(r1, &(0x7f0000000100)=0xffffffffffffffff, 0x12) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x803dc, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 20:42:38 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) signalfd(r0, &(0x7f00000002c0), 0x8) r1 = syz_open_dev$vcsa(&(0x7f0000000240), 0x6, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r3 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000057e00)={0x0, [], 0x0, "65da1eea9f6c19"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000058e00)={0x0, 0x0, "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", "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"}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r3, 0x0, 0x100000000000042) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x1b, {}, 0x0, 0x0, 0xffffffff, 0x0, "1dcc79dc871c727f5161ac2a8e4cc9840bf9758bd451be073ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9", [0x0, 0x804]}) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) [ 3238.308455][T30143] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3238.364258][T30143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3238.443231][T30143] usb 5-1: Product: syz [ 3238.495877][T30143] usb 5-1: SerialNumber: syz 20:42:38 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) signalfd(r0, &(0x7f00000002c0), 0x8) r1 = syz_open_dev$vcsa(&(0x7f0000000240), 0x6, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r3 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000057e00)={0x0, [], 0x0, "65da1eea9f6c19"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000058e00)={0x0, 0x0, "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", "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"}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r3, 0x0, 0x100000000000042) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x1b, {}, 0x0, 0x0, 0xffffffff, 0x0, "1dcc79dc871c727f5161ac2a8e4cc9840bf9758bd451be073ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9", [0x0, 0x804]}) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) [ 3238.898664][T30143] usb 5-1: 0:2 : does not exist 20:42:39 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) signalfd(r0, &(0x7f00000002c0), 0x8) r1 = syz_open_dev$vcsa(&(0x7f0000000240), 0x6, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r3 = memfd_create(&(0x7f0000000300)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000040)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000057e00)={0x0, [], 0x0, "65da1eea9f6c19"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000058e00)={0x0, 0x0, "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", "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"}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r3, 0x0, 0x100000000000042) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x1b, {}, 0x0, 0x0, 0xffffffff, 0x0, "1dcc79dc871c727f5161ac2a8e4cc9840bf9758bd451be073ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9", [0x0, 0x804]}) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) [ 3239.002579][T30143] usb 5-1: USB disconnect, device number 101 20:42:39 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xee00, 0x0, 0x400) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r7, 0x0, 0x0) write$6lowpan_enable(r7, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x50, r6, 0x100000001) write$cgroup_pid(r1, &(0x7f0000000100)=0xffffffffffffffff, 0x12) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x803dc, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 20:42:39 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000440)='`Z\xe5\x1f$\x83{`:0ULav\xaa\xde\x0e\x8fZu\xf2\xdf\xa8}\xf6{\xbfZ\xe1\xd0\xfa\xe5N\xd8\x94h\"W\xb1i}\xb3T[\x17\xec\xc3\xbb\xb1\x01;\ro\xeaC\x02\xfaRx(\x83\x17\xbe\xae;\"\x91\x9b\xfam\x06\xb4\xcd\xeeS\xe3\x92\x81\xfah\x9dm\xfc\x11\a\x89\x85\x82]\xea_x\xc0\xa4\xa9\xe8[\x17\x95Z\xa6\xb7-\xb3\x9d\xcd9\xd0!\x82\xbd\xdc\"t\xd6)gb\x1c\xd1\xa2\xbf\xc2y\x94H\x1f\xe5}\xd3\xce\n\xdf\x85\xb1(\x1e}\xf2\xb6\xb3`[\xcc\x98f\xfc\xa2\xa1=\xac\x17\xe5\x83{^Z[T\xa6\x18\x04\x1b\")r\x85[\xf2Z\xf1\x01\x8f9x') creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) [ 3239.386928][ T27] audit: type=1804 audit(1677184959.349:152): pid=30356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm=605AE51F24837B603A30554C6176AA name="/newroot/1146/file0/bus" dev="ramfs" ino=141206 res=1 errno=0 20:42:39 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x8, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x0, 0x0}]}) 20:42:39 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xee00, 0x0, 0x400) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r7, 0x0, 0x0) write$6lowpan_enable(r7, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x50, r6, 0x100000001) write$cgroup_pid(r1, &(0x7f0000000100)=0xffffffffffffffff, 0x12) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x803dc, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) [ 3240.008395][T30055] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 3240.288512][T30055] usb 5-1: Using ep0 maxpacket: 32 [ 3240.419838][T30055] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3240.465065][T30055] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 3240.510692][T30055] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3240.928545][T30055] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3240.937660][T30055] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3240.946365][T30055] usb 5-1: Product: syz [ 3240.952045][T30055] usb 5-1: SerialNumber: syz [ 3241.298526][T30055] usb 5-1: 0:2 : does not exist [ 3241.317075][T30055] usb 5-1: USB disconnect, device number 102 [ 3241.349257][T30354] udevd[30354]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 20:42:48 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xee00, 0x0, 0x400) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r7, 0x0, 0x0) write$6lowpan_enable(r7, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x50, r6, 0x100000001) write$cgroup_pid(r1, &(0x7f0000000100)=0xffffffffffffffff, 0x12) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x803dc, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 20:42:48 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000440)='`Z\xe5\x1f$\x83{`:0ULav\xaa\xde\x0e\x8fZu\xf2\xdf\xa8}\xf6{\xbfZ\xe1\xd0\xfa\xe5N\xd8\x94h\"W\xb1i}\xb3T[\x17\xec\xc3\xbb\xb1\x01;\ro\xeaC\x02\xfaRx(\x83\x17\xbe\xae;\"\x91\x9b\xfam\x06\xb4\xcd\xeeS\xe3\x92\x81\xfah\x9dm\xfc\x11\a\x89\x85\x82]\xea_x\xc0\xa4\xa9\xe8[\x17\x95Z\xa6\xb7-\xb3\x9d\xcd9\xd0!\x82\xbd\xdc\"t\xd6)gb\x1c\xd1\xa2\xbf\xc2y\x94H\x1f\xe5}\xd3\xce\n\xdf\x85\xb1(\x1e}\xf2\xb6\xb3`[\xcc\x98f\xfc\xa2\xa1=\xac\x17\xe5\x83{^Z[T\xa6\x18\x04\x1b\")r\x85[\xf2Z\xf1\x01\x8f9x') creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:42:48 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000180)=0x7b25fcf2) mmap$snddsp_status(&(0x7f0000001000/0x4000)=nil, 0x1000, 0x1, 0x400b013, r0, 0x82000000) 20:42:48 executing program 2: r0 = memfd_create(&(0x7f0000000480)='\xb9\xecm1\xc1\xf8\xa6\x8d\xc1\xe2zMN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000800)=ANY=[], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003080)={0x2020}, 0x2020) io_setup(0x4, &(0x7f0000001b00)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) memfd_create(&(0x7f0000000040)='/dev/rfkill\x00', 0x0) 20:42:48 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = getpid() ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x563fe973) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='net/ipv6_route\x00') pipe2(&(0x7f0000000180), 0x80) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$setown(r0, 0x8, r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r6, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r7, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x404c041) read$alg(r8, &(0x7f0000001e80)=""/4096, 0xfed8) recvmmsg(r8, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb6}}], 0x3ffffffffffffa4, 0x0, 0x0) write$binfmt_script(r8, &(0x7f00000004c0)=ANY=[], 0xfec8) syz_open_dev$admmidi(&(0x7f00000001c0), 0x1f, 0x103442) 20:42:48 executing program 4: mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x10, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0xa}}], 0x40000000000017f, 0x0) 20:42:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000080)={0x8}) 20:42:48 executing program 4: unshare(0x6c060000) unshare(0x40000080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x20000014}) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0xc00) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r5}]}, 0x3c}}, 0x0) [ 3248.297391][ T27] audit: type=1804 audit(1677184968.259:153): pid=30382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm=605AE51F24837B603A30554C6176AA name="/newroot/1147/file0/bus" dev="ramfs" ino=141523 res=1 errno=0 20:42:48 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000440)='`Z\xe5\x1f$\x83{`:0ULav\xaa\xde\x0e\x8fZu\xf2\xdf\xa8}\xf6{\xbfZ\xe1\xd0\xfa\xe5N\xd8\x94h\"W\xb1i}\xb3T[\x17\xec\xc3\xbb\xb1\x01;\ro\xeaC\x02\xfaRx(\x83\x17\xbe\xae;\"\x91\x9b\xfam\x06\xb4\xcd\xeeS\xe3\x92\x81\xfah\x9dm\xfc\x11\a\x89\x85\x82]\xea_x\xc0\xa4\xa9\xe8[\x17\x95Z\xa6\xb7-\xb3\x9d\xcd9\xd0!\x82\xbd\xdc\"t\xd6)gb\x1c\xd1\xa2\xbf\xc2y\x94H\x1f\xe5}\xd3\xce\n\xdf\x85\xb1(\x1e}\xf2\xb6\xb3`[\xcc\x98f\xfc\xa2\xa1=\xac\x17\xe5\x83{^Z[T\xa6\x18\x04\x1b\")r\x85[\xf2Z\xf1\x01\x8f9x') creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 20:42:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x15}]}}}]}, 0x3c}}, 0x0) 20:42:48 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000440)='`Z\xe5\x1f$\x83{`:0ULav\xaa\xde\x0e\x8fZu\xf2\xdf\xa8}\xf6{\xbfZ\xe1\xd0\xfa\xe5N\xd8\x94h\"W\xb1i}\xb3T[\x17\xec\xc3\xbb\xb1\x01;\ro\xeaC\x02\xfaRx(\x83\x17\xbe\xae;\"\x91\x9b\xfam\x06\xb4\xcd\xeeS\xe3\x92\x81\xfah\x9dm\xfc\x11\a\x89\x85\x82]\xea_x\xc0\xa4\xa9\xe8[\x17\x95Z\xa6\xb7-\xb3\x9d\xcd9\xd0!\x82\xbd\xdc\"t\xd6)gb\x1c\xd1\xa2\xbf\xc2y\x94H\x1f\xe5}\xd3\xce\n\xdf\x85\xb1(\x1e}\xf2\xb6\xb3`[\xcc\x98f\xfc\xa2\xa1=\xac\x17\xe5\x83{^Z[T\xa6\x18\x04\x1b\")r\x85[\xf2Z\xf1\x01\x8f9x') creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) [ 3248.475590][ T27] audit: type=1804 audit(1677184968.439:154): pid=30391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm=605AE51F24837B603A30554C6176AA name="/newroot/1148/file0/bus" dev="ramfs" ino=141245 res=1 errno=0 [ 3248.601217][ T27] audit: type=1804 audit(1677184968.569:155): pid=30399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm=605AE51F24837B603A30554C6176AA name="/newroot/1149/file0/bus" dev="ramfs" ino=141568 res=1 errno=0 20:42:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) [ 3248.739671][T30404] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3248.818399][T30404] 8021q: adding VLAN 0 to HW filter on device bond6 [ 3248.903885][T30405] bond6: (slave bridge14): making interface the new active one [ 3248.951225][T30405] bond6: (slave bridge14): Enslaving as an active interface with an up link [ 3248.989645][T30143] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 3249.020998][T30408] bond6: (slave macvlan2): Enslaving as an active interface with an up link 20:43:03 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xee00, 0x0, 0x400) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r7, 0x0, 0x0) write$6lowpan_enable(r7, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x50, r6, 0x100000001) write$cgroup_pid(r1, &(0x7f0000000100)=0xffffffffffffffff, 0x12) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x803dc, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 20:43:03 executing program 0: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)='7', 0x1}], 0x1}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[], 0x0, 0x100204}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 20:43:03 executing program 2: request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3L*shrVdn;De', 0x0) 20:43:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0xd0, 0xd0, 0x448, 0x300, 0x1b8, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x44}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:43:03 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = getpid() ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x563fe973) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='net/ipv6_route\x00') pipe2(&(0x7f0000000180), 0x80) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$setown(r0, 0x8, r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r6, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r7, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x404c041) read$alg(r8, &(0x7f0000001e80)=""/4096, 0xfed8) recvmmsg(r8, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb6}}], 0x3ffffffffffffa4, 0x0, 0x0) write$binfmt_script(r8, &(0x7f00000004c0)=ANY=[], 0xfec8) syz_open_dev$admmidi(&(0x7f00000001c0), 0x1f, 0x103442) 20:43:03 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = getpid() ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x563fe973) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='net/ipv6_route\x00') pipe2(&(0x7f0000000180), 0x80) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$setown(r0, 0x8, r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r6, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r7, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x404c041) read$alg(r8, &(0x7f0000001e80)=""/4096, 0xfed8) recvmmsg(r8, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb6}}], 0x3ffffffffffffa4, 0x0, 0x0) write$binfmt_script(r8, &(0x7f00000004c0)=ANY=[], 0xfec8) syz_open_dev$admmidi(&(0x7f00000001c0), 0x1f, 0x103442) 20:43:03 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000280)={&(0x7f0000000000), 0x17, &(0x7f0000000240)={0x0}}, 0x0) [ 3263.466854][T30426] xt_TPROXY: Can be used only with -p tcp or -p udp 20:43:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x300}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 20:43:03 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf65"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x0) 20:43:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x97c}], 0x2c) 20:43:03 executing program 2: syz_emit_ethernet(0x22, &(0x7f0000000240)={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}}}}}, 0x0) 20:43:03 executing program 2: pause() [ 3263.879867][T30143] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 3264.128299][T30143] usb 4-1: Using ep0 maxpacket: 8 [ 3264.248391][T30143] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 3264.261577][T30143] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3264.287454][T30143] usb 4-1: config 0 has no interface number 0 [ 3264.303420][T30143] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 3264.330968][T30143] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3264.360555][T30143] usb 4-1: config 0 interface 52 has no altsetting 0 [ 3264.529005][T30143] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 3264.543016][T30143] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 3264.562086][T30143] usb 4-1: Product: syz [ 3264.571067][T30143] usb 4-1: Manufacturer: syz [ 3264.581134][T30143] usb 4-1: SerialNumber: syz [ 3264.602931][T30143] usb 4-1: config 0 descriptor?? [ 3264.870505][T30143] input: syz syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input82 [ 3265.077954][T30055] usb 4-1: USB disconnect, device number 69 [ 3265.098114][ C0] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 3271.139619][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3271.145972][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 20:43:18 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = getpid() ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x563fe973) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='net/ipv6_route\x00') pipe2(&(0x7f0000000180), 0x80) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$setown(r0, 0x8, r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r6, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r7, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x404c041) read$alg(r8, &(0x7f0000001e80)=""/4096, 0xfed8) recvmmsg(r8, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb6}}], 0x3ffffffffffffa4, 0x0, 0x0) write$binfmt_script(r8, &(0x7f00000004c0)=ANY=[], 0xfec8) syz_open_dev$admmidi(&(0x7f00000001c0), 0x1f, 0x103442) 20:43:18 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x7788, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) socket$inet(0x2, 0x2000080001, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) r5 = getpid() write$input_event(0xffffffffffffffff, &(0x7f00000005c0)={{0x77359400}, 0x3}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, 0x0) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 20:43:18 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000034c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003740)={0x4c, 0x0, &(0x7f0000003600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20:43:18 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf65"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x0) 20:43:18 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = getpid() ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x563fe973) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='net/ipv6_route\x00') pipe2(&(0x7f0000000180), 0x80) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$setown(r0, 0x8, r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r6, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r7, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x404c041) read$alg(r8, &(0x7f0000001e80)=""/4096, 0xfed8) recvmmsg(r8, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb6}}], 0x3ffffffffffffa4, 0x0, 0x0) write$binfmt_script(r8, &(0x7f00000004c0)=ANY=[], 0xfec8) syz_open_dev$admmidi(&(0x7f00000001c0), 0x1f, 0x103442) 20:43:18 executing program 1: r0 = socket(0x200000100000011, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x1966, 0x4) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000012c0)="c0d1181e28a2a069a466c775a724", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="5d26c4b3c1d6"}, 0x14) recvmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x2000) 20:43:18 executing program 2: syz_usb_connect(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001a82200000904ab0002ca743600090503032000ff00ef080584024b"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) [ 3279.018563][T25046] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 3279.228548][T30055] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 3279.278134][T25046] usb 4-1: Using ep0 maxpacket: 8 [ 3279.428650][T25046] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 3279.446439][T25046] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3279.497148][T25046] usb 4-1: config 0 has no interface number 0 [ 3279.535706][T25046] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 3279.614534][T25046] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3279.629426][T25046] usb 4-1: config 0 interface 52 has no altsetting 0 [ 3279.648689][T30055] usb 3-1: config 168 has an invalid interface number: 171 but max is 0 [ 3279.660835][T30055] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 3279.674333][T30055] usb 3-1: config 168 has no interface number 0 [ 3279.684255][T30055] usb 3-1: config 168 interface 171 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 20:43:19 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x7788, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) socket$inet(0x2, 0x2000080001, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) r5 = getpid() write$input_event(0xffffffffffffffff, &(0x7f00000005c0)={{0x77359400}, 0x3}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, 0x0) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 3279.705982][T30055] usb 3-1: config 168 interface 171 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 3279.799077][T25046] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 3279.821095][T25046] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 3279.863819][T25046] usb 4-1: Product: syz [ 3279.878955][T25046] usb 4-1: Manufacturer: syz [ 3279.895452][T25046] usb 4-1: SerialNumber: syz [ 3279.927726][T25046] usb 4-1: config 0 descriptor?? [ 3280.019018][T30055] usb 3-1: string descriptor 0 read error: -22 [ 3280.025498][T30055] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 3280.053104][T30055] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3280.155713][T30055] adutux 3-1:168.171: ADU100 now attached to /dev/usb/adutux0 [ 3280.201881][T25046] input: syz syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input83 20:43:20 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = getpid() ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x563fe973) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='net/ipv6_route\x00') pipe2(&(0x7f0000000180), 0x80) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$setown(r0, 0x8, r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r6, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r7, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x404c041) read$alg(r8, &(0x7f0000001e80)=""/4096, 0xfed8) recvmmsg(r8, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb6}}], 0x3ffffffffffffa4, 0x0, 0x0) write$binfmt_script(r8, &(0x7f00000004c0)=ANY=[], 0xfec8) syz_open_dev$admmidi(&(0x7f00000001c0), 0x1f, 0x103442) [ 3280.371130][T25046] usb 3-1: USB disconnect, device number 58 [ 3280.471547][T29507] usb 4-1: USB disconnect, device number 70 [ 3280.478704][ C1] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 20:43:20 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = getpid() ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x563fe973) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='net/ipv6_route\x00') pipe2(&(0x7f0000000180), 0x80) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$setown(r0, 0x8, r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r6, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r7, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x404c041) read$alg(r8, &(0x7f0000001e80)=""/4096, 0xfed8) recvmmsg(r8, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb6}}], 0x3ffffffffffffa4, 0x0, 0x0) write$binfmt_script(r8, &(0x7f00000004c0)=ANY=[], 0xfec8) syz_open_dev$admmidi(&(0x7f00000001c0), 0x1f, 0x103442) 20:43:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x7788, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) socket$inet(0x2, 0x2000080001, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) r5 = getpid() write$input_event(0xffffffffffffffff, &(0x7f00000005c0)={{0x77359400}, 0x3}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, 0x0) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 20:43:20 executing program 2: syz_usb_connect(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001a82200000904ab0002ca743600090503032000ff00ef080584024b"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) 20:43:21 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf65"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x0) [ 3281.218443][T29507] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 3281.348538][T30143] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 3281.588481][T29507] usb 3-1: config 168 has an invalid interface number: 171 but max is 0 [ 3281.598358][T30143] usb 4-1: Using ep0 maxpacket: 8 [ 3281.611233][T29507] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 3281.651109][T29507] usb 3-1: config 168 has no interface number 0 [ 3281.679848][T29507] usb 3-1: config 168 interface 171 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 3281.718625][T30143] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 3281.745323][T30143] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3281.771273][T29507] usb 3-1: config 168 interface 171 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt 20:43:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x7788, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) socket$inet(0x2, 0x2000080001, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) r5 = getpid() write$input_event(0xffffffffffffffff, &(0x7f00000005c0)={{0x77359400}, 0x3}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, 0x0) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 3281.826081][T30143] usb 4-1: config 0 has no interface number 0 [ 3281.868757][T30143] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 3281.948385][T30143] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3282.027864][T30143] usb 4-1: config 0 interface 52 has no altsetting 0 [ 3282.089067][T29507] usb 3-1: string descriptor 0 read error: -22 [ 3282.096125][T29507] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 3282.139187][T29507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3282.228739][T30143] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 3282.242408][T29507] adutux 3-1:168.171: ADU100 now attached to /dev/usb/adutux0 [ 3282.250386][T30143] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 20:43:22 executing program 4: syz_usb_connect(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001a82200000904ab0002ca743600090503032000ff00ef080584024b"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) [ 3282.294625][T30143] usb 4-1: Product: syz [ 3282.321392][T30143] usb 4-1: Manufacturer: syz [ 3282.344686][T30143] usb 4-1: SerialNumber: syz 20:43:22 executing program 5: syz_usb_connect(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001a82200000904ab0002ca743600090503032000ff00ef080584024b"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) [ 3282.373224][T30143] usb 4-1: config 0 descriptor?? [ 3282.530113][T25046] usb 3-1: USB disconnect, device number 59 [ 3282.648466][T30054] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 3282.650370][T30143] input: syz syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input84 [ 3282.739069][T30055] usb 6-1: new low-speed USB device number 55 using dummy_hcd [ 3282.952103][T25046] usb 4-1: USB disconnect, device number 71 [ 3282.958176][ C0] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 20:43:23 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x7788, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) socket$inet(0x2, 0x2000080001, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) r5 = getpid() write$input_event(0xffffffffffffffff, &(0x7f00000005c0)={{0x77359400}, 0x3}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, 0x0) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 3283.098610][T30054] usb 5-1: config 168 has an invalid interface number: 171 but max is 0 [ 3283.112709][T30054] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 3283.140658][T30054] usb 5-1: config 168 has no interface number 0 [ 3283.158029][T30054] usb 5-1: config 168 interface 171 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 3283.159856][T30055] usb 6-1: config 168 has an invalid interface number: 171 but max is 0 [ 3283.180490][T30054] usb 5-1: config 168 interface 171 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 3283.209293][T30055] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 3283.228144][T30055] usb 6-1: config 168 has no interface number 0 [ 3283.234640][T30055] usb 6-1: config 168 interface 171 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 3283.247416][T30055] usb 6-1: config 168 interface 171 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 3283.458636][T30054] usb 5-1: string descriptor 0 read error: -22 [ 3283.465135][T30054] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 3283.508314][T30054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3283.519009][T30055] usb 6-1: string descriptor 0 read error: -22 [ 3283.539073][T30055] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 3283.598438][T30055] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3283.624182][T30054] adutux 5-1:168.171: ADU100 now attached to /dev/usb/adutux0 [ 3283.682479][T30055] adutux 6-1:168.171: ADU100 now attached to /dev/usb/adutux1 [ 3283.862060][T29507] usb 5-1: USB disconnect, device number 103 [ 3283.942890][T30143] usb 6-1: USB disconnect, device number 55 20:43:29 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x7788, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) socket$inet(0x2, 0x2000080001, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) r5 = getpid() write$input_event(0xffffffffffffffff, &(0x7f00000005c0)={{0x77359400}, 0x3}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, 0x0) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 20:43:29 executing program 2: syz_usb_connect(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001a82200000904ab0002ca743600090503032000ff00ef080584024b"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) 20:43:29 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06070000e816952301090224000100007e000904340102d469e70009058acf65"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x0) 20:43:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x7788, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) socket$inet(0x2, 0x2000080001, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) r5 = getpid() write$input_event(0xffffffffffffffff, &(0x7f00000005c0)={{0x77359400}, 0x3}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, 0x0) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 20:43:29 executing program 4: syz_usb_connect(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001a82200000904ab0002ca743600090503032000ff00ef080584024b"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) 20:43:29 executing program 5: syz_usb_connect(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001a82200000904ab0002ca743600090503032000ff00ef080584024b"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) [ 3289.548413][T30141] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 3289.556172][T30143] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 3289.564162][T29507] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 3289.578390][T30054] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 3289.828540][T29507] usb 4-1: Using ep0 maxpacket: 8 [ 3289.949659][T30143] usb 3-1: config 168 has an invalid interface number: 171 but max is 0 [ 3289.958269][T30141] usb 5-1: config 168 has an invalid interface number: 171 but max is 0 [ 3289.966884][T29507] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 3289.978872][T30054] usb 6-1: config 168 has an invalid interface number: 171 but max is 0 [ 3289.988647][T29507] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3289.993594][T30054] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 3290.009330][T30141] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 3290.016847][T30143] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 3290.026937][T30054] usb 6-1: config 168 has no interface number 0 [ 3290.033727][T30141] usb 5-1: config 168 has no interface number 0 [ 3290.040467][T30143] usb 3-1: config 168 has no interface number 0 [ 3290.047805][T29507] usb 4-1: config 0 has no interface number 0 [ 3290.054281][T30141] usb 5-1: config 168 interface 171 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 3290.065750][T30143] usb 3-1: config 168 interface 171 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 3290.079490][T29507] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 3290.092140][T30054] usb 6-1: config 168 interface 171 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 3290.101069][T30141] usb 5-1: config 168 interface 171 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 3290.115113][T30143] usb 3-1: config 168 interface 171 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 3290.125689][T30054] usb 6-1: config 168 interface 171 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 3290.135846][T29507] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 20:43:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x7788, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) socket$inet(0x2, 0x2000080001, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) r5 = getpid() write$input_event(0xffffffffffffffff, &(0x7f00000005c0)={{0x77359400}, 0x3}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, 0x0) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 3290.198173][T29507] usb 4-1: config 0 interface 52 has no altsetting 0 [ 3290.358944][T29507] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e8.00 [ 3290.372310][T29507] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 3290.393568][T29507] usb 4-1: Product: syz [ 3290.403549][T29507] usb 4-1: Manufacturer: syz [ 3290.416854][T29507] usb 4-1: SerialNumber: syz [ 3290.422483][T30141] usb 5-1: string descriptor 0 read error: -22 [ 3290.422561][T30143] usb 3-1: string descriptor 0 read error: -22 [ 3290.435212][T30141] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 3290.438674][T30054] usb 6-1: string descriptor 0 read error: -22 [ 3290.445216][T30141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3290.459731][T30143] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 3290.477743][T29507] usb 4-1: config 0 descriptor?? [ 3290.485390][T30143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3290.531435][T30141] adutux 5-1:168.171: ADU100 now attached to /dev/usb/adutux0 [ 3290.554345][T30143] adutux 3-1:168.171: ADU100 now attached to /dev/usb/adutux1 [ 3290.564691][T30054] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 3290.603464][T30054] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3290.701595][T30054] adutux 6-1:168.171: ADU100 now attached to /dev/usb/adutux2 [ 3290.740603][T29507] input: syz syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input85 [ 3290.841121][T30054] usb 5-1: USB disconnect, device number 104 [ 3290.859895][T25046] usb 3-1: USB disconnect, device number 60 [ 3290.985083][T30055] usb 6-1: USB disconnect, device number 56 [ 3291.094706][T30052] usb 4-1: USB disconnect, device number 72 20:43:31 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x1000000, 0x11dc, 0x0, '\x00', [{}, {0xffffffff}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 20:43:31 executing program 4: syz_usb_connect(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001a82200000904ab0002ca743600090503032000ff00ef080584024b"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) 20:43:31 executing program 2: syz_usb_connect(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001a82200000904ab0002ca743600090503032000ff00ef080584024b"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) 20:43:31 executing program 5: syz_usb_connect(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001a82200000904ab0002ca743600090503032000ff00ef080584024b"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) [ 3291.648349][T30141] usb 5-1: new low-speed USB device number 105 using dummy_hcd 20:43:31 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/136, 0x88}, {&(0x7f0000000500)=""/73, 0x49}], 0x3, &(0x7f00000005c0)=""/74, 0x4a}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/224, 0xe0}, 0x2}, {{&(0x7f00000008c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000a00)}, 0xd3c}, {{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000001300)=""/239, 0xef}, {&(0x7f0000000c40)=""/183, 0xb7}], 0x3}, 0x7fff}, {{&(0x7f0000000dc0)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001040)=""/86, 0x56}}], 0x5, 0x2020, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000080)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$cgroup(r4, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x3) [ 3291.698871][T29507] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 3291.818299][T30143] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 3292.028944][T30141] usb 5-1: config 168 has an invalid interface number: 171 but max is 0 [ 3292.045360][T30141] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 3292.068722][T29507] usb 3-1: config 168 has an invalid interface number: 171 but max is 0 [ 3292.079719][T30141] usb 5-1: config 168 has no interface number 0 [ 3292.093525][T29507] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 3292.108745][T30141] usb 5-1: config 168 interface 171 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 3292.120022][T29507] usb 3-1: config 168 has no interface number 0 [ 3292.126613][T29507] usb 3-1: config 168 interface 171 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 3292.138296][T30141] usb 5-1: config 168 interface 171 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 3292.158777][T29507] usb 3-1: config 168 interface 171 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 3292.189387][T30143] usb 6-1: config 168 has an invalid interface number: 171 but max is 0 [ 3292.203095][T30143] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 3292.220219][T30143] usb 6-1: config 168 has no interface number 0 [ 3292.235674][T30143] usb 6-1: config 168 interface 171 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 3292.267013][T30143] usb 6-1: config 168 interface 171 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 3292.408563][T30141] usb 5-1: string descriptor 0 read error: -22 [ 3292.415027][T29507] usb 3-1: string descriptor 0 read error: -22 [ 3292.424740][T30141] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 3292.434183][T29507] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 3292.464066][T29507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3292.472923][T30141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3292.538556][T30143] usb 6-1: string descriptor 0 read error: -22 [ 3292.546011][T30143] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 3292.568002][T30141] adutux 5-1:168.171: ADU100 now attached to /dev/usb/adutux0 [ 3292.579586][T29507] adutux 3-1:168.171: ADU100 now attached to /dev/usb/adutux1 [ 3292.623287][T30143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3292.701706][T30143] adutux 6-1:168.171: ADU100 now attached to /dev/usb/adutux2 [ 3292.813494][T30052] usb 5-1: USB disconnect, device number 105 [ 3292.855189][T30055] usb 3-1: USB disconnect, device number 61 [ 3292.957573][T30141] usb 6-1: USB disconnect, device number 57 20:43:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x7788, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) socket$inet(0x2, 0x2000080001, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) r5 = getpid() write$input_event(0xffffffffffffffff, &(0x7f00000005c0)={{0x77359400}, 0x3}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, 0x0) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 20:43:42 executing program 0: r0 = socket(0x28, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x28, 0x2, 0x0, &(0x7f0000000040)=0x600) 20:43:42 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/136, 0x88}, {&(0x7f0000000500)=""/73, 0x49}], 0x3, &(0x7f00000005c0)=""/74, 0x4a}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/224, 0xe0}, 0x2}, {{&(0x7f00000008c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000a00)}, 0xd3c}, {{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000001300)=""/239, 0xef}, {&(0x7f0000000c40)=""/183, 0xb7}], 0x3}, 0x7fff}, {{&(0x7f0000000dc0)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001040)=""/86, 0x56}}], 0x5, 0x2020, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000080)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$cgroup(r4, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x3) 20:43:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="410f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:43:42 executing program 2: r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={r2, 0x0, 0x20}, &(0x7f0000000300)=0x18) 20:43:42 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 20:43:42 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x2, 0x40000000}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x20000000, 0x4) 20:43:42 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0) 20:43:42 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x0, @fd, 0x26, &(0x7f0000000200)=[{&(0x7f0000000100)="07a5810d3a6a7ae30e7969c5dc040f4f66ca63c19353deeb6782f85de68d42ca5a6ec054064884371b457678591685dba7b5d74ce780fb6c9ad4b7d34dfad510546cc0c5eafbfef32ffbdbac48b66c2fe9a4a4cf423c4cba7430f9689a09b0bcac38ccd48599c5ffa671881ec9998d7187a8586d75cc2a27268ead16d6b8136d82c411d9c34ba5da2ee993de2aca2d2a823ba50e53a47d92bd002f44f5435fea1ceac8e77068b1ab3bc94ba69a960f2147628ec85b47fc60026428ca90bd5c7c0aa12d8f82b1f96bd5009f572d5d119f6496b40cd244e5f6b77e5c64b4231a7be92b", 0xe2}], 0x1, 0x2, 0x0, {0x2}}, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x210000, 0x0) write$binfmt_script(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c65302f66696c6530206d656d6f72792e63757272656e7400fea5656d6f72792e63757272656e74000a1bf20414823d106dcc7ec5f0b8f1d9a84f286179f6d202f75aaf38f34d9934a59b35de5b75e6bae00a0588800104000000000000ff43633932badb7885a60561d995e8803bad87965d3e4c7e3d03a356343ab77f02e36a2133db473b7174199e229ccedd8057a2e515930c75d3e40c61b21178ef24ceb66530f4b210f64e927c237368bcdcb94be28b268cefa325a12c4415d690a871f813"], 0x11c) io_uring_enter(r0, 0x2a, 0x7, 0x1, 0x0, 0xee414776) 20:43:43 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='consume_skb\x00'}, 0x10) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x8a) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fc0) [ 3303.182783][T30558] kvm [30556]: vcpu0, guest rIP: 0x9181 disabled perfctr wrmsr: 0xc1 data 0x0 [ 3303.199142][T29507] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 3303.213003][T30558] kvm [30556]: vcpu0, guest rIP: 0x9281 disabled perfctr wrmsr: 0xc2 data 0x0 20:43:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="410f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3303.538837][T30578] cgroup: fork rejected by pids controller in /syz2 [ 3303.610202][T29507] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3303.631308][T29507] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 3303.785739][T30580] kvm [30579]: vcpu0, guest rIP: 0x9181 disabled perfctr wrmsr: 0xc1 data 0x0 [ 3303.812617][T30580] kvm [30579]: vcpu0, guest rIP: 0x9281 disabled perfctr wrmsr: 0xc2 data 0x0 [ 3303.839170][T29507] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3303.855783][T29507] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3303.884286][T29507] usb 6-1: Product: syz [ 3303.894885][T29507] usb 6-1: Manufacturer: syz [ 3303.908742][T29507] usb 6-1: SerialNumber: syz 20:43:43 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x0, @fd, 0x26, &(0x7f0000000200)=[{&(0x7f0000000100)="07a5810d3a6a7ae30e7969c5dc040f4f66ca63c19353deeb6782f85de68d42ca5a6ec054064884371b457678591685dba7b5d74ce780fb6c9ad4b7d34dfad510546cc0c5eafbfef32ffbdbac48b66c2fe9a4a4cf423c4cba7430f9689a09b0bcac38ccd48599c5ffa671881ec9998d7187a8586d75cc2a27268ead16d6b8136d82c411d9c34ba5da2ee993de2aca2d2a823ba50e53a47d92bd002f44f5435fea1ceac8e77068b1ab3bc94ba69a960f2147628ec85b47fc60026428ca90bd5c7c0aa12d8f82b1f96bd5009f572d5d119f6496b40cd244e5f6b77e5c64b4231a7be92b", 0xe2}], 0x1, 0x2, 0x0, {0x2}}, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x210000, 0x0) write$binfmt_script(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c65302f66696c6530206d656d6f72792e63757272656e7400fea5656d6f72792e63757272656e74000a1bf20414823d106dcc7ec5f0b8f1d9a84f286179f6d202f75aaf38f34d9934a59b35de5b75e6bae00a0588800104000000000000ff43633932badb7885a60561d995e8803bad87965d3e4c7e3d03a356343ab77f02e36a2133db473b7174199e229ccedd8057a2e515930c75d3e40c61b21178ef24ceb66530f4b210f64e927c237368bcdcb94be28b268cefa325a12c4415d690a871f813"], 0x11c) io_uring_enter(r0, 0x2a, 0x7, 0x1, 0x0, 0xee414776) [ 3304.198860][T30565] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3304.860326][T30565] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3305.108597][T29507] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3305.115070][T29507] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3305.128506][T29507] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 3305.330338][T29507] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 3305.343413][T29507] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 3305.388706][T29507] usb 6-1: USB disconnect, device number 58 [ 3305.395516][T29507] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) 20:43:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x7788, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) socket$inet(0x2, 0x2000080001, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) r5 = getpid() write$input_event(0xffffffffffffffff, &(0x7f00000005c0)={{0x77359400}, 0x3}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, 0x0) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 20:43:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="410f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:43:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/136, 0x88}, {&(0x7f0000000500)=""/73, 0x49}], 0x3, &(0x7f00000005c0)=""/74, 0x4a}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/224, 0xe0}, 0x2}, {{&(0x7f00000008c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000a00)}, 0xd3c}, {{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000001300)=""/239, 0xef}, {&(0x7f0000000c40)=""/183, 0xb7}], 0x3}, 0x7fff}, {{&(0x7f0000000dc0)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001040)=""/86, 0x56}}], 0x5, 0x2020, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000080)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$cgroup(r4, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x3) 20:43:52 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x0, @fd, 0x26, &(0x7f0000000200)=[{&(0x7f0000000100)="07a5810d3a6a7ae30e7969c5dc040f4f66ca63c19353deeb6782f85de68d42ca5a6ec054064884371b457678591685dba7b5d74ce780fb6c9ad4b7d34dfad510546cc0c5eafbfef32ffbdbac48b66c2fe9a4a4cf423c4cba7430f9689a09b0bcac38ccd48599c5ffa671881ec9998d7187a8586d75cc2a27268ead16d6b8136d82c411d9c34ba5da2ee993de2aca2d2a823ba50e53a47d92bd002f44f5435fea1ceac8e77068b1ab3bc94ba69a960f2147628ec85b47fc60026428ca90bd5c7c0aa12d8f82b1f96bd5009f572d5d119f6496b40cd244e5f6b77e5c64b4231a7be92b", 0xe2}], 0x1, 0x2, 0x0, {0x2}}, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x210000, 0x0) write$binfmt_script(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c65302f66696c6530206d656d6f72792e63757272656e7400fea5656d6f72792e63757272656e74000a1bf20414823d106dcc7ec5f0b8f1d9a84f286179f6d202f75aaf38f34d9934a59b35de5b75e6bae00a0588800104000000000000ff43633932badb7885a60561d995e8803bad87965d3e4c7e3d03a356343ab77f02e36a2133db473b7174199e229ccedd8057a2e515930c75d3e40c61b21178ef24ceb66530f4b210f64e927c237368bcdcb94be28b268cefa325a12c4415d690a871f813"], 0x11c) io_uring_enter(r0, 0x2a, 0x7, 0x1, 0x0, 0xee414776) 20:43:52 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 20:43:52 executing program 0: add_key(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000001a80)='C', 0x1, 0xfffffffffffffffb) 20:43:52 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0xc0201, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000440)={0x7}, 0x7) 20:43:52 executing program 0: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, 0x0) [ 3312.598575][T29507] usb 6-1: new high-speed USB device number 59 using dummy_hcd 20:43:52 executing program 0: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, 0x0) [ 3312.831147][T31499] kvm [31490]: vcpu0, guest rIP: 0x9181 disabled perfctr wrmsr: 0xc1 data 0x0 [ 3312.858726][T31499] kvm [31490]: vcpu0, guest rIP: 0x9281 disabled perfctr wrmsr: 0xc2 data 0x0 [ 3312.968716][T29507] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3313.009782][T29507] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 20:43:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="410f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3313.198580][T29507] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3313.217035][T29507] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3313.248914][T29507] usb 6-1: Product: syz [ 3313.271108][T29507] usb 6-1: Manufacturer: syz [ 3313.289544][T29507] usb 6-1: SerialNumber: syz 20:43:53 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x0, @fd, 0x26, &(0x7f0000000200)=[{&(0x7f0000000100)="07a5810d3a6a7ae30e7969c5dc040f4f66ca63c19353deeb6782f85de68d42ca5a6ec054064884371b457678591685dba7b5d74ce780fb6c9ad4b7d34dfad510546cc0c5eafbfef32ffbdbac48b66c2fe9a4a4cf423c4cba7430f9689a09b0bcac38ccd48599c5ffa671881ec9998d7187a8586d75cc2a27268ead16d6b8136d82c411d9c34ba5da2ee993de2aca2d2a823ba50e53a47d92bd002f44f5435fea1ceac8e77068b1ab3bc94ba69a960f2147628ec85b47fc60026428ca90bd5c7c0aa12d8f82b1f96bd5009f572d5d119f6496b40cd244e5f6b77e5c64b4231a7be92b", 0xe2}], 0x1, 0x2, 0x0, {0x2}}, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x210000, 0x0) write$binfmt_script(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c65302f66696c6530206d656d6f72792e63757272656e7400fea5656d6f72792e63757272656e74000a1bf20414823d106dcc7ec5f0b8f1d9a84f286179f6d202f75aaf38f34d9934a59b35de5b75e6bae00a0588800104000000000000ff43633932badb7885a60561d995e8803bad87965d3e4c7e3d03a356343ab77f02e36a2133db473b7174199e229ccedd8057a2e515930c75d3e40c61b21178ef24ceb66530f4b210f64e927c237368bcdcb94be28b268cefa325a12c4415d690a871f813"], 0x11c) io_uring_enter(r0, 0x2a, 0x7, 0x1, 0x0, 0xee414776) 20:43:53 executing program 0: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, 0x0) [ 3313.564482][T31498] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3313.730044][T31903] kvm [31889]: vcpu0, guest rIP: 0x9181 disabled perfctr wrmsr: 0xc1 data 0x0 [ 3313.757161][T31903] kvm [31889]: vcpu0, guest rIP: 0x9281 disabled perfctr wrmsr: 0xc2 data 0x0 [ 3314.259379][T31498] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3314.508426][T29507] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3314.514948][T29507] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3314.538222][T29507] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 3314.718504][T29507] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 3314.749650][T29507] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 3314.797033][T29507] usb 6-1: USB disconnect, device number 59 [ 3314.812759][T29507] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) 20:44:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0xa}}], 0x40000000000017f, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200)=0x9, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0xffff, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x2, 0x0, &(0x7f0000000000)) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x4}, 0xfffffdec) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/rtsx_usb', 0x123c40, 0x20) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000240)=@req3={0xffff0000, 0x143, 0x2, 0x0, 0x4, 0x3, 0x7}, 0x1c) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000001c0)=[{0x34, 0x22, 0x0, 0x5aa8}, {0x2}, {0xa, 0xff, 0x42, 0x7fffffff}]}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb902021d080400007c09e8fe55a10a0015800400142603600e1208000f9f03000401a8001600a4000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xcb}], 0x1}, 0x0) 20:44:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/136, 0x88}, {&(0x7f0000000500)=""/73, 0x49}], 0x3, &(0x7f00000005c0)=""/74, 0x4a}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/224, 0xe0}, 0x2}, {{&(0x7f00000008c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000a00)}, 0xd3c}, {{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000001300)=""/239, 0xef}, {&(0x7f0000000c40)=""/183, 0xb7}], 0x3}, 0x7fff}, {{&(0x7f0000000dc0)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001040)=""/86, 0x56}}], 0x5, 0x2020, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000080)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$cgroup(r4, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x3) 20:44:03 executing program 0: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x80047453, 0x0) 20:44:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0xddffffff00000000, 0xe, 0x1f}) 20:44:03 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="7f0a00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 20:44:03 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 20:44:03 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d76, &(0x7f0000001480)) 20:44:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003f40)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x4d}]}}]}}]}, 0x44}}, 0x0) [ 3323.895206][T32519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 20:44:03 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, 0x0) ppoll(&(0x7f0000000480)=[{r2}, {}], 0x2, &(0x7f0000000580)={0x0, 0x989680}, &(0x7f00000005c0), 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(r3, &(0x7f0000000a00)={0x2020}, 0x2020) write$damon_init_regions(r1, &(0x7f0000000280)={{}, {}, {' ', 0x5}}, 0x3f) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0xff00) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x10200, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="74f6f087cdd4762ab412838453e582466ce9d9129c91593dfdc0c5931cfc9f21a26be1fcf0511bbf64b1a7a97350c5c9dba5d4cb85f8a46c449d5ac5f221aaa4c6fc4285cbb1edbfc002067271174dcea99fdbc4779d759cfe", 0x59, 0x4, &(0x7f0000000340)={0xa, 0x4e22, 0x5, @mcast2, 0x7fff}, 0x1c) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) fallocate(0xffffffffffffffff, 0x6e, 0xffffffffffffff4b, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='cdg\x00', 0x4) sendfile(r2, r3, 0x0, 0x8000002b) 20:44:04 executing program 2: pipe2$watch_queue(&(0x7f0000000680), 0x80) pselect6(0x40, &(0x7f0000000480), &(0x7f0000000580)={0x9}, 0x0, &(0x7f0000000640), 0x0) [ 3323.988360][T29507] usb 6-1: new high-speed USB device number 60 using dummy_hcd 20:44:04 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000040)={{}, 0x4}) [ 3324.358822][T29507] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3324.401389][T29507] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 20:44:04 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000020c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2068) [ 3324.628470][T29507] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3324.668236][T29507] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3324.688338][T29507] usb 6-1: Product: syz [ 3324.692684][T29507] usb 6-1: Manufacturer: syz [ 3324.697453][T29507] usb 6-1: SerialNumber: syz [ 3324.953737][T32510] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3325.630009][T32510] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3325.888671][T29507] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3325.895220][T29507] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3325.918362][T29507] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 3326.100294][T29507] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 3326.128259][T29507] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 3326.174939][T29507] usb 6-1: USB disconnect, device number 60 [ 3326.189100][T29507] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 3332.581094][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3332.587475][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 20:44:17 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x7, 0x0) 20:44:17 executing program 1: r0 = syz_io_uring_setup(0x31bf, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_RENAMEAT={0x23, 0x18, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x5c147d46be5c0d9c}, 0x0) fstat(r3, &(0x7f0000000300)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 20:44:17 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) 20:44:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x40, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}]}]}, 0x40}}, 0x0) 20:44:17 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000020c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2068) 20:44:17 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 20:44:17 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7df8}]}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1e, 0x0, 0x0, 0x0) 20:44:17 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000020c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2068) 20:44:17 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x5, 0x10, [0x0, 0x0, 0x0, 0x0]}) 20:44:17 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000020c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2068) 20:44:17 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x5, 0x10, [0x0, 0x0, 0x0, 0x0]}) 20:44:17 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7df8}]}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1e, 0x0, 0x0, 0x0) [ 3337.518339][T30052] usb 6-1: new high-speed USB device number 61 using dummy_hcd 20:44:17 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x7, 0x0) [ 3337.928517][T30052] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3337.945740][T30052] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 3338.138741][T30052] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3338.151328][T30052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3338.169951][T30052] usb 6-1: Product: syz [ 3338.178709][T30052] usb 6-1: Manufacturer: syz [ 3338.183458][T30052] usb 6-1: SerialNumber: syz [ 3338.455270][T32546] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3339.090338][T32546] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3339.319250][T30052] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3339.325870][T30052] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3339.334469][T30052] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 3339.538603][T30052] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 3339.559285][T30052] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 3339.595064][T30052] usb 6-1: USB disconnect, device number 61 [ 3339.610921][T30052] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) 20:44:28 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, 0x14, 0x713, 0x0, 0x0, {0xa, 0x11, 0xfe, 0x0, {0xdc37}}}, 0x4c}}, 0x0) 20:44:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x5, 0x10, [0x0, 0x0, 0x0, 0x0]}) 20:44:28 executing program 4: syz_io_uring_setup(0x4851, &(0x7f0000000100)={0x0, 0x0, 0x400}, &(0x7f0000fee000/0x10000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 20:44:28 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7df8}]}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1e, 0x0, 0x0, 0x0) 20:44:28 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x7, 0x0) 20:44:28 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x7, 0x0) 20:44:28 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7df8}]}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1e, 0x0, 0x0, 0x0) 20:44:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x5, 0x10, [0x0, 0x0, 0x0, 0x0]}) 20:44:28 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058bd7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x20, 0x1, 0x3, "afe9bd"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x1, 0x3, ':G,'}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x1, 0x3, "c1fea9"}, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000940)={0x0, 0x0, 0x3, "c6e6c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "57a882"}, 0x0}) 20:44:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/25) 20:44:28 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) 20:44:28 executing program 3: mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') [ 3349.068331][ T9378] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 3349.428751][ T9378] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3349.448487][ T9378] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 3349.468266][ T9378] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 3349.477408][ T9378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3352.888475][ T9378] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 3352.897747][ T9378] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input86 [ 3352.912915][ T9378] input: failed to attach handler kbd to device input86, error: -5 [ 3352.935567][ T9378] usb 5-1: USB disconnect, device number 106 20:44:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280), 0x3b) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 20:44:37 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb0a2, 0xa0001) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8108551b, &(0x7f0000000080)) 20:44:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x400000000000003, 0x0) 20:44:37 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x7, 0x0) 20:44:37 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x7, 0x0) 20:44:37 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058bd7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x20, 0x1, 0x3, "afe9bd"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x1, 0x3, ':G,'}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x1, 0x3, "c1fea9"}, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000940)={0x0, 0x0, 0x3, "c6e6c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "57a882"}, 0x0}) 20:44:37 executing program 2: open(0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009e002206d041cc340000a00000109022400010000a0000904000001030101000921001f000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f00000001c0)={0x0, 0x0, 0xa, {0xa, 0x0, "123cf521af60f834"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, 0x0, 0x0, &(0x7f0000000540)={0x40, 0xb, 0x2, "0518"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3357.108993][T32646] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 20:44:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x7, 0xcc, 0x2b}) 20:44:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000ac0)=@bridge_delneigh={0x30, 0x1c, 0x3f54041d15004545, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x83}, [@NDA_LLADDR={0xa, 0x2, @dev}, @NDA_FDB_EXT_ATTRS={0x8, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}]}]}, 0x30}}, 0x0) [ 3357.378499][ T9378] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 3357.718227][T30052] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 3357.760509][ T9378] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3357.784633][ T9378] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 20:44:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000ac0)=@bridge_delneigh={0x30, 0x1c, 0x3f54041d15004545, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x83}, [@NDA_LLADDR={0xa, 0x2, @dev}, @NDA_FDB_EXT_ATTRS={0x8, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}]}]}, 0x30}}, 0x0) [ 3357.818429][ T9378] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 3357.847517][ T9378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:44:38 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)) 20:44:38 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1c, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x7, 0x0) [ 3358.008229][T30052] usb 3-1: Using ep0 maxpacket: 32 [ 3358.128701][T30052] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3358.151165][T30052] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3358.258651][T30052] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3358.267866][T30052] usb 3-1: New USB device strings: Mfr=10, Product=0, SerialNumber=0 [ 3358.288403][T30052] usb 3-1: Manufacturer: syz [ 3358.295268][T30052] usb 3-1: config 0 descriptor?? [ 3358.339770][T30052] hub 3-1:0.0: USB hub found [ 3358.548355][T30052] hub 3-1:0.0: 18 ports detected [ 3358.553498][T30052] usb 3-1: selecting invalid altsetting 1 [ 3358.571997][T30052] hub 3-1:0.0: Using single TT (err -22) [ 3358.606985][T30052] hub 3-1:0.0: insufficient power available to use all downstream ports [ 3359.381592][T30052] usb 3-1: USB disconnect, device number 62 [ 3361.289298][ T9378] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 3361.310133][ T9378] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input87 [ 3361.335826][ T9378] input: failed to attach handler kbd to device input87, error: -5 [ 3361.380002][ T9378] usb 5-1: USB disconnect, device number 107 20:44:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) 20:44:47 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) 20:44:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000ac0)=@bridge_delneigh={0x30, 0x1c, 0x3f54041d15004545, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x83}, [@NDA_LLADDR={0xa, 0x2, @dev}, @NDA_FDB_EXT_ATTRS={0x8, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}]}]}, 0x30}}, 0x0) 20:44:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @local}}}, 0x90) 20:44:47 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) io_submit(r1, 0x3, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="c1", 0x1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x2}]) 20:44:47 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058bd7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x20, 0x1, 0x3, "afe9bd"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x1, 0x3, ':G,'}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x1, 0x3, "c1fea9"}, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000940)={0x0, 0x0, 0x3, "c6e6c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "57a882"}, 0x0}) 20:44:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001140)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x44}}, 0x0) 20:44:47 executing program 5: keyctl$link(0x16, 0x0, 0x0) 20:44:47 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000606010100000000000000000300000605000100070000000900020072797a30000000000900020073797a300000000005000100070000000900030073797a3000000000050001000700000005"], 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x208200) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x7b0c0000, 0x0) 20:44:47 executing program 5: r0 = fsopen(&(0x7f0000000000)='ext3\x00', 0x0) close(r0) 20:44:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r1, 0x5501) [ 3367.871768][ T27] audit: type=1804 audit(1677185087.839:156): pid=32693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/1141/file0/bus" dev="ramfs" ino=143051 res=1 errno=0 [ 3367.894887][ T9378] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 3367.931112][T32695] input: syz1 as /devices/virtual/input/input88 20:44:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x5865, {@in6_addr=@mcast2}}}]}, 0x38}}, 0x0) [ 3368.258273][ T9378] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3368.278439][ T9378] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 3368.288707][ T9378] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 3368.297946][ T9378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3371.758355][ T9378] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 3371.767043][ T9378] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input89 [ 3371.790935][ T9378] input: failed to attach handler kbd to device input89, error: -5 [ 3371.828254][ T9378] usb 5-1: USB disconnect, device number 108 20:44:56 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000606010100000000000000000300000605000100070000000900020072797a30000000000900020073797a300000000005000100070000000900030073797a3000000000050001000700000005"], 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x208200) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x7b0c0000, 0x0) 20:44:56 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffffffffff7f}, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000180), 0x140900, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2) 20:44:56 executing program 5: r0 = syz_io_uring_setup(0x464a, &(0x7f0000000100), &(0x7f0000000000/0xe000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0xc14]}, 0x8) 20:44:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000ac0)=@bridge_delneigh={0x30, 0x1c, 0x3f54041d15004545, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x83}, [@NDA_LLADDR={0xa, 0x2, @dev}, @NDA_FDB_EXT_ATTRS={0x8, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}]}]}, 0x30}}, 0x0) 20:44:56 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000606010100000000000000000300000605000100070000000900020072797a30000000000900020073797a300000000005000100070000000900030073797a3000000000050001000700000005"], 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x208200) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x7b0c0000, 0x0) 20:44:56 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058bd7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x20, 0x1, 0x3, "afe9bd"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x1, 0x3, ':G,'}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x1, 0x3, "c1fea9"}, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000940)={0x0, 0x0, 0x3, "c6e6c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "57a882"}, 0x0}) [ 3376.160147][ T27] audit: type=1804 audit(1677185096.129:157): pid=32715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/1142/file0/bus" dev="ramfs" ino=143090 res=1 errno=0 20:44:56 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffffffffff7f}, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000180), 0x140900, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2) [ 3376.348090][T30055] usb 5-1: new high-speed USB device number 109 using dummy_hcd 20:44:56 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffffffffff7f}, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000180), 0x140900, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2) 20:44:56 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffffffffff7f}, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000180), 0x140900, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2) 20:44:56 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000606010100000000000000000300000605000100070000000900020072797a30000000000900020073797a300000000005000100070000000900030073797a3000000000050001000700000005"], 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x208200) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x7b0c0000, 0x0) [ 3376.768829][T30055] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3376.805303][T30055] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 20:44:56 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000606010100000000000000000300000605000100070000000900020072797a30000000000900020073797a300000000005000100070000000900030073797a3000000000050001000700000005"], 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x208200) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x7b0c0000, 0x0) [ 3376.839513][T30055] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 3376.970158][T30055] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3377.014921][ T27] audit: type=1804 audit(1677185096.979:158): pid=32727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/1023/file0/bus" dev="ramfs" ino=143118 res=1 errno=0 [ 3377.099729][ T27] audit: type=1804 audit(1677185097.059:159): pid=32730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/1180/file0/bus" dev="ramfs" ino=143120 res=1 errno=0 20:44:57 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000606010100000000000000000300000605000100070000000900020072797a30000000000900020073797a300000000005000100070000000900030073797a3000000000050001000700000005"], 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x208200) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x7b0c0000, 0x0) [ 3377.561647][ T27] audit: type=1804 audit(1677185097.529:160): pid=32733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/1143/file0/bus" dev="ramfs" ino=143503 res=1 errno=0 [ 3380.356786][ T27] audit: type=1804 audit(1677185100.319:161): pid=32737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/newroot/601/file0/bus" dev="ramfs" ino=143140 res=1 errno=0 [ 3380.538550][T30055] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 3380.549709][T30055] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input90 [ 3380.576950][T30055] input: failed to attach handler kbd to device input90, error: -5 [ 3380.618932][T30055] usb 5-1: USB disconnect, device number 109 20:45:05 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000606010100000000000000000300000605000100070000000900020072797a30000000000900020073797a300000000005000100070000000900030073797a3000000000050001000700000005"], 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x208200) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x7b0c0000, 0x0) 20:45:05 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000606010100000000000000000300000605000100070000000900020072797a30000000000900020073797a300000000005000100070000000900030073797a3000000000050001000700000005"], 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x208200) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x7b0c0000, 0x0) 20:45:05 executing program 5: r0 = syz_io_uring_setup(0x464a, &(0x7f0000000100), &(0x7f0000000000/0xe000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0xc14]}, 0x8) 20:45:05 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000606010100000000000000000300000605000100070000000900020072797a30000000000900020073797a300000000005000100070000000900030073797a3000000000050001000700000005"], 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x208200) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x7b0c0000, 0x0) 20:45:05 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000606010100000000000000000300000605000100070000000900020072797a30000000000900020073797a300000000005000100070000000900030073797a3000000000050001000700000005"], 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x208200) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x7b0c0000, 0x0) 20:45:05 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)) [ 3385.339528][ T27] audit: type=1800 audit(1677185105.309:162): pid=32737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="ramfs" ino=143140 res=0 errno=0 20:45:05 executing program 4: syslog(0x3, &(0x7f0000000000), 0x0) [ 3385.545023][ T27] audit: type=1804 audit(1677185105.509:163): pid=32753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/1144/file0/bus" dev="ramfs" ino=143530 res=1 errno=0 20:45:05 executing program 4: clock_gettime(0x1, 0x0) [ 3385.696303][ T27] audit: type=1804 audit(1677185105.569:164): pid=32751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/1181/file0/bus" dev="ramfs" ino=143155 res=1 errno=0 20:45:05 executing program 4: io_setup(0x3732, &(0x7f0000000240)) [ 3385.864059][ T27] audit: type=1804 audit(1677185105.569:165): pid=32752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/1024/file0/bus" dev="ramfs" ino=143156 res=1 errno=0 20:45:06 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x6f8) r1 = open(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000002c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="06000000000000002e2f8ba36c653011"]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r0}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000001440)=""/215) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f00000019c0)) preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000280)=""/58, 0x3a}], 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000000)=0x80) close(r3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {r8}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "a59f7995f969f9"}) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x0) 20:45:06 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000606010100000000000000000300000605000100070000000900020072797a30000000000900020073797a300000000005000100070000000900030073797a3000000000050001000700000005"], 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x208200) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x7b0c0000, 0x0) 20:45:06 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000606010100000000000000000300000605000100070000000900020072797a30000000000900020073797a300000000005000100070000000900030073797a3000000000050001000700000005"], 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x208200) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x7b0c0000, 0x0) 20:45:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0xc, 0x2, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) [ 3386.905852][ T27] audit: type=1804 audit(1677185106.869:166): pid=300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/1025/file0/bus" dev="ramfs" ino=143183 res=1 errno=0 [ 3387.217508][ T27] audit: type=1804 audit(1677185107.179:167): pid=304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/1182/file0/bus" dev="ramfs" ino=143197 res=1 errno=0 [ 3394.019668][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3394.026170][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 20:45:16 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000606010100000000000000000300000605000100070000000900020072797a30000000000900020073797a300000000005000100070000000900030073797a3000000000050001000700000005"], 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x208200) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x7b0c0000, 0x0) 20:45:16 executing program 5: r0 = syz_io_uring_setup(0x464a, &(0x7f0000000100), &(0x7f0000000000/0xe000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0xc14]}, 0x8) 20:45:16 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x1e, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x1a1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f0000000200)=""/213, 0xd5, 0x400, 0x55}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="b8570a8ec0660f3882a104002ed9e8c0d300660f3882b00090660f38215f3cba4100b02eeebaf80c66b838e7018a66efbafc0ced7a0d0f910b", 0x39}], 0x1, 0x21, &(0x7f00000000c0)=[@dstype3={0x7, 0x3}, @dstype0={0x6, 0x5}], 0x2) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000000c0)=0x6, 0x4) r7 = dup(0xffffffffffffffff) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 20:45:16 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x6f8) r1 = open(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000002c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="06000000000000002e2f8ba36c653011"]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r0}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000001440)=""/215) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f00000019c0)) preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000280)=""/58, 0x3a}], 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000000)=0x80) close(r3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {r8}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "a59f7995f969f9"}) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x0) 20:45:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000240)={0x2, 0x2, 0x24}) 20:45:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x1, 0xb7, 0x0, 0xfffffffc}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000080)=@xdp={0x2c, 0xe00}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0) 20:45:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000240)={0x2, 0x2, 0x24}) 20:45:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000240)={0x2, 0x2, 0x24}) 20:45:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000240)={0x2, 0x2, 0x24}) 20:45:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0) 20:45:18 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x1e, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x1a1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f0000000200)=""/213, 0xd5, 0x400, 0x55}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="b8570a8ec0660f3882a104002ed9e8c0d300660f3882b00090660f38215f3cba4100b02eeebaf80c66b838e7018a66efbafc0ced7a0d0f910b", 0x39}], 0x1, 0x21, &(0x7f00000000c0)=[@dstype3={0x7, 0x3}, @dstype0={0x6, 0x5}], 0x2) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000000c0)=0x6, 0x4) r7 = dup(0xffffffffffffffff) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 20:45:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x1e, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x1a1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f0000000200)=""/213, 0xd5, 0x400, 0x55}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="b8570a8ec0660f3882a104002ed9e8c0d300660f3882b00090660f38215f3cba4100b02eeebaf80c66b838e7018a66efbafc0ced7a0d0f910b", 0x39}], 0x1, 0x21, &(0x7f00000000c0)=[@dstype3={0x7, 0x3}, @dstype0={0x6, 0x5}], 0x2) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000000c0)=0x6, 0x4) r7 = dup(0xffffffffffffffff) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 20:45:26 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x1e, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x1a1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f0000000200)=""/213, 0xd5, 0x400, 0x55}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="b8570a8ec0660f3882a104002ed9e8c0d300660f3882b00090660f38215f3cba4100b02eeebaf80c66b838e7018a66efbafc0ced7a0d0f910b", 0x39}], 0x1, 0x21, &(0x7f00000000c0)=[@dstype3={0x7, 0x3}, @dstype0={0x6, 0x5}], 0x2) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000000c0)=0x6, 0x4) r7 = dup(0xffffffffffffffff) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 20:45:26 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x1, 0xb7, 0x0, 0xfffffffc}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000080)=@xdp={0x2c, 0xe00}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0) 20:45:26 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x6f8) r1 = open(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000002c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="06000000000000002e2f8ba36c653011"]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r0}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000001440)=""/215) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f00000019c0)) preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000280)=""/58, 0x3a}], 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000000)=0x80) close(r3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {r8}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "a59f7995f969f9"}) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x0) 20:45:26 executing program 5: r0 = syz_io_uring_setup(0x464a, &(0x7f0000000100), &(0x7f0000000000/0xe000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0xc14]}, 0x8) 20:45:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x1e, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x1a1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f0000000200)=""/213, 0xd5, 0x400, 0x55}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="b8570a8ec0660f3882a104002ed9e8c0d300660f3882b00090660f38215f3cba4100b02eeebaf80c66b838e7018a66efbafc0ced7a0d0f910b", 0x39}], 0x1, 0x21, &(0x7f00000000c0)=[@dstype3={0x7, 0x3}, @dstype0={0x6, 0x5}], 0x2) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000000c0)=0x6, 0x4) r7 = dup(0xffffffffffffffff) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 20:45:26 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, 0xffffffffffffffff) 20:45:27 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x1e, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x1a1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f0000000200)=""/213, 0xd5, 0x400, 0x55}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="b8570a8ec0660f3882a104002ed9e8c0d300660f3882b00090660f38215f3cba4100b02eeebaf80c66b838e7018a66efbafc0ced7a0d0f910b", 0x39}], 0x1, 0x21, &(0x7f00000000c0)=[@dstype3={0x7, 0x3}, @dstype0={0x6, 0x5}], 0x2) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000000c0)=0x6, 0x4) r7 = dup(0xffffffffffffffff) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 20:45:27 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x6f8) r1 = open(0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000002c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="06000000000000002e2f8ba36c653011"]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r0}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000001440)=""/215) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f00000019c0)) preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000280)=""/58, 0x3a}], 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000000)=0x80) close(r3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {r8}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "a59f7995f969f9"}) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x0) 20:45:28 executing program 5: unshare(0x6c060000) unshare(0x20000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x60000800) unshare(0x10010000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback={0x0, 0xffff8881a56043d8}}}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e24, 0x7, @empty, 0x80000001}}, 0x0, 0x0, 0x33, 0x0, "b350ca64678a03bfcfb2601bb13f2fade63bdb606e1b30a6de8ad6c6b52339e12d6b8e580e62534bb93054d581c471eb6f665472a30d2e2980964ffe5168a67462c65e796c02de4ffb5333c79b46b21c"}, 0xd8) unshare(0x2040140) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000000c0)=0x2, 0x4) unshare(0x0) sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000340)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x100000000007bf, 0x4) sendto$inet6(r0, &(0x7f0000000100)="fb", 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/209, 0xd1}, 0x2000) 20:45:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x1e, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x1a1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x401, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f0000000200)=""/213, 0xd5, 0x400, 0x55}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="b8570a8ec0660f3882a104002ed9e8c0d300660f3882b00090660f38215f3cba4100b02eeebaf80c66b838e7018a66efbafc0ced7a0d0f910b", 0x39}], 0x1, 0x21, &(0x7f00000000c0)=[@dstype3={0x7, 0x3}, @dstype0={0x6, 0x5}], 0x2) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000000c0)=0x6, 0x4) r7 = dup(0xffffffffffffffff) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 20:45:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x1, 0xb7, 0x0, 0xfffffffc}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000080)=@xdp={0x2c, 0xe00}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0) 20:45:29 executing program 5: unshare(0x6c060000) unshare(0x20000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x60000800) unshare(0x10010000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback={0x0, 0xffff8881a56043d8}}}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e24, 0x7, @empty, 0x80000001}}, 0x0, 0x0, 0x33, 0x0, "b350ca64678a03bfcfb2601bb13f2fade63bdb606e1b30a6de8ad6c6b52339e12d6b8e580e62534bb93054d581c471eb6f665472a30d2e2980964ffe5168a67462c65e796c02de4ffb5333c79b46b21c"}, 0xd8) unshare(0x2040140) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000000c0)=0x2, 0x4) unshare(0x0) sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000340)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x100000000007bf, 0x4) sendto$inet6(r0, &(0x7f0000000100)="fb", 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/209, 0xd1}, 0x2000) 20:45:29 executing program 4: unshare(0x6c060000) unshare(0x20000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x60000800) unshare(0x10010000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback={0x0, 0xffff8881a56043d8}}}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e24, 0x7, @empty, 0x80000001}}, 0x0, 0x0, 0x33, 0x0, "b350ca64678a03bfcfb2601bb13f2fade63bdb606e1b30a6de8ad6c6b52339e12d6b8e580e62534bb93054d581c471eb6f665472a30d2e2980964ffe5168a67462c65e796c02de4ffb5333c79b46b21c"}, 0xd8) unshare(0x2040140) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000000c0)=0x2, 0x4) unshare(0x0) sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000340)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x100000000007bf, 0x4) sendto$inet6(r0, &(0x7f0000000100)="fb", 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/209, 0xd1}, 0x2000) 20:45:29 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) fgetxattr(r0, &(0x7f0000000180)=@known='system.sockprotoname\x00', &(0x7f00000001c0)=""/4116, 0xfffffffffffffe95) 20:45:30 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) fgetxattr(r0, &(0x7f0000000180)=@known='system.sockprotoname\x00', &(0x7f00000001c0)=""/4116, 0xfffffffffffffe95) 20:45:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="41322f70cd97530e0f00000f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:45:30 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) fgetxattr(r0, &(0x7f0000000180)=@known='system.sockprotoname\x00', &(0x7f00000001c0)=""/4116, 0xfffffffffffffe95) 20:45:34 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sched_setattr(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r5 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ip6_tables_names\x00') ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x80) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) socket(0x0, 0x803, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 20:45:34 executing program 5: unshare(0x6c060000) unshare(0x20000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x60000800) unshare(0x10010000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback={0x0, 0xffff8881a56043d8}}}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e24, 0x7, @empty, 0x80000001}}, 0x0, 0x0, 0x33, 0x0, "b350ca64678a03bfcfb2601bb13f2fade63bdb606e1b30a6de8ad6c6b52339e12d6b8e580e62534bb93054d581c471eb6f665472a30d2e2980964ffe5168a67462c65e796c02de4ffb5333c79b46b21c"}, 0xd8) unshare(0x2040140) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000000c0)=0x2, 0x4) unshare(0x0) sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000340)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x100000000007bf, 0x4) sendto$inet6(r0, &(0x7f0000000100)="fb", 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/209, 0xd1}, 0x2000) 20:45:34 executing program 4: unshare(0x6c060000) unshare(0x20000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x60000800) unshare(0x10010000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback={0x0, 0xffff8881a56043d8}}}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e24, 0x7, @empty, 0x80000001}}, 0x0, 0x0, 0x33, 0x0, "b350ca64678a03bfcfb2601bb13f2fade63bdb606e1b30a6de8ad6c6b52339e12d6b8e580e62534bb93054d581c471eb6f665472a30d2e2980964ffe5168a67462c65e796c02de4ffb5333c79b46b21c"}, 0xd8) unshare(0x2040140) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000000c0)=0x2, 0x4) unshare(0x0) sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000340)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x100000000007bf, 0x4) sendto$inet6(r0, &(0x7f0000000100)="fb", 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/209, 0xd1}, 0x2000) 20:45:34 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) fgetxattr(r0, &(0x7f0000000180)=@known='system.sockprotoname\x00', &(0x7f00000001c0)=""/4116, 0xfffffffffffffe95) 20:45:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="41322f70cd97530e0f00000f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:45:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x1, 0xb7, 0x0, 0xfffffffc}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000080)=@xdp={0x2c, 0xe00}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x0) 20:45:34 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x79, r5}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000400)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c89fd4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f4450071f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235eb5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617dea61e1919c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cd434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e467200000000a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c51d539f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 3415.110802][ T489] batadv_slave_1: entered promiscuous mode [ 3415.496488][ T501] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 3415.505377][ T501] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. 20:45:35 executing program 4: unshare(0x6c060000) unshare(0x20000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x60000800) unshare(0x10010000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback={0x0, 0xffff8881a56043d8}}}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e24, 0x7, @empty, 0x80000001}}, 0x0, 0x0, 0x33, 0x0, "b350ca64678a03bfcfb2601bb13f2fade63bdb606e1b30a6de8ad6c6b52339e12d6b8e580e62534bb93054d581c471eb6f665472a30d2e2980964ffe5168a67462c65e796c02de4ffb5333c79b46b21c"}, 0xd8) unshare(0x2040140) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000000c0)=0x2, 0x4) unshare(0x0) sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000340)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x100000000007bf, 0x4) sendto$inet6(r0, &(0x7f0000000100)="fb", 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/209, 0xd1}, 0x2000) 20:45:35 executing program 5: unshare(0x6c060000) unshare(0x20000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x60000800) unshare(0x10010000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback={0x0, 0xffff8881a56043d8}}}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e24, 0x7, @empty, 0x80000001}}, 0x0, 0x0, 0x33, 0x0, "b350ca64678a03bfcfb2601bb13f2fade63bdb606e1b30a6de8ad6c6b52339e12d6b8e580e62534bb93054d581c471eb6f665472a30d2e2980964ffe5168a67462c65e796c02de4ffb5333c79b46b21c"}, 0xd8) unshare(0x2040140) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000000c0)=0x2, 0x4) unshare(0x0) sendto$inet6(r0, 0x0, 0x0, 0x2204c001, &(0x7f0000000340)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x100000000007bf, 0x4) sendto$inet6(r0, &(0x7f0000000100)="fb", 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/209, 0xd1}, 0x2000) [ 3415.879967][ T486] batadv_slave_1: left promiscuous mode 20:45:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="41322f70cd97530e0f00000f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:45:36 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x79, r5}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000400)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c89fd4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f4450071f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235eb5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617dea61e1919c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cd434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e467200000000a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c51d539f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 3416.935812][ T529] batadv_slave_1: entered promiscuous mode 20:45:37 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x79, r5}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000400)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c89fd4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f4450071f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235eb5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617dea61e1919c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cd434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e467200000000a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c51d539f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 3417.321920][ T537] batadv_slave_1: entered promiscuous mode [ 3417.809742][ T525] batadv_slave_1: left promiscuous mode [ 3418.349771][ T532] batadv_slave_1: left promiscuous mode 20:45:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sched_setattr(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r5 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ip6_tables_names\x00') ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x80) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) socket(0x0, 0x803, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 20:45:46 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x79, r5}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20:45:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="41322f70cd97530e0f00000f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:45:46 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x79, r5}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20:45:46 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000100)={'syz0\x00', {}, 0x7}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000680)=""/104, 0x68}], 0x1) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 20:45:46 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x79, r5}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 3426.321852][ T551] input: syz0 as /devices/virtual/input/input91 20:45:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sched_setattr(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r5 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ip6_tables_names\x00') ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x80) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) socket(0x0, 0x803, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) [ 3426.512103][ T553] batadv_slave_1: entered promiscuous mode [ 3426.522034][ T547] batadv_slave_1: entered promiscuous mode [ 3426.567847][ T554] batadv_slave_1: entered promiscuous mode [ 3426.807214][ T576] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 3426.846761][ T579] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 3426.872073][ T554] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 3426.883030][ T576] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 3426.922178][ T554] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. 20:45:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000480)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 3427.392757][ T546] batadv_slave_1: left promiscuous mode [ 3427.485196][ T548] batadv_slave_1: left promiscuous mode 20:45:47 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x79, r5}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20:45:47 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x79, r5}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000400)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c89fd4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f4450071f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235eb5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617dea61e1919c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cd434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e467200000000a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c51d539f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 3427.880209][ T550] batadv_slave_1: left promiscuous mode [ 3428.056366][ T585] batadv_slave_1: entered promiscuous mode 20:45:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sched_setattr(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r5 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ip6_tables_names\x00') ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x80) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) socket(0x0, 0x803, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 20:45:48 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x79, r5}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 3428.390862][ T585] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 3428.399713][ T585] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 3428.423417][ T591] batadv_slave_1: entered promiscuous mode [ 3428.618735][ T599] batadv_slave_1: entered promiscuous mode [ 3428.702276][ T597] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 3428.817546][ T597] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 3428.858584][ T599] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 3428.896136][ T599] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 3429.217153][ T590] batadv_slave_1: left promiscuous mode [ 3429.363450][ T598] batadv_slave_1: left promiscuous mode [ 3429.428501][ T584] batadv_slave_1: left promiscuous mode 20:45:57 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sched_setattr(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r5 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ip6_tables_names\x00') ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x80) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) socket(0x0, 0x803, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 20:45:57 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x101a}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0000050008000000000818a4", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 20:45:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sched_setattr(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r5 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ip6_tables_names\x00') ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x80) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) socket(0x0, 0x803, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 20:45:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bbf584bd71f62371000000000000003e955141e9052539715588ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000080)) 20:45:57 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x79, r5}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000008c0)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f3066ba420066b80f0066ef66b88e000f00d8b93a0b00000f320f210d", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20:45:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x9, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000280)={0x0, 0x3f, 0x3fbd}) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044308, &(0x7f00000001c0)=0x80000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000140)) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) creat(0x0, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004fc00)) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, &(0x7f0000000380), &(0x7f0000000180), &(0x7f0000000300), 0x80a, r4}, 0x38) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0xc048aec8, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}]}) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x90, 0x0, &(0x7f0000000c80)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fd}, &(0x7f0000000d40)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @aes128}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@l2={0x1f, 0x1, @any, 0xfff, 0x2}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000480)}, {&(0x7f0000000540)="75612e03b28108ced52fcadc055b2afb3d7522693f644df2cb4ebe4b61335dec2b630e6a86a9d0bcc92f43d928ca8ee953e6cad6752158e9e66ba0154434f6ca67d41057943f4655b9d5c9955fdad779f89d8bb8fb2647d923c7fa9d8433c4f2f7552c5705fdf9eee0e5c0b842f35c0381f1586d12e68f279569e2d91a184ef741194ac65bff9bbf52c0fb8c278ba0ca518e3c2de80e34ae278abd09228daa44f74cc50c63d06bc61ed9ea335b03274ae31b67005f995ac190304fa24963957097ea", 0xc2}, {&(0x7f0000000640)="93571e2bd3ec3504a085c2b73a4f6c5b3bc46ccbbdc56d3e610c6fadc2bc4488a43296b2761d876af763111981307d1daff33ac18ca22438816d9e1c5c1f36cd9111d82489ec08b7a56d575aa86a299870d5fc546db5ba3fc5831a9c50c5362ffddc1aa85435c418e63ce08633229f8e89ac286833f198336a0c", 0x7a}, {&(0x7f0000000700)="b7423a18b0cb513ddc529cb151f0ca147d1151d5ec479ec439446098b5b63907dd1158f4085101114bef1482ae9711fd490a11ebbc0474ffdd1c672e6dc2032dabf14b5291719d8e01244fdd521836de2a26476c06122c0bf10c021ae8aac45443d1d3eae9b6794d9e4320ddb5590a80727679a9a1c49a96dd0fa5f3c24b8ccb6d54154ed7df49628dd72c247fa0c4408317c9926bee07e604d0e7498af724bb0cb3883ed37fa7646d53bb8c37b5cde2ad000befa4c23b1fd58fef97dd686cda498385fd782b32576873432fabe81f2569f07946279f", 0xd6}, {&(0x7f0000000800)="24f8b815fbc345915f54e911a1555f18fcddba9312187df99e827934bd95fe96758af04f75935b63c3b35774915da2ea876e47b19a7b395cc3d991da262d7f418fd3a580272095f1826c7bd02abdc02e79a9ae8b8105f7523f45b5e034b50f7bd299e43f78c755d772d5a0d410eb3fd6523dc017542ea443ef25411cf945aee6966396330bee00738901", 0x8a}], 0x5, &(0x7f0000000940)=[{0xd8, 0x10e, 0x2, "0498dce10ba5a5a34019cc963ecb38b569d5ad23b5f303eff5351a58b46ea4876c644519f99328e8d6c7e4d260bfcdaaa2695cbc7c4314ecde1cf7b182e2c52e413383cbcb6c71d0232652568eb8150804323a88dda22034294a586e99bc7d93e71a6e0f150261eb069a4ed6bb0b5a6e91fe08dfda44fae760bc25e0b989b3cfc16058be6312a3a1a01050468836056495e58b4d3ec67cb4257d2b100136809c4521f591ee7dd9b819801fd6246742136947e835ce97a9d9ffa8a1d494d64f3047f0966d7b"}, {0x68, 0x117, 0x9, "3aa8c66d13566c4b03e698eb4bb9059abe4c28e857f01ce7c4683ffb8e58bb5a90e6ddc35abba19215a4651a2535a31a5892ebcd937ed5180a98e1b0cfd83ee4593e2b66fe4e3afbabbba0030f7ca262517383f6"}, {0x20, 0x10c, 0xb5, "e2fd3aee78b1d428c8dba69311ee7f"}, {0x18, 0x119, 0x8000, "24658e1500"}, {0x78, 0x117, 0x3, "78336bfaaaea7537c561f9e44e2c35b725c2c84f8531f6f81a928d911b0ef934cd1b2415e733fca72d408b5b835ffad2397af78eb830f50bf5a3be0ef1aa7a6fbf280fb698645fc8acc822aaa7fa43444953dd8e7cf727d8f34b9a8bb055f4589cd2e4e9c58d5e"}], 0x1f0}, 0x0, 0xc000, 0x1, {0x0, r7}}, 0x100) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300), 0x1, 0x1, 0x1, {0x0, r7}}, 0x8001) [ 3437.789516][ T625] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3437.886224][ T625] netlink: 'syz-executor.3': attribute type 18 has an invalid length. [ 3438.022757][ T625] vxlan0: entered allmulticast mode [ 3438.040827][ T621] batadv_slave_1: entered promiscuous mode 20:45:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bbf584bd71f62371000000000000003e955141e9052539715588ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000080)) 20:45:58 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x101a}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0000050008000000000818a4", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 3438.492571][ T636] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 3438.501764][ T636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. 20:45:58 executing program 5: r0 = open(&(0x7f00000020c0)='./cgroup.cpu/cpuset.cpus\x00', 0x141342, 0x0) write$tcp_mem(r0, &(0x7f0000000000)={0x0, 0x2d, 0x0, 0x3a, 0x0, 0x2f}, 0x48) [ 3438.741709][ T645] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3438.779910][ T645] netlink: 'syz-executor.3': attribute type 18 has an invalid length. 20:45:58 executing program 5: r0 = open(&(0x7f00000020c0)='./cgroup.cpu/cpuset.cpus\x00', 0x141342, 0x0) write$tcp_mem(r0, &(0x7f0000000000)={0x0, 0x2d, 0x0, 0x3a, 0x0, 0x2f}, 0x48) 20:45:58 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000900)=""/97, 0x61}], 0x1, 0x0, 0x0) 20:45:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bbf584bd71f62371000000000000003e955141e9052539715588ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000080)) [ 3439.137670][ T616] batadv_slave_1: left promiscuous mode 20:46:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sched_setattr(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000380)) r5 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ip6_tables_names\x00') ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x80) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) socket(0x0, 0x803, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e000000) 20:46:09 executing program 5: r0 = open(&(0x7f00000020c0)='./cgroup.cpu/cpuset.cpus\x00', 0x141342, 0x0) write$tcp_mem(r0, &(0x7f0000000000)={0x0, 0x2d, 0x0, 0x3a, 0x0, 0x2f}, 0x48) 20:46:09 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000900)=""/97, 0x61}], 0x1, 0x0, 0x0) 20:46:09 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x40000080, &(0x7f0000000040)="9b235703802d79cf0892594e79509d4b7b51aad6be1f2b0df60c1a70dd896ec5f4708a8d36c02943d1adb6b16d1be361d038943a612e6540c5b434178f2e8bc22b4ba7d7ac3e6a6f3a4699afb9db837f66ca", 0x52, 0x0, &(0x7f0000000100), &(0x7f0000000140)) 20:46:09 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x101a}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0000050008000000000818a4", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 20:46:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="bbf584bd71f62371000000000000003e955141e9052539715588ba8b47a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000080)) 20:46:09 executing program 5: r0 = open(&(0x7f00000020c0)='./cgroup.cpu/cpuset.cpus\x00', 0x141342, 0x0) write$tcp_mem(r0, &(0x7f0000000000)={0x0, 0x2d, 0x0, 0x3a, 0x0, 0x2f}, 0x48) 20:46:09 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000900)=""/97, 0x61}], 0x1, 0x0, 0x0) [ 3449.574900][ T678] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3449.614093][ T678] netlink: 'syz-executor.3': attribute type 18 has an invalid length. 20:46:09 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000015) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000680)='/:&{&-\x00', 0x0, 0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000400)) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x3edf, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x4000000, 0x4, 0x0, r3}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x27d}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200)={0x101, 0x7fe, 0x0, 0x200}, 0x8) socket$l2tp(0x2, 0x2, 0x73) socket$inet(0x2, 0x0, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x1e00) 20:46:09 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000900)=""/97, 0x61}], 0x1, 0x0, 0x0) 20:46:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @random="b98ac7060224"}]}, 0x40}}, 0x0) 20:46:10 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x15, 0x0, 0x0) [ 3455.459912][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3455.466302][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 20:46:16 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000015) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000680)='/:&{&-\x00', 0x0, 0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000400)) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x3edf, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x4000000, 0x4, 0x0, r3}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x27d}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200)={0x101, 0x7fe, 0x0, 0x200}, 0x8) socket$l2tp(0x2, 0x2, 0x73) socket$inet(0x2, 0x0, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x1e00) 20:46:16 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x15, 0x0, 0x0) 20:46:16 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) dup2(r2, r0) 20:46:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') pread64(r0, &(0x7f00000000c0)=""/58, 0x3a, 0x204) 20:46:16 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x101a}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0000050008000000000818a4", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 20:46:16 executing program 1: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/mdstat\x00', 0x0, 0x0) inotify_rm_watch(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x3, 0x4, 0x4, 0x4c}, 0x48) r5 = socket$inet(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4}, 0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000011d04003d701ae656f69b1996a0bafeb2772aa2bb9e18", @ANYRES32, @ANYBLOB="06000000000000002e2f66696c653000"]) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @mcast2, 0x7}, 0x1c) ioctl$USBDEVFS_IOCTL(r2, 0x8108551b, &(0x7f0000000380)) 20:46:16 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x10d, 0xd, 0x0, 0x4a) 20:46:16 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x15, 0x0, 0x0) 20:46:16 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) dup2(r2, r0) [ 3456.616766][ T717] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3456.654893][ T717] netlink: 'syz-executor.3': attribute type 18 has an invalid length. 20:46:16 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) dup2(r2, r0) 20:46:16 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x15, 0x0, 0x0) 20:46:16 executing program 2: shmat(0x0, &(0x7f0000fef000/0x10000)=nil, 0x3000) r0 = shmat(0x0, &(0x7f0000ff1000/0x4000)=nil, 0x2000) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ff0000/0x2000)=nil, 0x4000) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x3000)=nil, 0x5000) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0x2) r3 = shmget(0x1, 0x9000, 0x1, &(0x7f0000ff1000/0x9000)=nil) shmat(r3, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r3, &(0x7f0000fef000/0x4000)=nil, 0x4000) shmat(r3, &(0x7f0000ff3000/0x3000)=nil, 0x4000) shmdt(r1) shmdt(0x0) keyctl$reject(0x13, 0x0, 0x9, 0x0, 0xfffffffffffffff8) r4 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmdt(r4) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCEXCL(r5, 0x540c) r6 = shmget(0x3, 0x1000, 0x4, &(0x7f0000ff2000/0x1000)=nil) shmat(r3, &(0x7f0000ff7000/0x3000)=nil, 0x3000) r7 = shmget(0x1, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(r7, &(0x7f0000ff4000/0x1000)=nil, 0x6000) shmat(r6, &(0x7f0000ff5000/0x3000)=nil, 0x1000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x40) shmget(0x2, 0x4000, 0x40, &(0x7f0000ff5000/0x4000)=nil) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) 20:46:17 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) dup2(r2, r0) 20:46:17 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000015) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000680)='/:&{&-\x00', 0x0, 0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000400)) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x3edf, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x4000000, 0x4, 0x0, r3}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x27d}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200)={0x101, 0x7fe, 0x0, 0x200}, 0x8) socket$l2tp(0x2, 0x2, 0x73) socket$inet(0x2, 0x0, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x1e00) 20:46:17 executing program 0: syz_usb_connect$uac1(0x2, 0x71, &(0x7f00000008c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x8, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x0, {0x7, 0x25, 0x1, 0x0, 0x3f, 0xda}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0xf0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x1, 0xffff}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x0, 0x1, 0x4, 0x8, 0xa}, 0x1d, &(0x7f0000000100)={0x5, 0xf, 0x1d, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x101, 0x0, 0x9a64}, @ssp_cap={0xc, 0x10, 0xa, 0x2}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41f}}, {0x0, 0x0}]}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x0, 0xb, 0xd4, "7a543600a8452a7d38ab7f7aa4eb5ebbe71815cb03998f3621b139158a8b92db089bf711b9e202908ac45125ca0fde92a6a1c731d05b6422ac7d53ddc287c4de3ceaeeba7f771fb9092855b31db0b912a159e7f06ad25e62852eb6c7e2758044cbc30e239dc278a863917167b4ac5214395272d737d27e2074ed02dbb6e6304006ff0bda4596ba3a5636c85bb77f30bba131542e5fcb4b150e516df2cd8ebc486c00e36215c759ef51a6195a52b95d055fbcc0f069e0740ea12b0ef6dd61e89cc47839ff40873ba1fe8b2da348c14b3f6e8632ba"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x52}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x81, 0x2, "907f"}, &(0x7f0000000740)={0x20, 0x82, 0x1, '\"'}, &(0x7f0000000780)={0x20, 0x83, 0x1, "02"}, 0x0, &(0x7f0000000800)={0x20, 0x85, 0x3, "d5c308"}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) 20:46:17 executing program 2: shmat(0x0, &(0x7f0000fef000/0x10000)=nil, 0x3000) r0 = shmat(0x0, &(0x7f0000ff1000/0x4000)=nil, 0x2000) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ff0000/0x2000)=nil, 0x4000) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x3000)=nil, 0x5000) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0x2) r3 = shmget(0x1, 0x9000, 0x1, &(0x7f0000ff1000/0x9000)=nil) shmat(r3, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r3, &(0x7f0000fef000/0x4000)=nil, 0x4000) shmat(r3, &(0x7f0000ff3000/0x3000)=nil, 0x4000) shmdt(r1) shmdt(0x0) keyctl$reject(0x13, 0x0, 0x9, 0x0, 0xfffffffffffffff8) r4 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmdt(r4) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCEXCL(r5, 0x540c) r6 = shmget(0x3, 0x1000, 0x4, &(0x7f0000ff2000/0x1000)=nil) shmat(r3, &(0x7f0000ff7000/0x3000)=nil, 0x3000) r7 = shmget(0x1, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(r7, &(0x7f0000ff4000/0x1000)=nil, 0x6000) shmat(r6, &(0x7f0000ff5000/0x3000)=nil, 0x1000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x40) shmget(0x2, 0x4000, 0x40, &(0x7f0000ff5000/0x4000)=nil) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) 20:46:17 executing program 3: shmat(0x0, &(0x7f0000fef000/0x10000)=nil, 0x3000) r0 = shmat(0x0, &(0x7f0000ff1000/0x4000)=nil, 0x2000) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ff0000/0x2000)=nil, 0x4000) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x3000)=nil, 0x5000) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0x2) r3 = shmget(0x1, 0x9000, 0x1, &(0x7f0000ff1000/0x9000)=nil) shmat(r3, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r3, &(0x7f0000fef000/0x4000)=nil, 0x4000) shmat(r3, &(0x7f0000ff3000/0x3000)=nil, 0x4000) shmdt(r1) shmdt(0x0) keyctl$reject(0x13, 0x0, 0x9, 0x0, 0xfffffffffffffff8) r4 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmdt(r4) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCEXCL(r5, 0x540c) r6 = shmget(0x3, 0x1000, 0x4, &(0x7f0000ff2000/0x1000)=nil) shmat(r3, &(0x7f0000ff7000/0x3000)=nil, 0x3000) r7 = shmget(0x1, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(r7, &(0x7f0000ff4000/0x1000)=nil, 0x6000) shmat(r6, &(0x7f0000ff5000/0x3000)=nil, 0x1000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x40) shmget(0x2, 0x4000, 0x40, &(0x7f0000ff5000/0x4000)=nil) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) 20:46:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB='X'], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @local}, &(0x7f0000000040)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x80, r1}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 20:46:28 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe73502bd8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffdf8, 0x0, 0x0, 0x0, 0x10, 0xffffffff}}], 0x700, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000300)) recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000b00)=""/135, 0x87}, 0x6}, {{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/249, 0xf9}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/215, 0xd7}, {&(0x7f0000000e40)=""/203, 0xcb}, {&(0x7f00000001c0)}, {&(0x7f0000000280)=""/47, 0x2f}], 0x6, &(0x7f0000000fc0)=""/225, 0xe1}, 0x80000001}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000002180)=[{&(0x7f0000000440)}], 0x1, &(0x7f00000021c0)=""/206, 0xce}, 0xffffffff}, {{&(0x7f00000022c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002340)=""/22, 0x16}, {&(0x7f0000002380)=""/245, 0xf5}], 0x2, &(0x7f00000024c0)=""/230, 0xe6}, 0x1}], 0x4, 0x2, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6307d2e7433a00b0e", 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000180)="2569b1120e79f396d752ff91f532bd5d", 0x10}], 0x1, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x60, 0x20000880}}], 0x1, 0x20000010) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 20:46:28 executing program 2: shmat(0x0, &(0x7f0000fef000/0x10000)=nil, 0x3000) r0 = shmat(0x0, &(0x7f0000ff1000/0x4000)=nil, 0x2000) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ff0000/0x2000)=nil, 0x4000) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x3000)=nil, 0x5000) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0x2) r3 = shmget(0x1, 0x9000, 0x1, &(0x7f0000ff1000/0x9000)=nil) shmat(r3, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r3, &(0x7f0000fef000/0x4000)=nil, 0x4000) shmat(r3, &(0x7f0000ff3000/0x3000)=nil, 0x4000) shmdt(r1) shmdt(0x0) keyctl$reject(0x13, 0x0, 0x9, 0x0, 0xfffffffffffffff8) r4 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmdt(r4) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCEXCL(r5, 0x540c) r6 = shmget(0x3, 0x1000, 0x4, &(0x7f0000ff2000/0x1000)=nil) shmat(r3, &(0x7f0000ff7000/0x3000)=nil, 0x3000) r7 = shmget(0x1, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(r7, &(0x7f0000ff4000/0x1000)=nil, 0x6000) shmat(r6, &(0x7f0000ff5000/0x3000)=nil, 0x1000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x40) shmget(0x2, 0x4000, 0x40, &(0x7f0000ff5000/0x4000)=nil) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) 20:46:28 executing program 3: shmat(0x0, &(0x7f0000fef000/0x10000)=nil, 0x3000) r0 = shmat(0x0, &(0x7f0000ff1000/0x4000)=nil, 0x2000) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ff0000/0x2000)=nil, 0x4000) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x3000)=nil, 0x5000) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0x2) r3 = shmget(0x1, 0x9000, 0x1, &(0x7f0000ff1000/0x9000)=nil) shmat(r3, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r3, &(0x7f0000fef000/0x4000)=nil, 0x4000) shmat(r3, &(0x7f0000ff3000/0x3000)=nil, 0x4000) shmdt(r1) shmdt(0x0) keyctl$reject(0x13, 0x0, 0x9, 0x0, 0xfffffffffffffff8) r4 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmdt(r4) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCEXCL(r5, 0x540c) r6 = shmget(0x3, 0x1000, 0x4, &(0x7f0000ff2000/0x1000)=nil) shmat(r3, &(0x7f0000ff7000/0x3000)=nil, 0x3000) r7 = shmget(0x1, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(r7, &(0x7f0000ff4000/0x1000)=nil, 0x6000) shmat(r6, &(0x7f0000ff5000/0x3000)=nil, 0x1000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x40) shmget(0x2, 0x4000, 0x40, &(0x7f0000ff5000/0x4000)=nil) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) 20:46:28 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000015) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000680)='/:&{&-\x00', 0x0, 0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000400)) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x3edf, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x4000000, 0x4, 0x0, r3}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x27d}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200)={0x101, 0x7fe, 0x0, 0x200}, 0x8) socket$l2tp(0x2, 0x2, 0x73) socket$inet(0x2, 0x0, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x1e00) 20:46:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @bond={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x38}}, 0x0) 20:46:28 executing program 2: shmat(0x0, &(0x7f0000fef000/0x10000)=nil, 0x3000) r0 = shmat(0x0, &(0x7f0000ff1000/0x4000)=nil, 0x2000) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ff0000/0x2000)=nil, 0x4000) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x3000)=nil, 0x5000) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0x2) r3 = shmget(0x1, 0x9000, 0x1, &(0x7f0000ff1000/0x9000)=nil) shmat(r3, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r3, &(0x7f0000fef000/0x4000)=nil, 0x4000) shmat(r3, &(0x7f0000ff3000/0x3000)=nil, 0x4000) shmdt(r1) shmdt(0x0) keyctl$reject(0x13, 0x0, 0x9, 0x0, 0xfffffffffffffff8) r4 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmdt(r4) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCEXCL(r5, 0x540c) r6 = shmget(0x3, 0x1000, 0x4, &(0x7f0000ff2000/0x1000)=nil) shmat(r3, &(0x7f0000ff7000/0x3000)=nil, 0x3000) r7 = shmget(0x1, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(r7, &(0x7f0000ff4000/0x1000)=nil, 0x6000) shmat(r6, &(0x7f0000ff5000/0x3000)=nil, 0x1000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x40) shmget(0x2, 0x4000, 0x40, &(0x7f0000ff5000/0x4000)=nil) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) 20:46:28 executing program 0: pkey_mprotect(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 20:46:28 executing program 2: request_key(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='*\x00', 0xfffffffffffffffc) 20:46:28 executing program 3: shmat(0x0, &(0x7f0000fef000/0x10000)=nil, 0x3000) r0 = shmat(0x0, &(0x7f0000ff1000/0x4000)=nil, 0x2000) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ff0000/0x2000)=nil, 0x4000) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x3000)=nil, 0x5000) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0x2) r3 = shmget(0x1, 0x9000, 0x1, &(0x7f0000ff1000/0x9000)=nil) shmat(r3, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r3, &(0x7f0000fef000/0x4000)=nil, 0x4000) shmat(r3, &(0x7f0000ff3000/0x3000)=nil, 0x4000) shmdt(r1) shmdt(0x0) keyctl$reject(0x13, 0x0, 0x9, 0x0, 0xfffffffffffffff8) r4 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmdt(r4) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCEXCL(r5, 0x540c) r6 = shmget(0x3, 0x1000, 0x4, &(0x7f0000ff2000/0x1000)=nil) shmat(r3, &(0x7f0000ff7000/0x3000)=nil, 0x3000) r7 = shmget(0x1, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(r7, &(0x7f0000ff4000/0x1000)=nil, 0x6000) shmat(r6, &(0x7f0000ff5000/0x3000)=nil, 0x1000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x40) shmget(0x2, 0x4000, 0x40, &(0x7f0000ff5000/0x4000)=nil) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) 20:46:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="e00000005200010000000000000000001c000000cb0001"], 0xe0}}, 0x0) 20:46:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064ce, &(0x7f00000000c0)={0x0}) 20:46:35 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe73502bd8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffdf8, 0x0, 0x0, 0x0, 0x10, 0xffffffff}}], 0x700, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000300)) recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000b00)=""/135, 0x87}, 0x6}, {{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/249, 0xf9}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/215, 0xd7}, {&(0x7f0000000e40)=""/203, 0xcb}, {&(0x7f00000001c0)}, {&(0x7f0000000280)=""/47, 0x2f}], 0x6, &(0x7f0000000fc0)=""/225, 0xe1}, 0x80000001}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000002180)=[{&(0x7f0000000440)}], 0x1, &(0x7f00000021c0)=""/206, 0xce}, 0xffffffff}, {{&(0x7f00000022c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002340)=""/22, 0x16}, {&(0x7f0000002380)=""/245, 0xf5}], 0x2, &(0x7f00000024c0)=""/230, 0xe6}, 0x1}], 0x4, 0x2, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6307d2e7433a00b0e", 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000180)="2569b1120e79f396d752ff91f532bd5d", 0x10}], 0x1, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x60, 0x20000880}}], 0x1, 0x20000010) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 20:46:35 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) unshare(0x20800) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r4, &(0x7f0000000380)="ca1341bbf15d1a01258a5b3ec548fd24995dbe7edecb00b81a814f7043679b39cb56a0843da09113eae536084753ceb933df3365ac99876a13eef87a9750b88cf03374c7393298ba52df5ce1bf791282df9de64d386ed6835637be11eb136d4c94a6daf81ddf0344e5a44bfd5cc3e01aa510038be8d49b724a8952d058e9fda43ed461f5db11338c9fd46771ffeb55dcb7a7490c1d36569e380020f466a1a661b34f7989faaed378bc49e9ca19a7e5d2a490c329d1acb1d20e026a07a1a8a0edf1f782dd1be29ad95539c7e3c18da99b4e1aca06833b488169455f01b93978db23393a4b6d30654e7228c32a2a50cfb5e4d037aea39fac6b0049ae7a22c400ab90edc670b4f5bac77f12326cb82a64eb0d8f973ec8cd66c04a6e73098e12d847e4d406dea2b9efa159334ad3d1e4c980f0e392b009efd861b04e817f562464ff1dd7443e3435a833d9350bf92ee4fb68977c1554ae04d7a959b22cd599fa90bd9415f0df74722c4cff78baf58e87db6530dc4d3f577afaea7544e29839267f2795fec71a8ce0f5aab0e75e6bea918b56faf9ccb2feced48eaa516ceda2db31a293a21355f091783028949aa0d1b7b16541ede088331ae2f9f3e6939b14fbb9eee974ecb69a90c6a60b958c9d70577618bdc0cb7c24f924399aa0612368a0abecf6af448ab2b95aac026cdb879a8bbfa58b9d3fb5a1511c537d398400eea0ed0a04b521016de7704ec3822e80d949df2d7fbb83c3a849fe34c1c75c686167fd925949cafaf7c6931c3b12ab07b9fbd6a9eded0dba2590dd5a4872751d46a4cd7aae444bf148fc477edd2096974da524d817fcf3531abcb5d0ddeda1cbd275aac57cd83706b1c805fc34b5f0f21d961f2a1b5294ceab742a47cd4fe9fe5c2ac0a6bcd1618be0e98ee5cfab4d2aeb07e0b207c86374b3134a0998a962f5bca21e7b896fc106e59788276d07322b66b45e113f79f04cc4c614ce68e6a685b33e04460c1ce5fd68375fc79e3fe3f05ff4155effecffd48a360211305d65e4866dfbb4ec1fb6a78e5885c40e0112600ebe7c629340bb62c1095892ad2360412841ed73f40427396375cad89c66039da7d473929ac8dff3ad1fb97e512d8acf297a36d12402989ea54222546e88ab1df60a024bac244f4d363f47fd619a13644031d6fae228387beb8bdf50830b9c9f6e155ab24be5f2ef91f56847c88c9ab85c4d51b4c6de6da848d48434e210595af53660b755141700d41789506ba7bf7e05f5de03fe223136879a16847b1823bae226aab08a4f826a7ab94a3e34502ba34e5007fe894b0797a95c46233ea4a390d9b70bb5f89ec36f0abd40e2d99addcb25f672f2272f5964bef112144623db340d8fa435235a5b3d786221d50b80d71d17de1cab5cc6078cb57fe0b3f88ec9507611c4f5aeb9d1b47563e630157aefb43c40601005a795acf3393a802747c332f9daa72e60d48d5a54456ebdbe3002189861c35c06877e7a8473c5c413ddcbfa269f92f491f07fbd97ca7bbdf4d0ac13bda1f7f9faf1ae020790ec4a693c22aef000d6629722dddacd07de5c89070c8b405c205f676de65fd701442bcaf60d74023b7ad06f4aa115f1470946fb3f79bbc1f2c9ba011f0f0ec76733c46216af7879dc9eccf10cdc57c665f55ef7f036695eb0a059f5d640ca66c138285ecae8784973291ffb7d9e21545e2c2411e06f7505847d878e2fa5753810ba7598c98dfa6245218d45bcfe04d9e838e0632f21385fcd36610684e63c260748f08158abc324f7902374c03bbba00089785d5a8385f2958c4d656fbfb74bfe8a533847a555689a529f8af6f35a720707a267cdcc7771fd21b34a46d2f591b40d0cfca120620caebfc248055c09b08785f62279c2516821547f1347980d161d8e89bf0731bbd13a048b39b653700c5f23996dca7e4befdd73cb67be5b414f97df7bc38da4b460b3eebb284660947e917f955954c636ef380c9fd308e94757149b78cfa75c6fc5c43e76de506d454e0f64955f767bf0a950d781f42988c8e2a5b5786a9490a47fb962ec3ee7c6d1c0ce0900b4f98344c69a27effe6825e7f6d9930f356b3a65ac663cd29ca530798dc161251d574892f040481faf76f3859eef6db3f887e9035e097ec1b188ee61f570457c40adfcfa132cf51a6f7b58e417e723c71c00eb5d3dfe4a85ec28dfca748ce164ee1512cb4cda8d7acfe35ab14b851c4ec64202da061632440ea6834b58b289198dd3be3840295a1c8950921188903b7d84ebc938632c170339e4fc0d70fc4da304aebb6dfb324a0a32cf6247a946e04ae030fc7725960bd4a0f418b087be549dacc6a53d15230ff442a6c0e40844559273244fedd6812c9d9052c68111d3d190487bba1a11bdbe39678d5374d63a59cdd181246bf080b26ea3d10355cfc0023f7f761fd100a019c95925469dd204fad4f6c26e857f416b973a9f7e172f001f8f4eae26fc5876203df2abb4f7e1c185c43ccccfc26f8f0c3a2c8cceb9eb944e64a42ef048b3ff627397f15355222d98a4462925456d3c4cf0970e9dac43440b35a78c76f0e2ba85d9b4929e17db2e01792e7b1075106d68d236cde8349a83667f7ee77a61a83d7739c9f4e2a953a0a30a723996e32fd14dceddc40b3211120998d80871bccdf07a7d72f99c470cfb5085eaa90323084ed1d4002529d54fb0e94718ada86e75464a561a72e9aa6494cb513fcd28b2ecd5e658fa9fb0706c8d3a780c3576b80f2b0140e5285fdc9ea05d909779368c541548f7f0bbfd60d4f9d3c7984fcc1348644b192dff1253ecae3cc6cc242a7f84ef5b4110babac52e529a5329bdf95dbe8be03ea023e7d62bcb79ee36ab1eecc196ecff8e60f003064556e53ab8bc791246100163b454b05fa00cb8f835d3700216eba15b5ec313242c2d4d9eca6decdf952b4a59bcf59386d65440a0e2f122561f8d217fe50b2bd83c541ed0760d00b5598d18492953872407375e0668ebd96b26fe28c1b855d819981ce3b76e33aa1025ebbc4a35a9221935d92699c366aeba187567a651c310d3ed5f3e9afd7550fe95c8a1b75bd6745b6bfeaf891b87ae84a88b58fd9ebe415cedad5925fe0569dc46f26fa88cb03801a70bbf64d66ed9e4272e3a25e136d0d9eb43613e53e732be9e1f7bc75202a6a6b444b4f895c7f2aa5438eb0e46af9912414ce88d726240a394e39ee8d09fc20a84e50e7778aacfdfeb29719067a4f9a9fd5bc16af1c52fa97fd0548de2d4c73d601328665e23adf9c5b4b4d26709247162e08b2f1806d4111bdf45c7a2fb96181e00240f0c50ec2d4a2c65e9d8d42594a565a2efc6de4998775d7fcd34ddecec5e0091eba0387d8fc293baa418e33e1b726cdc8df7b09fd8ce9a961a150d7806b23d630cddb3a0e65c1683cae7e2ec67256a81b20fb4486940f22af944699f3fd5668db9aa7286be6668ff6ea08f71f8c1ea7c96047d2fecfce1554ddf4711e2fff81f92bce2343b2915cf34b4bfc24b0a3fe4c7d6923cc95fa4a133c12942cb29712e0b4277f08090731fa1f02852578ffb5d61a0033d39f4ab535ef7f0132edd928cb5b6254e1589edde3d98410b5045fdf144ee30b9fbe02b0f99f0444399078df33ba07d1a44f277c00f8b42a9c01128ab7732716c1145dfe2b4e5bbf6d3ad29acb05a988bc36c5def0081672ae8b37229e2086a0e780e89cd89d0aefff00d949b4d0db29fe08576ebdfbe37e43243443a49a71a4bc3a0c4f76ef9c843df272b65116168b3b5c370f6f4de2832a534ffdb2e7aca923512a66f40c07b68c2bb660a64a4320a67f662710f056f42dc94f33703c7ab28e04b7fb228c227b3782f20f1e582dde856eb25a30da3b861aaffe3b08dc566f35a27e55f04ddd7d8f72430d9a82e844d543ec64af3f7d2fd2f2b670c2c8092758549322a7b776583bd563f8578e84f88e5c44da8f11d394d01db37b78aba20019508f9966aeed143b35b0461c7b2c715e1291b50f0cfc11d2edd68cc4723d23cb8646e3e131231e95e05c520403f241bc04a31ed28637fcd371f96b71f129b3b1fa70a45c09f4372afcdc1e9a28cd84afaa27f1a352dc958fc4ccffe8c133d5c1fb0d904ceb4857444466baa996d5513107855965f781e39a6bfb35b7d173579cf94093798f0744150a5580fe87e66f7dd6277904814e50f0d275d55d142edcb82c5762fa5edf25ca1dd26ded83c443aeb740524ca0c004226e50baee99521b6b6f18140b81b1cbe13e863f08e41654c4f70aab046e7ca3efe62a6e3e85c76ee8d4768c08e5c9711d296b821b79e0650dcee48a0cb0ae85d44a7d3d68af5183b84c7199b88382f1b4dfafbc9736def5b2aaad72d4a2ab01c4df23fcc385aee907485cb4f121a128d46a00b730fbe1353cd2b840f2f3b648979596226c0447c5d106b9d90e51877adabcaab4c6d4461b1c50d8548dd02ab93b7adbf06d8d246d42a26b1180a7970635f8a400b9f0a2d824e9670e98f115e45856df1e3dd0bd96759ef5a097c1a6ff1e7cf6c63b516a3f9e62c8409b8001b5df4c2cf3b17538ddf05662f0161f614d51da2c3ab6383e2cd51f9b056edddd1249fe5186f86f28708dbaf6b741e934fe06a524a1d0f5149d77927e7761ee14dc1f213c4916a58d39a5ef6dfea70c14f8cf9646d0a871b67dee4f0b978c6fe9e73a6c6cdbce862c7e79c5ba17162f2be618d6499b85868de6e27aa6b273e409ad91b30ab898fda6049820f09dc0b2102a8417ecce7fabca743cf3bcfbe47e41741b8aeac37f3a134999cff56ff8794be21dfb8dfdb0f10cc62225d148fae1f657989e28236068d45f6b9bea3f036ae455eefbc0f87b89fe727fd4677a2e8cb969f40c857872e7147e6e6bdd483fcc1fabc4a4b8d3222022799b18bdd836cfbe7a7107d878b765052c3a1f17144a9fc72ca2bb6ac71c7f09d87818580652e2b4f1122eca050bfa1e0027e2afd7f0a7251166a0b8fb1dcdc0698813046cbed3cccf5a01dadc73545cb186c835e7f6692229e674b22ad0fd150b1fdd68628ff56d15db457ba3e4d74e7e9a35b1f5e65b85b3f50cca5a6f92d9db25ba2806c7d6335e5469912824e7a1e955fa8ea23425bfeadc27e213acaf526afb92cbf50c3d55f010ae761b54471ab358a38fc5e1adef6ead870cf63d6faf21088e5a0220a70f202c9b38e69d0274c51293cf99cc7dd3ab27384acf6a3f6e96fa090eced1be6cb92512e8847e1a7305cacc89589bcfa59dd404c3b664542c515126acc04bf614a7316ad714e769f6037054f1bc39be4a89271bcc9f4d0d70117d027394f46548f2a77eabc84440ec4c8ae339e8bde9f8eaf9b62f83f5aec232f98ef148c9069b8d7835cee6dbcb6435f88dc39c2e55d2db3c50d8163ddd83fb144f08c168081f0176136863a009db156182dd7e71e132ceeff78031ec2304238e254b10d3c37ddfb25683c2c9880367862c6179effcc44a03790b622d4975198bc471f0805901cf1c1860f8c929e8f84a5991730121261596578f2e8d0ab50902644b1c25cb9519cb0a52db8c69de18f6c29560315c8d17f67636be7d2af9673fb946338dc62b755e31f0d3bd003406b7eaa6cf70e1e8e0c101d16830489eb00987c87dc6ed43c118bec832f0879db6215696a53987d832a2bf588815e430282951adec9e2015d3175f4f2d08215cdbbd6731870fe8bb37fe6867275242c36c20e25d58657753fcf77f3e926b1a2d309ec6d73104d8a250322118f116fe450f5eb655fa6bdcd043e314c99f8b32f9ce0a3b63536", 0x1000, 0x48d1, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000280)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x5) r6 = socket(0x10, 0x3, 0x0) r7 = accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) close(r7) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x6, 0x2, 0xffff}}) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000340)={0x800, 0x1, 0xfeffffff, 0x80}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001400)={r0}, 0x8) sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000098", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x80) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000017e00000000cef8ff000000"]}) write$binfmt_misc(r1, &(0x7f0000001540)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fffffffffffffff, 0xd) write$binfmt_misc(r4, &(0x7f0000001380)=ANY=[@ANYBLOB="73797a30410bea5c30bc84729088d4f826e1d2319a8c919c22399ecdfa709f32524bbda1df7fe0188d5babee4c4b609adef22e67552717325daa72df503c6d566c49e67f76356b9c61eb6ef5a74caaa5bb36fe00"/94], 0x5e) 20:46:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x6, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0) 20:46:35 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000900)=@newqdisc={0x6c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38}]}}]}, 0x6c}}, 0x0) 20:46:35 executing program 5: syz_clone(0x10b04a80, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) 20:46:35 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe73502bd8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffdf8, 0x0, 0x0, 0x0, 0x10, 0xffffffff}}], 0x700, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000300)) recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000b00)=""/135, 0x87}, 0x6}, {{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/249, 0xf9}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/215, 0xd7}, {&(0x7f0000000e40)=""/203, 0xcb}, {&(0x7f00000001c0)}, {&(0x7f0000000280)=""/47, 0x2f}], 0x6, &(0x7f0000000fc0)=""/225, 0xe1}, 0x80000001}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000002180)=[{&(0x7f0000000440)}], 0x1, &(0x7f00000021c0)=""/206, 0xce}, 0xffffffff}, {{&(0x7f00000022c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002340)=""/22, 0x16}, {&(0x7f0000002380)=""/245, 0xf5}], 0x2, &(0x7f00000024c0)=""/230, 0xe6}, 0x1}], 0x4, 0x2, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6307d2e7433a00b0e", 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000180)="2569b1120e79f396d752ff91f532bd5d", 0x10}], 0x1, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x60, 0x20000880}}], 0x1, 0x20000010) socketpair$nbd(0x1, 0x1, 0x0, 0x0) [ 3475.347211][ T799] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 20:46:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe73502bd8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffdf8, 0x0, 0x0, 0x0, 0x10, 0xffffffff}}], 0x700, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000300)) recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000b00)=""/135, 0x87}, 0x6}, {{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/249, 0xf9}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/215, 0xd7}, {&(0x7f0000000e40)=""/203, 0xcb}, {&(0x7f00000001c0)}, {&(0x7f0000000280)=""/47, 0x2f}], 0x6, &(0x7f0000000fc0)=""/225, 0xe1}, 0x80000001}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000002180)=[{&(0x7f0000000440)}], 0x1, &(0x7f00000021c0)=""/206, 0xce}, 0xffffffff}, {{&(0x7f00000022c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002340)=""/22, 0x16}, {&(0x7f0000002380)=""/245, 0xf5}], 0x2, &(0x7f00000024c0)=""/230, 0xe6}, 0x1}], 0x4, 0x2, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6307d2e7433a00b0e", 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000180)="2569b1120e79f396d752ff91f532bd5d", 0x10}], 0x1, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x60, 0x20000880}}], 0x1, 0x20000010) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 20:46:35 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000900)=@newqdisc={0x6c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38}]}}]}, 0x6c}}, 0x0) [ 3475.502030][ T807] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 3475.757170][ T815] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 20:46:36 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000900)=@newqdisc={0x6c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38}]}}]}, 0x6c}}, 0x0) 20:46:36 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @random="7f0a00f5ffff", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback=0x7f000002}}}}}}, 0x0) 20:46:36 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) unshare(0x20800) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r4, &(0x7f0000000380)="ca1341bbf15d1a01258a5b3ec548fd24995dbe7edecb00b81a814f7043679b39cb56a0843da09113eae536084753ceb933df3365ac99876a13eef87a9750b88cf03374c7393298ba52df5ce1bf791282df9de64d386ed6835637be11eb136d4c94a6daf81ddf0344e5a44bfd5cc3e01aa510038be8d49b724a8952d058e9fda43ed461f5db11338c9fd46771ffeb55dcb7a7490c1d36569e380020f466a1a661b34f7989faaed378bc49e9ca19a7e5d2a490c329d1acb1d20e026a07a1a8a0edf1f782dd1be29ad95539c7e3c18da99b4e1aca06833b488169455f01b93978db23393a4b6d30654e7228c32a2a50cfb5e4d037aea39fac6b0049ae7a22c400ab90edc670b4f5bac77f12326cb82a64eb0d8f973ec8cd66c04a6e73098e12d847e4d406dea2b9efa159334ad3d1e4c980f0e392b009efd861b04e817f562464ff1dd7443e3435a833d9350bf92ee4fb68977c1554ae04d7a959b22cd599fa90bd9415f0df74722c4cff78baf58e87db6530dc4d3f577afaea7544e29839267f2795fec71a8ce0f5aab0e75e6bea918b56faf9ccb2feced48eaa516ceda2db31a293a21355f091783028949aa0d1b7b16541ede088331ae2f9f3e6939b14fbb9eee974ecb69a90c6a60b958c9d70577618bdc0cb7c24f924399aa0612368a0abecf6af448ab2b95aac026cdb879a8bbfa58b9d3fb5a1511c537d398400eea0ed0a04b521016de7704ec3822e80d949df2d7fbb83c3a849fe34c1c75c686167fd925949cafaf7c6931c3b12ab07b9fbd6a9eded0dba2590dd5a4872751d46a4cd7aae444bf148fc477edd2096974da524d817fcf3531abcb5d0ddeda1cbd275aac57cd83706b1c805fc34b5f0f21d961f2a1b5294ceab742a47cd4fe9fe5c2ac0a6bcd1618be0e98ee5cfab4d2aeb07e0b207c86374b3134a0998a962f5bca21e7b896fc106e59788276d07322b66b45e113f79f04cc4c614ce68e6a685b33e04460c1ce5fd68375fc79e3fe3f05ff4155effecffd48a360211305d65e4866dfbb4ec1fb6a78e5885c40e0112600ebe7c629340bb62c1095892ad2360412841ed73f40427396375cad89c66039da7d473929ac8dff3ad1fb97e512d8acf297a36d12402989ea54222546e88ab1df60a024bac244f4d363f47fd619a13644031d6fae228387beb8bdf50830b9c9f6e155ab24be5f2ef91f56847c88c9ab85c4d51b4c6de6da848d48434e210595af53660b755141700d41789506ba7bf7e05f5de03fe223136879a16847b1823bae226aab08a4f826a7ab94a3e34502ba34e5007fe894b0797a95c46233ea4a390d9b70bb5f89ec36f0abd40e2d99addcb25f672f2272f5964bef112144623db340d8fa435235a5b3d786221d50b80d71d17de1cab5cc6078cb57fe0b3f88ec9507611c4f5aeb9d1b47563e630157aefb43c40601005a795acf3393a802747c332f9daa72e60d48d5a54456ebdbe3002189861c35c06877e7a8473c5c413ddcbfa269f92f491f07fbd97ca7bbdf4d0ac13bda1f7f9faf1ae020790ec4a693c22aef000d6629722dddacd07de5c89070c8b405c205f676de65fd701442bcaf60d74023b7ad06f4aa115f1470946fb3f79bbc1f2c9ba011f0f0ec76733c46216af7879dc9eccf10cdc57c665f55ef7f036695eb0a059f5d640ca66c138285ecae8784973291ffb7d9e21545e2c2411e06f7505847d878e2fa5753810ba7598c98dfa6245218d45bcfe04d9e838e0632f21385fcd36610684e63c260748f08158abc324f7902374c03bbba00089785d5a8385f2958c4d656fbfb74bfe8a533847a555689a529f8af6f35a720707a267cdcc7771fd21b34a46d2f591b40d0cfca120620caebfc248055c09b08785f62279c2516821547f1347980d161d8e89bf0731bbd13a048b39b653700c5f23996dca7e4befdd73cb67be5b414f97df7bc38da4b460b3eebb284660947e917f955954c636ef380c9fd308e94757149b78cfa75c6fc5c43e76de506d454e0f64955f767bf0a950d781f42988c8e2a5b5786a9490a47fb962ec3ee7c6d1c0ce0900b4f98344c69a27effe6825e7f6d9930f356b3a65ac663cd29ca530798dc161251d574892f040481faf76f3859eef6db3f887e9035e097ec1b188ee61f570457c40adfcfa132cf51a6f7b58e417e723c71c00eb5d3dfe4a85ec28dfca748ce164ee1512cb4cda8d7acfe35ab14b851c4ec64202da061632440ea6834b58b289198dd3be3840295a1c8950921188903b7d84ebc938632c170339e4fc0d70fc4da304aebb6dfb324a0a32cf6247a946e04ae030fc7725960bd4a0f418b087be549dacc6a53d15230ff442a6c0e40844559273244fedd6812c9d9052c68111d3d190487bba1a11bdbe39678d5374d63a59cdd181246bf080b26ea3d10355cfc0023f7f761fd100a019c95925469dd204fad4f6c26e857f416b973a9f7e172f001f8f4eae26fc5876203df2abb4f7e1c185c43ccccfc26f8f0c3a2c8cceb9eb944e64a42ef048b3ff627397f15355222d98a4462925456d3c4cf0970e9dac43440b35a78c76f0e2ba85d9b4929e17db2e01792e7b1075106d68d236cde8349a83667f7ee77a61a83d7739c9f4e2a953a0a30a723996e32fd14dceddc40b3211120998d80871bccdf07a7d72f99c470cfb5085eaa90323084ed1d4002529d54fb0e94718ada86e75464a561a72e9aa6494cb513fcd28b2ecd5e658fa9fb0706c8d3a780c3576b80f2b0140e5285fdc9ea05d909779368c541548f7f0bbfd60d4f9d3c7984fcc1348644b192dff1253ecae3cc6cc242a7f84ef5b4110babac52e529a5329bdf95dbe8be03ea023e7d62bcb79ee36ab1eecc196ecff8e60f003064556e53ab8bc791246100163b454b05fa00cb8f835d3700216eba15b5ec313242c2d4d9eca6decdf952b4a59bcf59386d65440a0e2f122561f8d217fe50b2bd83c541ed0760d00b5598d18492953872407375e0668ebd96b26fe28c1b855d819981ce3b76e33aa1025ebbc4a35a9221935d92699c366aeba187567a651c310d3ed5f3e9afd7550fe95c8a1b75bd6745b6bfeaf891b87ae84a88b58fd9ebe415cedad5925fe0569dc46f26fa88cb03801a70bbf64d66ed9e4272e3a25e136d0d9eb43613e53e732be9e1f7bc75202a6a6b444b4f895c7f2aa5438eb0e46af9912414ce88d726240a394e39ee8d09fc20a84e50e7778aacfdfeb29719067a4f9a9fd5bc16af1c52fa97fd0548de2d4c73d601328665e23adf9c5b4b4d26709247162e08b2f1806d4111bdf45c7a2fb96181e00240f0c50ec2d4a2c65e9d8d42594a565a2efc6de4998775d7fcd34ddecec5e0091eba0387d8fc293baa418e33e1b726cdc8df7b09fd8ce9a961a150d7806b23d630cddb3a0e65c1683cae7e2ec67256a81b20fb4486940f22af944699f3fd5668db9aa7286be6668ff6ea08f71f8c1ea7c96047d2fecfce1554ddf4711e2fff81f92bce2343b2915cf34b4bfc24b0a3fe4c7d6923cc95fa4a133c12942cb29712e0b4277f08090731fa1f02852578ffb5d61a0033d39f4ab535ef7f0132edd928cb5b6254e1589edde3d98410b5045fdf144ee30b9fbe02b0f99f0444399078df33ba07d1a44f277c00f8b42a9c01128ab7732716c1145dfe2b4e5bbf6d3ad29acb05a988bc36c5def0081672ae8b37229e2086a0e780e89cd89d0aefff00d949b4d0db29fe08576ebdfbe37e43243443a49a71a4bc3a0c4f76ef9c843df272b65116168b3b5c370f6f4de2832a534ffdb2e7aca923512a66f40c07b68c2bb660a64a4320a67f662710f056f42dc94f33703c7ab28e04b7fb228c227b3782f20f1e582dde856eb25a30da3b861aaffe3b08dc566f35a27e55f04ddd7d8f72430d9a82e844d543ec64af3f7d2fd2f2b670c2c8092758549322a7b776583bd563f8578e84f88e5c44da8f11d394d01db37b78aba20019508f9966aeed143b35b0461c7b2c715e1291b50f0cfc11d2edd68cc4723d23cb8646e3e131231e95e05c520403f241bc04a31ed28637fcd371f96b71f129b3b1fa70a45c09f4372afcdc1e9a28cd84afaa27f1a352dc958fc4ccffe8c133d5c1fb0d904ceb4857444466baa996d5513107855965f781e39a6bfb35b7d173579cf94093798f0744150a5580fe87e66f7dd6277904814e50f0d275d55d142edcb82c5762fa5edf25ca1dd26ded83c443aeb740524ca0c004226e50baee99521b6b6f18140b81b1cbe13e863f08e41654c4f70aab046e7ca3efe62a6e3e85c76ee8d4768c08e5c9711d296b821b79e0650dcee48a0cb0ae85d44a7d3d68af5183b84c7199b88382f1b4dfafbc9736def5b2aaad72d4a2ab01c4df23fcc385aee907485cb4f121a128d46a00b730fbe1353cd2b840f2f3b648979596226c0447c5d106b9d90e51877adabcaab4c6d4461b1c50d8548dd02ab93b7adbf06d8d246d42a26b1180a7970635f8a400b9f0a2d824e9670e98f115e45856df1e3dd0bd96759ef5a097c1a6ff1e7cf6c63b516a3f9e62c8409b8001b5df4c2cf3b17538ddf05662f0161f614d51da2c3ab6383e2cd51f9b056edddd1249fe5186f86f28708dbaf6b741e934fe06a524a1d0f5149d77927e7761ee14dc1f213c4916a58d39a5ef6dfea70c14f8cf9646d0a871b67dee4f0b978c6fe9e73a6c6cdbce862c7e79c5ba17162f2be618d6499b85868de6e27aa6b273e409ad91b30ab898fda6049820f09dc0b2102a8417ecce7fabca743cf3bcfbe47e41741b8aeac37f3a134999cff56ff8794be21dfb8dfdb0f10cc62225d148fae1f657989e28236068d45f6b9bea3f036ae455eefbc0f87b89fe727fd4677a2e8cb969f40c857872e7147e6e6bdd483fcc1fabc4a4b8d3222022799b18bdd836cfbe7a7107d878b765052c3a1f17144a9fc72ca2bb6ac71c7f09d87818580652e2b4f1122eca050bfa1e0027e2afd7f0a7251166a0b8fb1dcdc0698813046cbed3cccf5a01dadc73545cb186c835e7f6692229e674b22ad0fd150b1fdd68628ff56d15db457ba3e4d74e7e9a35b1f5e65b85b3f50cca5a6f92d9db25ba2806c7d6335e5469912824e7a1e955fa8ea23425bfeadc27e213acaf526afb92cbf50c3d55f010ae761b54471ab358a38fc5e1adef6ead870cf63d6faf21088e5a0220a70f202c9b38e69d0274c51293cf99cc7dd3ab27384acf6a3f6e96fa090eced1be6cb92512e8847e1a7305cacc89589bcfa59dd404c3b664542c515126acc04bf614a7316ad714e769f6037054f1bc39be4a89271bcc9f4d0d70117d027394f46548f2a77eabc84440ec4c8ae339e8bde9f8eaf9b62f83f5aec232f98ef148c9069b8d7835cee6dbcb6435f88dc39c2e55d2db3c50d8163ddd83fb144f08c168081f0176136863a009db156182dd7e71e132ceeff78031ec2304238e254b10d3c37ddfb25683c2c9880367862c6179effcc44a03790b622d4975198bc471f0805901cf1c1860f8c929e8f84a5991730121261596578f2e8d0ab50902644b1c25cb9519cb0a52db8c69de18f6c29560315c8d17f67636be7d2af9673fb946338dc62b755e31f0d3bd003406b7eaa6cf70e1e8e0c101d16830489eb00987c87dc6ed43c118bec832f0879db6215696a53987d832a2bf588815e430282951adec9e2015d3175f4f2d08215cdbbd6731870fe8bb37fe6867275242c36c20e25d58657753fcf77f3e926b1a2d309ec6d73104d8a250322118f116fe450f5eb655fa6bdcd043e314c99f8b32f9ce0a3b63536", 0x1000, 0x48d1, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000280)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x5) r6 = socket(0x10, 0x3, 0x0) r7 = accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) close(r7) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x6, 0x2, 0xffff}}) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000340)={0x800, 0x1, 0xfeffffff, 0x80}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001400)={r0}, 0x8) sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000098", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x80) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000017e00000000cef8ff000000"]}) write$binfmt_misc(r1, &(0x7f0000001540)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fffffffffffffff, 0xd) write$binfmt_misc(r4, &(0x7f0000001380)=ANY=[@ANYBLOB="73797a30410bea5c30bc84729088d4f826e1d2319a8c919c22399ecdfa709f32524bbda1df7fe0188d5babee4c4b609adef22e67552717325daa72df503c6d566c49e67f76356b9c61eb6ef5a74caaa5bb36fe00"/94], 0x5e) [ 3476.311607][ T829] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 20:46:36 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) unshare(0x20800) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r4, &(0x7f0000000380)="ca1341bbf15d1a01258a5b3ec548fd24995dbe7edecb00b81a814f7043679b39cb56a0843da09113eae536084753ceb933df3365ac99876a13eef87a9750b88cf03374c7393298ba52df5ce1bf791282df9de64d386ed6835637be11eb136d4c94a6daf81ddf0344e5a44bfd5cc3e01aa510038be8d49b724a8952d058e9fda43ed461f5db11338c9fd46771ffeb55dcb7a7490c1d36569e380020f466a1a661b34f7989faaed378bc49e9ca19a7e5d2a490c329d1acb1d20e026a07a1a8a0edf1f782dd1be29ad95539c7e3c18da99b4e1aca06833b488169455f01b93978db23393a4b6d30654e7228c32a2a50cfb5e4d037aea39fac6b0049ae7a22c400ab90edc670b4f5bac77f12326cb82a64eb0d8f973ec8cd66c04a6e73098e12d847e4d406dea2b9efa159334ad3d1e4c980f0e392b009efd861b04e817f562464ff1dd7443e3435a833d9350bf92ee4fb68977c1554ae04d7a959b22cd599fa90bd9415f0df74722c4cff78baf58e87db6530dc4d3f577afaea7544e29839267f2795fec71a8ce0f5aab0e75e6bea918b56faf9ccb2feced48eaa516ceda2db31a293a21355f091783028949aa0d1b7b16541ede088331ae2f9f3e6939b14fbb9eee974ecb69a90c6a60b958c9d70577618bdc0cb7c24f924399aa0612368a0abecf6af448ab2b95aac026cdb879a8bbfa58b9d3fb5a1511c537d398400eea0ed0a04b521016de7704ec3822e80d949df2d7fbb83c3a849fe34c1c75c686167fd925949cafaf7c6931c3b12ab07b9fbd6a9eded0dba2590dd5a4872751d46a4cd7aae444bf148fc477edd2096974da524d817fcf3531abcb5d0ddeda1cbd275aac57cd83706b1c805fc34b5f0f21d961f2a1b5294ceab742a47cd4fe9fe5c2ac0a6bcd1618be0e98ee5cfab4d2aeb07e0b207c86374b3134a0998a962f5bca21e7b896fc106e59788276d07322b66b45e113f79f04cc4c614ce68e6a685b33e04460c1ce5fd68375fc79e3fe3f05ff4155effecffd48a360211305d65e4866dfbb4ec1fb6a78e5885c40e0112600ebe7c629340bb62c1095892ad2360412841ed73f40427396375cad89c66039da7d473929ac8dff3ad1fb97e512d8acf297a36d12402989ea54222546e88ab1df60a024bac244f4d363f47fd619a13644031d6fae228387beb8bdf50830b9c9f6e155ab24be5f2ef91f56847c88c9ab85c4d51b4c6de6da848d48434e210595af53660b755141700d41789506ba7bf7e05f5de03fe223136879a16847b1823bae226aab08a4f826a7ab94a3e34502ba34e5007fe894b0797a95c46233ea4a390d9b70bb5f89ec36f0abd40e2d99addcb25f672f2272f5964bef112144623db340d8fa435235a5b3d786221d50b80d71d17de1cab5cc6078cb57fe0b3f88ec9507611c4f5aeb9d1b47563e630157aefb43c40601005a795acf3393a802747c332f9daa72e60d48d5a54456ebdbe3002189861c35c06877e7a8473c5c413ddcbfa269f92f491f07fbd97ca7bbdf4d0ac13bda1f7f9faf1ae020790ec4a693c22aef000d6629722dddacd07de5c89070c8b405c205f676de65fd701442bcaf60d74023b7ad06f4aa115f1470946fb3f79bbc1f2c9ba011f0f0ec76733c46216af7879dc9eccf10cdc57c665f55ef7f036695eb0a059f5d640ca66c138285ecae8784973291ffb7d9e21545e2c2411e06f7505847d878e2fa5753810ba7598c98dfa6245218d45bcfe04d9e838e0632f21385fcd36610684e63c260748f08158abc324f7902374c03bbba00089785d5a8385f2958c4d656fbfb74bfe8a533847a555689a529f8af6f35a720707a267cdcc7771fd21b34a46d2f591b40d0cfca120620caebfc248055c09b08785f62279c2516821547f1347980d161d8e89bf0731bbd13a048b39b653700c5f23996dca7e4befdd73cb67be5b414f97df7bc38da4b460b3eebb284660947e917f955954c636ef380c9fd308e94757149b78cfa75c6fc5c43e76de506d454e0f64955f767bf0a950d781f42988c8e2a5b5786a9490a47fb962ec3ee7c6d1c0ce0900b4f98344c69a27effe6825e7f6d9930f356b3a65ac663cd29ca530798dc161251d574892f040481faf76f3859eef6db3f887e9035e097ec1b188ee61f570457c40adfcfa132cf51a6f7b58e417e723c71c00eb5d3dfe4a85ec28dfca748ce164ee1512cb4cda8d7acfe35ab14b851c4ec64202da061632440ea6834b58b289198dd3be3840295a1c8950921188903b7d84ebc938632c170339e4fc0d70fc4da304aebb6dfb324a0a32cf6247a946e04ae030fc7725960bd4a0f418b087be549dacc6a53d15230ff442a6c0e40844559273244fedd6812c9d9052c68111d3d190487bba1a11bdbe39678d5374d63a59cdd181246bf080b26ea3d10355cfc0023f7f761fd100a019c95925469dd204fad4f6c26e857f416b973a9f7e172f001f8f4eae26fc5876203df2abb4f7e1c185c43ccccfc26f8f0c3a2c8cceb9eb944e64a42ef048b3ff627397f15355222d98a4462925456d3c4cf0970e9dac43440b35a78c76f0e2ba85d9b4929e17db2e01792e7b1075106d68d236cde8349a83667f7ee77a61a83d7739c9f4e2a953a0a30a723996e32fd14dceddc40b3211120998d80871bccdf07a7d72f99c470cfb5085eaa90323084ed1d4002529d54fb0e94718ada86e75464a561a72e9aa6494cb513fcd28b2ecd5e658fa9fb0706c8d3a780c3576b80f2b0140e5285fdc9ea05d909779368c541548f7f0bbfd60d4f9d3c7984fcc1348644b192dff1253ecae3cc6cc242a7f84ef5b4110babac52e529a5329bdf95dbe8be03ea023e7d62bcb79ee36ab1eecc196ecff8e60f003064556e53ab8bc791246100163b454b05fa00cb8f835d3700216eba15b5ec313242c2d4d9eca6decdf952b4a59bcf59386d65440a0e2f122561f8d217fe50b2bd83c541ed0760d00b5598d18492953872407375e0668ebd96b26fe28c1b855d819981ce3b76e33aa1025ebbc4a35a9221935d92699c366aeba187567a651c310d3ed5f3e9afd7550fe95c8a1b75bd6745b6bfeaf891b87ae84a88b58fd9ebe415cedad5925fe0569dc46f26fa88cb03801a70bbf64d66ed9e4272e3a25e136d0d9eb43613e53e732be9e1f7bc75202a6a6b444b4f895c7f2aa5438eb0e46af9912414ce88d726240a394e39ee8d09fc20a84e50e7778aacfdfeb29719067a4f9a9fd5bc16af1c52fa97fd0548de2d4c73d601328665e23adf9c5b4b4d26709247162e08b2f1806d4111bdf45c7a2fb96181e00240f0c50ec2d4a2c65e9d8d42594a565a2efc6de4998775d7fcd34ddecec5e0091eba0387d8fc293baa418e33e1b726cdc8df7b09fd8ce9a961a150d7806b23d630cddb3a0e65c1683cae7e2ec67256a81b20fb4486940f22af944699f3fd5668db9aa7286be6668ff6ea08f71f8c1ea7c96047d2fecfce1554ddf4711e2fff81f92bce2343b2915cf34b4bfc24b0a3fe4c7d6923cc95fa4a133c12942cb29712e0b4277f08090731fa1f02852578ffb5d61a0033d39f4ab535ef7f0132edd928cb5b6254e1589edde3d98410b5045fdf144ee30b9fbe02b0f99f0444399078df33ba07d1a44f277c00f8b42a9c01128ab7732716c1145dfe2b4e5bbf6d3ad29acb05a988bc36c5def0081672ae8b37229e2086a0e780e89cd89d0aefff00d949b4d0db29fe08576ebdfbe37e43243443a49a71a4bc3a0c4f76ef9c843df272b65116168b3b5c370f6f4de2832a534ffdb2e7aca923512a66f40c07b68c2bb660a64a4320a67f662710f056f42dc94f33703c7ab28e04b7fb228c227b3782f20f1e582dde856eb25a30da3b861aaffe3b08dc566f35a27e55f04ddd7d8f72430d9a82e844d543ec64af3f7d2fd2f2b670c2c8092758549322a7b776583bd563f8578e84f88e5c44da8f11d394d01db37b78aba20019508f9966aeed143b35b0461c7b2c715e1291b50f0cfc11d2edd68cc4723d23cb8646e3e131231e95e05c520403f241bc04a31ed28637fcd371f96b71f129b3b1fa70a45c09f4372afcdc1e9a28cd84afaa27f1a352dc958fc4ccffe8c133d5c1fb0d904ceb4857444466baa996d5513107855965f781e39a6bfb35b7d173579cf94093798f0744150a5580fe87e66f7dd6277904814e50f0d275d55d142edcb82c5762fa5edf25ca1dd26ded83c443aeb740524ca0c004226e50baee99521b6b6f18140b81b1cbe13e863f08e41654c4f70aab046e7ca3efe62a6e3e85c76ee8d4768c08e5c9711d296b821b79e0650dcee48a0cb0ae85d44a7d3d68af5183b84c7199b88382f1b4dfafbc9736def5b2aaad72d4a2ab01c4df23fcc385aee907485cb4f121a128d46a00b730fbe1353cd2b840f2f3b648979596226c0447c5d106b9d90e51877adabcaab4c6d4461b1c50d8548dd02ab93b7adbf06d8d246d42a26b1180a7970635f8a400b9f0a2d824e9670e98f115e45856df1e3dd0bd96759ef5a097c1a6ff1e7cf6c63b516a3f9e62c8409b8001b5df4c2cf3b17538ddf05662f0161f614d51da2c3ab6383e2cd51f9b056edddd1249fe5186f86f28708dbaf6b741e934fe06a524a1d0f5149d77927e7761ee14dc1f213c4916a58d39a5ef6dfea70c14f8cf9646d0a871b67dee4f0b978c6fe9e73a6c6cdbce862c7e79c5ba17162f2be618d6499b85868de6e27aa6b273e409ad91b30ab898fda6049820f09dc0b2102a8417ecce7fabca743cf3bcfbe47e41741b8aeac37f3a134999cff56ff8794be21dfb8dfdb0f10cc62225d148fae1f657989e28236068d45f6b9bea3f036ae455eefbc0f87b89fe727fd4677a2e8cb969f40c857872e7147e6e6bdd483fcc1fabc4a4b8d3222022799b18bdd836cfbe7a7107d878b765052c3a1f17144a9fc72ca2bb6ac71c7f09d87818580652e2b4f1122eca050bfa1e0027e2afd7f0a7251166a0b8fb1dcdc0698813046cbed3cccf5a01dadc73545cb186c835e7f6692229e674b22ad0fd150b1fdd68628ff56d15db457ba3e4d74e7e9a35b1f5e65b85b3f50cca5a6f92d9db25ba2806c7d6335e5469912824e7a1e955fa8ea23425bfeadc27e213acaf526afb92cbf50c3d55f010ae761b54471ab358a38fc5e1adef6ead870cf63d6faf21088e5a0220a70f202c9b38e69d0274c51293cf99cc7dd3ab27384acf6a3f6e96fa090eced1be6cb92512e8847e1a7305cacc89589bcfa59dd404c3b664542c515126acc04bf614a7316ad714e769f6037054f1bc39be4a89271bcc9f4d0d70117d027394f46548f2a77eabc84440ec4c8ae339e8bde9f8eaf9b62f83f5aec232f98ef148c9069b8d7835cee6dbcb6435f88dc39c2e55d2db3c50d8163ddd83fb144f08c168081f0176136863a009db156182dd7e71e132ceeff78031ec2304238e254b10d3c37ddfb25683c2c9880367862c6179effcc44a03790b622d4975198bc471f0805901cf1c1860f8c929e8f84a5991730121261596578f2e8d0ab50902644b1c25cb9519cb0a52db8c69de18f6c29560315c8d17f67636be7d2af9673fb946338dc62b755e31f0d3bd003406b7eaa6cf70e1e8e0c101d16830489eb00987c87dc6ed43c118bec832f0879db6215696a53987d832a2bf588815e430282951adec9e2015d3175f4f2d08215cdbbd6731870fe8bb37fe6867275242c36c20e25d58657753fcf77f3e926b1a2d309ec6d73104d8a250322118f116fe450f5eb655fa6bdcd043e314c99f8b32f9ce0a3b63536", 0x1000, 0x48d1, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000280)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x5) r6 = socket(0x10, 0x3, 0x0) r7 = accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) close(r7) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x6, 0x2, 0xffff}}) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000340)={0x800, 0x1, 0xfeffffff, 0x80}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001400)={r0}, 0x8) sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000098", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x80) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000017e00000000cef8ff000000"]}) write$binfmt_misc(r1, &(0x7f0000001540)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fffffffffffffff, 0xd) write$binfmt_misc(r4, &(0x7f0000001380)=ANY=[@ANYBLOB="73797a30410bea5c30bc84729088d4f826e1d2319a8c919c22399ecdfa709f32524bbda1df7fe0188d5babee4c4b609adef22e67552717325daa72df503c6d566c49e67f76356b9c61eb6ef5a74caaa5bb36fe00"/94], 0x5e) [ 3476.606800][ T842] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 3476.836893][ T841] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 20:46:53 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe73502bd8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffdf8, 0x0, 0x0, 0x0, 0x10, 0xffffffff}}], 0x700, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000300)) recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000b00)=""/135, 0x87}, 0x6}, {{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/249, 0xf9}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/215, 0xd7}, {&(0x7f0000000e40)=""/203, 0xcb}, {&(0x7f00000001c0)}, {&(0x7f0000000280)=""/47, 0x2f}], 0x6, &(0x7f0000000fc0)=""/225, 0xe1}, 0x80000001}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000002180)=[{&(0x7f0000000440)}], 0x1, &(0x7f00000021c0)=""/206, 0xce}, 0xffffffff}, {{&(0x7f00000022c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002340)=""/22, 0x16}, {&(0x7f0000002380)=""/245, 0xf5}], 0x2, &(0x7f00000024c0)=""/230, 0xe6}, 0x1}], 0x4, 0x2, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6307d2e7433a00b0e", 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000180)="2569b1120e79f396d752ff91f532bd5d", 0x10}], 0x1, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x60, 0x20000880}}], 0x1, 0x20000010) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 20:46:53 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000900)=@newqdisc={0x6c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38}]}}]}, 0x6c}}, 0x0) 20:46:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe73502bd8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffdf8, 0x0, 0x0, 0x0, 0x10, 0xffffffff}}], 0x700, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000300)) recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000b00)=""/135, 0x87}, 0x6}, {{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/249, 0xf9}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/215, 0xd7}, {&(0x7f0000000e40)=""/203, 0xcb}, {&(0x7f00000001c0)}, {&(0x7f0000000280)=""/47, 0x2f}], 0x6, &(0x7f0000000fc0)=""/225, 0xe1}, 0x80000001}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000002180)=[{&(0x7f0000000440)}], 0x1, &(0x7f00000021c0)=""/206, 0xce}, 0xffffffff}, {{&(0x7f00000022c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002340)=""/22, 0x16}, {&(0x7f0000002380)=""/245, 0xf5}], 0x2, &(0x7f00000024c0)=""/230, 0xe6}, 0x1}], 0x4, 0x2, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6307d2e7433a00b0e", 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000180)="2569b1120e79f396d752ff91f532bd5d", 0x10}], 0x1, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x60, 0x20000880}}], 0x1, 0x20000010) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 20:46:53 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) unshare(0x20800) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r4, &(0x7f0000000380)="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", 0x1000, 0x48d1, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000280)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x5) r6 = socket(0x10, 0x3, 0x0) r7 = accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) close(r7) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x6, 0x2, 0xffff}}) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000340)={0x800, 0x1, 0xfeffffff, 0x80}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001400)={r0}, 0x8) sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000098", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x80) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000017e00000000cef8ff000000"]}) write$binfmt_misc(r1, &(0x7f0000001540)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fffffffffffffff, 0xd) write$binfmt_misc(r4, &(0x7f0000001380)=ANY=[@ANYBLOB="73797a30410bea5c30bc84729088d4f826e1d2319a8c919c22399ecdfa709f32524bbda1df7fe0188d5babee4c4b609adef22e67552717325daa72df503c6d566c49e67f76356b9c61eb6ef5a74caaa5bb36fe00"/94], 0x5e) 20:46:53 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe73502bd8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffdf8, 0x0, 0x0, 0x0, 0x10, 0xffffffff}}], 0x700, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000300)) recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000b00)=""/135, 0x87}, 0x6}, {{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/249, 0xf9}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/215, 0xd7}, {&(0x7f0000000e40)=""/203, 0xcb}, {&(0x7f00000001c0)}, {&(0x7f0000000280)=""/47, 0x2f}], 0x6, &(0x7f0000000fc0)=""/225, 0xe1}, 0x80000001}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000002180)=[{&(0x7f0000000440)}], 0x1, &(0x7f00000021c0)=""/206, 0xce}, 0xffffffff}, {{&(0x7f00000022c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002340)=""/22, 0x16}, {&(0x7f0000002380)=""/245, 0xf5}], 0x2, &(0x7f00000024c0)=""/230, 0xe6}, 0x1}], 0x4, 0x2, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6307d2e7433a00b0e", 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000180)="2569b1120e79f396d752ff91f532bd5d", 0x10}], 0x1, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x60, 0x20000880}}], 0x1, 0x20000010) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 20:46:53 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) unshare(0x20800) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r4, &(0x7f0000000380)="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", 0x1000, 0x48d1, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000280)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x5) r6 = socket(0x10, 0x3, 0x0) r7 = accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) close(r7) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x6, 0x2, 0xffff}}) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000340)={0x800, 0x1, 0xfeffffff, 0x80}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001400)={r0}, 0x8) sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000098", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x80) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000017e00000000cef8ff000000"]}) write$binfmt_misc(r1, &(0x7f0000001540)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fffffffffffffff, 0xd) write$binfmt_misc(r4, &(0x7f0000001380)=ANY=[@ANYBLOB="73797a30410bea5c30bc84729088d4f826e1d2319a8c919c22399ecdfa709f32524bbda1df7fe0188d5babee4c4b609adef22e67552717325daa72df503c6d566c49e67f76356b9c61eb6ef5a74caaa5bb36fe00"/94], 0x5e) [ 3493.462110][ T872] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3493.677867][ T875] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 3493.723819][ T878] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 20:46:53 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) unshare(0x20800) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r4, &(0x7f0000000380)="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", 0x1000, 0x48d1, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000280)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x5) r6 = socket(0x10, 0x3, 0x0) r7 = accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) close(r7) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x6, 0x2, 0xffff}}) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000340)={0x800, 0x1, 0xfeffffff, 0x80}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001400)={r0}, 0x8) sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000098", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x80) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000017e00000000cef8ff000000"]}) write$binfmt_misc(r1, &(0x7f0000001540)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fffffffffffffff, 0xd) write$binfmt_misc(r4, &(0x7f0000001380)=ANY=[@ANYBLOB="73797a30410bea5c30bc84729088d4f826e1d2319a8c919c22399ecdfa709f32524bbda1df7fe0188d5babee4c4b609adef22e67552717325daa72df503c6d566c49e67f76356b9c61eb6ef5a74caaa5bb36fe00"/94], 0x5e) [ 3494.080749][ T891] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 20:46:54 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) unshare(0x20800) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r4, &(0x7f0000000380)="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", 0x1000, 0x48d1, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000280)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x5) r6 = socket(0x10, 0x3, 0x0) r7 = accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) close(r7) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x6, 0x2, 0xffff}}) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000340)={0x800, 0x1, 0xfeffffff, 0x80}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001400)={r0}, 0x8) sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000098", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x80) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000017e00000000cef8ff000000"]}) write$binfmt_misc(r1, &(0x7f0000001540)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fffffffffffffff, 0xd) write$binfmt_misc(r4, &(0x7f0000001380)=ANY=[@ANYBLOB="73797a30410bea5c30bc84729088d4f826e1d2319a8c919c22399ecdfa709f32524bbda1df7fe0188d5babee4c4b609adef22e67552717325daa72df503c6d566c49e67f76356b9c61eb6ef5a74caaa5bb36fe00"/94], 0x5e) [ 3494.591148][ T897] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 20:46:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe73502bd8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffdf8, 0x0, 0x0, 0x0, 0x10, 0xffffffff}}], 0x700, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000300)) recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000b00)=""/135, 0x87}, 0x6}, {{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/249, 0xf9}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/215, 0xd7}, {&(0x7f0000000e40)=""/203, 0xcb}, {&(0x7f00000001c0)}, {&(0x7f0000000280)=""/47, 0x2f}], 0x6, &(0x7f0000000fc0)=""/225, 0xe1}, 0x80000001}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000002180)=[{&(0x7f0000000440)}], 0x1, &(0x7f00000021c0)=""/206, 0xce}, 0xffffffff}, {{&(0x7f00000022c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002340)=""/22, 0x16}, {&(0x7f0000002380)=""/245, 0xf5}], 0x2, &(0x7f00000024c0)=""/230, 0xe6}, 0x1}], 0x4, 0x2, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6307d2e7433a00b0e", 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000180)="2569b1120e79f396d752ff91f532bd5d", 0x10}], 0x1, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x60, 0x20000880}}], 0x1, 0x20000010) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 20:46:55 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe73502bd8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffdf8, 0x0, 0x0, 0x0, 0x10, 0xffffffff}}], 0x700, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000300)) recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000b00)=""/135, 0x87}, 0x6}, {{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/249, 0xf9}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/215, 0xd7}, {&(0x7f0000000e40)=""/203, 0xcb}, {&(0x7f00000001c0)}, {&(0x7f0000000280)=""/47, 0x2f}], 0x6, &(0x7f0000000fc0)=""/225, 0xe1}, 0x80000001}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000002180)=[{&(0x7f0000000440)}], 0x1, &(0x7f00000021c0)=""/206, 0xce}, 0xffffffff}, {{&(0x7f00000022c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002340)=""/22, 0x16}, {&(0x7f0000002380)=""/245, 0xf5}], 0x2, &(0x7f00000024c0)=""/230, 0xe6}, 0x1}], 0x4, 0x2, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6307d2e7433a00b0e", 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000180)="2569b1120e79f396d752ff91f532bd5d", 0x10}], 0x1, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x60, 0x20000880}}], 0x1, 0x20000010) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 20:46:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'vlan0\x00', {'virt_wifi0\x00'}}) 20:46:55 executing program 5: syz_open_dev$sndctrl(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x6, 0x248, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x228, 0x248, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {@ipv4, [], @ipv6=@loopback}, {@ipv6=@dev}, {@ipv6=@private0, [], @ipv4=@dev}], 0x2}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @loopback, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) [ 3495.751904][ T911] xt_policy: output policy not valid in PREROUTING and INPUT 20:47:11 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe73502bd8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffdf8, 0x0, 0x0, 0x0, 0x10, 0xffffffff}}], 0x700, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000300)) recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000b00)=""/135, 0x87}, 0x6}, {{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/249, 0xf9}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/215, 0xd7}, {&(0x7f0000000e40)=""/203, 0xcb}, {&(0x7f00000001c0)}, {&(0x7f0000000280)=""/47, 0x2f}], 0x6, &(0x7f0000000fc0)=""/225, 0xe1}, 0x80000001}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000002180)=[{&(0x7f0000000440)}], 0x1, &(0x7f00000021c0)=""/206, 0xce}, 0xffffffff}, {{&(0x7f00000022c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002340)=""/22, 0x16}, {&(0x7f0000002380)=""/245, 0xf5}], 0x2, &(0x7f00000024c0)=""/230, 0xe6}, 0x1}], 0x4, 0x2, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6307d2e7433a00b0e", 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000180)="2569b1120e79f396d752ff91f532bd5d", 0x10}], 0x1, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x60, 0x20000880}}], 0x1, 0x20000010) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 20:47:11 executing program 5: syz_usb_connect(0x0, 0x10b, &(0x7f0000000100)=ANY=[@ANYBLOB="05010000b24b4a10e60403007701000000010902240001010000000904000002cc06"], 0x0) 20:47:11 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x1c06, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x0, 0x0, r0}, &(0x7f0000005000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x612840, 0x0) io_uring_enter(r2, 0x381a, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x6f7, 0x0, 0x5, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x100, 0x0, 0x9f}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x8, 0x10001, 0xb}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r3, 0x100000000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x8, 0x10001, 0xb}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) 20:47:11 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x17, &(0x7f0000000040), 0x4) 20:47:11 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) unshare(0x20800) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r4, &(0x7f0000000380)="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", 0x1000, 0x48d1, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000280)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x5) r6 = socket(0x10, 0x3, 0x0) r7 = accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) close(r7) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x6, 0x2, 0xffff}}) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000340)={0x800, 0x1, 0xfeffffff, 0x80}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001400)={r0}, 0x8) sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000098", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x80) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000017e00000000cef8ff000000"]}) write$binfmt_misc(r1, &(0x7f0000001540)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fffffffffffffff, 0xd) write$binfmt_misc(r4, &(0x7f0000001380)=ANY=[@ANYBLOB="73797a30410bea5c30bc84729088d4f826e1d2319a8c919c22399ecdfa709f32524bbda1df7fe0188d5babee4c4b609adef22e67552717325daa72df503c6d566c49e67f76356b9c61eb6ef5a74caaa5bb36fe00"/94], 0x5e) 20:47:11 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) unshare(0x20800) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r4, &(0x7f0000000380)="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", 0x1000, 0x48d1, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000280)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x5) r6 = socket(0x10, 0x3, 0x0) r7 = accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) close(r7) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x6, 0x2, 0xffff}}) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000340)={0x800, 0x1, 0xfeffffff, 0x80}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001400)={r0}, 0x8) sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000098", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x80) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000017e00000000cef8ff000000"]}) write$binfmt_misc(r1, &(0x7f0000001540)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fffffffffffffff, 0xd) write$binfmt_misc(r4, &(0x7f0000001380)=ANY=[@ANYBLOB="73797a30410bea5c30bc84729088d4f826e1d2319a8c919c22399ecdfa709f32524bbda1df7fe0188d5babee4c4b609adef22e67552717325daa72df503c6d566c49e67f76356b9c61eb6ef5a74caaa5bb36fe00"/94], 0x5e) 20:47:11 executing program 4: syz_usb_connect$uac1(0x0, 0x7f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5, 0x24, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x0, 0x1f, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 3511.234335][ T927] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 3511.318357][ T928] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 3511.428319][T25046] usb 6-1: new high-speed USB device number 62 using dummy_hcd 20:47:11 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x1c06, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x0, 0x0, r0}, &(0x7f0000005000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x612840, 0x0) io_uring_enter(r2, 0x381a, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x6f7, 0x0, 0x5, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x100, 0x0, 0x9f}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x8, 0x10001, 0xb}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r3, 0x100000000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x8, 0x10001, 0xb}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) [ 3511.541815][ T9378] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 3511.718150][T25046] usb 6-1: Using ep0 maxpacket: 16 20:47:11 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x1c06, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x0, 0x0, r0}, &(0x7f0000005000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x612840, 0x0) io_uring_enter(r2, 0x381a, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x6f7, 0x0, 0x5, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x100, 0x0, 0x9f}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x8, 0x10001, 0xb}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r3, 0x100000000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x8, 0x10001, 0xb}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) [ 3511.792303][ T9378] usb 5-1: Using ep0 maxpacket: 16 [ 3511.848348][T25046] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3511.864009][T25046] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3511.891254][T25046] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 3511.918140][T25046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3511.918745][ T9378] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3511.954922][ T9378] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3511.969589][ T9378] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3511.989851][T25046] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 3512.028911][T25046] ums-sddr09 6-1:1.0: This device (04e6,0003,0177 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.2.0-syzkaller-08237-ga5c95ca18a98) [ 3512.028911][T25046] Please send a copy of this message to and 20:47:12 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x1c06, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x0, 0x0, r0}, &(0x7f0000005000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x612840, 0x0) io_uring_enter(r2, 0x381a, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x6f7, 0x0, 0x5, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x100, 0x0, 0x9f}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x8, 0x10001, 0xb}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3028, 0x0, 0x12, r3, 0x100000000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x8, 0x10001, 0xb}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) [ 3512.148730][ T9378] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3512.170439][ T9378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3512.195547][ T9378] usb 5-1: Product: syz [ 3512.204449][T30052] usb 6-1: USB disconnect, device number 62 [ 3512.227103][ T9378] usb 5-1: Manufacturer: syz [ 3512.240862][ T9378] usb 5-1: SerialNumber: syz 20:47:12 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "129ff7", 0x18, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[@fragment], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 20:47:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0f28e2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3512.588644][ T9378] usb 5-1: 0:2 : does not exist [ 3512.637879][ T9378] usb 5-1: USB disconnect, device number 110 [ 3516.899748][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3516.906136][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 20:47:22 executing program 1: r0 = fsopen(&(0x7f0000000000)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='/+q\\,\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) 20:47:22 executing program 5: syz_usb_connect(0x0, 0x10b, &(0x7f0000000100)=ANY=[@ANYBLOB="05010000b24b4a10e60403007701000000010902240001010000000904000002cc06"], 0x0) 20:47:22 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)='M', 0x1) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x0, 0xd, 0x9c, {0x9c, 0x10, "57f3d94f8c7d4abbb70f7bf93ddaa2644954308cd7c2347c515e64041088f5953c44bc0b9a353c51d78964ffb08b7e90213bd9bfd8edcfd1fbfcf54ddb8eb343d6fb70c95444f969d78a8bd5ee9df49de6bfec025ff0feeca5402cc51a296915e3fe3dffc577b3d4977ea933adab67a560e0887d6f9c121f79d92071e2b93f303699461c8c1fc3859dbf0a5b5ec15ad316c11e8a5fd58506aa4e"}}, &(0x7f0000000400)={0x0, 0x3, 0x3, @string={0x3, 0x3, "ac"}}, 0x0, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x7f, 0x88, "15b81aee", "4220a4a7"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x5, 0xf0, 0x8c, 0x6, 0x1}}}, &(0x7f0000000a40)={0x84, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x1e0, 0x0, [0xfff]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x401}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x53}, &(0x7f0000000800)={0x40, 0xb, 0x2, "6712"}, 0x0, &(0x7f0000000880)={0x40, 0x13, 0x6, @random="ba6fd1623a02"}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000900)={0x40, 0x19, 0x2, "22e8"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000000980)={0x40, 0x1c, 0x1}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000a00)={0x40, 0x21, 0x1}}) 20:47:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0f28e2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:47:22 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) unshare(0x20800) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r4, &(0x7f0000000380)="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", 0x1000, 0x48d1, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000280)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x5) r6 = socket(0x10, 0x3, 0x0) r7 = accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) close(r7) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x6, 0x2, 0xffff}}) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000340)={0x800, 0x1, 0xfeffffff, 0x80}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001400)={r0}, 0x8) sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000098", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x80) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000017e00000000cef8ff000000"]}) write$binfmt_misc(r1, &(0x7f0000001540)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fffffffffffffff, 0xd) write$binfmt_misc(r4, &(0x7f0000001380)=ANY=[@ANYBLOB="73797a30410bea5c30bc84729088d4f826e1d2319a8c919c22399ecdfa709f32524bbda1df7fe0188d5babee4c4b609adef22e67552717325daa72df503c6d566c49e67f76356b9c61eb6ef5a74caaa5bb36fe00"/94], 0x5e) 20:47:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0f28e2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3523.056960][ T986] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 3523.168325][T30052] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 3523.178411][ T9378] usb 6-1: new high-speed USB device number 63 using dummy_hcd 20:47:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0f28e2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:47:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x3a, 0x9, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r0}]}]}, 0x24}}, 0x0) 20:47:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x3a, 0x9, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r0}]}]}, 0x24}}, 0x0) [ 3523.379281][ T994] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 3523.428310][ T9378] usb 6-1: Using ep0 maxpacket: 16 [ 3523.438660][T30052] usb 5-1: Using ep0 maxpacket: 32 [ 3523.505332][ T1000] openvswitch: netlink: Either Ethernet header or EtherType is required. 20:47:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0f28e2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:47:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x3a, 0x9, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r0}]}]}, 0x24}}, 0x0) [ 3523.548734][ T9378] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3523.564961][ T9378] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3523.588920][T30052] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3523.606230][ T9378] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 3523.633893][ T9378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3523.652986][ T1002] openvswitch: netlink: Either Ethernet header or EtherType is required. 20:47:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x3a, 0x9, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r0}]}]}, 0x24}}, 0x0) [ 3523.709625][ T9378] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 3523.728507][ T9378] ums-sddr09 6-1:1.0: This device (04e6,0003,0177 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.2.0-syzkaller-08237-ga5c95ca18a98) [ 3523.728507][ T9378] Please send a copy of this message to and [ 3523.804957][ T1011] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 3523.818332][T30052] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3523.827455][T30052] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 3523.836181][T30052] usb 5-1: Product: syz [ 3523.840554][T30052] usb 5-1: Manufacturer: syz [ 3523.845208][T30052] usb 5-1: SerialNumber: syz [ 3523.852533][T30052] usb 5-1: config 0 descriptor?? [ 3523.920196][T30052] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3523.931053][T30052] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3523.935556][ T9378] usb 6-1: USB disconnect, device number 63 [ 3524.402119][T30052] usb 5-1: USB disconnect, device number 111 [ 3524.408931][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 3524.430835][T30052] ldusb 5-1:0.0: LD USB Device #0 now disconnected 20:47:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="413e3f70cd37e36e1988b6547301000f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="04"]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:47:32 executing program 2: sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001500), 0x0, 0x4080}, 0x40025) r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) readv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)=""/219, 0xfffffffffffffed5}], 0x2) io_uring_enter(r0, 0x1d32, 0x0, 0x0, &(0x7f0000000000)={[0x100a]}, 0x8) pipe2(&(0x7f00000001c0), 0x0) io_uring_enter(r0, 0x677e, 0x27d3, 0x1, 0x0, 0x0) 20:47:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0f28e2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:47:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0f28e2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:47:32 executing program 5: syz_usb_connect(0x0, 0x10b, &(0x7f0000000100)=ANY=[@ANYBLOB="05010000b24b4a10e60403007701000000010902240001010000000904000002cc06"], 0x0) 20:47:32 executing program 4: syz_emit_ethernet(0x6a, &(0x7f0000000080)={@link_local={0x3}, @random="7f0a000000ac", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@generic={0x0, 0x5, "adc9e9"}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{}, {@private}, {@remote}, {@loopback}]}]}}}}}}}, 0x0) 20:47:32 executing program 4: r0 = fsopen(&(0x7f00000001c0)='sockfs\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x5) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) close_range(r0, 0xffffffffffffffff, 0x0) 20:47:32 executing program 4: sched_setscheduler(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x5}]}}}]}, 0x3c}}, 0x0) [ 3532.488316][T25046] usb 6-1: new high-speed USB device number 64 using dummy_hcd 20:47:32 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1}, 0x0) 20:47:32 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001380)=[{0x0, 0x100000000000}], 0x1}}], 0x48}, 0x0) [ 3532.756180][T25046] usb 6-1: Using ep0 maxpacket: 16 20:47:32 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)) process_vm_readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/79, 0x4f}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/255, 0xff}, {0x0}], 0x5, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) setuid(0x0) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) socket$inet6_udplite(0xa, 0x2, 0x88) eventfd(0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) fcntl$getown(r2, 0x9) write$P9_RREADLINK(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="9400627573"], 0x14) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000140)=ANY=[], 0x1c) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) 20:47:32 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) [ 3532.878459][T25046] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3532.917608][T25046] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3532.978501][T25046] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 3533.012437][T25046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3533.099680][T25046] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 3533.129035][T25046] ums-sddr09 6-1:1.0: This device (04e6,0003,0177 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.2.0-syzkaller-08237-ga5c95ca18a98) [ 3533.129035][T25046] Please send a copy of this message to and [ 3533.342569][T29507] usb 6-1: USB disconnect, device number 64 20:47:43 executing program 1: ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0x4}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xda03}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x18cc9}, 0x0) 20:47:43 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)) process_vm_readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/79, 0x4f}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/255, 0xff}, {0x0}], 0x5, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) setuid(0x0) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) socket$inet6_udplite(0xa, 0x2, 0x88) eventfd(0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) fcntl$getown(r2, 0x9) write$P9_RREADLINK(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="9400627573"], 0x14) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000140)=ANY=[], 0x1c) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) 20:47:43 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)) process_vm_readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/79, 0x4f}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/255, 0xff}, {0x0}], 0x5, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) setuid(0x0) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) socket$inet6_udplite(0xa, 0x2, 0x88) eventfd(0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) fcntl$getown(r2, 0x9) write$P9_RREADLINK(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="9400627573"], 0x14) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000140)=ANY=[], 0x1c) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) 20:47:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x54, r2, 0xb7dc99b6e07d1f89, 0x0, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0xfffffffffffffde3, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x54}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @loopback={0x0, 0xffff8881a56043d8}}}) connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0xfffffd9d) sendfile(r0, r4, 0x0, 0x8000002b) 20:47:43 executing program 5: syz_usb_connect(0x0, 0x10b, &(0x7f0000000100)=ANY=[@ANYBLOB="05010000b24b4a10e60403007701000000010902240001010000000904000002cc06"], 0x0) 20:47:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028008000100", @ANYRES32=r5, @ANYBLOB="bffffbfae44d9af5a467881f918be4bb"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x2c}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rt6_stats\x00') preadv(r6, &(0x7f00000014c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0, 0x0) preadv2(r6, &(0x7f0000000300)=[{&(0x7f0000000400)=""/7, 0x7}], 0x1, 0xa3, 0x0, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000280), 0x5, 0x22082) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001480)={&(0x7f0000001700)={0x260, 0x12, 0x0, 0x70bd2b, 0x25dfdbfb, {0xf, 0x0, 0xe5, 0x0, {0x4e22, 0x4e22, [0x1000, 0x5, 0x6, 0xd1], [0x800, 0x4, 0x7fff, 0x3], 0x0, [0x2, 0x7992]}, 0x5, 0x32}, [@INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "49507f25f33c18bbafdc712f9fd91f56940aaf912ad99b39db086d2b80f5739322ea791c3860a207d6ff6b0d76477425881f0124392f7504464e8134911d104e226c018075b3e05c88db2fe48851ec6409cd8adde0a4551df93976f191ec8ad3041f2fdf4a2cbdcabf5069dfe6c54304137131e4432d97f65c9dbbb3f1d617ae0f9b63c5424a5a71c928ad0eb063ef0fe68dc2d9f4b41b4e27507864537c72094539bf80f460ef8931b5cdd72dd4250f9c05e492ab15ebbb3a2f28205adce8a3d0572640a88f6848919778007efa65829b873d386b21fe3bbf9db6159c9b7c4870"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "c6441fbb6efeae52f569f0f6024cd8652e1d7f97cfdf6f14de6689425d76fdf930a0eed15914e3eed4520877cbffd599bb3ed18d3d8576424567dbdeb82885d5a2d37c43cb29eb1667a094c10a39e238f703dbf866febe2e4b46c3b16bf34d3185ef5fa9be4c5960f261184ac334dbec444036"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "5f47077164f4977e7cfbf0edefcce847ee8928a20fccd40c3a675eeec8f80b4d7bfcf78cea9efad2dc0bad9d82be3c28fb090c0515cebe07fb4009162691018741c8c40400ecc12a6566a9ed26e95e36c0771913bd7b42488646f50a7b443cfb30181a34654ce4d76e664e50fb3e7f7d39aa0c43fe1c85026e98cf5f1f5b46e51cbf6f789e6f7e59f6bfe6aa5fce29837feedf565b76b0cbc71958b332665fe7a9d50dd763365e65c5b422fbee"}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001500)={r8, r3, 0x1f, 0xd, &(0x7f00000002c0)="84e911450a77e8865a065bcd3b", 0x40, 0xfd, 0x1, 0x0, 0x0, 0x3, 0x1, 'syz1\x00'}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000001440)={0x0, 0x6}, 0x8) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000180)=""/117, 0x6}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r5, 0x29, 0x1f, 0x4, 0x3, 0x10, @local, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1, 0x1, 0x0, 0x4}}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newlink={0x44, 0x10, 0xffffff1f, 0x28c, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r11}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000001600)={'ip6tnl0\x00', r11, 0x4, 0x1f, 0x20, 0x1f, 0x12, @private2, @remote, 0x700, 0x8, 0xaba5, 0xffffffff}}) sendmmsg$inet6(r1, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0x2, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3cddffff0f0001080000000f1e0000000000", @ANYRESDEC=r1, @ANYRES16=r1], 0x3c}}, 0x0) [ 3543.620547][ T1081] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3543.653660][ T1076] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 3543.707884][ T1076] gretap0: entered promiscuous mode [ 3543.718333][ T1076] gretap0: entered allmulticast mode 20:47:43 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)) process_vm_readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/79, 0x4f}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/255, 0xff}, {0x0}], 0x5, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) setuid(0x0) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) socket$inet6_udplite(0xa, 0x2, 0x88) eventfd(0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) fcntl$getown(r2, 0x9) write$P9_RREADLINK(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="9400627573"], 0x14) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000140)=ANY=[], 0x1c) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) 20:47:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028008000100", @ANYRES32=r5, @ANYBLOB="bffffbfae44d9af5a467881f918be4bb"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x2c}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rt6_stats\x00') preadv(r6, &(0x7f00000014c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0, 0x0) preadv2(r6, &(0x7f0000000300)=[{&(0x7f0000000400)=""/7, 0x7}], 0x1, 0xa3, 0x0, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000280), 0x5, 0x22082) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001480)={&(0x7f0000001700)={0x260, 0x12, 0x0, 0x70bd2b, 0x25dfdbfb, {0xf, 0x0, 0xe5, 0x0, {0x4e22, 0x4e22, [0x1000, 0x5, 0x6, 0xd1], [0x800, 0x4, 0x7fff, 0x3], 0x0, [0x2, 0x7992]}, 0x5, 0x32}, [@INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "49507f25f33c18bbafdc712f9fd91f56940aaf912ad99b39db086d2b80f5739322ea791c3860a207d6ff6b0d76477425881f0124392f7504464e8134911d104e226c018075b3e05c88db2fe48851ec6409cd8adde0a4551df93976f191ec8ad3041f2fdf4a2cbdcabf5069dfe6c54304137131e4432d97f65c9dbbb3f1d617ae0f9b63c5424a5a71c928ad0eb063ef0fe68dc2d9f4b41b4e27507864537c72094539bf80f460ef8931b5cdd72dd4250f9c05e492ab15ebbb3a2f28205adce8a3d0572640a88f6848919778007efa65829b873d386b21fe3bbf9db6159c9b7c4870"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "c6441fbb6efeae52f569f0f6024cd8652e1d7f97cfdf6f14de6689425d76fdf930a0eed15914e3eed4520877cbffd599bb3ed18d3d8576424567dbdeb82885d5a2d37c43cb29eb1667a094c10a39e238f703dbf866febe2e4b46c3b16bf34d3185ef5fa9be4c5960f261184ac334dbec444036"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "5f47077164f4977e7cfbf0edefcce847ee8928a20fccd40c3a675eeec8f80b4d7bfcf78cea9efad2dc0bad9d82be3c28fb090c0515cebe07fb4009162691018741c8c40400ecc12a6566a9ed26e95e36c0771913bd7b42488646f50a7b443cfb30181a34654ce4d76e664e50fb3e7f7d39aa0c43fe1c85026e98cf5f1f5b46e51cbf6f789e6f7e59f6bfe6aa5fce29837feedf565b76b0cbc71958b332665fe7a9d50dd763365e65c5b422fbee"}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001500)={r8, r3, 0x1f, 0xd, &(0x7f00000002c0)="84e911450a77e8865a065bcd3b", 0x40, 0xfd, 0x1, 0x0, 0x0, 0x3, 0x1, 'syz1\x00'}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000001440)={0x0, 0x6}, 0x8) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000180)=""/117, 0x6}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r5, 0x29, 0x1f, 0x4, 0x3, 0x10, @local, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1, 0x1, 0x0, 0x4}}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newlink={0x44, 0x10, 0xffffff1f, 0x28c, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r11}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000001600)={'ip6tnl0\x00', r11, 0x4, 0x1f, 0x20, 0x1f, 0x12, @private2, @remote, 0x700, 0x8, 0xaba5, 0xffffffff}}) sendmmsg$inet6(r1, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0x2, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3cddffff0f0001080000000f1e0000000000", @ANYRESDEC=r1, @ANYRES16=r1], 0x3c}}, 0x0) 20:47:43 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)) process_vm_readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/79, 0x4f}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/255, 0xff}, {0x0}], 0x5, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) setuid(0x0) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) socket$inet6_udplite(0xa, 0x2, 0x88) eventfd(0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) fcntl$getown(r2, 0x9) write$P9_RREADLINK(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="9400627573"], 0x14) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000140)=ANY=[], 0x1c) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) [ 3543.859495][ T9378] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 3544.036805][ T1090] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 3544.091486][ T1090] gretap0: entered promiscuous mode 20:47:44 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)) process_vm_readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/79, 0x4f}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/255, 0xff}, {0x0}], 0x5, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) setuid(0x0) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) socket$inet6_udplite(0xa, 0x2, 0x88) eventfd(0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) fcntl$getown(r2, 0x9) write$P9_RREADLINK(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="9400627573"], 0x14) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000140)=ANY=[], 0x1c) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) [ 3544.118323][ T9378] usb 6-1: Using ep0 maxpacket: 16 [ 3544.130900][ T1090] gretap0: entered allmulticast mode [ 3544.238668][ T9378] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3544.258710][ T9378] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 20:47:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028008000100", @ANYRES32=r5, @ANYBLOB="bffffbfae44d9af5a467881f918be4bb"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x2c}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rt6_stats\x00') preadv(r6, &(0x7f00000014c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0, 0x0) preadv2(r6, &(0x7f0000000300)=[{&(0x7f0000000400)=""/7, 0x7}], 0x1, 0xa3, 0x0, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000280), 0x5, 0x22082) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001480)={&(0x7f0000001700)={0x260, 0x12, 0x0, 0x70bd2b, 0x25dfdbfb, {0xf, 0x0, 0xe5, 0x0, {0x4e22, 0x4e22, [0x1000, 0x5, 0x6, 0xd1], [0x800, 0x4, 0x7fff, 0x3], 0x0, [0x2, 0x7992]}, 0x5, 0x32}, [@INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "49507f25f33c18bbafdc712f9fd91f56940aaf912ad99b39db086d2b80f5739322ea791c3860a207d6ff6b0d76477425881f0124392f7504464e8134911d104e226c018075b3e05c88db2fe48851ec6409cd8adde0a4551df93976f191ec8ad3041f2fdf4a2cbdcabf5069dfe6c54304137131e4432d97f65c9dbbb3f1d617ae0f9b63c5424a5a71c928ad0eb063ef0fe68dc2d9f4b41b4e27507864537c72094539bf80f460ef8931b5cdd72dd4250f9c05e492ab15ebbb3a2f28205adce8a3d0572640a88f6848919778007efa65829b873d386b21fe3bbf9db6159c9b7c4870"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "c6441fbb6efeae52f569f0f6024cd8652e1d7f97cfdf6f14de6689425d76fdf930a0eed15914e3eed4520877cbffd599bb3ed18d3d8576424567dbdeb82885d5a2d37c43cb29eb1667a094c10a39e238f703dbf866febe2e4b46c3b16bf34d3185ef5fa9be4c5960f261184ac334dbec444036"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "5f47077164f4977e7cfbf0edefcce847ee8928a20fccd40c3a675eeec8f80b4d7bfcf78cea9efad2dc0bad9d82be3c28fb090c0515cebe07fb4009162691018741c8c40400ecc12a6566a9ed26e95e36c0771913bd7b42488646f50a7b443cfb30181a34654ce4d76e664e50fb3e7f7d39aa0c43fe1c85026e98cf5f1f5b46e51cbf6f789e6f7e59f6bfe6aa5fce29837feedf565b76b0cbc71958b332665fe7a9d50dd763365e65c5b422fbee"}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001500)={r8, r3, 0x1f, 0xd, &(0x7f00000002c0)="84e911450a77e8865a065bcd3b", 0x40, 0xfd, 0x1, 0x0, 0x0, 0x3, 0x1, 'syz1\x00'}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000001440)={0x0, 0x6}, 0x8) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000180)=""/117, 0x6}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r5, 0x29, 0x1f, 0x4, 0x3, 0x10, @local, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1, 0x1, 0x0, 0x4}}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newlink={0x44, 0x10, 0xffffff1f, 0x28c, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r11}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000001600)={'ip6tnl0\x00', r11, 0x4, 0x1f, 0x20, 0x1f, 0x12, @private2, @remote, 0x700, 0x8, 0xaba5, 0xffffffff}}) sendmmsg$inet6(r1, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0x2, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3cddffff0f0001080000000f1e0000000000", @ANYRESDEC=r1, @ANYRES16=r1], 0x3c}}, 0x0) 20:47:44 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)) process_vm_readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/79, 0x4f}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/255, 0xff}, {0x0}], 0x5, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) setuid(0x0) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) socket$inet6_udplite(0xa, 0x2, 0x88) eventfd(0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) fcntl$getown(r2, 0x9) write$P9_RREADLINK(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="9400627573"], 0x14) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000140)=ANY=[], 0x1c) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) [ 3544.301168][ T9378] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 3544.329251][ T9378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3544.423837][ T9378] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 3544.449702][ T9378] ums-sddr09 6-1:1.0: This device (04e6,0003,0177 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.2.0-syzkaller-08237-ga5c95ca18a98) 20:47:44 executing program 0: socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x8, 0xffffffffffffffff}) [ 3544.449702][ T9378] Please send a copy of this message to and [ 3544.479596][ T1099] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 3544.499415][ T1099] gretap0: entered promiscuous mode [ 3544.514386][ T1099] gretap0: entered allmulticast mode [ 3544.684719][T25046] usb 6-1: USB disconnect, device number 65 20:47:52 executing program 1: clock_gettime(0x0, &(0x7f00000058c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005900)={r0, r1+60000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0) r6 = gettid() syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = gettid() process_vm_writev(r7, &(0x7f00000003c0)=[{&(0x7f0000002640)=""/115, 0x73}], 0x1, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/53, 0x7ffffffff000}, {&(0x7f0000002580)=""/161, 0xa1}], 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f0000000140)={{0x8, 0x6, 0x6e5400, 0x3, '\x00', 0xffffffff}, 0x0, 0x20000102, 0x8, r7, 0x0, 0xffff, 'syz1\x00', 0x0}) wait4(r6, 0x0, 0x0, &(0x7f000000b540)) 20:47:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028008000100", @ANYRES32=r5, @ANYBLOB="bffffbfae44d9af5a467881f918be4bb"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x2c}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rt6_stats\x00') preadv(r6, &(0x7f00000014c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0, 0x0) preadv2(r6, &(0x7f0000000300)=[{&(0x7f0000000400)=""/7, 0x7}], 0x1, 0xa3, 0x0, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000280), 0x5, 0x22082) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001480)={&(0x7f0000001700)={0x260, 0x12, 0x0, 0x70bd2b, 0x25dfdbfb, {0xf, 0x0, 0xe5, 0x0, {0x4e22, 0x4e22, [0x1000, 0x5, 0x6, 0xd1], [0x800, 0x4, 0x7fff, 0x3], 0x0, [0x2, 0x7992]}, 0x5, 0x32}, [@INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "49507f25f33c18bbafdc712f9fd91f56940aaf912ad99b39db086d2b80f5739322ea791c3860a207d6ff6b0d76477425881f0124392f7504464e8134911d104e226c018075b3e05c88db2fe48851ec6409cd8adde0a4551df93976f191ec8ad3041f2fdf4a2cbdcabf5069dfe6c54304137131e4432d97f65c9dbbb3f1d617ae0f9b63c5424a5a71c928ad0eb063ef0fe68dc2d9f4b41b4e27507864537c72094539bf80f460ef8931b5cdd72dd4250f9c05e492ab15ebbb3a2f28205adce8a3d0572640a88f6848919778007efa65829b873d386b21fe3bbf9db6159c9b7c4870"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "c6441fbb6efeae52f569f0f6024cd8652e1d7f97cfdf6f14de6689425d76fdf930a0eed15914e3eed4520877cbffd599bb3ed18d3d8576424567dbdeb82885d5a2d37c43cb29eb1667a094c10a39e238f703dbf866febe2e4b46c3b16bf34d3185ef5fa9be4c5960f261184ac334dbec444036"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "5f47077164f4977e7cfbf0edefcce847ee8928a20fccd40c3a675eeec8f80b4d7bfcf78cea9efad2dc0bad9d82be3c28fb090c0515cebe07fb4009162691018741c8c40400ecc12a6566a9ed26e95e36c0771913bd7b42488646f50a7b443cfb30181a34654ce4d76e664e50fb3e7f7d39aa0c43fe1c85026e98cf5f1f5b46e51cbf6f789e6f7e59f6bfe6aa5fce29837feedf565b76b0cbc71958b332665fe7a9d50dd763365e65c5b422fbee"}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001500)={r8, r3, 0x1f, 0xd, &(0x7f00000002c0)="84e911450a77e8865a065bcd3b", 0x40, 0xfd, 0x1, 0x0, 0x0, 0x3, 0x1, 'syz1\x00'}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000001440)={0x0, 0x6}, 0x8) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000180)=""/117, 0x6}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r5, 0x29, 0x1f, 0x4, 0x3, 0x10, @local, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1, 0x1, 0x0, 0x4}}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newlink={0x44, 0x10, 0xffffff1f, 0x28c, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r11}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000001600)={'ip6tnl0\x00', r11, 0x4, 0x1f, 0x20, 0x1f, 0x12, @private2, @remote, 0x700, 0x8, 0xaba5, 0xffffffff}}) sendmmsg$inet6(r1, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0x2, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3cddffff0f0001080000000f1e0000000000", @ANYRESDEC=r1, @ANYRES16=r1], 0x3c}}, 0x0) 20:47:52 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000040)) 20:47:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000001680)=ANY=[@ANYBLOB="65727370617eda0ef63750e5df88ac0cb14c9598b84b0be7b45929d1e003f209e75d8a95594b19063da802a87cde0dfd719a7c41520a1b551acb8a9f19e7fca1bc97b50dc563a4f10ceeeb2620971f146b3e22664298ab5ab671f65f2c6366d58a8f1cbea8fa2cbb4798ccd63e9a87e9e9fe62fae507c87b431ba2cbbf89225bff5e4e7700442c5c31b8b632568ccc5bfff34317ff7d6e233c0a5660673e19f1ff85199c45d5cc4cd2370d702ba76b59d0dd40c9d4df10c6ffedd0386f5e004eab77656cf7788d04b436359881b1e738578adab0e2b32eec7229613c6ad3b14c2716be5eb340744a324271d78bd816c23c00bd4a65e8d2bcd98da4c9d42d588d9c872ef7464702abef7580cbe673d288", @ANYRES32=0x0, @ANYBLOB="78008000800000000000080043ec004c0064000003299078000000007f000001831baae00000027f000001ac141400ac1414317f0000017f000001070735640101010001890799ac1414aa880b3cfbac4750e28b03ab0000"]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/config', 0x0, 0x0) openat(r2, &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfeffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) splice(r3, &(0x7f0000000080)=0x82, r3, &(0x7f00000000c0)=0x5542, 0x5, 0x1) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev_mcast\x00') pread64(r5, &(0x7f0000e3e000)=""/8, 0xffd8, 0x8d2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003500)={0xffffffffffffffff, 0x20, &(0x7f00000034c0)={&(0x7f0000003340)=""/120, 0x78, 0x0, &(0x7f00000033c0)=""/221, 0xdd}}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001400)={'syz0', "b765d0179af04fa5914cc0d4bd5d3638bb33aa9de0f8463f5926d324880ac0f50d567197b6a76830e52aa09bf08984a3c63d15da78a50587e3a79663208c9c14cec25b13cbcf4ed1"}, 0x4c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000013c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000003540)={0xf, 0xb, &(0x7f0000000400)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xcc60}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @generic={0xad, 0x0, 0x8, 0x8}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}, @alu={0x7, 0x1, 0x2, 0x7, 0x7, 0x2, 0xffffffffffffffff}], &(0x7f0000000480)='GPL\x00', 0x4, 0xed, &(0x7f0000003240)=""/237, 0x41100, 0x14, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x0, 0x8c2}, 0x10, r6, r7}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a9}, [@call={0x85, 0x0, 0x0, 0x26}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x0, 0x8, 0x7, 0x80, 0x4}, @call={0x85, 0x0, 0x0, 0x56}, @func]}, &(0x7f00000003c0)='GPL\x00', 0x8, 0x6d, &(0x7f0000000400)=""/109, 0x41100, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001580)={0x0, 0x0, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000500)}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x9, &(0x7f00000015c0)=@raw=[@jmp={0x5, 0x0, 0x8, 0xa, 0xa, 0xfffffffffffffff8, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1}, @jmp={0x5, 0x0, 0xc, 0x9, 0xd, 0x4, 0xffffffffffffffff}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4722}], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x26, &(0x7f0000000280)=""/38, 0x41000, 0x2, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001640)={0x3, 0x6, 0x0, 0x101}, 0x10, r6, r8, 0x0, &(0x7f0000000600)}, 0x80) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdb98ff49000000"], 0x14}, 0x1, 0x0, 0x0, 0xc041}, 0x804) socket(0x10, 0x6, 0x1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$int_in(r10, 0x5452, &(0x7f00000002c0)=0x1) shutdown(r10, 0x1) recvmsg(r10, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/48, 0x1b}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/124, 0x79}, {&(0x7f0000000400)=""/168, 0xb7}], 0x6, 0x0, 0x0, 0xb7}, 0x40000110) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4801) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0xf, &(0x7f0000001800)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @ldst={0x0, 0x1, 0x2, 0x2, 0x1, 0x1, 0x1}, @generic={0x5, 0xb, 0x1, 0xbfe8, 0x101}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x401}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @alu={0x7, 0x0, 0x1, 0x3, 0x1, 0xfffffffffffffff0, 0xffffffffffffffff}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x3, 0xf3}, 0x10, r6, r9}, 0x80) r11 = dup3(r3, r4, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x4, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6773, 0x0, 0x0, 0x0, 0x2722}}, &(0x7f0000000140)='GPL\x00', 0x7, 0x1000, &(0x7f00000002c0)=""/4096, 0x40f00, 0xb, '\x00', 0x0, 0x23, r5, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x0, 0xb, 0x5, 0x80000001}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000001300)=[r11]}, 0x80) open_tree(r0, &(0x7f0000000280)='./file0\x00', 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, [@ldst={0x0, 0x1, 0x3, 0x6, 0x0, 0x40, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x12, '\x00', r1, 0x14, r2, 0x8, &(0x7f00000001c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xa, 0x7fffffff, 0x9d}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 20:47:52 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x0, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000100)={0x1ff}, &(0x7f0000000180)={0x0, 0x989680}, 0x0) 20:47:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 20:47:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 20:47:52 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000040)) 20:47:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) [ 3553.017388][ T1117] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 3553.029107][ T1117] gretap0: entered promiscuous mode [ 3553.053690][ T1117] gretap0: entered allmulticast mode 20:47:53 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000040)) 20:47:53 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000040)) 20:47:53 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = dup2(r0, r0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x201, @link_local, 'sit0\x00'}}, 0x1e) sendmmsg$unix(r1, &(0x7f0000005a40)=[{{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000a40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 20:47:53 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000011c0)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x48, 0x0}) [ 3553.387698][ T1141] binder: 1140:1141 ioctl c0306201 20001480 returned -14 [ 3553.407782][ T1141] binder_alloc: 1140: binder_alloc_buf, no vma 20:48:04 executing program 1: clock_gettime(0x0, &(0x7f00000058c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005900)={r0, r1+60000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0) r6 = gettid() syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = gettid() process_vm_writev(r7, &(0x7f00000003c0)=[{&(0x7f0000002640)=""/115, 0x73}], 0x1, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/53, 0x7ffffffff000}, {&(0x7f0000002580)=""/161, 0xa1}], 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f0000000140)={{0x8, 0x6, 0x6e5400, 0x3, '\x00', 0xffffffff}, 0x0, 0x20000102, 0x8, r7, 0x0, 0xffff, 'syz1\x00', 0x0}) wait4(r6, 0x0, 0x0, &(0x7f000000b540)) 20:48:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 20:48:04 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) mount(&(0x7f0000000280)=@sg0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='nfs\x00', 0x11134ef055dc9146, &(0x7f0000000380)='#\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002400150dee", @ANYRES32=0x0, @ANYBLOB="00000000000000000000865850f40000"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) 20:48:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') r5 = syz_open_procfs(0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x22, 0x0, @fd_index, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, r6) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@mpls_getnetconf={0x2c, 0x52, 0x200, 0x70bd2a, 0x0, {}, [@NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}, @NETCONFA_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000340)={0x2, 0x40, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000440)=[@ip_retopts={{0x34, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x55, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private, @multicast2, @remote, @rand_addr, @private, @multicast1]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd6c0}}, @ip_retopts={{0x58, 0x0, 0x7, {[@rr={0x7, 0xb, 0x63, [@broadcast, @dev]}, @generic={0x86, 0x2}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x6, 0x6, 0x1, 0xfffffff7, 0x80000001]}, @timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x8000, 0x0, 0x1, 0xfff, 0x1, 0x9]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x65, 0x3, 0xd}, @lsrr={0x83, 0x17, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr, @empty]}, @timestamp={0x44, 0x24, 0x0, 0x0, 0x0, [0x6bc1, 0x0, 0x0, 0x9, 0x5, 0x401, 0x5, 0x2b21]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x13, 0x0, 0x8}, @noop, @timestamp_addr={0x44, 0x1c, 0xdd, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x4}, {@multicast1, 0xfffffff9}, {@broadcast}]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x1, 0x0, 0x2}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x383a0851fbf89653, 0x2}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x1a8}}], 0x1, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) r7 = openat(r5, &(0x7f00000000c0)='./file0\x00', 0x101, 0x180) openat(r7, 0x0, 0x100, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 20:48:04 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x48000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fd0800000000a20000000300", @ANYRES32=r6, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x40840}, 0x881) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xba4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000002440)=ANY=[@ANYBLOB="02070009069057a32016a6ceb03c091ba8f9bb27c5936e6745175fa1027bde30a3570fad40ffd707638a765008290b56ce714d42303984af972b8a88ee34bee92a08a1424d9571762e6c6d7c92352cdd4e713be5aa47333f6cf6e7efb01196af761767fc0f2b0eed45f5519834bc67ff10c0d3a702be4049d94946d2a66494e99a57576d1f28718976b21159cb37e7b8644983cefda3537750f5bdf83bb5becd0c74e23f88aae77c436ed97d94adb8a006797899e20e9b9ac1956c19ec6148d3ab6c93e29aa5321bfa5337db008ca58e5c017b"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) process_vm_readv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) read$FUSE(r8, &(0x7f0000000100)={0x2020}, 0x2020) write$UHID_DESTROY(r8, &(0x7f0000002140)={0xa313054}, 0x4) write$UHID_INPUT2(r8, &(0x7f0000002300)=ANY=[@ANYBLOB="0c00000008009e0f8b6867fa284e9c0d7b0e7c69bf893eed0bba5360bd8f6554b38c715af4d449ad2a8edbce030e47239ce564bd3b476422c7ed936fdf414e33bceed421d9dc66af8b1e9f658f12c4179ade551bfbc8577803f6013cfb7655e5402904786973ba4e8374cd1875a89d22747667aef4b7a85482fb330eca0ff41f4d37d836cddfbcb610daee9192d6c91eb0bb35f511"], 0xb) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000080), 0x4) r9 = add_key$fscrypt_v1(&(0x7f0000003300), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r10 = geteuid() sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) keyctl$chown(0x4, r9, r10, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x87, 0x0, r10}, {0x9, 0x10001, 0x400, 0x6, 0x863b, 0x10000, 0x1, 0x7}, {0x7, 0xffffffff, 0x401, 0xe58}, 0x7ff, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x41}, 0x3503, 0x3, 0x2, 0x5f, 0x4, 0x7ff, 0x50e4}}, 0xe8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xdc, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc669}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x811}, 0x40008) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 20:48:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x148d, 0x1, [0xfffb]}, 0xa) 20:48:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 20:48:04 executing program 5: clock_gettime(0x0, &(0x7f00000058c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005900)={r0, r1+60000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0) r6 = gettid() syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = gettid() process_vm_writev(r7, &(0x7f00000003c0)=[{&(0x7f0000002640)=""/115, 0x73}], 0x1, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/53, 0x7ffffffff000}, {&(0x7f0000002580)=""/161, 0xa1}], 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f0000000140)={{0x8, 0x6, 0x6e5400, 0x3, '\x00', 0xffffffff}, 0x0, 0x20000102, 0x8, r7, 0x0, 0xffff, 'syz1\x00', 0x0}) wait4(r6, 0x0, 0x0, &(0x7f000000b540)) 20:48:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000002900000036000000000000000000000024000000000000002900000032000000ff0100"/52, @ANYRES64], 0x40}}], 0x2, 0x0) 20:48:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, 0xfffffffffffffffd) 20:48:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') r5 = syz_open_procfs(0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x22, 0x0, @fd_index, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, r6) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@mpls_getnetconf={0x2c, 0x52, 0x200, 0x70bd2a, 0x0, {}, [@NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}, @NETCONFA_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000340)={0x2, 0x40, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000440)=[@ip_retopts={{0x34, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x55, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private, @multicast2, @remote, @rand_addr, @private, @multicast1]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd6c0}}, @ip_retopts={{0x58, 0x0, 0x7, {[@rr={0x7, 0xb, 0x63, [@broadcast, @dev]}, @generic={0x86, 0x2}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x6, 0x6, 0x1, 0xfffffff7, 0x80000001]}, @timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x8000, 0x0, 0x1, 0xfff, 0x1, 0x9]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x65, 0x3, 0xd}, @lsrr={0x83, 0x17, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr, @empty]}, @timestamp={0x44, 0x24, 0x0, 0x0, 0x0, [0x6bc1, 0x0, 0x0, 0x9, 0x5, 0x401, 0x5, 0x2b21]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x13, 0x0, 0x8}, @noop, @timestamp_addr={0x44, 0x1c, 0xdd, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x4}, {@multicast1, 0xfffffff9}, {@broadcast}]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x1, 0x0, 0x2}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x383a0851fbf89653, 0x2}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x1a8}}], 0x1, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) r7 = openat(r5, &(0x7f00000000c0)='./file0\x00', 0x101, 0x180) openat(r7, 0x0, 0x100, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 20:48:05 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000400), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000880)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) 20:48:13 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x48000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fd0800000000a20000000300", @ANYRES32=r6, @ANYBLOB="0a00e800ffffffffffff00002c0017800400010004000200040002000400020004000200040001000400020004000600040001000400030008000500000000001c00e7002c49716b0e2639a48896b008bebdadc17b872fb096e0ab110a00e80008021100000000001c00e700e6537beefe68bfa39014bc08dc49c3d4e4d2ec60234e9f2b1c00e7003cb88f17538758339401e183687f5117ec1293ad4606fd371c00e70030a5ae3cb968ff163a780b8f18b69970dc7c232d3cecb5851c00e700838178e8cfc7cbed0bdf59fd90c819f40c773cb000a93a6114001780040004000400030004000200040002001c00e7000b80706f2daeec0ed6ab8189ae9e4574bd6ca107e76d0bfe050053000100000005005300000000000800050008000000"], 0x13c}, 0x1, 0x0, 0x0, 0x40840}, 0x881) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xba4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000002440)=ANY=[@ANYBLOB="02070009069057a32016a6ceb03c091ba8f9bb27c5936e6745175fa1027bde30a3570fad40ffd707638a765008290b56ce714d42303984af972b8a88ee34bee92a08a1424d9571762e6c6d7c92352cdd4e713be5aa47333f6cf6e7efb01196af761767fc0f2b0eed45f5519834bc67ff10c0d3a702be4049d94946d2a66494e99a57576d1f28718976b21159cb37e7b8644983cefda3537750f5bdf83bb5becd0c74e23f88aae77c436ed97d94adb8a006797899e20e9b9ac1956c19ec6148d3ab6c93e29aa5321bfa5337db008ca58e5c017b"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) process_vm_readv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) read$FUSE(r8, &(0x7f0000000100)={0x2020}, 0x2020) write$UHID_DESTROY(r8, &(0x7f0000002140)={0xa313054}, 0x4) write$UHID_INPUT2(r8, &(0x7f0000002300)=ANY=[@ANYBLOB="0c00000008009e0f8b6867fa284e9c0d7b0e7c69bf893eed0bba5360bd8f6554b38c715af4d449ad2a8edbce030e47239ce564bd3b476422c7ed936fdf414e33bceed421d9dc66af8b1e9f658f12c4179ade551bfbc8577803f6013cfb7655e5402904786973ba4e8374cd1875a89d22747667aef4b7a85482fb330eca0ff41f4d37d836cddfbcb610daee9192d6c91eb0bb35f511"], 0xb) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000080), 0x4) r9 = add_key$fscrypt_v1(&(0x7f0000003300), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r10 = geteuid() sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) keyctl$chown(0x4, r9, r10, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x87, 0x0, r10}, {0x9, 0x10001, 0x400, 0x6, 0x863b, 0x10000, 0x1, 0x7}, {0x7, 0xffffffff, 0x401, 0xe58}, 0x7ff, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x41}, 0x3503, 0x3, 0x2, 0x5f, 0x4, 0x7ff, 0x50e4}}, 0xe8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xdc, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc669}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x811}, 0x40008) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 20:48:13 executing program 1: clock_gettime(0x0, &(0x7f00000058c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005900)={r0, r1+60000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0) r6 = gettid() syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = gettid() process_vm_writev(r7, &(0x7f00000003c0)=[{&(0x7f0000002640)=""/115, 0x73}], 0x1, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/53, 0x7ffffffff000}, {&(0x7f0000002580)=""/161, 0xa1}], 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f0000000140)={{0x8, 0x6, 0x6e5400, 0x3, '\x00', 0xffffffff}, 0x0, 0x20000102, 0x8, r7, 0x0, 0xffff, 'syz1\x00', 0x0}) wait4(r6, 0x0, 0x0, &(0x7f000000b540)) 20:48:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') r5 = syz_open_procfs(0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x22, 0x0, @fd_index, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, r6) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@mpls_getnetconf={0x2c, 0x52, 0x200, 0x70bd2a, 0x0, {}, [@NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}, @NETCONFA_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000340)={0x2, 0x40, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000440)=[@ip_retopts={{0x34, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x55, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private, @multicast2, @remote, @rand_addr, @private, @multicast1]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd6c0}}, @ip_retopts={{0x58, 0x0, 0x7, {[@rr={0x7, 0xb, 0x63, [@broadcast, @dev]}, @generic={0x86, 0x2}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x6, 0x6, 0x1, 0xfffffff7, 0x80000001]}, @timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x8000, 0x0, 0x1, 0xfff, 0x1, 0x9]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x65, 0x3, 0xd}, @lsrr={0x83, 0x17, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr, @empty]}, @timestamp={0x44, 0x24, 0x0, 0x0, 0x0, [0x6bc1, 0x0, 0x0, 0x9, 0x5, 0x401, 0x5, 0x2b21]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x13, 0x0, 0x8}, @noop, @timestamp_addr={0x44, 0x1c, 0xdd, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x4}, {@multicast1, 0xfffffff9}, {@broadcast}]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x1, 0x0, 0x2}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x383a0851fbf89653, 0x2}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x1a8}}], 0x1, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) r7 = openat(r5, &(0x7f00000000c0)='./file0\x00', 0x101, 0x180) openat(r7, 0x0, 0x100, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 20:48:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}}, 0x0) 20:48:13 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) mount(&(0x7f0000000280)=@sg0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='nfs\x00', 0x11134ef055dc9146, &(0x7f0000000380)='#\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002400150dee", @ANYRES32=0x0, @ANYBLOB="00000000000000000000865850f40000"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) 20:48:13 executing program 5: clock_gettime(0x0, &(0x7f00000058c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005900)={r0, r1+60000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0) r6 = gettid() syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = gettid() process_vm_writev(r7, &(0x7f00000003c0)=[{&(0x7f0000002640)=""/115, 0x73}], 0x1, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/53, 0x7ffffffff000}, {&(0x7f0000002580)=""/161, 0xa1}], 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f0000000140)={{0x8, 0x6, 0x6e5400, 0x3, '\x00', 0xffffffff}, 0x0, 0x20000102, 0x8, r7, 0x0, 0xffff, 'syz1\x00', 0x0}) wait4(r6, 0x0, 0x0, &(0x7f000000b540)) 20:48:13 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) mount(&(0x7f0000000280)=@sg0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='nfs\x00', 0x11134ef055dc9146, &(0x7f0000000380)='#\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002400150dee", @ANYRES32=0x0, @ANYBLOB="00000000000000000000865850f40000"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) 20:48:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') r5 = syz_open_procfs(0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x22, 0x0, @fd_index, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, r6) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@mpls_getnetconf={0x2c, 0x52, 0x200, 0x70bd2a, 0x0, {}, [@NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}, @NETCONFA_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000340)={0x2, 0x40, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000440)=[@ip_retopts={{0x34, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x55, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private, @multicast2, @remote, @rand_addr, @private, @multicast1]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd6c0}}, @ip_retopts={{0x58, 0x0, 0x7, {[@rr={0x7, 0xb, 0x63, [@broadcast, @dev]}, @generic={0x86, 0x2}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x6, 0x6, 0x1, 0xfffffff7, 0x80000001]}, @timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x8000, 0x0, 0x1, 0xfff, 0x1, 0x9]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x65, 0x3, 0xd}, @lsrr={0x83, 0x17, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr, @empty]}, @timestamp={0x44, 0x24, 0x0, 0x0, 0x0, [0x6bc1, 0x0, 0x0, 0x9, 0x5, 0x401, 0x5, 0x2b21]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x13, 0x0, 0x8}, @noop, @timestamp_addr={0x44, 0x1c, 0xdd, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x4}, {@multicast1, 0xfffffff9}, {@broadcast}]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x1, 0x0, 0x2}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x383a0851fbf89653, 0x2}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x1a8}}], 0x1, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) r7 = openat(r5, &(0x7f00000000c0)='./file0\x00', 0x101, 0x180) openat(r7, 0x0, 0x100, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 20:48:16 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x48000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fd0800000000a20000000300", @ANYRES32=r6, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x40840}, 0x881) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xba4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000002440)=ANY=[@ANYBLOB="02070009069057a32016a6ceb03c091ba8f9bb27c5936e6745175fa1027bde30a3570fad40ffd707638a765008290b56ce714d42303984af972b8a88ee34bee92a08a1424d9571762e6c6d7c92352cdd4e713be5aa47333f6cf6e7efb01196af761767fc0f2b0eed45f5519834bc67ff10c0d3a702be4049d94946d2a66494e99a57576d1f28718976b21159cb37e7b8644983cefda3537750f5bdf83bb5becd0c74e23f88aae77c436ed97d94adb8a006797899e20e9b9ac1956c19ec6148d3ab6c93e29aa5321bfa5337db008ca58e5c017b"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) process_vm_readv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) read$FUSE(r8, &(0x7f0000000100)={0x2020}, 0x2020) write$UHID_DESTROY(r8, &(0x7f0000002140)={0xa313054}, 0x4) write$UHID_INPUT2(r8, &(0x7f0000002300)=ANY=[@ANYBLOB="0c00000008009e0f8b6867fa284e9c0d7b0e7c69bf893eed0bba5360bd8f6554b38c715af4d449ad2a8edbce030e47239ce564bd3b476422c7ed936fdf414e33bceed421d9dc66af8b1e9f658f12c4179ade551bfbc8577803f6013cfb7655e5402904786973ba4e8374cd1875a89d22747667aef4b7a85482fb330eca0ff41f4d37d836cddfbcb610daee9192d6c91eb0bb35f511"], 0xb) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000080), 0x4) r9 = add_key$fscrypt_v1(&(0x7f0000003300), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r10 = geteuid() sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) keyctl$chown(0x4, r9, r10, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x87, 0x0, r10}, {0x9, 0x10001, 0x400, 0x6, 0x863b, 0x10000, 0x1, 0x7}, {0x7, 0xffffffff, 0x401, 0xe58}, 0x7ff, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x41}, 0x3503, 0x3, 0x2, 0x5f, 0x4, 0x7ff, 0x50e4}}, 0xe8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xdc, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc669}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x811}, 0x40008) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 20:48:17 executing program 5: clock_gettime(0x0, &(0x7f00000058c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005900)={r0, r1+60000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0) r6 = gettid() syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = gettid() process_vm_writev(r7, &(0x7f00000003c0)=[{&(0x7f0000002640)=""/115, 0x73}], 0x1, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/53, 0x7ffffffff000}, {&(0x7f0000002580)=""/161, 0xa1}], 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f0000000140)={{0x8, 0x6, 0x6e5400, 0x3, '\x00', 0xffffffff}, 0x0, 0x20000102, 0x8, r7, 0x0, 0xffff, 'syz1\x00', 0x0}) wait4(r6, 0x0, 0x0, &(0x7f000000b540)) 20:48:17 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) mount(&(0x7f0000000280)=@sg0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='nfs\x00', 0x11134ef055dc9146, &(0x7f0000000380)='#\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002400150dee", @ANYRES32=0x0, @ANYBLOB="00000000000000000000865850f40000"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) 20:48:18 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) mount(&(0x7f0000000280)=@sg0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='nfs\x00', 0x11134ef055dc9146, &(0x7f0000000380)='#\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002400150dee", @ANYRES32=0x0, @ANYBLOB="00000000000000000000865850f40000"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) 20:48:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x48000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fd0800000000a20000000300", @ANYRES32=r6, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x40840}, 0x881) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xba4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000002440)=ANY=[@ANYBLOB="02070009069057a32016a6ceb03c091ba8f9bb27c5936e6745175fa1027bde30a3570fad40ffd707638a765008290b56ce714d42303984af972b8a88ee34bee92a08a1424d9571762e6c6d7c92352cdd4e713be5aa47333f6cf6e7efb01196af761767fc0f2b0eed45f5519834bc67ff10c0d3a702be4049d94946d2a66494e99a57576d1f28718976b21159cb37e7b8644983cefda3537750f5bdf83bb5becd0c74e23f88aae77c436ed97d94adb8a006797899e20e9b9ac1956c19ec6148d3ab6c93e29aa5321bfa5337db008ca58e5c017b"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) process_vm_readv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) read$FUSE(r8, &(0x7f0000000100)={0x2020}, 0x2020) write$UHID_DESTROY(r8, &(0x7f0000002140)={0xa313054}, 0x4) write$UHID_INPUT2(r8, &(0x7f0000002300)=ANY=[@ANYBLOB="0c00000008009e0f8b6867fa284e9c0d7b0e7c69bf893eed0bba5360bd8f6554b38c715af4d449ad2a8edbce030e47239ce564bd3b476422c7ed936fdf414e33bceed421d9dc66af8b1e9f658f12c4179ade551bfbc8577803f6013cfb7655e5402904786973ba4e8374cd1875a89d22747667aef4b7a85482fb330eca0ff41f4d37d836cddfbcb610daee9192d6c91eb0bb35f511"], 0xb) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000080), 0x4) r9 = add_key$fscrypt_v1(&(0x7f0000003300), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r10 = geteuid() sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) keyctl$chown(0x4, r9, r10, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x87, 0x0, r10}, {0x9, 0x10001, 0x400, 0x6, 0x863b, 0x10000, 0x1, 0x7}, {0x7, 0xffffffff, 0x401, 0xe58}, 0x7ff, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x41}, 0x3503, 0x3, 0x2, 0x5f, 0x4, 0x7ff, 0x50e4}}, 0xe8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xdc, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc669}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x811}, 0x40008) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) [ 3578.340044][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3578.346446][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 20:48:25 executing program 1: clock_gettime(0x0, &(0x7f00000058c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005900)={r0, r1+60000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0) r6 = gettid() syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = gettid() process_vm_writev(r7, &(0x7f00000003c0)=[{&(0x7f0000002640)=""/115, 0x73}], 0x1, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/53, 0x7ffffffff000}, {&(0x7f0000002580)=""/161, 0xa1}], 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f0000000140)={{0x8, 0x6, 0x6e5400, 0x3, '\x00', 0xffffffff}, 0x0, 0x20000102, 0x8, r7, 0x0, 0xffff, 'syz1\x00', 0x0}) wait4(r6, 0x0, 0x0, &(0x7f000000b540)) 20:48:25 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x48000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fd0800000000a20000000300", @ANYRES32=r6, @ANYBLOB="0a00e800ffffffffffff00002c0017800400010004000200040002000400020004000200040001000400020004000600040001000400030008000500000000001c00e7002c49716b0e2639a48896b008bebdadc17b872fb096e0ab110a00e80008021100000000001c00e700e6537beefe68bfa39014bc08dc49c3d4e4d2ec60234e9f2b1c00e7003cb88f17538758339401e183687f5117ec1293ad4606fd371c00e70030a5ae3cb968ff163a780b8f18b69970dc7c232d3cecb5851c00e700838178e8cfc7cbed0bdf59fd90c819f40c773cb000a93a6114001780040004000400030004000200040002001c00e7000b80706f2daeec0ed6ab8189ae9e4574bd6ca107e76d0bfe050053000100000005005300000000000800050008000000"], 0x13c}, 0x1, 0x0, 0x0, 0x40840}, 0x881) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xba4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000002440)=ANY=[@ANYBLOB="02070009069057a32016a6ceb03c091ba8f9bb27c5936e6745175fa1027bde30a3570fad40ffd707638a765008290b56ce714d42303984af972b8a88ee34bee92a08a1424d9571762e6c6d7c92352cdd4e713be5aa47333f6cf6e7efb01196af761767fc0f2b0eed45f5519834bc67ff10c0d3a702be4049d94946d2a66494e99a57576d1f28718976b21159cb37e7b8644983cefda3537750f5bdf83bb5becd0c74e23f88aae77c436ed97d94adb8a006797899e20e9b9ac1956c19ec6148d3ab6c93e29aa5321bfa5337db008ca58e5c017b"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) process_vm_readv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) read$FUSE(r8, &(0x7f0000000100)={0x2020}, 0x2020) write$UHID_DESTROY(r8, &(0x7f0000002140)={0xa313054}, 0x4) write$UHID_INPUT2(r8, &(0x7f0000002300)=ANY=[@ANYBLOB="0c00000008009e0f8b6867fa284e9c0d7b0e7c69bf893eed0bba5360bd8f6554b38c715af4d449ad2a8edbce030e47239ce564bd3b476422c7ed936fdf414e33bceed421d9dc66af8b1e9f658f12c4179ade551bfbc8577803f6013cfb7655e5402904786973ba4e8374cd1875a89d22747667aef4b7a85482fb330eca0ff41f4d37d836cddfbcb610daee9192d6c91eb0bb35f511"], 0xb) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000080), 0x4) r9 = add_key$fscrypt_v1(&(0x7f0000003300), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r10 = geteuid() sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) keyctl$chown(0x4, r9, r10, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x87, 0x0, r10}, {0x9, 0x10001, 0x400, 0x6, 0x863b, 0x10000, 0x1, 0x7}, {0x7, 0xffffffff, 0x401, 0xe58}, 0x7ff, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x41}, 0x3503, 0x3, 0x2, 0x5f, 0x4, 0x7ff, 0x50e4}}, 0xe8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xdc, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc669}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x811}, 0x40008) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 20:48:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x48000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fd0800000000a20000000300", @ANYRES32=r6, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x40840}, 0x881) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xba4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000002440)=ANY=[@ANYBLOB="02070009069057a32016a6ceb03c091ba8f9bb27c5936e6745175fa1027bde30a3570fad40ffd707638a765008290b56ce714d42303984af972b8a88ee34bee92a08a1424d9571762e6c6d7c92352cdd4e713be5aa47333f6cf6e7efb01196af761767fc0f2b0eed45f5519834bc67ff10c0d3a702be4049d94946d2a66494e99a57576d1f28718976b21159cb37e7b8644983cefda3537750f5bdf83bb5becd0c74e23f88aae77c436ed97d94adb8a006797899e20e9b9ac1956c19ec6148d3ab6c93e29aa5321bfa5337db008ca58e5c017b"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) process_vm_readv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) read$FUSE(r8, &(0x7f0000000100)={0x2020}, 0x2020) write$UHID_DESTROY(r8, &(0x7f0000002140)={0xa313054}, 0x4) write$UHID_INPUT2(r8, &(0x7f0000002300)=ANY=[@ANYBLOB="0c00000008009e0f8b6867fa284e9c0d7b0e7c69bf893eed0bba5360bd8f6554b38c715af4d449ad2a8edbce030e47239ce564bd3b476422c7ed936fdf414e33bceed421d9dc66af8b1e9f658f12c4179ade551bfbc8577803f6013cfb7655e5402904786973ba4e8374cd1875a89d22747667aef4b7a85482fb330eca0ff41f4d37d836cddfbcb610daee9192d6c91eb0bb35f511"], 0xb) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000080), 0x4) r9 = add_key$fscrypt_v1(&(0x7f0000003300), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r10 = geteuid() sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) keyctl$chown(0x4, r9, r10, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x87, 0x0, r10}, {0x9, 0x10001, 0x400, 0x6, 0x863b, 0x10000, 0x1, 0x7}, {0x7, 0xffffffff, 0x401, 0xe58}, 0x7ff, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x41}, 0x3503, 0x3, 0x2, 0x5f, 0x4, 0x7ff, 0x50e4}}, 0xe8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xdc, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc669}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x811}, 0x40008) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 20:48:25 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x48000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fd0800000000a20000000300", @ANYRES32=r6, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x40840}, 0x881) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xba4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000002440)=ANY=[@ANYBLOB="02070009069057a32016a6ceb03c091ba8f9bb27c5936e6745175fa1027bde30a3570fad40ffd707638a765008290b56ce714d42303984af972b8a88ee34bee92a08a1424d9571762e6c6d7c92352cdd4e713be5aa47333f6cf6e7efb01196af761767fc0f2b0eed45f5519834bc67ff10c0d3a702be4049d94946d2a66494e99a57576d1f28718976b21159cb37e7b8644983cefda3537750f5bdf83bb5becd0c74e23f88aae77c436ed97d94adb8a006797899e20e9b9ac1956c19ec6148d3ab6c93e29aa5321bfa5337db008ca58e5c017b"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) process_vm_readv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) read$FUSE(r8, &(0x7f0000000100)={0x2020}, 0x2020) write$UHID_DESTROY(r8, &(0x7f0000002140)={0xa313054}, 0x4) write$UHID_INPUT2(r8, &(0x7f0000002300)=ANY=[@ANYBLOB="0c00000008009e0f8b6867fa284e9c0d7b0e7c69bf893eed0bba5360bd8f6554b38c715af4d449ad2a8edbce030e47239ce564bd3b476422c7ed936fdf414e33bceed421d9dc66af8b1e9f658f12c4179ade551bfbc8577803f6013cfb7655e5402904786973ba4e8374cd1875a89d22747667aef4b7a85482fb330eca0ff41f4d37d836cddfbcb610daee9192d6c91eb0bb35f511"], 0xb) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000080), 0x4) r9 = add_key$fscrypt_v1(&(0x7f0000003300), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r10 = geteuid() sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) keyctl$chown(0x4, r9, r10, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x87, 0x0, r10}, {0x9, 0x10001, 0x400, 0x6, 0x863b, 0x10000, 0x1, 0x7}, {0x7, 0xffffffff, 0x401, 0xe58}, 0x7ff, 0x6e6bb4, 0x1, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x41}, 0x3503, 0x3, 0x2, 0x5f, 0x4, 0x7ff, 0x50e4}}, 0xe8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xdc, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc669}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x811}, 0x40008) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 20:48:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) mount(&(0x7f0000000280)=@sg0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='nfs\x00', 0x11134ef055dc9146, &(0x7f0000000380)='#\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002400150dee", @ANYRES32=0x0, @ANYBLOB="00000000000000000000865850f40000"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) 20:48:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) mount(&(0x7f0000000280)=@sg0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='nfs\x00', 0x11134ef055dc9146, &(0x7f0000000380)='#\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002400150dee", @ANYRES32=0x0, @ANYBLOB="00000000000000000000865850f40000"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) [ 3585.556621][T21941] ------------[ cut here ]------------ [ 3585.563076][T21941] WARNING: CPU: 0 PID: 21941 at net/mac80211/ibss.c:500 ieee80211_ibss_csa_beacon+0x67f/0x7d0 [ 3585.573800][T21941] Modules linked in: [ 3585.577753][T21941] CPU: 0 PID: 21941 Comm: kworker/u4:26 Not tainted 6.2.0-syzkaller-08237-ga5c95ca18a98 #0 [ 3585.587845][T21941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 3585.598212][T21941] Workqueue: phy9 ieee80211_iface_work [ 3585.603719][T21941] RIP: 0010:ieee80211_ibss_csa_beacon+0x67f/0x7d0 [ 3585.610222][T21941] Code: f7 48 c7 c2 40 55 7d 8b be 06 03 00 00 48 c7 c7 a0 55 7d 8b c6 05 e8 27 d1 04 01 e8 1b 35 d4 f7 e9 5d fb ff ff e8 91 b0 f3 f7 <0f> 0b 41 bd ea ff ff ff e9 5d fd ff ff e8 7f 5c 45 f8 e9 51 fa ff [ 3585.630526][T21941] RSP: 0018:ffffc9000558f5d8 EFLAGS: 00010212 [ 3585.636636][T21941] RAX: 0000000000002b11 RBX: ffff88801cf7cc80 RCX: ffffc90016564000 [ 3585.644915][T21941] RDX: 0000000000040000 RSI: ffffffff8990fd9f RDI: 0000000000000000 [ 3585.652965][T21941] RBP: 0000000000000002 R08: 0000000000000001 R09: ffffffff914c9c47 [ 3585.661114][T21941] R10: 0000000000000001 R11: 0000000000000046 R12: 0000000000000000 [ 3585.669150][T21941] R13: ffff88801cf7d580 R14: ffff88801cf7dae0 R15: ffff88802b1d8de0 [ 3585.677148][T21941] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 3585.686199][T21941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3585.692860][T21941] CR2: 0000000020029000 CR3: 0000000026dd1000 CR4: 00000000003506f0 [ 3585.700888][T21941] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3585.708943][T21941] DR3: 000000000000003b DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3585.717117][T21941] Call Trace: [ 3585.720436][T21941] [ 3585.723401][T21941] ieee80211_channel_switch+0x1626/0x2740 [ 3585.729252][T21941] ? ieee80211_color_change+0x810/0x810 [ 3585.734890][T21941] ? ieee80211_get_channel_khz+0x14e/0x1e0 [ 3585.740823][T21941] ? cfg80211_get_chans_dfs_required+0xe4/0x110 [ 3585.747151][T21941] ieee80211_ibss_process_chanswitch.constprop.0+0x8ec/0xe90 [ 3585.754584][T21941] ? ieee80211_ibss_finish_sta+0x390/0x390 [ 3585.760497][T21941] ? __lock_acquire+0x18bc/0x5d40 [ 3585.765564][T21941] ieee80211_ibss_rx_queued_mgmt+0x26cb/0x3240 [ 3585.771777][T21941] ? mark_lock.part.0+0xee/0x1970 [ 3585.776845][T21941] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3585.782876][T21941] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3585.788925][T21941] ? __lock_acquire+0x18bc/0x5d40 [ 3585.793976][T21941] ? print_usage_bug.part.0+0x660/0x660 [ 3585.799575][T21941] ? ieee80211_ibss_rx_no_sta+0x8e0/0x8e0 [ 3585.805315][T21941] ? find_held_lock+0x2d/0x110 [ 3585.810129][T21941] ? kcov_remote_start+0x463/0x7a0 [ 3585.815274][T21941] ? mark_held_locks+0x9f/0xe0 [ 3585.820120][T21941] ? kcov_remote_start+0x15a/0x7a0 [ 3585.825260][T21941] ? lockdep_hardirqs_on+0x7d/0x100 [ 3585.830544][T21941] ieee80211_iface_work+0xa4d/0xd70 [ 3585.835785][T21941] process_one_work+0x9bf/0x1820 [ 3585.840864][T21941] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3585.846277][T21941] ? spin_bug+0x1c0/0x1c0 [ 3585.850670][T21941] worker_thread+0x669/0x1090 [ 3585.855392][T21941] ? process_one_work+0x1820/0x1820 [ 3585.860649][T21941] kthread+0x2e8/0x3a0 [ 3585.864788][T21941] ? kthread_complete_and_exit+0x40/0x40 [ 3585.870487][T21941] ret_from_fork+0x1f/0x30 [ 3585.874960][T21941] [ 3585.878031][T21941] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3585.887666][T21941] CPU: 0 PID: 21941 Comm: kworker/u4:26 Not tainted 6.2.0-syzkaller-08237-ga5c95ca18a98 #0 [ 3585.897678][T21941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 3585.907753][T21941] Workqueue: phy9 ieee80211_iface_work [ 3585.913243][T21941] Call Trace: [ 3585.916639][T21941] [ 3585.919599][T21941] dump_stack_lvl+0xd9/0x150 [ 3585.924238][T21941] panic+0x61b/0x6c0 [ 3585.928189][T21941] ? panic_smp_self_stop+0x90/0x90 [ 3585.933330][T21941] ? show_trace_log_lvl+0x285/0x390 [ 3585.940419][T21941] ? ieee80211_ibss_csa_beacon+0x67f/0x7d0 [ 3585.946277][T21941] check_panic_on_warn+0xb1/0xc0 [ 3585.951264][T21941] __warn+0xf2/0x4f0 [ 3585.955365][T21941] ? ieee80211_ibss_csa_beacon+0x67f/0x7d0 [ 3585.961196][T21941] report_bug+0x2da/0x500 [ 3585.965570][T21941] handle_bug+0x3c/0x70 [ 3585.969760][T21941] exc_invalid_op+0x18/0x50 [ 3585.974285][T21941] asm_exc_invalid_op+0x1a/0x20 [ 3585.979168][T21941] RIP: 0010:ieee80211_ibss_csa_beacon+0x67f/0x7d0 [ 3585.985605][T21941] Code: f7 48 c7 c2 40 55 7d 8b be 06 03 00 00 48 c7 c7 a0 55 7d 8b c6 05 e8 27 d1 04 01 e8 1b 35 d4 f7 e9 5d fb ff ff e8 91 b0 f3 f7 <0f> 0b 41 bd ea ff ff ff e9 5d fd ff ff e8 7f 5c 45 f8 e9 51 fa ff [ 3586.005413][T21941] RSP: 0018:ffffc9000558f5d8 EFLAGS: 00010212 [ 3586.011496][T21941] RAX: 0000000000002b11 RBX: ffff88801cf7cc80 RCX: ffffc90016564000 [ 3586.019493][T21941] RDX: 0000000000040000 RSI: ffffffff8990fd9f RDI: 0000000000000000 [ 3586.027485][T21941] RBP: 0000000000000002 R08: 0000000000000001 R09: ffffffff914c9c47 [ 3586.035483][T21941] R10: 0000000000000001 R11: 0000000000000046 R12: 0000000000000000 [ 3586.043496][T21941] R13: ffff88801cf7d580 R14: ffff88801cf7dae0 R15: ffff88802b1d8de0 [ 3586.051513][T21941] ? ieee80211_ibss_csa_beacon+0x67f/0x7d0 [ 3586.057356][T21941] ? ieee80211_ibss_csa_beacon+0x67f/0x7d0 [ 3586.063223][T21941] ieee80211_channel_switch+0x1626/0x2740 [ 3586.069014][T21941] ? ieee80211_color_change+0x810/0x810 [ 3586.074604][T21941] ? ieee80211_get_channel_khz+0x14e/0x1e0 [ 3586.080472][T21941] ? cfg80211_get_chans_dfs_required+0xe4/0x110 [ 3586.086750][T21941] ieee80211_ibss_process_chanswitch.constprop.0+0x8ec/0xe90 [ 3586.094158][T21941] ? ieee80211_ibss_finish_sta+0x390/0x390 [ 3586.100043][T21941] ? __lock_acquire+0x18bc/0x5d40 [ 3586.105104][T21941] ieee80211_ibss_rx_queued_mgmt+0x26cb/0x3240 [ 3586.111280][T21941] ? mark_lock.part.0+0xee/0x1970 [ 3586.116338][T21941] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3586.122339][T21941] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3586.128441][T21941] ? __lock_acquire+0x18bc/0x5d40 [ 3586.133486][T21941] ? print_usage_bug.part.0+0x660/0x660 [ 3586.139057][T21941] ? ieee80211_ibss_rx_no_sta+0x8e0/0x8e0 [ 3586.144805][T21941] ? find_held_lock+0x2d/0x110 [ 3586.149591][T21941] ? kcov_remote_start+0x463/0x7a0 [ 3586.154745][T21941] ? mark_held_locks+0x9f/0xe0 [ 3586.159547][T21941] ? kcov_remote_start+0x15a/0x7a0 [ 3586.164684][T21941] ? lockdep_hardirqs_on+0x7d/0x100 [ 3586.169944][T21941] ieee80211_iface_work+0xa4d/0xd70 [ 3586.175266][T21941] process_one_work+0x9bf/0x1820 [ 3586.180246][T21941] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3586.185660][T21941] ? spin_bug+0x1c0/0x1c0 [ 3586.190032][T21941] worker_thread+0x669/0x1090 [ 3586.194753][T21941] ? process_one_work+0x1820/0x1820 [ 3586.199997][T21941] kthread+0x2e8/0x3a0 [ 3586.204089][T21941] ? kthread_complete_and_exit+0x40/0x40 [ 3586.209759][T21941] ret_from_fork+0x1f/0x30 [ 3586.214216][T21941] [ 3586.217527][T21941] Kernel Offset: disabled [ 3586.222330][T21941] Rebooting in 86400 seconds..