0ae82, &(0x7f0000000380)={[0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:40:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000640)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{}, 0x1}) 19:40:21 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x8, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 19:40:21 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="312c2cb4f856c4595ed512ee88f0e3b858bf6a33e9a3b2c621f7187b884050aa56ace8378c"], 0x3) 19:40:21 executing program 4: syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@lsrr={0x83, 0x3}]}}, @icmp=@timestamp_reply}}}}, 0x0) 19:40:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 19:40:27 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x40, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0xac, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:40:27 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x8, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 19:40:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="312c2cb4f856c4595ed512ee88f0e3b858bf6a33e9a3b2c621f7187b884050aa56ace8378c"], 0x3) 19:40:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x77}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 19:40:27 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000400)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000040)='../file0\x00', 0x2) lstat(&(0x7f00000003c0)='./file0/file0/../file0\x00', &(0x7f0000000880)) 19:40:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000006840), 0xc, &(0x7f0000006800)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0xff8a}}, 0x0) 19:40:27 executing program 4: write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000200)={0x0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)=""/111, 0xfffffffffffffe18, &(0x7f0000000300)=""/202}, 0x250) 19:40:27 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x8, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 19:40:27 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000100)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000000)=""/93, 0x5d}, {&(0x7f0000000140)=""/136, 0x88}, {&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f0000001680)=""/75, 0x4b}, {&(0x7f0000001700)=""/213, 0xd5}, {&(0x7f0000001800)=""/212, 0xd4}, {&(0x7f0000001900)=""/152, 0x98}], 0x8}}], 0x1, 0x0, 0x0) [ 1483.274699][T27344] device syz_tun entered promiscuous mode 19:40:27 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x400, 0x5}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) 19:40:27 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x471, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000002340)={0x0, 0x0, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2}]}}) [ 1483.382449][T12865] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1483.782644][T12865] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1483.791082][T12865] usb 1-1: config 0 has no interface number 0 [ 1483.797412][T12865] usb 1-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1483.806733][T12865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.816359][T12865] usb 1-1: config 0 descriptor?? [ 1483.821979][ T831] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1484.061775][ T831] usb 2-1: Using ep0 maxpacket: 8 [ 1484.261929][ T831] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1484.282298][T12865] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1484.292637][T12865] asix 1-1:0.105 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 1484.322050][T12865] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1484.352166][T12865] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1484.362663][T12865] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1484.402829][T12865] asix: probe of 1-1:0.105 failed with error -71 [ 1484.413452][T12865] usb 1-1: USB disconnect, device number 64 [ 1484.452156][ T831] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1484.461572][ T831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.470235][ T831] usb 2-1: Product: syz [ 1484.474553][ T831] usb 2-1: Manufacturer: syz [ 1484.479326][ T831] usb 2-1: SerialNumber: syz [ 1484.524032][ T831] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1484.724842][T12865] usb 2-1: USB disconnect, device number 42 [ 1485.041846][T24667] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1485.401981][T24667] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1485.410530][T24667] usb 1-1: config 0 has no interface number 0 [ 1485.416961][T24667] usb 1-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1485.426112][T24667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.435974][T24667] usb 1-1: config 0 descriptor?? [ 1485.501928][T12865] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1485.692098][T24667] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1485.702591][T24667] asix: probe of 1-1:0.105 failed with error -71 [ 1485.713223][T24667] usb 1-1: USB disconnect, device number 65 [ 1485.762053][T12865] usb 2-1: Using ep0 maxpacket: 8 [ 1485.982003][T12865] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1486.192117][T12865] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1486.201384][T12865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.209610][T12865] usb 2-1: Product: syz [ 1486.213909][T12865] usb 2-1: Manufacturer: syz [ 1486.218604][T12865] usb 2-1: SerialNumber: syz [ 1486.273953][T12865] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1486.473736][ T831] usb 2-1: USB disconnect, device number 43 19:40:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x75) 19:40:33 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x8, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 19:40:33 executing program 4: syz_usb_connect(0x0, 0x387, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1235808fd0b110081a7000000010902240001000000000904d300026296bd0009050702000000000009050c020000000000c64378b2af008ed381b269059d96fc3a380b4708b56b068400113f812860c886a2cc7c112c980392528bb57e00006d7b"], 0x0) 19:40:33 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x400, 0x5}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) 19:40:33 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x40, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0xac, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:40:33 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8001}, 0xff1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:40:33 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x10045, 0x0, 0x0) 19:40:33 executing program 1: unshare(0x2000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0}) 19:40:33 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x400, 0x5}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) 19:40:33 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) [ 1489.743943][T12865] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1489.751944][T24667] usb 5-1: new high-speed USB device number 49 using dummy_hcd 19:40:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x100000000000019, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, 0x0, 0xfffffe89, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r2) 19:40:34 executing program 3: r0 = fsopen(&(0x7f0000000080)='ecryptfs\x00', 0x0) read(r0, 0x0, 0x0) [ 1490.021983][T24667] usb 5-1: Using ep0 maxpacket: 8 [ 1490.142240][T12865] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1490.150762][T12865] usb 1-1: config 0 has no interface number 0 [ 1490.157099][T12865] usb 1-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1490.166294][T12865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.175513][T24667] usb 5-1: config 0 has an invalid interface number: 211 but max is 0 [ 1490.183871][T24667] usb 5-1: config 0 has no interface number 0 [ 1490.190059][T24667] usb 5-1: config 0 interface 211 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1490.200217][T24667] usb 5-1: config 0 interface 211 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1490.210236][T24667] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=a7.81 [ 1490.219440][T24667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.228812][T12865] usb 1-1: config 0 descriptor?? [ 1490.234889][T24667] usb 5-1: config 0 descriptor?? [ 1490.275771][T24667] kvaser_usb 5-1:0.211: Cannot get usb endpoint(s) [ 1490.476593][ T831] usb 5-1: USB disconnect, device number 49 [ 1490.712034][T12865] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1490.722621][T12865] asix 1-1:0.105 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 1490.752299][T12865] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1490.781899][T12865] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1490.792354][T12865] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1490.832077][T12865] asix: probe of 1-1:0.105 failed with error -71 [ 1490.842897][T12865] usb 1-1: USB disconnect, device number 66 [ 1491.242187][ T831] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1491.481836][ T831] usb 5-1: Using ep0 maxpacket: 8 [ 1491.604432][ T831] usb 5-1: config 0 has an invalid interface number: 211 but max is 0 [ 1491.612865][ T831] usb 5-1: config 0 has no interface number 0 [ 1491.619022][ T831] usb 5-1: config 0 interface 211 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1491.629061][ T831] usb 5-1: config 0 interface 211 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1491.639164][ T831] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=a7.81 [ 1491.648405][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.657736][ T831] usb 5-1: config 0 descriptor?? [ 1491.702938][ T831] kvaser_usb 5-1:0.211: Cannot get usb endpoint(s) [ 1491.903804][ T831] usb 5-1: USB disconnect, device number 50 19:40:39 executing program 2: ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lstat(&(0x7f0000000300)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000040)=0xc) socket$inet_udplite(0x2, 0x2, 0x88) setregid(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) setregid(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 19:40:39 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x400, 0x5}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) 19:40:39 executing program 1: r0 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x2, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @local}, 0x10) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r3, 0x1, 0x6, @remote}, 0x10) 19:40:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000015ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002000ff0a00000000000000000a000000fffffe0121000000354ba86149690484979e620ffc595e9f7855bb3a5005e775ffaaf8a083a04b7f11d37b25f0ce2292c41ad7886992478645598d2b84dd342513ef1c3bcf81675a154fb5cfe867"], 0x1c}}, 0x0) 19:40:39 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x40, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0xac, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:40:39 executing program 4: r0 = socket(0x2, 0x1000000000000002, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x68042, 0x0) write$P9_RSTATu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="4a0000007d0000000057acff000000da144f8f7dac3e947f8288785435459b000000004a00000000000100000000000d00004087f8c4bea5c646eb809b0ffb796e"], 0x41) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0xff, 0x4) fallocate(r1, 0x0, 0xffff, 0x9) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendfile(r0, r1, 0x0, 0x10001) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c}, 0x1c}}, 0x0) [ 1495.852236][T27428] device lo entered promiscuous mode 19:40:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 19:40:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, 0x0) semget$private(0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000440), &(0x7f0000000380)) getgid() setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000280)={0xc, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r3, 0xffffffffffffffff, 0xc0000) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f00000003c0)={[{0x0, 0x101, 0x20, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x80, 0x1, 0x7, 0x8000}, {0x0, 0xffff, 0x20, 0x1, 0x28, 0x8, 0x1, 0x0, 0x7, 0x1f, 0x0, 0x0, 0x100000001}, {0xffff, 0x0, 0x5, 0x5c, 0x6, 0x0, 0x0, 0x1, 0x6, 0x0, 0xf8, 0x0, 0x800}], 0x3}) open(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) [ 1495.929495][T27427] device lo left promiscuous mode [ 1495.994182][T27428] device lo entered promiscuous mode [ 1496.008642][T27427] device lo left promiscuous mode [ 1496.112953][ T831] usb 1-1: new high-speed USB device number 67 using dummy_hcd 19:40:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r1, 0x2}}, 0x18) 19:40:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x5c}, {0x6, 0x0, 0x0, 0xffffffff7fffffff}]}) 19:40:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x76, &(0x7f00000002c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x40, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x5}, [@hopopts={0x18, 0x1, [], [@enc_lim={0x18}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) 19:40:40 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x24}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00t'], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1496.472304][ T831] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1496.480723][ T831] usb 1-1: config 0 has no interface number 0 [ 1496.487120][ T831] usb 1-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1496.496333][ T831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.617702][ T831] usb 1-1: config 0 descriptor?? [ 1496.861936][T12865] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1497.102166][ T831] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1497.112623][ T831] asix 1-1:0.105 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 1497.121917][T12865] usb 6-1: Using ep0 maxpacket: 8 [ 1497.142034][ T831] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1497.172161][ T831] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1497.182642][ T831] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1497.221989][ T831] asix: probe of 1-1:0.105 failed with error -71 [ 1497.232659][ T831] usb 1-1: USB disconnect, device number 67 [ 1497.242100][T12865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.253560][T12865] usb 6-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1497.262894][T12865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.272394][T12865] usb 6-1: config 0 descriptor?? [ 1497.754715][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.762518][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.770482][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.780564][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.788414][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.796056][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.803866][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.811468][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.819178][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.826832][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.834537][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.842183][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.849801][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.857615][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.865288][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.873023][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.880861][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.888579][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.896240][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.903947][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.911853][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.919592][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.927298][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.935056][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.942799][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.950420][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.958129][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.965841][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.973591][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.981202][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.988994][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1497.996650][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1498.004407][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1498.012157][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1498.020138][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1498.028154][T12865] holtek_mouse 0003:04D9:A067.0032: unknown main item tag 0x0 [ 1498.037724][T12865] holtek_mouse 0003:04D9:A067.0032: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.5-1/input0 [ 1498.240293][T12865] usb 6-1: USB disconnect, device number 49 [ 1499.011823][T12865] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1499.251742][T12865] usb 6-1: Using ep0 maxpacket: 8 [ 1499.371986][T12865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.383375][T12865] usb 6-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1499.392744][T12865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.405894][T12865] usb 6-1: config 0 descriptor?? [ 1499.753897][T12865] usbhid 6-1:0.0: can't add hid device: -71 [ 1499.760116][T12865] usbhid: probe of 6-1:0.0 failed with error -71 [ 1499.784829][T12865] usb 6-1: USB disconnect, device number 50 19:40:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) 19:40:45 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0x14371bfa, 0x2, {0x1, @raw_data="f79dd9524c61a7945790ca039664a46fa42cebdb98d059820d5a05496951095404dc369b487724b2cff745d5d908c9f0ea97b24954fbbd2f2ec1168573f130109611459c0df2733e93be33680e0e1fa26ffc8b668ecb501a181f33f5f0ee6b24d43cac905e9d1d35204a1084bd03ee2a4976b814f77784ab1a762ea8ed910b2b9dd87991ab05725ba663e0e4e37f7583203f4e144fdce1d512a0a3a0c2f611c52f4a9f9fc5f87d3258c77dd06c829e577151783ee64c56779e260d180578c6980e0d09c002f75222"}}) ioctl$VIDIOC_TRY_FMT(r0, 0x40045612, &(0x7f0000000000)={0x1, @pix_mp}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x0, 0x1, 0x0, "46bb0de14a70e9dc39703960dd2551273a21c95fe84178905a82dde0bd76eedd"}) 19:40:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x10, 0x18, @str='\x01\xac\x0f\x00\x06\xac\x0f\x00\x04\xac\x0f\x00'}]}, 0x269}}, 0x0) 19:40:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, 0x0) semget$private(0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000440), &(0x7f0000000380)) getgid() setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000280)={0xc, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r3, 0xffffffffffffffff, 0xc0000) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f00000003c0)={[{0x0, 0x101, 0x20, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x80, 0x1, 0x7, 0x8000}, {0x0, 0xffff, 0x20, 0x1, 0x28, 0x8, 0x1, 0x0, 0x7, 0x1f, 0x0, 0x0, 0x100000001}, {0xffff, 0x0, 0x5, 0x5c, 0x6, 0x0, 0x0, 0x1, 0x6, 0x0, 0xf8, 0x0, 0x800}], 0x3}) open(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) 19:40:45 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a48b12f728db4b2b4d2f2fba4fad273b1ea3e46f", 0x14}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:40:45 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x40, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0xac, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:40:45 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1205531, &(0x7f0000000040)={{0x8, 0x0, 0x0, 0x0, 'syz1\x00'}}) 19:40:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=@newlink={0x94, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x50, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x3}, @IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x801a}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_IKEY={0x8, 0x4, 0x790}, @IFLA_GRE_TTL={0x8, 0x8, 0xfff}]]}}}, @IFLA_BROADCAST={0xc, 0x3, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x94}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 19:40:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005074a608480b04107ef30000000109021200011000000009040100004a5d54000800000000000000acdd21ff8cbac574f6e80fe93a88f5956a342b220f2f08be22941444cb6e279422c71a183fa4460027ea615d57dc99c33a9eb8cad135bfba827f8569a4be2630d4104c94f8de5a4fa3410000000000000000fd00130000000000"], 0x0) [ 1501.262016][T12865] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1501.283823][T27499] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1501.292354][T27499] netlink: 'syz-executor.5': attribute type 24 has an invalid length. [ 1501.300721][T27499] netlink: 'syz-executor.5': attribute type 17 has an invalid length. 19:40:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x10, 0x18, @str='\x01\xac\x0f\x00\x06\xac\x0f\x00\x04\xac\x0f\x00'}]}, 0x269}}, 0x0) [ 1501.309204][T27499] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 19:40:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=@newlink={0x94, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x50, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x3}, @IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x801a}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_IKEY={0x8, 0x4, 0x790}, @IFLA_GRE_TTL={0x8, 0x8, 0xfff}]]}}}, @IFLA_BROADCAST={0xc, 0x3, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x94}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 19:40:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x10, 0x18, @str='\x01\xac\x0f\x00\x06\xac\x0f\x00\x04\xac\x0f\x00'}]}, 0x269}}, 0x0) [ 1501.567712][T27509] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1501.576296][T27509] netlink: 'syz-executor.5': attribute type 24 has an invalid length. [ 1501.584831][T27509] netlink: 'syz-executor.5': attribute type 17 has an invalid length. [ 1501.593210][T27509] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 1501.668594][T12865] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1501.677310][T12865] usb 1-1: config 0 has no interface number 0 [ 1501.683583][T12865] usb 1-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1501.692897][T12865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.702154][T24667] usb 2-1: new high-speed USB device number 44 using dummy_hcd 19:40:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x10, 0x18, @str='\x01\xac\x0f\x00\x06\xac\x0f\x00\x04\xac\x0f\x00'}]}, 0x269}}, 0x0) [ 1501.714763][T12865] usb 1-1: config 0 descriptor?? [ 1501.944841][T24667] usb 2-1: Using ep0 maxpacket: 8 [ 1502.062077][T24667] usb 2-1: config 16 has an invalid interface number: 1 but max is 0 [ 1502.070371][T24667] usb 2-1: config 16 has no interface number 0 [ 1502.076924][T24667] usb 2-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=f3.7e [ 1502.086176][T24667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.136087][T24667] usb 2-1: selecting invalid altsetting 1 [ 1502.142191][T24667] ttusb_init_controller: error [ 1502.147007][T24667] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1502.168372][T24667] ves1820: ves1820_readreg(): readreg error (reg == 0x1a, ret == 0) [ 1502.176780][T24667] stv0297_readreg: readreg error (reg == 0x80, ret == 0) [ 1502.184045][T24667] dvb-ttusb-budget: A frontend driver was not found for device [0b48:1004] [ 1502.212179][T12865] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1502.222764][T12865] asix 1-1:0.105 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 1502.251968][T12865] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1502.282130][T12865] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1502.292652][T12865] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1502.332095][T12865] asix: probe of 1-1:0.105 failed with error -71 [ 1502.341845][ T831] usb 2-1: USB disconnect, device number 44 [ 1502.348459][T12865] usb 1-1: USB disconnect, device number 68 [ 1503.121809][ T831] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1503.361740][ T831] usb 2-1: Using ep0 maxpacket: 8 [ 1503.481931][ T831] usb 2-1: config 16 has an invalid interface number: 1 but max is 0 [ 1503.490428][ T831] usb 2-1: config 16 has no interface number 0 [ 1503.496886][ T831] usb 2-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=f3.7e [ 1503.506054][ T831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.555765][ T831] usb 2-1: selecting invalid altsetting 1 [ 1503.561895][ T831] ttusb_init_controller: error [ 1503.566721][ T831] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1503.593725][ T831] ves1820: ves1820_readreg(): readreg error (reg == 0x1a, ret == 0) [ 1503.602036][ T831] stv0297_readreg: readreg error (reg == 0x80, ret == 0) [ 1503.609170][ T831] dvb-ttusb-budget: A frontend driver was not found for device [0b48:1004] [ 1503.754004][ T831] usb 2-1: USB disconnect, device number 45 19:40:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000440)='sysfs\x00\x01G\xa3L_\xb1+\x00\xed\x90\xbe\xe9N\a\xd0\xc2\xbb\xb8\xf3|', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0xa400295c) r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r2, r3) 19:40:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=@newlink={0x94, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x50, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x3}, @IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x801a}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_IKEY={0x8, 0x4, 0x790}, @IFLA_GRE_TTL={0x8, 0x8, 0xfff}]]}}}, @IFLA_BROADCAST={0xc, 0x3, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x94}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 19:40:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, 0x0) semget$private(0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000440), &(0x7f0000000380)) getgid() setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000280)={0xc, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r3, 0xffffffffffffffff, 0xc0000) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f00000003c0)={[{0x0, 0x101, 0x20, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x80, 0x1, 0x7, 0x8000}, {0x0, 0xffff, 0x20, 0x1, 0x28, 0x8, 0x1, 0x0, 0x7, 0x1f, 0x0, 0x0, 0x100000001}, {0xffff, 0x0, 0x5, 0x5c, 0x6, 0x0, 0x0, 0x1, 0x6, 0x0, 0xf8, 0x0, 0x800}], 0x3}) open(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) 19:40:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @rand_addr=0x7fffffff}}) 19:40:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10}, 0x3c) 19:40:51 executing program 1: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty=[0x0, 0xd00], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0xd, "8312dac3cdeff083e339c1"}, @mss={0x2, 0x4}]}}}}}}}, 0x0) [ 1507.278849][T27539] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1507.287727][T27539] netlink: 'syz-executor.5': attribute type 24 has an invalid length. [ 1507.296034][T27539] netlink: 'syz-executor.5': attribute type 17 has an invalid length. [ 1507.304307][T27539] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 19:40:51 executing program 1: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty=[0x0, 0xd00], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0xd, "8312dac3cdeff083e339c1"}, @mss={0x2, 0x4}]}}}}}}}, 0x0) 19:40:51 executing program 3: wait4(0x0, 0x0, 0x6000000a, 0x0) 19:40:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0xc520252f5c136887, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 19:40:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1a001000044}, [@ldst={0x4, 0x0, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 19:40:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=@newlink={0x94, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x50, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x3}, @IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x801a}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_IKEY={0x8, 0x4, 0x790}, @IFLA_GRE_TTL={0x8, 0x8, 0xfff}]]}}}, @IFLA_BROADCAST={0xc, 0x3, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x94}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 19:40:51 executing program 0: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x0) name_to_handle_at(r0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x8}, 0xfffffffffffffffe, 0x0) [ 1507.673672][T27557] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 1507.682558][T27557] netlink: 'syz-executor.5': attribute type 24 has an invalid length. [ 1507.690774][T27557] netlink: 'syz-executor.5': attribute type 17 has an invalid length. [ 1507.699187][T27557] netlink: 'syz-executor.5': attribute type 8 has an invalid length. 19:40:58 executing program 1: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty=[0x0, 0xd00], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0xd, "8312dac3cdeff083e339c1"}, @mss={0x2, 0x4}]}}}}}}}, 0x0) 19:40:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5405, 0x71dff5) 19:40:58 executing program 0: write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x10}, 0x10) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22}, 0x0, 0x0, 0x0, 0x2}}, 0x2e) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 19:40:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="f30f090f35642ef22e650f093e67650fc728b9f90200000f320f01eec4c2359994e1003000000f0171009a0f0000001c0066baa10066ed", 0x37}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:40:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, 0x0) semget$private(0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000440), &(0x7f0000000380)) getgid() setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000280)={0xc, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r3, 0xffffffffffffffff, 0xc0000) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f00000003c0)={[{0x0, 0x101, 0x20, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x80, 0x1, 0x7, 0x8000}, {0x0, 0xffff, 0x20, 0x1, 0x28, 0x8, 0x1, 0x0, 0x7, 0x1f, 0x0, 0x0, 0x100000001}, {0xffff, 0x0, 0x5, 0x5c, 0x6, 0x0, 0x0, 0x1, 0x6, 0x0, 0xf8, 0x0, 0x800}], 0x3}) open(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) 19:40:58 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x1, @remote}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000ac0)={@random="4d2b32193377", @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, "f53475"}}}}}}, 0x0) 19:40:58 executing program 1: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty=[0x0, 0xd00], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, {[@generic={0x0, 0xd, "8312dac3cdeff083e339c1"}, @mss={0x2, 0x4}]}}}}}}}, 0x0) 19:40:58 executing program 0: syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ppoll(&(0x7f0000001180)=[{r0}], 0x1, &(0x7f00000011c0), 0x0, 0x0) 19:40:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5405, 0x71dff5) 19:40:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="f30f090f35642ef22e650f093e67650fc728b9f90200000f320f01eec4c2359994e1003000000f0171009a0f0000001c0066baa10066ed", 0x37}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:40:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) sendmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x10}], 0x10}, 0xc000) 19:40:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x31, 0x11d, 0x0, 0x0, {0x4}, [@nested={0x4}]}, 0x18}}, 0x0) 19:40:59 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @empty, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'sit0\x00'}}, 0x1e) dup3(r1, r0, 0x0) 19:40:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5405, 0x71dff5) 19:40:59 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)=0x1) read$rfkill(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) 19:40:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140)="24c838593907000000", 0xffffffffffffff7c, 0xffffffffffffffee, 0x0, 0x0) recvfrom(r1, &(0x7f0000000200)=""/4096, 0x1000, 0x0, 0x0, 0x0) 19:40:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5405, 0x71dff5) 19:41:04 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@multicast1, @remote, @broadcast}, 0xc) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) sendto$inet(r0, &(0x7f00000000c0)="ac", 0x1, 0x0, 0x0, 0x0) 19:41:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000180), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfafc, {{0x19000002, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @remote={0xfe, 0xe0, [0x7]}}, r1}}, 0x48) 19:41:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="f30f090f35642ef22e650f093e67650fc728b9f90200000f320f01eec4c2359994e1003000000f0171009a0f0000001c0066baa10066ed", 0x37}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:41:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001800)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r0, r1) 19:41:04 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='U', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={r1, @in={{0x2, 0x0, @empty}}, 0x1}, 0x90) 19:41:04 executing program 1: socketpair(0x2000000000029, 0x100000000000002, 0x0, &(0x7f0000000040)) 19:41:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') sendfile(r0, r1, 0x0, 0x80000001) 19:41:04 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000004500)=[{{0x0, 0xffffff7f, 0x0}}], 0x3fffe64, 0x0) recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x3cc, 0x0, 0x0, 0x0, 0x1a8}}], 0x400000000000255, 0x0, 0x0) 19:41:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x1, 0x190, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000ffffffff01000000110000000000000008060300736630000010000000000000000064756d6d793000000000000000000000696662300000000000000000000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff0000000000000000d0000000d000000000010000617270000000000000000000000000000000000000000000000000000000000038000000000000000000000000000000e0000001000000007f00000118000000000000000000000000000000aaaaaaaaaa00000000000800000000000000000072656469726563740000000000000000b20000000000080000000000000000000800"/400]}, 0x208) 19:41:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000300)="390000001300030486fe0704000000000000ff3f0b000000450001070000001419001a000a000a00050008000300000800005d14a4e91ee438", 0x39}], 0x1) 19:41:05 executing program 1: write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, 0x0) [ 1521.065093][T27660] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 19:41:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="f30f090f35642ef22e650f093e67650fc728b9f90200000f320f01eec4c2359994e1003000000f0171009a0f0000001c0066baa10066ed", 0x37}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1521.212561][T27671] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 19:41:13 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@multicast1, @remote, @broadcast}, 0xc) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) sendto$inet(r0, &(0x7f00000000c0)="ac", 0x1, 0x0, 0x0, 0x0) 19:41:13 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="20000000000000008400000002000000000006000000000000b1eb00", @ANYRES32=0x0], 0x20}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 19:41:13 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="c95ad8f0e2b5401bf7abadf32cf06653a89907853639406d0e2319762433bb0c4a7fd009b8d63a583c52568e23603c4d635faed1dd0c0000b4d80690574cef671a1c27e018e88b664c562b279d5fe0c4ee4ff7ef52dbf443761093efbe61eafdc50b7898255809002e68e13e0523161244c83b39a16a91a14d68f5759067258b91f87d75fbf7cde258ee7cc13554f93fca1d4b6414815480fbae26451af9d77c4c7023d20d93abbedc5024b6691777c7834cd8eddebf191a29dfe83f2c070d3ad70dba29d6e9a3b495cb69fb979bc4fd43c63f3e50e4c4775acce1f617e84273bbbf478d41457346a091b419df6d2e7247f42b87694e2bd90caa99db1cc5f290ed49e2a391be767284cdb6a6173939453d6a7f0c0303c90bb1cb", 0x11a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:41:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)="a6d6915f41c49e5289c21f050b1963a28a", 0x11}], 0x1}, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:41:13 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x29, 0x6, 0x0, {0x1}}, 0x29) 19:41:13 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x412) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)="a8a0219781b997", 0x7}, {&(0x7f0000000140)="6ac1fd337bf178b67da193d817f4c92610475ac6b20a0dd25f", 0x19}], 0x2, &(0x7f0000000800)=[@ip_tos_int={{0x14}}], 0x18}, 0x0) 19:41:13 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@multicast1, @remote, @broadcast}, 0xc) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) sendto$inet(r0, &(0x7f00000000c0)="ac", 0x1, 0x0, 0x0, 0x0) 19:41:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'v\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'eql\x00', 0x400}) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x6, 0x71, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r1, 0x800454d2, &(0x7f0000000340)=""/4096) 19:41:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @pic={0x0, 0x83, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)) 19:41:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007121dff18946f610500020000001f003e010200010008000b000400ff7e280000001100ff000000000000eff24d8238cfa50223f7efbf7600000000000000000000000b0000", 0x4c}], 0x1}, 0x0) 19:41:13 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@multicast1, @remote, @broadcast}, 0xc) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) sendto$inet(r0, &(0x7f00000000c0)="ac", 0x1, 0x0, 0x0, 0x0) [ 1529.464549][T27720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 19:41:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffff7bff4020aea5, &(0x7f0000000200)) 19:41:21 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@multicast1, @remote, @broadcast}, 0xc) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) sendto$inet(r0, &(0x7f00000000c0)="ac", 0x1, 0x0, 0x0, 0x0) 19:41:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f00000000c0)=0xfffffffffffffd8c) 19:41:21 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@multicast1, @remote, @broadcast}, 0xc) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) sendto$inet(r0, &(0x7f00000000c0)="ac", 0x1, 0x0, 0x0, 0x0) 19:41:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000000)) 19:41:21 executing program 1: unshare(0x20600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc048ae65, 0x0) 19:41:21 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000002ffc)=0xa0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 19:41:21 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7c, 0xe3, 0xad, 0x20, 0x2001, 0x3309, 0x8a5e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb3, 0x0, 0x2, 0xc, 0xc1, 0x47, 0x0, [], [{{0x9, 0x5, 0x8d}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)={0x0, 0x0, 0x3, "7f81b9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0xac, &(0x7f0000000280)={0x0, 0x0, 0x1, "92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x3b}, &(0x7f0000000680)={0x40, 0x13, 0x6}, &(0x7f0000000800)={0x40, 0x17, 0x6}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000980)={0x14, &(0x7f00000006c0)={0x0, 0x24, 0x2, {0x2, 0x63}}, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c80)={0x44, &(0x7f00000009c0)={0x0, 0x16, 0xde, "e0591e474378be827f0ecab5a0ea20df69c6876a9d503924766d7651b5f4f2e3634f3cd0d7ff0db60ca190e7a026ce9f2752a130b406034c66cc69ccb8c4578fb5942f358b397bb6b1ce23b098db0d1bf0636f394d9f250b7a1743e97017fa7304dc55cc31176cfc6c6709ce34c16d38eb491d4bd8e107aa47330011b699bc56982ee985d4006c896f98eb6d7877a44f11641846df0353f313bc902c34524bea22383aa376bfa61deee0dbdbb4f2c1d66ba5457227e2b851b5a6fada6387e51fcb3a3233c3094d8cd134fbf6d42b54a0cc44fd389fd0b221f0de313b5483"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0xffffffffffffffe0}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0xffffffff80000001}, &(0x7f0000000b40)={0x20, 0x80, 0x1c, {0x1, 0x8001, 0x7f, 0x7fffffff, 0xd62, 0x7, 0x5d6, 0x8, 0x5, 0x2, 0x6, 0x2}}, &(0x7f0000000b80)={0x20, 0x85, 0x4, 0x300000000000000}, &(0x7f0000000bc0)={0x20, 0x83, 0x2}, &(0x7f0000000c00)={0x20, 0x87, 0x2, 0x69}, &(0x7f0000000c40)={0x20, 0x89, 0x2}}) 19:41:21 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) socketpair$unix(0x1, 0x8000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)) 19:41:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000002840)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xffff, 0x0, [{}, {}, {}, {}, {0x0, 0x80}]}}) 19:41:21 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) mlock(&(0x7f00005c8000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 19:41:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000000)) 19:41:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x2, 0x914, 0x4000000005}, 0x3c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000500), &(0x7f0000000140)}, 0x20) [ 1537.871870][T12865] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1538.111921][T12865] usb 6-1: Using ep0 maxpacket: 32 [ 1538.231983][T12865] usb 6-1: config 0 has an invalid interface number: 179 but max is 0 [ 1538.240455][T12865] usb 6-1: config 0 has no interface number 0 [ 1538.246791][T12865] usb 6-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 1538.255928][T12865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.265464][T12865] usb 6-1: config 0 descriptor?? [ 1538.532113][T12865] rtl8192cu: Chip version 0x0 [ 1538.961919][T12865] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 1538.969105][T12865] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 1539.000156][T24667] usb 6-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 1539.010453][T24667] usb 6-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 1539.019872][T24667] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 1539.027612][T24667] rtlwifi: Selected firmware is not available [ 1539.176893][T24667] usb 6-1: USB disconnect, device number 51 [ 1539.951842][T24667] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1540.191878][T24667] usb 6-1: Using ep0 maxpacket: 32 [ 1540.332022][T24667] usb 6-1: config 0 has an invalid interface number: 179 but max is 0 [ 1540.340331][T24667] usb 6-1: config 0 has no interface number 0 [ 1540.346813][T24667] usb 6-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 1540.356189][T24667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.365770][T24667] usb 6-1: config 0 descriptor?? [ 1540.621898][T24667] rtl8192cu: Chip version 0x0 [ 1540.892001][T24667] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 1540.899069][T24667] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 1540.921946][T12865] usb 6-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 1540.932196][T12865] usb 6-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 1540.941383][T12865] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 1540.949154][T12865] rtlwifi: Selected firmware is not available [ 1540.965239][T24667] usb 6-1: USB disconnect, device number 52 19:41:27 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@multicast1, @remote, @broadcast}, 0xc) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) sendto$inet(r0, &(0x7f00000000c0)="ac", 0x1, 0x0, 0x0, 0x0) 19:41:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000000)) 19:41:27 executing program 3: futex(0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x0) 19:41:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="860f4c0e57c99ca0ad78349f5803fd3a1a6d5cb848ca6b3a3206a6bc000023b3483f5492d0616e6600df2b1e1a85f73de44b"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8e) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:41:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000016e400300000000006506020001ed00007118540000000000c3640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 19:41:27 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4a) 19:41:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) creat(0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000600)="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", 0x2b4) writev(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f00000008c0)="cb91f6fe897039eb99fdadbd5298fe12949dffc5348ac21b17be0fc337bc2107", 0x20}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:41:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="000014f7f0a9737d1175a700e5000000db814fec4049e4510f197c2e6921853148d7b0420e6e1cc8c3be7727d6fa90a2422e6b89ad95ac56dcd2cda56581507a3d9e180a0ef6586c4b6fbd3ab517408bfbbb93e1a73b5654392cac8d7de9bd03cae4d8b4890e8e47373dbdeed215775c0fd1d74ff7665b93ed277286a9faf79a6db3bbc18834bfc578ee20ac937db0ea1d38309fbd51169da5ef9fe4d41974e550cf03"], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) 19:41:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000000)) 19:41:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000016e400300000000006506020001ed00007118540000000000c3640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 19:41:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="860f4c0e57c99ca0ad78349f5803fd3a1a6d5cb848ca6b3a3206a6bc000023b3483f5492d0616e6600df2b1e1a85f73de44b"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8e) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:41:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@rand_addr="6bd8ea911dc3b8616f160aa8c26d535e", 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0xd104, 0x0, 0x60}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) [ 1544.158221][T27864] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 19:41:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1060000, 0xffffffffffffffff}}}, 0x90) 19:41:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="860f4c0e57c99ca0ad78349f5803fd3a1a6d5cb848ca6b3a3206a6bc000023b3483f5492d0616e6600df2b1e1a85f73de44b"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8e) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:41:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000016e400300000000006506020001ed00007118540000000000c3640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 19:41:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000e0ff6a02000000001df90000000036"]) 19:41:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x0) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308) 19:41:32 executing program 5: rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x7, &(0x7f00000001c0)={0x0, 0x2a, 0x4, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffdac}, 0x8, 0x0) read(r1, &(0x7f0000000080)=""/128, 0xae3f1a6) 19:41:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000016e400300000000006506020001ed00007118540000000000c3640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 19:41:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="860f4c0e57c99ca0ad78349f5803fd3a1a6d5cb848ca6b3a3206a6bc000023b3483f5492d0616e6600df2b1e1a85f73de44b"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8e) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:41:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, 0x0, 0x0, 0x0) 19:41:32 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b48708e305050579bd000000010902240001010000070904a500010e010000092108006b0122700c0905031a000055fd71"], 0x0) [ 1548.911966][ T831] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1549.152061][ T831] usb 5-1: Using ep0 maxpacket: 8 [ 1549.272087][ T831] usb 5-1: config 1 has an invalid interface number: 165 but max is 0 [ 1549.280767][ T831] usb 5-1: config 1 has no interface number 0 [ 1549.287203][ T831] usb 5-1: config 1 interface 165 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1549.297247][ T831] usb 5-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=bd.79 [ 1549.306535][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.396507][ T831] uvcvideo: Found UVC 0.00 device (05e3:0505) [ 1549.403674][ T831] uvcvideo: No valid video chain found. [ 1549.596758][ T831] usb 5-1: USB disconnect, device number 51 [ 1550.381886][ T831] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1550.621818][ T831] usb 5-1: Using ep0 maxpacket: 8 [ 1550.742075][ T831] usb 5-1: config 1 has an invalid interface number: 165 but max is 0 [ 1550.750373][ T831] usb 5-1: config 1 has no interface number 0 [ 1550.756725][ T831] usb 5-1: config 1 interface 165 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1550.766742][ T831] usb 5-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=bd.79 [ 1550.775923][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.828527][ T831] uvcvideo: Found UVC 0.00 device (05e3:0505) [ 1550.835653][ T831] uvcvideo: No valid video chain found. [ 1551.025220][ T831] usb 5-1: USB disconnect, device number 52 19:41:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000140)=0xd, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x10, 0x4) 19:41:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) dup3(r0, r1, 0x0) [ 1551.782983][ C1] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'tsc' as unstable because the skew is too large: [ 1551.795324][ C1] clocksource: 'acpi_pm' wd_now: 7d87f9 wd_last: cabe98 mask: ffffff [ 1551.805484][ C1] clocksource: 'tsc' cs_now: 343b72c99f9 cs_last: 341f67614c1 mask: ffffffffffffffff [ 1551.816981][ C1] tsc: Marking TSC unstable due to clocksource watchdog [ 1551.829837][T24667] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 1551.839410][T24667] sched_clock: Marking unstable (1551888237369, -58425411)<-(1551831813369, -2001379) [ 1551.858306][T27943] clocksource: Switched to clocksource acpi_pm 19:41:39 executing program 2: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), 0x4) 19:41:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r1, r2, 0x0) ioctl$KVM_SET_SREGS(r3, 0xc028ae92, 0x0) dup2(r4, r3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") 19:41:39 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x402) write$binfmt_elf32(r0, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1100, 0x0, 0x38}, [{}]}, 0x58) readv(r0, &(0x7f0000000600), 0x100) 19:41:39 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="683dcac57b2b7295e00e18b23ee3b4757100a516d94a1be84b57d4f9ba8eb9bca94a74bde005baa3b9467b57d7363b8cf1104788c710e9474a9392d3fd47fca4fd", 0x41) r1 = accept(r0, 0x0, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 19:41:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="2d63707520ff92b2f197d86ad80547edb4cd282eaa6ef7ad6224d7b3ecb7b7a2436978ac3aad2814b44d3d3a4a9f842473a457206fcb95c665a50bd1a286b2445614306acda1963025e1dfa600a8713bc838b04a459a4600db8401f170d92ee34e1f04ea91df2bacb934a272caa68cb930f14608493b756c3d164ffa1f3c97a8728bf67e946ec1000000000000000035716ed0be9fb90437e907d4ee63c572a67fb888108744339e535a893509d12bb3d06a2e00"/189], 0x5) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) 19:41:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x40d, 0x0, 0x0, {{@in6=@loopback, @in=@remote}, {@in6=@loopback, 0x0, 0x6c}, @in6=@ipv4={[], [], @local}, {}, {}, {}, 0x0, 0x0, 0xa}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@empty}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x154}}, 0x0) 19:41:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00004ca000)={&(0x7f0000690000)={0x1c, 0x0, 0x207, 0x1, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@generic="06"]}]}, 0x1c}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000000c0)={0x14, 0x3, 0x7, 0x21}, 0x14}}, 0x0) 19:41:39 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00\x00\x00\x00\x00\x00\x9496\x9c\xd7\xa6N\xeay\xad\xd2\xb0\"V\x04.0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r3}]]}}}]}, 0x38}}, 0x0) recvmmsg(r0, &(0x7f00000064c0), 0x400000000000254, 0x2, 0x0) 19:41:39 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00\x00\x00\x00\x00\x00\x9496\x9c\xd7\xa6N\xeay\xad\xd2\xb0\"V\x04.0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:41:42 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0x0, [], 0x0}) 19:41:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x16, 0x821, 0x0, 0x0, {0xa}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @ipv4=@multicast1}]}]}, 0x20}}, 0x0) 19:41:42 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0xffffff4d, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r3}]]}}}]}, 0x38}}, 0x0) recvmmsg(r0, &(0x7f00000064c0), 0x400000000000254, 0x2, 0x0) 19:41:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00\x00\x00\x00\x00\x00\x9496\x9c\xd7\xa6N\xeay\xad\xd2\xb0\"V\x04.0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0) 19:41:42 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) io_setup(0x790, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000002c40)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3c925e0a, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 19:41:42 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0xffffff4d, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r3}]]}}}]}, 0x38}}, 0x0) recvmmsg(r0, &(0x7f00000064c0), 0x400000000000254, 0x2, 0x0) 19:41:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 1562.012477][ T0] NOHZ: local_softirq_pending 08 19:41:48 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x80000002}, 0x1c) 19:41:48 executing program 2: r0 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000200)=0x1, 0x4) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) 19:41:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10000000008, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x2, 0x1, 0x88}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 19:41:48 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0xffffff4d, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r3}]]}}}]}, 0x38}}, 0x0) recvmmsg(r0, &(0x7f00000064c0), 0x400000000000254, 0x2, 0x0) 19:41:48 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x7f6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r0, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/30, 0x1e}}], 0x1, 0x2040, 0x0) 19:41:48 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000200)="b8e7d3baf6c83b04000000000000003806e4109726c063ccad70fd185266f0feb60c15709d32be5d04a2eecfa1b7610178d367908a9a04f84b18cef5da844b4902c45625ff9cd6ea7a861e0cf1642bff7ef510a9f3011b8a7cdb2dd79dbdd48b5ca749fb78befd13f9172ee88314521b23861c1711c8fdf849bda096ee13e72b026d91aaf7e5ae486f95859322a172432e8d48d75ee101391c0d0e7279060a91fb1979bc6a906ae566e0b00700bf1779db69dd374ad6892ca8e06cfd5cb8336136e2915251c9fb68dc9daab6aa364be008769741e026c22c72c8286c73c4851a1243d24b80f0527d9f545c2d4b9ae59ccdd767e7623f13772f89b199d639b3159a", 0x101) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f0000000100)) 19:41:48 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x7f6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r0, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/30, 0x1e}}], 0x1, 0x2040, 0x0) 19:41:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/raw\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffffff7f, 0x0) 19:41:48 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000200)="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", 0x101) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f0000000100)) 19:41:48 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x12, r1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 19:41:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00[9\xa4@\xe4c\xe0\xfe\xc3D\xb7\xacu\xc8h\bL\xf80K\xd3\xf4z\x1a\x03\t\xef\x1cy\xc7\xae\xeaT/5\xf6\xfb\xe7 \xa3g\xde\xf2\x18\x05G\x98\x80\xf5\xaf\x92\xb1|\xbc\x7f\xb2n\x8c\x11\x96]\xb9x-\xa0\x82\aY.\x9d?\xf7\xdec\xe1U;\r\xf6eR\xf9\x89\xf8*\xd7\x11\xaa@') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) read$eventfd(r0, &(0x7f0000000080), 0xb86a09c9) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f0000000100)) 19:41:49 executing program 4: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="9d", 0x1, r0) keyctl$setperm(0x5, r1, 0x0) add_key$user(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000600)="df", 0x1, r0) 19:41:49 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x7f6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r0, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/30, 0x1e}}], 0x1, 0x2040, 0x0) [ 1565.112862][T28084] tmpfs: Bad value for 'gid' 19:41:54 executing program 2: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x0, 0x2c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:41:54 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000200)="b8e7d3baf6c83b04000000000000003806e4109726c063ccad70fd185266f0feb60c15709d32be5d04a2eecfa1b7610178d367908a9a04f84b18cef5da844b4902c45625ff9cd6ea7a861e0cf1642bff7ef510a9f3011b8a7cdb2dd79dbdd48b5ca749fb78befd13f9172ee88314521b23861c1711c8fdf849bda096ee13e72b026d91aaf7e5ae486f95859322a172432e8d48d75ee101391c0d0e7279060a91fb1979bc6a906ae566e0b00700bf1779db69dd374ad6892ca8e06cfd5cb8336136e2915251c9fb68dc9daab6aa364be008769741e026c22c72c8286c73c4851a1243d24b80f0527d9f545c2d4b9ae59ccdd767e7623f13772f89b199d639b3159a", 0x101) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f0000000100)) 19:41:54 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x7f6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r0, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/30, 0x1e}}], 0x1, 0x2040, 0x0) 19:41:54 executing program 5: unshare(0x600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x0, 0x3}) 19:41:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) 19:41:54 executing program 4: r0 = socket(0x1e, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="11dca5055e0bcfe47bf070") setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x393) recvfrom$unix(r0, &(0x7f0000000000)=""/32, 0x20, 0x0, &(0x7f00000000c0)=@abs, 0x70e000) 19:41:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) 19:41:55 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000200)="b8e7d3baf6c83b04000000000000003806e4109726c063ccad70fd185266f0feb60c15709d32be5d04a2eecfa1b7610178d367908a9a04f84b18cef5da844b4902c45625ff9cd6ea7a861e0cf1642bff7ef510a9f3011b8a7cdb2dd79dbdd48b5ca749fb78befd13f9172ee88314521b23861c1711c8fdf849bda096ee13e72b026d91aaf7e5ae486f95859322a172432e8d48d75ee101391c0d0e7279060a91fb1979bc6a906ae566e0b00700bf1779db69dd374ad6892ca8e06cfd5cb8336136e2915251c9fb68dc9daab6aa364be008769741e026c22c72c8286c73c4851a1243d24b80f0527d9f545c2d4b9ae59ccdd767e7623f13772f89b199d639b3159a", 0x101) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f0000000100)) 19:41:55 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x80801) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) ppoll(&(0x7f0000000500)=[{r1}], 0x1, &(0x7f0000000540), 0x0, 0x0) 19:41:55 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 19:41:55 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0x10, 0x0, 0x45) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) r2 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) 19:41:55 executing program 4: syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "56b596aed675"}, @selector_unit={0x6, 0x24, 0x5, 0x0, 0x0, 'I'}, @mixer_unit={0x8, 0x24, 0x4, 0x0, 0x0, "4bb8a1"}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "924bf31deb"}, @input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x9}, @as_header={0x7, 0x24, 0x1, 0x8a, 0x0, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x28e, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 1571.722490][T28129] loop_set_block_size: loop0 () has still dirty pages (nrpages=32) [ 1571.732227][T24879] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1572.092206][T24879] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1572.103621][T24879] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1572.272230][T24879] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1572.281562][T24879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.289856][T24879] usb 5-1: Product: syz [ 1572.294180][T24879] usb 5-1: Manufacturer: syz [ 1572.298832][T24879] usb 5-1: SerialNumber: syz [ 1572.622064][T24879] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1572.656572][T24879] usb 5-1: USB disconnect, device number 53 [ 1573.311813][T12865] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1573.672172][T12865] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1573.683389][T12865] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1573.862195][T12865] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1573.871285][T12865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.879536][T12865] usb 5-1: Product: syz [ 1573.883911][T12865] usb 5-1: Manufacturer: syz [ 1573.888587][T12865] usb 5-1: SerialNumber: syz [ 1574.212368][T12865] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1574.247755][T12865] usb 5-1: USB disconnect, device number 54 19:42:00 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) bind(r0, &(0x7f0000000640)=@in6={0xa, 0x0, 0x0, @remote, 0xffffffff}, 0x80) 19:42:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0x10, 0x0, 0x45) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) r2 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) 19:42:00 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ff40"], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x4}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3ad) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0xd, &(0x7f0000000200)={r1}, &(0x7f00000000c0)=0x8) 19:42:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8000001000008912, &(0x7f0000000080)="11f0a505ba583bcb7bf070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0xfffffe6a, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000210007041dfffd946f610500020000e8fe0200000001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 19:42:00 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0x10, 0x0, 0x45) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) r2 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) 19:42:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000080000000091a3941fe299e0d3742c84b28fb17180a21676556896948942286dc018840742947001fa2c5731695e5de58996c75bb7499a9854629abb8fa5a6292dda5d1a90c3cb4979aab18995c1ad336c16d3b7588c46ed3388e5432b738e23a51d5e5b03945f7b62c055dab6439b672b388056340a0acb9cf990214931cfbb11c47b4c1f932575daff17853f89463eb391316e1d092d84ce40e3b7d2b87e5abed0a0e5ca5914"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400fd17f4e36cff0600000000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002800010000000000000000000000000040000000fcffffff00"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) [ 1576.233034][T28163] loop_set_block_size: loop0 () has still dirty pages (nrpages=14) 19:42:00 executing program 5: unshare(0x2000400) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x120210c}, 0xc) 19:42:00 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0x10, 0x0, 0x45) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) r2 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) 19:42:00 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ff40"], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:00 executing program 5: r0 = socket$packet(0x11, 0x10000000003, 0x300) getsockopt$packet_buf(r0, 0x107, 0xa, &(0x7f00000010c0)=""/4096, &(0x7f0000000000)=0x1000) 19:42:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000080000000091a3941fe299e0d3742c84b28fb17180a21676556896948942286dc018840742947001fa2c5731695e5de58996c75bb7499a9854629abb8fa5a6292dda5d1a90c3cb4979aab18995c1ad336c16d3b7588c46ed3388e5432b738e23a51d5e5b03945f7b62c055dab6439b672b388056340a0acb9cf990214931cfbb11c47b4c1f932575daff17853f89463eb391316e1d092d84ce40e3b7d2b87e5abed0a0e5ca5914"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400fd17f4e36cff0600000000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002800010000000000000000000000000040000000fcffffff00"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 19:42:00 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0x10, 0x0, 0x45) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) r2 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) [ 1582.416263][T28198] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 19:42:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, 0x0) 19:42:06 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x4000000043) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0xa4c6, 0x4) close(r0) 19:42:06 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ff40"], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000080000000091a3941fe299e0d3742c84b28fb17180a21676556896948942286dc018840742947001fa2c5731695e5de58996c75bb7499a9854629abb8fa5a6292dda5d1a90c3cb4979aab18995c1ad336c16d3b7588c46ed3388e5432b738e23a51d5e5b03945f7b62c055dab6439b672b388056340a0acb9cf990214931cfbb11c47b4c1f932575daff17853f89463eb391316e1d092d84ce40e3b7d2b87e5abed0a0e5ca5914"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400fd17f4e36cff0600000000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002800010000000000000000000000000040000000fcffffff00"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 19:42:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) r3 = dup3(r0, r1, 0x0) dup2(r3, r2) 19:42:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0x10, 0x0, 0x45) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) r2 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) [ 1582.516428][T28198] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 19:42:06 executing program 5: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0400001b", @ANYRES16, @ANYBLOB="01ffff0000000000000001"], 0x3}, 0x1, 0x6c}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="2e0000001e00", 0x6}], 0x1}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x3ded5adb) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") splice(r0, 0x0, r2, 0x0, 0x200000011002, 0x6) 19:42:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000080000000091a3941fe299e0d3742c84b28fb17180a21676556896948942286dc018840742947001fa2c5731695e5de58996c75bb7499a9854629abb8fa5a6292dda5d1a90c3cb4979aab18995c1ad336c16d3b7588c46ed3388e5432b738e23a51d5e5b03945f7b62c055dab6439b672b388056340a0acb9cf990214931cfbb11c47b4c1f932575daff17853f89463eb391316e1d092d84ce40e3b7d2b87e5abed0a0e5ca5914"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400fd17f4e36cff0600000000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002800010000000000000000000000000040000000fcffffff00"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 19:42:06 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 19:42:06 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ff40"], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1582.885098][T28226] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 19:42:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000000)) 19:42:07 executing program 3: unshare(0x20400) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000019c0)='ns/pid_for_children\x00') ioctl$FS_IOC_GETFLAGS(r0, 0xb704, 0x0) 19:42:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[], 0x76) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) write$binfmt_elf64(r2, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x810000032, 0xffffffffffffffff, 0x0) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='s'], 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 19:42:12 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x10, &(0x7f000079bffc), &(0x7f0000000100)=0x5) 19:42:12 executing program 0: clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x14) ptrace(0x4206, r0) ptrace$setsig(0x4203, r1, 0x1, &(0x7f0000000240)={0x1b, 0x4, 0x6}) 19:42:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000001580), 0xa5) 19:42:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000040)="7a3ba45dd4bc75601b2bc3a1c5686b0071dfbbea77eea12d1ddeffd5a0d63c214466c5", 0x23}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061108c00"/29], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/dev/kvm\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$getsig(0x420a, r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x6, 0x1ba400000]}) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) 19:42:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0x10, 0x0, 0x45) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) r2 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) 19:42:13 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0xa, 0x0, &(0x7f0000000000)=0xfffffffffffffe57) 19:42:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r3, &(0x7f0000000080)="030400000900600000000000fff57b016d2763bd56373780398d537500620002591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) 19:42:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x58d) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="07c8"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1589.212362][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1589.218824][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1589.225445][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1589.231743][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1589.238126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1589.244463][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:42:13 executing program 5: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000240)="b156d417452c8f6d46edb3b1", 0xc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0xa9) 19:42:13 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000080)='./file0/bus/../file0\x00') mkdir(&(0x7f00000000c0)='./file0/bus/../file0\x00', 0x0) 19:42:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x58d) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="07c8"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x4001000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x4b, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) 19:42:19 executing program 2: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000006c0)="660f3881a88a00baf80c66b818cd168466efbafc0c66ed2e66f20f8b8500000066b9240a00000f322e2e0faeed26f20f5f9c00010e0f796b0f0f30c4e385445f0074", 0x42}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x20000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:19 executing program 4: syz_open_dev$usbmon(0x0, 0x1, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x32, 0x82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x48042, 0x0) ftruncate(r1, 0x88001) r2 = socket(0x11, 0x3, 0x0) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5061b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendfile(r2, r3, 0x0, 0x4e68d5f8) 19:42:19 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x5010, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x0) 19:42:19 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x200}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "8368ad", 0x30, 0x3a, 0x0, @remote, @local, {[], @icmpv6=@pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "80183d", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @dev}}}}}}}}, 0x0) 19:42:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x58d) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="07c8"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:19 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000200)={{0x0, 0x4, 0x0, 0x0, 'syz1\x00', 0x4}}) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 19:42:19 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) unshare(0x400) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000001000/0x1000)=nil, 0x1000}) 19:42:19 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001680)=ANY=[@ANYBLOB="120100005300bb08f80603306f25000000010902120001000000000904d400000e9a3900031189f8722e51048bfbe80e0ccdce508ff0a870fc6e36df16269fcaf775051655c58650cc37be121822fc052a58b4ebcd9c8a3cbf91e13234c6c46acdd2e288fd683e47555da2dcd053b7e4ae850b1166e4aa"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001880)={0x1c, &(0x7f0000000140), 0x0, 0x0}) 19:42:19 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 19:42:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x58d) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="07c8"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:19 executing program 0: timer_create(0x2, 0x0, &(0x7f00000001c0)) timer_create(0x2, 0x0, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f000002e000)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000002e000)={{0x0, 0x989680}, {0x0, r2+10000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040), 0x0) 19:42:19 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x200003, 0x2}) [ 1595.728111][T12865] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1596.012048][T12865] usb 6-1: Using ep0 maxpacket: 8 [ 1596.132102][T12865] usb 6-1: config 0 has an invalid interface number: 212 but max is 0 [ 1596.140461][T12865] usb 6-1: config 0 has no interface number 0 [ 1596.147324][T12865] usb 6-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=25.6f [ 1596.157015][T12865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.166828][T12865] usb 6-1: config 0 descriptor?? [ 1596.216323][T12865] gspca_main: ov534_9-2.14.0 probing 06f8:3003 [ 1598.612537][T12865] gspca_ov534_9: reg_r err -71 [ 1598.961913][T12865] gspca_ov534_9: Unknown sensor 0000 [ 1598.962080][T12865] ov534_9: probe of 6-1:0.212 failed with error -22 [ 1598.977597][T12865] usb 6-1: USB disconnect, device number 53 [ 1599.482050][T12865] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1599.721780][T12865] usb 6-1: Using ep0 maxpacket: 8 [ 1599.841931][T12865] usb 6-1: config 0 has an invalid interface number: 212 but max is 0 [ 1599.850212][T12865] usb 6-1: config 0 has no interface number 0 [ 1599.856752][T12865] usb 6-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=25.6f [ 1599.866597][T12865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.876268][T12865] usb 6-1: config 0 descriptor?? [ 1599.926673][T12865] gspca_main: ov534_9-2.14.0 probing 06f8:3003 [ 1600.123873][T12865] gspca_ov534_9: reg_w failed -71 19:42:24 executing program 2: setitimer(0x0, &(0x7f0000000000)={{}, {0xfffffffffffff378}}, 0x0) 19:42:24 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) set_mempolicy(0x4001, &(0x7f0000000100)=0x80000001, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x7a04, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xeb', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) 19:42:24 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0x21c}], 0x1) 19:42:24 executing program 1: r0 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 19:42:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 19:42:24 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001680)=ANY=[@ANYBLOB="120100005300bb08f80603306f25000000010902120001000000000904d400000e9a3900031189f8722e51048bfbe80e0ccdce508ff0a870fc6e36df16269fcaf775051655c58650cc37be121822fc052a58b4ebcd9c8a3cbf91e13234c6c46acdd2e288fd683e47555da2dcd053b7e4ae850b1166e4aa"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001880)={0x1c, &(0x7f0000000140), 0x0, 0x0}) 19:42:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="fb783f75d4daa3ee6a8fb16688072970"}]}, &(0x7f0000000180)=0x10) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r1}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r2}, 0x8) 19:42:24 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffffffc}]}) 19:42:24 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, 0x0, 0x9c) 19:42:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x18}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}}, 0x0) 19:42:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x0) 19:42:24 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/tcp\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, &(0x7f00000002c0)=0x10202, 0x80) [ 1600.642181][T12865] gspca_ov534_9: Unknown sensor 0000 [ 1600.642380][T12865] ov534_9: probe of 6-1:0.212 failed with error -22 [ 1600.694012][T12865] usb 6-1: USB disconnect, device number 54 [ 1601.091907][T12865] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1601.341853][T12865] usb 6-1: Using ep0 maxpacket: 8 [ 1601.462091][T12865] usb 6-1: config 0 has an invalid interface number: 212 but max is 0 [ 1601.470360][T12865] usb 6-1: config 0 has no interface number 0 [ 1601.476880][T12865] usb 6-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=25.6f [ 1601.486039][T12865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.495657][T12865] usb 6-1: config 0 descriptor?? [ 1601.546727][T12865] gspca_main: ov534_9-2.14.0 probing 06f8:3003 [ 1602.972418][ T0] NOHZ: local_softirq_pending 08 [ 1603.922159][T12865] gspca_ov534_9: reg_r err -71 [ 1604.281838][T12865] gspca_ov534_9: Unknown sensor 0000 [ 1604.282057][T12865] ov534_9: probe of 6-1:0.212 failed with error -22 [ 1604.297949][T12865] usb 6-1: USB disconnect, device number 55 19:42:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0x400000ffffffff, 0x0, 0x100000001}) 19:42:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x8010) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)={0x1}) 19:42:31 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x5ac, 0x23f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 19:42:31 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001680)=ANY=[@ANYBLOB="120100005300bb08f80603306f25000000010902120001000000000904d400000e9a3900031189f8722e51048bfbe80e0ccdce508ff0a870fc6e36df16269fcaf775051655c58650cc37be121822fc052a58b4ebcd9c8a3cbf91e13234c6c46acdd2e288fd683e47555da2dcd053b7e4ae850b1166e4aa"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001880)={0x1c, &(0x7f0000000140), 0x0, 0x0}) 19:42:31 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc3, 0x45, 0x3c, 0x8, 0x5ac, 0x236, 0x9d9a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xc9, 0x2}}]}}]}}, 0x0) 19:42:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x400, "954e8000000000000000000000000000000029000000000000001e00"}) 19:42:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)={0x2, 0x0, [{0x1}, {0x80000000, 0xfffffeff}]}) 19:42:31 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 19:42:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)={0x2, 0x0, [{0x1}, {0x80000000, 0xfffffeff}]}) 19:42:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x2}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1607.742468][T24879] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1607.744094][T12865] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1607.770606][T24667] usb 2-1: new high-speed USB device number 46 using dummy_hcd 19:42:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)={0x2, 0x0, [{0x1}, {0x80000000, 0xfffffeff}]}) 19:42:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)={0x2, 0x0, [{0x1}, {0x80000000, 0xfffffeff}]}) [ 1607.982321][T24879] usb 5-1: Using ep0 maxpacket: 8 [ 1608.003302][T12865] usb 6-1: Using ep0 maxpacket: 8 [ 1608.012299][T24667] usb 2-1: Using ep0 maxpacket: 8 [ 1608.102311][T24879] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1608.116224][T24879] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.00 [ 1608.122356][T12865] usb 6-1: config 0 has an invalid interface number: 212 but max is 0 [ 1608.126053][T24879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.134950][T12865] usb 6-1: config 0 has no interface number 0 [ 1608.145652][T24879] usb 5-1: config 0 descriptor?? [ 1608.149365][T12865] usb 6-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=25.6f [ 1608.164669][T12865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.174253][T24667] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=9d.9a [ 1608.184858][T24667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.195463][T24667] usb 2-1: config 0 descriptor?? [ 1608.202095][T12865] usb 6-1: config 0 descriptor?? [ 1608.227171][T24879] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input85 [ 1608.237688][T24667] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input86 [ 1608.255444][T12865] gspca_main: ov534_9-2.14.0 probing 06f8:3003 [ 1608.440506][T24667] usb 5-1: USB disconnect, device number 55 [ 1608.441192][T24879] usb 2-1: USB disconnect, device number 46 [ 1609.211944][T24667] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1609.225467][ T3378] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1609.461822][T24667] usb 5-1: Using ep0 maxpacket: 8 [ 1609.472281][ T3378] usb 2-1: Using ep0 maxpacket: 8 [ 1609.582101][T24667] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1609.607604][T24667] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.00 [ 1609.623726][T24667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.641543][ T3378] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=9d.9a [ 1609.655660][ T3378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.668410][T24667] usb 5-1: config 0 descriptor?? [ 1609.675364][ T3378] usb 2-1: config 0 descriptor?? [ 1609.718227][ T3378] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input87 [ 1609.738945][T24667] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input88 [ 1609.923113][T24879] usb 2-1: USB disconnect, device number 47 [ 1609.932202][ T831] usb 5-1: USB disconnect, device number 56 [ 1610.662835][T12865] gspca_ov534_9: reg_r err -71 [ 1611.031878][T12865] gspca_ov534_9: Unknown sensor 0000 [ 1611.032091][T12865] ov534_9: probe of 6-1:0.212 failed with error -22 [ 1611.047638][T12865] usb 6-1: USB disconnect, device number 56 19:42:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) 19:42:37 executing program 0: unshare(0x600) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0xfffffffffffffb26, 0x0) 19:42:37 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) connect(r0, &(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80) 19:42:37 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc3, 0x45, 0x3c, 0x8, 0x5ac, 0x236, 0x9d9a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xc9, 0x2}}]}}]}}, 0x0) 19:42:37 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x5ac, 0x23f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 19:42:37 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001680)=ANY=[@ANYBLOB="120100005300bb08f80603306f25000000010902120001000000000904d400000e9a3900031189f8722e51048bfbe80e0ccdce508ff0a870fc6e36df16269fcaf775051655c58650cc37be121822fc052a58b4ebcd9c8a3cbf91e13234c6c46acdd2e288fd683e47555da2dcd053b7e4ae850b1166e4aa"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001880)={0x1c, &(0x7f0000000140), 0x0, 0x0}) 19:42:37 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}]}, 0x58}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:42:37 executing program 0: unshare(0x400) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 19:42:38 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x33}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 1614.022470][T24879] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1614.030620][ T831] usb 2-1: new high-speed USB device number 48 using dummy_hcd 19:42:38 executing program 3: clone(0x40000000, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d0400b4f4d4f600000300000022") r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$PPPIOCSDEBUG(r2, 0x40047440, 0xfffffffffffffffe) ioctl$PPPIOCDISCONN(r2, 0x7439) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x402000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) read$rfkill(r3, &(0x7f0000000000), 0x3) ioctl$int_in(r3, 0x800000c0045009, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000240)=ANY=[], &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000280)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1614.064134][T12865] usb 6-1: new high-speed USB device number 57 using dummy_hcd 19:42:38 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x33}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 19:42:38 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x33}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 1614.210111][T28500] IPVS: ftp: loaded support on port[0] = 21 [ 1614.262176][T24879] usb 5-1: Using ep0 maxpacket: 8 [ 1614.272101][ T831] usb 2-1: Using ep0 maxpacket: 8 [ 1614.346384][T12865] usb 6-1: Using ep0 maxpacket: 8 [ 1614.382382][T24879] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1614.396002][T24879] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.00 [ 1614.405429][T24879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.415019][ T831] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=9d.9a [ 1614.424432][ T831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.434512][ T831] usb 2-1: config 0 descriptor?? [ 1614.440814][T24879] usb 5-1: config 0 descriptor?? [ 1614.479382][ T831] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input89 [ 1614.492157][T12865] usb 6-1: config 0 has an invalid interface number: 212 but max is 0 [ 1614.496746][T24879] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input90 [ 1614.500625][T12865] usb 6-1: config 0 has no interface number 0 [ 1614.516398][T12865] usb 6-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=25.6f [ 1614.525727][T12865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.582819][T12865] usb 6-1: config 0 descriptor?? [ 1614.647221][T12865] gspca_main: ov534_9-2.14.0 probing 06f8:3003 [ 1614.707604][T24667] usb 5-1: USB disconnect, device number 57 [ 1614.723157][ T3378] usb 2-1: USB disconnect, device number 48 [ 1617.042045][T12865] gspca_ov534_9: reg_r err -71 [ 1617.421911][T12865] gspca_ov534_9: Unknown sensor 0000 [ 1617.422127][T12865] ov534_9: probe of 6-1:0.212 failed with error -22 [ 1617.436969][T12865] usb 6-1: USB disconnect, device number 57 19:42:45 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000180)={@local, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x15000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@time_exceeded={0xb, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff89, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@broadcast, @broadcast, @multicast1, @dev]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [{}, {}]}, @generic={0x0, 0x7, "bbcbf993b5"}, @rr={0x7, 0x13, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 19:42:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x33}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 19:42:45 executing program 3: timer_create(0x0, 0x0, &(0x7f0000044000)) timer_getoverrun(0x0) 19:42:45 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x5ac, 0x23f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 19:42:45 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc3, 0x45, 0x3c, 0x8, 0x5ac, 0x236, 0x9d9a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xc9, 0x2}}]}}]}}, 0x0) 19:42:45 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x84) 19:42:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) 19:42:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x9, 0x3d, 0x8000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) [ 1621.220970][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1621.240202][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 19:42:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x48, 0x1a0]}) 19:42:45 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa2, 0x56, 0x1b, 0x8, 0x545, 0x800d, 0x30a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd1, 0x0, 0x0, 0xea, 0xd3, 0xfe}}]}}]}}, 0x0) [ 1621.362336][T12865] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1621.370524][ T3378] usb 5-1: new high-speed USB device number 58 using dummy_hcd 19:42:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x19}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1621.601888][T12865] usb 2-1: Using ep0 maxpacket: 8 [ 1621.612222][ T3378] usb 5-1: Using ep0 maxpacket: 8 [ 1621.702129][ T831] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1621.722363][T12865] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=9d.9a [ 1621.732217][T12865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.740986][ T3378] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1621.754003][ T3378] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.00 [ 1621.763274][ T3378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.773140][T12865] usb 2-1: config 0 descriptor?? [ 1621.785618][ T3378] usb 5-1: config 0 descriptor?? [ 1621.817698][T12865] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input91 [ 1621.834744][ T3378] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input92 19:42:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4068aea3, &(0x7f0000000000)={0x3}) [ 1621.992331][ T831] usb 1-1: Using ep0 maxpacket: 8 [ 1622.021329][ T3378] usb 2-1: USB disconnect, device number 49 [ 1622.051243][T24879] usb 5-1: USB disconnect, device number 58 [ 1622.125577][ T831] usb 1-1: config 0 has an invalid interface number: 209 but max is 0 [ 1622.133957][ T831] usb 1-1: config 0 has no interface number 0 [ 1622.140188][ T831] usb 1-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 1622.149447][ T831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.199745][ T831] usb 1-1: config 0 descriptor?? [ 1622.445723][ T3378] usb 1-1: USB disconnect, device number 69 [ 1623.222000][T24879] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1623.452988][ T0] NOHZ: local_softirq_pending 08 [ 1623.462032][T24879] usb 1-1: Using ep0 maxpacket: 8 [ 1623.582054][T24879] usb 1-1: config 0 has an invalid interface number: 209 but max is 0 [ 1623.590466][T24879] usb 1-1: config 0 has no interface number 0 [ 1623.596955][T24879] usb 1-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 1623.606243][T24879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.622632][T24879] usb 1-1: config 0 descriptor?? [ 1623.864318][T24879] usb 1-1: USB disconnect, device number 70 19:42:51 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000180)={@local, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x15000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@time_exceeded={0xb, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff89, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@broadcast, @broadcast, @multicast1, @dev]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [{}, {}]}, @generic={0x0, 0x7, "bbcbf993b5"}, @rr={0x7, 0x13, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 19:42:51 executing program 5: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x1d5) 19:42:51 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc3, 0x45, 0x3c, 0x8, 0x5ac, 0x236, 0x9d9a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xc9, 0x2}}]}}]}}, 0x0) 19:42:51 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x5ac, 0x23f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 19:42:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0xf7}}) 19:42:51 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) io_setup(0x4000000000006, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 19:42:51 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup(r3) utimensat(r4, 0x0, &(0x7f0000000000)={{0x0, 0x3ffffffe}}, 0x0) 19:42:51 executing program 5: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x1d5) 19:42:51 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "8f1537323af75b8a2139fb1cf6201101"}) 19:42:51 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084146, &(0x7f0000001f64)) 19:42:51 executing program 5: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x1d5) [ 1627.602321][ T3378] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1627.622086][T12865] usb 5-1: new high-speed USB device number 59 using dummy_hcd 19:42:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() r4 = pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0xfffffff9}, 0x0) [ 1627.842154][ T3378] usb 2-1: Using ep0 maxpacket: 8 [ 1627.871901][T12865] usb 5-1: Using ep0 maxpacket: 8 [ 1627.962658][ T3378] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=9d.9a [ 1627.971918][ T3378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.981310][ T3378] usb 2-1: config 0 descriptor?? [ 1628.002213][T12865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1628.015323][T12865] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.00 [ 1628.024746][T12865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.038852][ T3378] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input93 [ 1628.049683][T12865] usb 5-1: config 0 descriptor?? [ 1628.106529][T12865] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input94 [ 1628.236842][T24879] usb 2-1: USB disconnect, device number 50 [ 1628.309546][ T831] usb 5-1: USB disconnect, device number 59 19:42:55 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000180)={@local, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x15000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@time_exceeded={0xb, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff89, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@broadcast, @broadcast, @multicast1, @dev]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [{}, {}]}, @generic={0x0, 0x7, "bbcbf993b5"}, @rr={0x7, 0x13, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 19:42:55 executing program 5: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x1d5) 19:42:55 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084146, &(0x7f0000001f64)) 19:42:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000440)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1a, 0x1, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 19:42:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc12, 0x5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x0, "e95ab04b"}, @global]}}, 0x0}, 0x0) 19:42:55 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x7}, 0x269) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x1b2, @time={0x77359400}}) 19:42:55 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084146, &(0x7f0000001f64)) 19:42:55 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x89901) 19:42:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001ffff04000000000000ff010000000000a85400000000000001e000000100000000000000000000000000000000000000000a0000000000000029430f7a21dda26d37ff6842a842fdfe0632078a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0000000000000000000000000000e33eb88500a22580106acb896827348a8f4df0744c73a5fd4bb1bff83e874c60070d634a3c9097ad93ec3d5d4488fa286145aaa8bf5bf03374a977b588c801e1f42c54460d9ea61c9749ae06a2289c3395839605854e8c617261f43bad0fd3ba5ade9fbb68c08e83"], 0xb8}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000040), 0x4) 19:42:55 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x7}, 0x269) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x1b2, @time={0x77359400}}) 19:42:55 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084146, &(0x7f0000001f64)) [ 1631.762116][ T831] usb 5-1: new high-speed USB device number 60 using dummy_hcd 19:42:55 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) close(r0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) tee(r0, r1, 0x401, 0x0) [ 1632.002225][ T831] usb 5-1: Using ep0 maxpacket: 8 [ 1632.122575][ T831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1632.133707][ T831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1632.146773][ T831] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.40 [ 1632.156028][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.166620][ T831] usb 5-1: config 0 descriptor?? [ 1632.654735][ T831] zeroplus 0003:0C12:0005.0033: unknown main item tag 0x0 [ 1632.666393][ T831] zeroplus 0003:0C12:0005.0033: hidraw0: USB HID v0.00 Device [HID 0c12:0005] on usb-dummy_hcd.4-1/input0 [ 1632.854972][ T831] usb 5-1: USB disconnect, device number 60 [ 1633.621881][T12865] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1633.861876][T12865] usb 5-1: Using ep0 maxpacket: 8 [ 1633.982069][T12865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1633.993293][T12865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1634.006293][T12865] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.40 [ 1634.015670][T12865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.025418][T12865] usb 5-1: config 0 descriptor?? [ 1634.315353][T12865] zeroplus 0003:0C12:0005.0034: unknown main item tag 0x0 [ 1634.325082][T12865] zeroplus 0003:0C12:0005.0034: hidraw0: USB HID v0.00 Device [HID 0c12:0005] on usb-dummy_hcd.4-1/input0 [ 1634.513387][ T831] usb 5-1: USB disconnect, device number 61 19:43:02 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000180)={@local, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x15000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@time_exceeded={0xb, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff89, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@broadcast, @broadcast, @multicast1, @dev]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [{}, {}]}, @generic={0x0, 0x7, "bbcbf993b5"}, @rr={0x7, 0x13, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 19:43:02 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x7}, 0x269) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x1b2, @time={0x77359400}}) 19:43:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x3, 0x18, {0x0, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xff\xcf\xa5\xb6\xc5&y\x00'}}}}, 0x68}}, 0x0) 19:43:02 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) close(r0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) tee(r0, r1, 0x401, 0x0) 19:43:02 executing program 5: mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x0, 0xffffffffffffffff) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', 0x0, 0x0, 0x0) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64\x00', 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$security_smack_entry(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.SMACK64IPIN\x00', 0x0, 0x0, 0x0) 19:43:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, [0xfffffffffffffffe, 0x2]}) 19:43:02 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) close(r0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) tee(r0, r1, 0x401, 0x0) 19:43:02 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x7}, 0x269) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x1b2, @time={0x77359400}}) 19:43:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008001800e9110012", 0x24}], 0x1}, 0x0) 19:43:02 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000c00)="ce", 0x1}, {&(0x7f0000000340)="97", 0x1}, {&(0x7f0000000540)="e5", 0x1}], 0x3, 0x0) 19:43:02 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 19:43:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)) 19:43:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000001880)="2600000013003ff1eb14c1f8030322ff001000e313000000093903680000000005000300124b", 0x26) 19:43:07 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 19:43:07 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50}, 0x50) write(r0, &(0x7f00000002c0)="80f0ae2a146d2e43daab454120396f0e26567f2406814e8a3aad584b9c192acc967471714b1f59d719f2e7c9d98b95764b8b67df40b8cecc", 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) setitimer(0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f0000000000)) 19:43:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:07 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) close(r0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) tee(r0, r1, 0x401, 0x0) 19:43:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @typed={0x8, 0x8, @binary="a5"}]}, 0x24}, 0x1, 0xf000}, 0x0) 19:43:07 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) [ 1643.108977][T28724] : renamed from caif0 19:43:07 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @rand_addr="3c049f7cb636512a8100", @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x608], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast1}}}}}}}, 0x0) [ 1643.192436][T28724] device  entered promiscuous mode [ 1643.197708][T28724] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. 19:43:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000001880)="2600000013003ff1eb14c1f8030322ff001000e313000000093903680000000005000300124b", 0x26) 19:43:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x233, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009cc0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0xff, @broadcast}}}], 0x20}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 19:43:07 executing program 0: r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) getsockname(r0, 0x0, &(0x7f00000001c0)) 19:43:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="fb783f75d4daa3ee6a8fb16688072970"}]}, &(0x7f0000000180)=0x10) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000041c0), &(0x7f0000004280)=0x8) [ 1643.502026][T28739] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. 19:43:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000001880)="2600000013003ff1eb14c1f8030322ff001000e313000000093903680000000005000300124b", 0x26) [ 1643.774666][T28758] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. 19:43:11 executing program 2: r0 = socket(0x11, 0x800000003, 0x81) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888, 0xffffa888, 0x5700}}, 0x200e) 19:43:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil], 0x0, 0x0, 0x0) 19:43:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x233, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009cc0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0xff, @broadcast}}}], 0x20}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 19:43:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="fb783f75d4daa3ee6a8fb16688072970"}]}, &(0x7f0000000180)=0x10) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000041c0), &(0x7f0000004280)=0x8) 19:43:11 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000001880)="2600000013003ff1eb14c1f8030322ff001000e313000000093903680000000005000300124b", 0x26) [ 1647.482013][T28775] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. 19:43:11 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='tmpfs\x00\x80\n\x0f\xa0\'\x87\x9e\xee\xde.$^\x19\x15\xb8.\x19\x1c\xae\xf6\xbf\x9c\xda~\xf7\xb4lE\x82j\x00\x88\xfb_\xab\xf8\x9c\x1f\xc59\xd4\xb5\xd9\x19', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x2) unshare(0x20400) 19:43:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="fb783f75d4daa3ee6a8fb16688072970"}]}, &(0x7f0000000180)=0x10) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000041c0), &(0x7f0000004280)=0x8) 19:43:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x233, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009cc0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0xff, @broadcast}}}], 0x20}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 19:43:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x12, r4, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 19:43:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000040), 0x0, &(0x7f00000002c0)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @authinfo={0x18}], 0x48}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 19:43:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="fb783f75d4daa3ee6a8fb16688072970"}]}, &(0x7f0000000180)=0x10) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000041c0), &(0x7f0000004280)=0x8) 19:43:17 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f) 19:43:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x233, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009cc0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0xff, @broadcast}}}], 0x20}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 19:43:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:43:17 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x20303159, 0x0, @stepwise}) 19:43:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0xf2, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x69, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 19:43:18 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x20303159, 0x0, @stepwise}) 19:43:18 executing program 3: r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 19:43:18 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="f3", 0x1}, {&(0x7f00000005c0)='5', 0x1}, {0x0, 0xfffffe8d}, {&(0x7f0000000300)="9e", 0x1}], 0x4) 19:43:18 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x20303159, 0x0, @stepwise}) 19:43:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000160001020000000000000000020000000c00000008000a0000000001"], 0x20}}, 0x0) 19:43:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffd, "1a19ddf76888009944c22e3837dcbe3482cea52767146f073fa002caeddfea6a"}) 19:43:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x20303159, 0x0, @stepwise}) 19:43:25 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000f80)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) 19:43:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x31}], 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x360}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:43:25 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0xf}}, &(0x7f0000281ffc)='G\xffL\x00'}, 0x48) 19:43:25 executing program 5: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x989680}, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x7b}, @addr}], 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x5}}], 0x30) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 19:43:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0xcd], [0xc1]}) 19:43:25 executing program 5: socket(0x1e, 0x2000000000000805, 0x0) r0 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(r0, 0x0) socket$inet(0x2, 0x802, 0x0) socket$inet(0x2, 0x3, 0x1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 19:43:25 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) fcntl$setstatus(r0, 0x4, 0x2800) recvmmsg(r0, &(0x7f0000003640)=[{{&(0x7f0000001f00)=@xdp, 0x58, &(0x7f0000000000)=[{&(0x7f00000020c0)=""/181, 0xfe93}], 0x1}}], 0x1, 0x0, &(0x7f00000036c0)={0x0, 0x1c9c380}) 19:43:25 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$unix(0x1, 0x400040000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x10000, 0x4) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 19:43:25 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:25 executing program 1: r0 = epoll_create1(0x0) r1 = dup2(r0, r0) r2 = epoll_create1(0x0) close(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) 19:43:29 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000015c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000002f80)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[0xfc], [], @broadcast}}}}], 0x28}}], 0x2, 0x0) 19:43:29 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x24, 0xfffffffffffffffd, 0x47d26376) 19:43:29 executing program 3: madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xf) mlock(&(0x7f0000003000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) 19:43:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_BROADCAST={0xc, 0x4002, @dev}, @IFLA_ADDRESS={0xc, 0x1, @remote}]}, 0x38}}, 0x0) 19:43:29 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x7, 0x2) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 19:43:29 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x31}], 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x360}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:43:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = io_uring_setup(0xf, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x2) 19:43:29 executing program 5: r0 = inotify_init() r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xfe) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00\x00\xb8s1\xa5u\x95\x18\xeeg\'\x84H@/\x02\x1d\xb3\xb8\a\xe7\xe8\xf2l\xc4)\x86\x11*w\x83s\xd5\x04G\x02\x91\x03\x17\x10x\x12&\x1euy\x81\xff\xd5\"\x82Y\x19\xde\xb0\xe1\xfc\rq@\"\xd4H\xc0s?x\xcd\xad\x9b\xc7\xab@\xcd') sendfile(r2, r6, 0x0, 0x80000001) 19:43:29 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cuse\x00', 0x82, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)='v', 0x1}], 0x1) 19:43:29 executing program 1: r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_0\x00', 0xe) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x80, 0x4) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000340)="c7", 0x1) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000040), 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/35, 0x23}}], 0x1, 0x0, 0x0) 19:43:29 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) 19:43:30 executing program 5: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet_tcp(0x2, 0x3, 0x6) listen(r0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, @tcp={{0x0, 0x4e20, 0x42424242, 0x41424344, 0x0, 0x0, 0x15, 0x90a443025eb162d0, 0x0, 0x0, 0x0, {[@generic={0x0, 0xf, "39f3d20d203297d289ad07f6a6"}, @window={0x3, 0x3}, @md5sig={0x13, 0x12, "7305fed2433a8972d7687ef8354f1134"}, @exp_fastopen={0xfe, 0x7, 0xf989, "b7f2e2"}, @md5sig={0x13, 0x12, "f544acbd455e75e5f36811236b26ac42"}]}}}}}}}, 0x0) 19:43:33 executing program 2: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000600)="0400", 0x2, 0x8002, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x2f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0x38) 19:43:33 executing program 1: request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x06', 0xffffffffffffffff, 0x6c00}, &(0x7f0000001fee)='R\trusB\xe3cusgrVex:1%', 0x0) 19:43:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$reject(0x13, 0x0, 0x0, 0x203, 0x0) 19:43:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = io_uring_setup(0xf, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x2) 19:43:33 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) mremap(&(0x7f0000f6d000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000356000/0x4000)=nil) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xc) 19:43:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x31}], 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x360}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:43:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[], 0x378) 19:43:34 executing program 0: unshare(0x400) r0 = socket$inet6(0xa, 0x3, 0x6) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) 19:43:34 executing program 1: stat(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20\x00', 0x200800, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getgid() r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000440)='/dev/vbi#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000480)='\x00', 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff}) connect$rxrpc(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1d, 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) unshare(0x60020000) 19:43:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = io_uring_setup(0xf, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x2) 19:43:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x800000000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'!:\x04', './file0'}, 0xfdef) [ 1670.126519][T28975] IPVS: ftp: loaded support on port[0] = 21 19:43:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3c) 19:43:40 executing program 2: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000b00)='bcsf0\x00\x00\x00\x00\x00\x00h\x11\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000080)={0x0, 0x1}) readv(r1, &(0x7f00000002c0), 0x1a5) 19:43:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 19:43:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe63) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0x1d0003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="2667670f3801e90f21750f01cf82510978ba4000b80030efbaf80c66b8e4b4d18f66efbafc0ced0f8a0d00bab7480000c1880000ebba410066ef", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) 19:43:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = io_uring_setup(0xf, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x2) 19:43:40 executing program 1: r0 = inotify_init() r1 = creat(&(0x7f0000000680)='./file0\x00', 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x80000003) fallocate(r1, 0x3, 0x0, 0x5) 19:43:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x31}], 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x360}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:43:40 executing program 1: r0 = inotify_init() r1 = creat(&(0x7f0000000680)='./file0\x00', 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x80000003) fallocate(r1, 0x3, 0x0, 0x5) 19:43:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x48}]}) 19:43:40 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a440000000000109025c0001010000000904000001020d0000052406000105240200000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d00000905e1c465d2ec84520833ef788d82020000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 19:43:40 executing program 1: r0 = inotify_init() r1 = creat(&(0x7f0000000680)='./file0\x00', 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x80000003) fallocate(r1, 0x3, 0x0, 0x5) 19:43:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe63) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0x1d0003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="2667670f3801e90f21750f01cf82510978ba4000b80030efbaf80c66b8e4b4d18f66efbafc0ced0f8a0d00bab7480000c1880000ebba410066ef", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) 19:43:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'nr0\x01\x00', 0x4005}) write$cgroup_pid(r0, 0x0, 0x0) [ 1676.761875][ T3378] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1677.142143][ T3378] usb 4-1: config 1 has an invalid interface number: 1 but max is 0 [ 1677.150214][ T3378] usb 4-1: config 1 has an invalid interface number: 1 but max is 0 [ 1677.158492][ T3378] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 1677.165847][ T3378] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1677.175041][ T3378] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1677.186087][ T3378] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xE1, skipping [ 1677.196859][ T3378] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1677.209818][ T3378] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1677.219246][ T3378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.352248][ T3378] cdc_ncm 4-1:1.0: bind() failure [ 1678.362175][ T3378] cdc_ncm 4-1:1.1: bind() failure [ 1678.557194][ T3378] usb 4-1: USB disconnect, device number 63 [ 1679.331914][ T3378] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1679.692058][ T3378] usb 4-1: config 1 has an invalid interface number: 1 but max is 0 [ 1679.700207][ T3378] usb 4-1: config 1 has an invalid interface number: 1 but max is 0 [ 1679.708432][ T3378] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 1679.715789][ T3378] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1679.724990][ T3378] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.736013][ T3378] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xE1, skipping [ 1679.746745][ T3378] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1679.759888][ T3378] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1679.769395][ T3378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.112662][ T3378] cdc_ncm 4-1:1.0: bind() failure [ 1680.143192][ T3378] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 1680.162242][ T3378] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 1680.182109][ T3378] usbtest: probe of 4-1:1.1 failed with error -71 [ 1680.191541][ T3378] usb 4-1: USB disconnect, device number 64 19:43:47 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000080), 0x5b) 19:43:47 executing program 1: r0 = inotify_init() r1 = creat(&(0x7f0000000680)='./file0\x00', 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x80000003) fallocate(r1, 0x3, 0x0, 0x5) 19:43:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe63) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0x1d0003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="2667670f3801e90f21750f01cf82510978ba4000b80030efbaf80c66b8e4b4d18f66efbafc0ced0f8a0d00bab7480000c1880000ebba410066ef", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) 19:43:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000006e02000000020000000002"]) 19:43:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd", 0x35}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x360}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:43:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r1, &(0x7f0000000100)=""/158, 0x4f) getdents64(r1, &(0x7f00000003c0)=""/4096, 0x1000) 19:43:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) ioctl(r0, 0xffffffffffffffbe, &(0x7f00000000c0)) 19:43:47 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="090000000000363940d3c7a3ba27660199783b0a82f79b3207b4a66a7790ac47a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60633a027fb50cbcbd92d44076d3b97247e066165ccf1032f51d36ab231f6c20d87e9167edf69776dca67d90a17ccd18fb9c5b2cb0c26bd0254072ba9bf0fc3d7b21d53478e382dcf296a23a060bfe5519de6c998ed4984eee3b3e9f030065b32c5428b09815f36dec66a130a0956915cdbd", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:43:47 executing program 4: unshare(0x40600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x61) 19:43:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe63) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0x1d0003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="2667670f3801e90f21750f01cf82510978ba4000b80030efbaf80c66b8e4b4d18f66efbafc0ced0f8a0d00bab7480000c1880000ebba410066ef", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) 19:43:47 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x35) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1, 0x4a2f41ff70d55933, 0x0, {0x0, 0x7530}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x1f4, 0x0, 0x0, 0x0, "620f17de0ff4af021e95658e4c70e5e57ff85fede2eb9c702abe1333a30254ed6f6a590c085d0996736ac18af90530d403967d2954323a83b819605393d099dd"}}, 0x80}}, 0x0) 19:43:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b5000000000800000000080008000100000008020500ac14341b080003000800050f01"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) getsockname$packet(r4, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:43:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@can_delroute={0x14, 0x19, 0x2d}, 0x14}}, 0x0) 19:43:53 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000080), 0x5b) 19:43:53 executing program 4: request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004c6f41108c0d0e006738e46080ef09021b000000000000fc03c900010300"/45], 0x0) 19:43:53 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab292c3220fc631f5c005efe7bb80b86526b51833790734bd83b320de84000c9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf370539dab5b776d5f788b9960df85ddf08b410646de0eb3db4ed60dd4d3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f700"}, 0x80) 19:43:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) socket(0x2, 0x3, 0xff) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 19:43:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd", 0x35}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x360}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:43:53 executing program 1: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) unshare(0x400) close(r0) inotify_add_watch(r0, 0x0, 0x800000000000002) [ 1689.622705][T29109] RDS: rds_bind could not find a transport for fc63:1f5c:5e:fe7b:b80b:8652:6b51:8337, load rds_tcp or rds_rdma? [ 1689.683520][T29114] RDS: rds_bind could not find a transport for fc63:1f5c:5e:fe7b:b80b:8652:6b51:8337, load rds_tcp or rds_rdma? 19:43:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd", 0x35}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x360}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:43:53 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x100}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) dup3(r1, r2, 0x0) 19:43:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$inet6(0xa, 0x2, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 19:43:53 executing program 1: r0 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) dup2(r0, r4) [ 1689.862158][ T3378] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1689.935627][T29128] Failed to remove local publication {65,0,0}/3957895540 [ 1689.943048][T29128] Failed to remove local publication {65,0,0}/3957895540 [ 1689.972489][T29133] Failed to remove local publication {65,0,0}/3188268968 19:43:54 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x100}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) dup3(r1, r2, 0x0) [ 1689.979622][T29133] Failed to remove local publication {65,0,0}/3188268968 19:43:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x8b1dbd0f) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x10000, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x800000}, 0x10) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xfff6) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) socket(0x10, 0x2, 0x0) [ 1690.045781][T29139] Failed to remove local publication {65,0,0}/3298061942 [ 1690.053064][T29139] Failed to remove local publication {65,0,0}/3298061942 [ 1690.102190][ T3378] usb 5-1: Using ep0 maxpacket: 16 [ 1690.142347][ T3378] usb 5-1: too many configurations: 239, using maximum allowed: 8 [ 1690.225682][ T3378] usb 5-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 1690.236380][ T3378] usb 5-1: config 0 has no interfaces? [ 1690.322382][ T3378] usb 5-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 1690.333700][ T3378] usb 5-1: config 0 has no interfaces? [ 1690.412304][ T3378] usb 5-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 1690.424274][ T3378] usb 5-1: config 0 has no interfaces? [ 1690.502179][ T3378] usb 5-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 1690.514459][ T3378] usb 5-1: config 0 has no interfaces? [ 1690.592451][ T3378] usb 5-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 1690.603300][ T3378] usb 5-1: config 0 has no interfaces? [ 1690.682247][ T3378] usb 5-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 1690.696535][ T3378] usb 5-1: config 0 has no interfaces? [ 1690.782320][ T3378] usb 5-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 1690.794200][ T3378] usb 5-1: config 0 has no interfaces? [ 1690.872317][ T3378] usb 5-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 1690.883209][ T3378] usb 5-1: config 0 has no interfaces? [ 1691.042111][ T3378] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=38.67 [ 1691.052536][ T3378] usb 5-1: New USB device strings: Mfr=228, Product=96, SerialNumber=128 [ 1691.063178][ T3378] usb 5-1: Product: syz [ 1691.067460][ T3378] usb 5-1: Manufacturer: syz [ 1691.072266][ T3378] usb 5-1: SerialNumber: syz [ 1691.092876][ T3378] usb 5-1: config 0 descriptor?? [ 1691.338431][ T3378] usb 5-1: USB disconnect, device number 62 [ 1692.101865][ T831] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1692.342194][ T831] usb 5-1: Using ep0 maxpacket: 16 [ 1692.402530][ T831] usb 5-1: device descriptor read/all, error -71 19:43:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000080), 0x5b) 19:43:59 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000004e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000b8fc8ef1576bb9daf8"], 0x10}}], 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x0, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 19:43:59 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x100}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) dup3(r1, r2, 0x0) 19:43:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x8b1dbd0f) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x10000, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x800000}, 0x10) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xfff6) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) socket(0x10, 0x2, 0x0) 19:43:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmmsg(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)="8b", 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) 19:43:59 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd", 0x35}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x360}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1695.934157][T29163] Failed to remove local publication {65,0,0}/50752957 [ 1695.941251][T29163] Failed to remove local publication {65,0,0}/50752957 19:44:00 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x100}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) dup3(r1, r2, 0x0) 19:44:00 executing program 1: r0 = socket(0x840000000002, 0x3, 0xff) r1 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r1, r0, 0x0) [ 1696.060998][T29175] Failed to remove local publication {65,0,0}/2510791860 [ 1696.068379][T29175] Failed to remove local publication {65,0,0}/2510791860 19:44:00 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000040)) 19:44:00 executing program 5: unshare(0x2000400) r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0) write(r0, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0xa00002) sendfile(r0, r0, &(0x7f0000000040), 0xff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r1, 0x10e, 0x3, 0x0, &(0x7f0000000180)=0x1777d0606b188202) 19:44:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) 19:44:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000e0ffff460000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x40}}, 0x0) 19:44:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000080), 0x5b) 19:44:04 executing program 5: unshare(0x2000400) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:44:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000e0ffff460000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x40}}, 0x0) 19:44:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) lseek(r1, 0x0, 0x3) 19:44:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x8b1dbd0f) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x10000, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x800000}, 0x10) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xfff6) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) socket(0x10, 0x2, 0x0) 19:44:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @remote}, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x2b}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@local}]}, 0x104}}, 0x0) 19:44:04 executing program 0: unshare(0x24020400) unshare(0x24020400) creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r0 = socket$unix(0x1, 0x5, 0x0) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 19:44:04 executing program 5: syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000582) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000040)={0x0, @raw_data="71ec5a74b37cc1aa00995c214b4bbdc1e37e15316e3f25d55ac7fdc7453f9a5ba18cd563253adb96321c445d9f39e53044945878039086267d7e31bdeb16c488baecbaef1a37b2ae897dbff6dad98034517e7d962d9820bc6a43e3f06cbc1ae8dfde483692e134e09379e60ba1c4966dc0c7edb3bb3059113a07bc6e36edb6a7604095ab6b2ef3e2d64370924f61bec9c59ce98ce4c88f291c5b879852cdb44aa4803978d454051765d3cdef67a3b18d2f1f94b576a190e75bff5a1295607434a228eace9f7c7964"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x3e3}) 19:44:04 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)='\t\x00\x00\x00\x00\x0069@', 0x9}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc9fa6a48cf56d73d}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 19:44:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000e0ffff460000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x40}}, 0x0) 19:44:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x8b1dbd0f) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x10000, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x800000}, 0x10) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xfff6) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) socket(0x10, 0x2, 0x0) 19:44:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0xd}, [@IFLA_OPERSTATE={0x8, 0x1a}, @IFLA_LINKINFO={0x25, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x200}}, 0x0) 19:44:04 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x1, 0x0) creat(&(0x7f0000000280)='./file0/bus\x00', 0x0) [ 1700.605069][T29249] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.5'. 19:44:11 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 19:44:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000e0ffff460000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x40}}, 0x0) 19:44:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff0000/0x2000)=nil, 0x2000}, &(0x7f0000000280)=0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x9547c5ad771bd646, 0x0, 0x0, 0x335) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:44:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x40001}) 19:44:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/psched\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fchdir(r1) r3 = memfd_create(&(0x7f0000000300), 0x0) write(r3, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) close(r0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 19:44:11 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x1c9c380}, 0x0, 0x0) 19:44:11 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'syz_tun\x00', {0x2, 0x0, @multicast1}}) listen(r0, 0x5eb857) connect(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a35000/0x400000)=nil, 0x400000, 0x1000006, 0x2013, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xbf8887258bb4bf73}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="a0ecc17a4c30e3c78d1bdfcbc9f32bdb37f28353980beaf7a7864b79039e367aaaf8ae3500791571544c2e0385fcc9f9047bb292f298455cdf7eab59003bfb3e7b04625373d22797893ee32a6a4df6be276ed38ccccf73f2ca7270019ec8e1415462fd56f86564fb5108eafc17620f5c1b4c7ee7a17f09552255ed80c4d305fd2055286d925dac687818b7c5c24e3b3cdd6dfee23af200e51d3576e67b8908fef771d04bd42e65cac53249c4033c0b14000000", @ANYRES16=0x0, @ANYBLOB="000100000000fcdbdf250e0000001c000200080006000600000008000b00000000000800090001000000080006000000000044000200080002004e2000000800040000000000080008000400000008000400ff07000008000e004e240000080005000000000008000700810000000800030000000000080004007b0000001400010008000600736564000800060073680000080005007a940000"], 0xa0}, 0x1, 0x0, 0x0, 0x340000c1}, 0x8008) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x40001d0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, 0xffffffffffffffff, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 19:44:11 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r0, &(0x7f0000007ec0)=[{{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000001b80)="223a7559f7e849cf2edafb947f242fa2b5205b21eb9c39e7089c5d6c2eb066869c484beb8d02671893233e03facc5c0e040b36bc3676e2cbcdfa0a8abd050a0645eb3d06bab0a19ba35466ff9cfef3a476bdfce78d79d23db22b7f03a1a67453ba8a57327f304eea3e57ecc50b2cfff38ff53b2803ac1557d3df1b4340ead28525a02bae9375011711c4ac607afab7a490e29a694413815582b018b9d05099f7ab914b2e390cd48b715f67f40b7bbdedc8ad121b49644df6144923ad4c63e40d5c9ec27279fd4d1d9f242c4d377251ee889caeda0f1c7717cb3a5e22232ba0bec6ebbf7cdfffb46870bac2cbd516aabcc4bff298bc4677ac3cbdb0032ebe08b9c608a51e00ac1e514b44a2c6df2eafb7f9a746536f98436c096e4406903ded897ae5d00d1d36e80f359ae10b43e072c46fab6ab603b603139ed47be57c861f66b2d7b1aff6a7dbef08db0c53bc0ef8e139aa3d4c7ccb9d4efd13d56b7345072b34f331284eae0bbf373e3d547485ca9657435ab7ace1252f3be9120cb9e839ce7cfb6698cb0fa2d2c046ac81a511d53cc77d0a178c336ac4c2a80afe5a50343e184768992d63a7a1a4b6efd882d38590b2365390c4cf2bceaa670401732c16eda848c955684ae5979d8ad8f67bcb9b8d4a5f7c386aa3e6d9ee0b6f0731f070341ea786a906370c2b99a4b303807430e0c82532b8cdea21c8f00a49511baa2ba9b42452b0047966d2cf549df4d277d2856ed0983e5df400683ae07ae978369d4bc0e71d7bdaccdf0db23453d99e2e9474df837a343f8df04dd946b1ae3c437d73801b5bba38264697cb238b4614b1367aa0c23bf65c7cfe9e7a27823a6ddcbb1a1bae043535c69bcb29f8a7558fa2e8bd4b8f141cc48896145c95aa6c04da0b66dfa22fe7b914fab95379ed0dd916f73ed9b2b89c0eaeda6fcccbd16986b0181b280484c4c82ecf0e1829a8a6fd4ef5aafb142ff513ffa15acd23ba917ef727401b0a69d3c113b96925972c0f2d7320a6e3e371cc017da2b976b9ce19e14e51c02e750d10ad6bbaf79e9a6cea02e8940017b810cabd888c8fdbb25d8353196cdb7113536bc5a175922857fe55ccd898f356c7409c1451707b1bf302ea57b6842e243143113cab129f8d662eb15bc92526e86fc22d9751e3ab48105776043fed5a609fff5933f4f561079c1286c4e7ff423373b41701afd382557c27ba051d6afd8245e13ca27ace4ae21cee61691c93b4c2620274ce7933a43a6eff38927d2c62a21b9c3153ad97cbae3da1ee4d779f7b124a58329dbc27988dce5e6993f87ca9168a62ae43e99de24bd81e8d787f9152c566510190657dcc21ed941bec0579299d2c3c7da31ebfd9980b782e16498e7e8475c216b4e642f45338a3e5f766419da1497c3ddba34f6200233a732ab78b183e388d9a44182f7da0a999c73a3626ac477f513d2d64293146cb8ae056d9aa1e12c5a4183af07020f92c587282e2c5413c201ca8e7fae90d05f4ea7db5f244cf8ea16aadb5228501abfc6e5fa1ccfe43cd6e18c964a47d7d4ffb14d7eb351fb57f9258cc4355bce56b51ed2d31ef90b3678623b8906881a2d6f370f932d7a2d9cd1a843e30a3e3082b5c0667980768549ce0dddc41ae86e5d98d479e6626f20be51c50dcbe44fb711160ebde31cbea1f976d059059e354f2bb1815731bca731c6b5181be2a42871709cd138c69339aac01ca9c86c82b31a6c4c94224bed4c2c5b9b249010639331b6e43777d0921b06e20b35c7b2aae9f966e40467dfbeea51a4f5ae68aebb6121c2ed18cc12343d2b31cc3fc55c8132647a6485096152fe121c17675653ccebff655005c09d87e19c5297c99652bf45a96b7263b86e5a288a824aeed1d2689b360c6d30dcbcc07b372459cb217186f1a239c17e6714836cc15fcdd38d551f133592fad7e67f1571091c9d3fe1d6eb8e7e53d6aa6b905cae3e77ba822370a01e39d96d8ddc7b0b606c70b112cc0ea4343706f590e6230bd2d50c35e0e742e255acef631034cdd548152abe47684d1b4a5030d23e6b0c5310d1e924b8407402c66a96f", 0x5b9}], 0x1}}], 0x1, 0x0) 19:44:11 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0x1810}}) 19:44:11 executing program 1: add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="ca85baa26ed1b6d8d8c45906", 0xc, 0xfffffffffffffffe) syz_emit_ethernet(0x0, 0x0, 0x0) 19:44:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x890b, &(0x7f0000000140)={'ifb0\x02\x00\x00\x00\x02\x00\x00\x00\x02\x00', @ifru_map}) 19:44:11 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r0, &(0x7f0000007ec0)=[{{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000001b80)="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", 0x5b9}], 0x1}}], 0x1, 0x0) 19:44:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2626c071950fd2a53b030000e6d13509bb602e484707a00f8d3e00d600"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, 0x0, "fca51d8cfe739107000000a8096c037ca8a201da8957b46d48eb6b590ecc38a369fb637639af3067a35f91ca3c44d4413c130d2bade542b27d79a4bd6ea06536f138e4f41d0973145a86dfec749b00"}, 0xd8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:44:11 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) r2 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) 19:44:12 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8b, 0x33, 0xea, 0x8, 0x3eb, 0x2, 0x4a2d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x1, 0x72, 0x77, 0x55, 0x0, [], [{{0x7, 0x5, 0x81}}]}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000002b40)=[0x4]) 19:44:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000300)={'syz1\x00'}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/166, 0x2e6}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x1000000000000012}, &(0x7f00000002c0)) ioctl$UI_DEV_DESTROY(r0, 0x5502) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x15) 19:44:12 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) connect(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @ipv4={[0xfc], [], @initdev}}, 0x80) [ 1708.220742][T29317] input: syz1 as /devices/virtual/input/input95 [ 1708.369048][T29321] input: syz1 as /devices/virtual/input/input96 [ 1708.442079][ T3378] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1708.692015][ T3378] usb 6-1: Using ep0 maxpacket: 8 [ 1708.812032][ T3378] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 1708.820336][ T3378] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.830639][ T3378] usb 6-1: config 0 has no interface number 0 [ 1708.836889][ T3378] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 1708.846097][ T3378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.855391][ T3378] usb 6-1: config 0 descriptor?? [ 1708.896195][ T3378] Registered IR keymap rc-hauppauge [ 1708.903400][ T3378] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.186/rc/rc0 [ 1708.915663][ T3378] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.186/rc/rc0/input97 [ 1709.095985][ T3378] usb 6-1: USB disconnect, device number 58 [ 1709.932576][ T3378] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1710.171943][ T3378] usb 6-1: Using ep0 maxpacket: 8 [ 1710.292178][ T3378] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 1710.300478][ T3378] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.310759][ T3378] usb 6-1: config 0 has no interface number 0 [ 1710.317095][ T3378] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=4a.2d [ 1710.326347][ T3378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.337195][ T3378] usb 6-1: config 0 descriptor?? [ 1710.386535][ T3378] Registered IR keymap rc-hauppauge [ 1710.393510][ T3378] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.186/rc/rc0 [ 1710.405663][ T3378] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.186/rc/rc0/input98 [ 1710.585831][ T3378] usb 6-1: USB disconnect, device number 59 19:44:16 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eb0400180016000f000586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) 19:44:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1002, 0x0) 19:44:16 executing program 1: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) getcwd(&(0x7f0000000540)=""/188, 0xf) 19:44:16 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r0, &(0x7f0000007ec0)=[{{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000001b80)="223a7559f7e849cf2edafb947f242fa2b5205b21eb9c39e7089c5d6c2eb066869c484beb8d02671893233e03facc5c0e040b36bc3676e2cbcdfa0a8abd050a0645eb3d06bab0a19ba35466ff9cfef3a476bdfce78d79d23db22b7f03a1a67453ba8a57327f304eea3e57ecc50b2cfff38ff53b2803ac1557d3df1b4340ead28525a02bae9375011711c4ac607afab7a490e29a694413815582b018b9d05099f7ab914b2e390cd48b715f67f40b7bbdedc8ad121b49644df6144923ad4c63e40d5c9ec27279fd4d1d9f242c4d377251ee889caeda0f1c7717cb3a5e22232ba0bec6ebbf7cdfffb46870bac2cbd516aabcc4bff298bc4677ac3cbdb0032ebe08b9c608a51e00ac1e514b44a2c6df2eafb7f9a746536f98436c096e4406903ded897ae5d00d1d36e80f359ae10b43e072c46fab6ab603b603139ed47be57c861f66b2d7b1aff6a7dbef08db0c53bc0ef8e139aa3d4c7ccb9d4efd13d56b7345072b34f331284eae0bbf373e3d547485ca9657435ab7ace1252f3be9120cb9e839ce7cfb6698cb0fa2d2c046ac81a511d53cc77d0a178c336ac4c2a80afe5a50343e184768992d63a7a1a4b6efd882d38590b2365390c4cf2bceaa670401732c16eda848c955684ae5979d8ad8f67bcb9b8d4a5f7c386aa3e6d9ee0b6f0731f070341ea786a906370c2b99a4b303807430e0c82532b8cdea21c8f00a49511baa2ba9b42452b0047966d2cf549df4d277d2856ed0983e5df400683ae07ae978369d4bc0e71d7bdaccdf0db23453d99e2e9474df837a343f8df04dd946b1ae3c437d73801b5bba38264697cb238b4614b1367aa0c23bf65c7cfe9e7a27823a6ddcbb1a1bae043535c69bcb29f8a7558fa2e8bd4b8f141cc48896145c95aa6c04da0b66dfa22fe7b914fab95379ed0dd916f73ed9b2b89c0eaeda6fcccbd16986b0181b280484c4c82ecf0e1829a8a6fd4ef5aafb142ff513ffa15acd23ba917ef727401b0a69d3c113b96925972c0f2d7320a6e3e371cc017da2b976b9ce19e14e51c02e750d10ad6bbaf79e9a6cea02e8940017b810cabd888c8fdbb25d8353196cdb7113536bc5a175922857fe55ccd898f356c7409c1451707b1bf302ea57b6842e243143113cab129f8d662eb15bc92526e86fc22d9751e3ab48105776043fed5a609fff5933f4f561079c1286c4e7ff423373b41701afd382557c27ba051d6afd8245e13ca27ace4ae21cee61691c93b4c2620274ce7933a43a6eff38927d2c62a21b9c3153ad97cbae3da1ee4d779f7b124a58329dbc27988dce5e6993f87ca9168a62ae43e99de24bd81e8d787f9152c566510190657dcc21ed941bec0579299d2c3c7da31ebfd9980b782e16498e7e8475c216b4e642f45338a3e5f766419da1497c3ddba34f6200233a732ab78b183e388d9a44182f7da0a999c73a3626ac477f513d2d64293146cb8ae056d9aa1e12c5a4183af07020f92c587282e2c5413c201ca8e7fae90d05f4ea7db5f244cf8ea16aadb5228501abfc6e5fa1ccfe43cd6e18c964a47d7d4ffb14d7eb351fb57f9258cc4355bce56b51ed2d31ef90b3678623b8906881a2d6f370f932d7a2d9cd1a843e30a3e3082b5c0667980768549ce0dddc41ae86e5d98d479e6626f20be51c50dcbe44fb711160ebde31cbea1f976d059059e354f2bb1815731bca731c6b5181be2a42871709cd138c69339aac01ca9c86c82b31a6c4c94224bed4c2c5b9b249010639331b6e43777d0921b06e20b35c7b2aae9f966e40467dfbeea51a4f5ae68aebb6121c2ed18cc12343d2b31cc3fc55c8132647a6485096152fe121c17675653ccebff655005c09d87e19c5297c99652bf45a96b7263b86e5a288a824aeed1d2689b360c6d30dcbcc07b372459cb217186f1a239c17e6714836cc15fcdd38d551f133592fad7e67f1571091c9d3fe1d6eb8e7e53d6aa6b905cae3e77ba822370a01e39d96d8ddc7b0b606c70b112cc0ea4343706f590e6230bd2d50c35e0e742e255acef631034cdd548152abe47684d1b4a5030d23e6b0c5310d1e924b8407402c66a96f", 0x5b9}], 0x1}}], 0x1, 0x0) 19:44:16 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'syz_tun\x00', {0x2, 0x0, @multicast1}}) listen(r0, 0x5eb857) connect(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a35000/0x400000)=nil, 0x400000, 0x1000006, 0x2013, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xbf8887258bb4bf73}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="a0ecc17a4c30e3c78d1bdfcbc9f32bdb37f28353980beaf7a7864b79039e367aaaf8ae3500791571544c2e0385fcc9f9047bb292f298455cdf7eab59003bfb3e7b04625373d22797893ee32a6a4df6be276ed38ccccf73f2ca7270019ec8e1415462fd56f86564fb5108eafc17620f5c1b4c7ee7a17f09552255ed80c4d305fd2055286d925dac687818b7c5c24e3b3cdd6dfee23af200e51d3576e67b8908fef771d04bd42e65cac53249c4033c0b14000000", @ANYRES16=0x0, @ANYBLOB="000100000000fcdbdf250e0000001c000200080006000600000008000b00000000000800090001000000080006000000000044000200080002004e2000000800040000000000080008000400000008000400ff07000008000e004e240000080005000000000008000700810000000800030000000000080004007b0000001400010008000600736564000800060073680000080005007a940000"], 0xa0}, 0x1, 0x0, 0x0, 0x340000c1}, 0x8008) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x40001d0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, 0xffffffffffffffff, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 19:44:16 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x47, 0x4b, 0xa6, 0x8, 0x93b, 0xa004, 0xf6f3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe2, 0x0, 0x0, 0x52, 0x70, 0xa1}}]}}]}}, 0x0) 19:44:16 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r0, &(0x7f0000007ec0)=[{{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000001b80)="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", 0x5b9}], 0x1}}], 0x1, 0x0) 19:44:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write(r0, &(0x7f00000000c0)="240000001a005f0014f9f407000904000a00000000000000000000000800010000000000", 0x24) 19:44:16 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x2358, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0xa, 0x100}) 19:44:16 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0xa97, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0xfd, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) [ 1712.916321][ T3378] usb 6-1: new high-speed USB device number 60 using dummy_hcd 19:44:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000019000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:17 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924924924925be, 0x0) [ 1713.088278][T29370] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1713.162227][ T3378] usb 6-1: Using ep0 maxpacket: 8 [ 1713.184741][T29372] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1713.286166][ T3378] usb 6-1: config 0 has an invalid interface number: 226 but max is 0 [ 1713.294626][ T3378] usb 6-1: config 0 has no interface number 0 [ 1713.300850][ T3378] usb 6-1: New USB device found, idVendor=093b, idProduct=a004, bcdDevice=f6.f3 [ 1713.310193][ T3378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.362959][ T3378] usb 6-1: config 0 descriptor?? [ 1713.408371][ T3378] go7007-loader 6-1:0.226: loading firmware go7007/px-tv402u.fw [ 1713.417105][ T3378] usb 6-1: Direct firmware load for go7007/px-tv402u.fw failed with error -2 [ 1713.426177][ T3378] go7007-loader 6-1:0.226: unable to load firmware from file "go7007/px-tv402u.fw" [ 1713.435655][ T3378] go7007-loader 6-1:0.226: probe failed [ 1713.607560][ T3378] usb 6-1: USB disconnect, device number 60 [ 1714.381822][ T3378] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1714.621793][ T3378] usb 6-1: Using ep0 maxpacket: 8 [ 1714.741953][ T3378] usb 6-1: config 0 has an invalid interface number: 226 but max is 0 [ 1714.750317][ T3378] usb 6-1: config 0 has no interface number 0 [ 1714.756760][ T3378] usb 6-1: New USB device found, idVendor=093b, idProduct=a004, bcdDevice=f6.f3 [ 1714.765977][ T3378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.775569][ T3378] usb 6-1: config 0 descriptor?? [ 1714.827052][ T3378] go7007-loader 6-1:0.226: loading firmware go7007/px-tv402u.fw [ 1714.835659][ T3378] usb 6-1: Direct firmware load for go7007/px-tv402u.fw failed with error -2 [ 1714.846809][ T3378] go7007-loader 6-1:0.226: unable to load firmware from file "go7007/px-tv402u.fw" [ 1714.856255][ T3378] go7007-loader 6-1:0.226: probe failed [ 1715.025361][ T3378] usb 6-1: USB disconnect, device number 61 19:44:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4) listen(r1, 0xffffffffefffffff) 19:44:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x919}, 0x3c) 19:44:20 executing program 0: socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 19:44:20 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 19:44:20 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'syz_tun\x00', {0x2, 0x0, @multicast1}}) listen(r0, 0x5eb857) connect(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a35000/0x400000)=nil, 0x400000, 0x1000006, 0x2013, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xbf8887258bb4bf73}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="a0ecc17a4c30e3c78d1bdfcbc9f32bdb37f28353980beaf7a7864b79039e367aaaf8ae3500791571544c2e0385fcc9f9047bb292f298455cdf7eab59003bfb3e7b04625373d22797893ee32a6a4df6be276ed38ccccf73f2ca7270019ec8e1415462fd56f86564fb5108eafc17620f5c1b4c7ee7a17f09552255ed80c4d305fd2055286d925dac687818b7c5c24e3b3cdd6dfee23af200e51d3576e67b8908fef771d04bd42e65cac53249c4033c0b14000000", @ANYRES16=0x0, @ANYBLOB="000100000000fcdbdf250e0000001c000200080006000600000008000b00000000000800090001000000080006000000000044000200080002004e2000000800040000000000080008000400000008000400ff07000008000e004e240000080005000000000008000700810000000800030000000000080004007b0000001400010008000600736564000800060073680000080005007a940000"], 0xa0}, 0x1, 0x0, 0x0, 0x340000c1}, 0x8008) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x40001d0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, 0xffffffffffffffff, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 19:44:20 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r3}}, 0x18) [ 1716.819401][T29388] device team0 entered promiscuous mode [ 1716.825323][T29388] device team_slave_0 entered promiscuous mode [ 1716.834207][T29388] device team_slave_1 entered promiscuous mode 19:44:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}) 19:44:21 executing program 1: unshare(0x20400) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000040)) 19:44:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000000600)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev, @dev}}}], 0x1ff}}], 0x2, 0x0) 19:44:21 executing program 0: r0 = getpid() socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sched_setaffinity(r0, 0xffffffffffffff00, &(0x7f0000000400)=0x400000000009) sendmmsg$unix(r2, &(0x7f00000bd000), 0x924924924924c31, 0x4ffe0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00005feffc), 0x6) write$binfmt_script(r2, 0x0, 0x0) sendto$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 19:44:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0xcc, 0x28, 0x421, 0x0, 0x0, {0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x9c, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}, @TCA_CGROUP_ACT={0x44, 0x1, @m_nat={0x40, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @dev}}}, {0x4}}}}]}}]}, 0xcc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 19:44:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 19:44:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x4001000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:44:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 19:44:27 executing program 0: r0 = getpid() socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sched_setaffinity(r0, 0xffffffffffffff00, &(0x7f0000000400)=0x400000000009) sendmmsg$unix(r2, &(0x7f00000bd000), 0x924924924924c31, 0x4ffe0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00005feffc), 0x6) write$binfmt_script(r2, 0x0, 0x0) sendto$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 19:44:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a80)="ad56b6cc0400fb8b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="42305729a1ff6c51a0dc332c3b86d836", 0x10}, {&(0x7f0000000100)="82", 0x1}], 0x2}, 0x0) 19:44:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) unshare(0x400) chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') umount2(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x80000000002) fchdir(r0) 19:44:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0xffffffb4, 0x4000, 0x7000000, 0x200000000000000, 0x0, 0x3d, 0x0, 0x20001}, [@ldst={0x7}]}, &(0x7f0000000000)='\x00\x00\x00j\xff\xff\x9b\xff\xff\xf1s\x94\x9f\xaa!\xccQ\xd7\xa9\xcc\r1\xc2\a\x8f\xf8Ov\xbd\xd2\xef\xb2\xad\x1bd/\x10\xfebn\xdc#\xee\xfcl3w\x9d\xc3\xc7\f:\x98R\x9b?\xcfDl\x93Krp\xa1Z\x11H_\x89C\xa3#N\x9dHM\x17\xa6^\x80\xed\xd2\x02=U`rw\xcbtTEP\xbd\xb4\xaf\x93\x97\xea@\xb1\xa4\xe4\xe7Y\xa1\xcf,', 0x5, 0x410, &(0x7f00000000c0)=""/195}, 0x48) 19:44:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 19:44:27 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'syz_tun\x00', {0x2, 0x0, @multicast1}}) listen(r0, 0x5eb857) connect(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a35000/0x400000)=nil, 0x400000, 0x1000006, 0x2013, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xbf8887258bb4bf73}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="a0ecc17a4c30e3c78d1bdfcbc9f32bdb37f28353980beaf7a7864b79039e367aaaf8ae3500791571544c2e0385fcc9f9047bb292f298455cdf7eab59003bfb3e7b04625373d22797893ee32a6a4df6be276ed38ccccf73f2ca7270019ec8e1415462fd56f86564fb5108eafc17620f5c1b4c7ee7a17f09552255ed80c4d305fd2055286d925dac687818b7c5c24e3b3cdd6dfee23af200e51d3576e67b8908fef771d04bd42e65cac53249c4033c0b14000000", @ANYRES16=0x0, @ANYBLOB="000100000000fcdbdf250e0000001c000200080006000600000008000b00000000000800090001000000080006000000000044000200080002004e2000000800040000000000080008000400000008000400ff07000008000e004e240000080005000000000008000700810000000800030000000000080004007b0000001400010008000600736564000800060073680000080005007a940000"], 0xa0}, 0x1, 0x0, 0x0, 0x340000c1}, 0x8008) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x40001d0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, 0xffffffffffffffff, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 19:44:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 19:44:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) 19:44:27 executing program 0: r0 = getpid() socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sched_setaffinity(r0, 0xffffffffffffff00, &(0x7f0000000400)=0x400000000009) sendmmsg$unix(r2, &(0x7f00000bd000), 0x924924924924c31, 0x4ffe0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00005feffc), 0x6) write$binfmt_script(r2, 0x0, 0x0) sendto$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 19:44:27 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) 19:44:27 executing program 1: symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000003c0)='./file0\x00', 0x0) 19:44:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc004ae0a, &(0x7f0000000180)) 19:44:27 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 19:44:31 executing program 0: r0 = getpid() socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sched_setaffinity(r0, 0xffffffffffffff00, &(0x7f0000000400)=0x400000000009) sendmmsg$unix(r2, &(0x7f00000bd000), 0x924924924924c31, 0x4ffe0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00005feffc), 0x6) write$binfmt_script(r2, 0x0, 0x0) sendto$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 19:44:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a80)="ad56b6cc0400fb8b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="42305729a1ff6c51a0dc332c3b86d836", 0x10}, {&(0x7f0000000100)="82", 0x1}], 0x2}, 0x0) 19:44:31 executing program 4: r0 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x110000000000031, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x2714, 0x0, &(0x7f0000000180)) 19:44:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x17}]}) 19:44:31 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1345, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00E'], 0x0, 0x0, 0x0, 0x0}, 0x0) 19:44:31 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf6, 0x16, 0x2, 0x8, 0x1608, 0x21a, 0x6d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x0, 0x1, 0xa, 0x9b, 0xae, 0x0, [], [{{0x9, 0x5, 0xf, 0x2}}]}}]}}]}}, 0x0) 19:44:31 executing program 4: r0 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x110000000000031, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x2714, 0x0, &(0x7f0000000180)) 19:44:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x6c, r3, 0x821, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @rand_addr="fdde95add65ac1dcc03787e957bcd0b7"}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) 19:44:31 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x77, 0x1c, 0xbd, 0x8, 0x61d, 0xc160, 0xef28, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x14, 0xa4, 0x1}}]}}]}}, 0x0) 19:44:31 executing program 4: r0 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x110000000000031, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x2714, 0x0, &(0x7f0000000180)) [ 1727.632409][ T3378] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1727.642361][T12865] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1727.654094][T29519] Started in network mode [ 1727.658554][T29519] Own node identity fdde95add65ac1dcc03787e957bcd0b7, cluster identity 4711 [ 1727.668141][T29519] Enabling of bearer rejected, failed to enable media 19:44:31 executing program 4: r0 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x110000000000031, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x2714, 0x0, &(0x7f0000000180)) 19:44:31 executing program 1: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0) pipe2(&(0x7f0000000080), 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)=""/143, &(0x7f0000000340)=0x8f) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:44:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x100000001, 0x4, 0x100000001, 0x8}) [ 1727.872413][ T3378] usb 4-1: Using ep0 maxpacket: 8 [ 1727.882524][T12865] usb 6-1: Using ep0 maxpacket: 8 [ 1727.952756][T24667] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1727.993244][ T3378] usb 4-1: config 0 has an invalid interface number: 197 but max is 0 [ 1728.001597][ T3378] usb 4-1: config 0 has no interface number 0 [ 1728.008282][ T3378] usb 4-1: config 0 interface 197 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1728.019125][ T3378] usb 4-1: New USB device found, idVendor=1608, idProduct=021a, bcdDevice= 6.d9 [ 1728.028388][ T3378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.037969][T12865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1728.050147][T12865] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1728.063177][T12865] usb 6-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 1728.072860][T12865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.083141][ T3378] usb 4-1: config 0 descriptor?? [ 1728.097114][T12865] usb 6-1: config 0 descriptor?? [ 1728.124856][ T3378] io_ti 4-1:0.197: Edgeport TI 2 port adapter converter detected [ 1728.133757][ T3378] io_ti 4-1:0.197: Direct firmware load for edgeport/down3.bin failed with error -2 [ 1728.143610][ T3378] io_ti 4-1:0.197: Failed to load image "edgeport/down3.bin" err -2 [ 1728.152222][ T3378] io_ti: probe of 4-1:0.197 failed with error -2 [ 1728.281968][T24667] usb 1-1: Using ep0 maxpacket: 8 [ 1728.326101][ T3378] usb 4-1: USB disconnect, device number 65 [ 1728.412114][T24667] usb 1-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=ef.28 [ 1728.421410][T24667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.431768][T24667] usb 1-1: config 0 descriptor?? [ 1728.475884][T24667] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1728.596001][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.603219][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.610209][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.617378][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.624506][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.631918][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.638916][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.646090][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.654478][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.661582][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.668698][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.675934][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.683002][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.683148][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.696879][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.703958][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.710877][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.717957][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.725076][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.732060][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.738946][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.746001][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.753104][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.760042][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.767563][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.774673][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.781939][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.788926][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.796006][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.803063][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.814170][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.821322][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.828392][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.835438][T12865] sony 0003:1345:3008.0035: unknown main item tag 0x0 [ 1728.843202][T24667] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1728.850349][T24667] quatech2: probe of 1-1:0.0 failed with error -71 [ 1728.861203][T24667] usb 1-1: USB disconnect, device number 71 [ 1728.877235][T12865] sony 0003:1345:3008.0035: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.5-1/input0 [ 1728.889402][T12865] sony 0003:1345:3008.0035: failed to claim input [ 1729.048983][T12865] usb 6-1: USB disconnect, device number 62 [ 1729.112087][T24879] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1729.361916][T24879] usb 4-1: Using ep0 maxpacket: 8 [ 1729.471890][ T831] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1729.482600][T24879] usb 4-1: config 0 has an invalid interface number: 197 but max is 0 [ 1729.490951][T24879] usb 4-1: config 0 has no interface number 0 [ 1729.497439][T24879] usb 4-1: config 0 interface 197 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1729.507835][T24879] usb 4-1: New USB device found, idVendor=1608, idProduct=021a, bcdDevice= 6.d9 [ 1729.517217][T24879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.527119][T24879] usb 4-1: config 0 descriptor?? [ 1729.574423][T24879] io_ti 4-1:0.197: Edgeport TI 2 port adapter converter detected [ 1729.583153][T24879] io_ti 4-1:0.197: Direct firmware load for edgeport/down3.bin failed with error -2 [ 1729.592848][T24879] io_ti 4-1:0.197: Failed to load image "edgeport/down3.bin" err -2 [ 1729.601323][T24879] io_ti: probe of 4-1:0.197 failed with error -2 [ 1729.732095][ T831] usb 1-1: Using ep0 maxpacket: 8 [ 1729.776392][T24879] usb 4-1: USB disconnect, device number 66 [ 1729.832070][T12865] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1729.852151][ T831] usb 1-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=ef.28 [ 1729.861386][ T831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.871197][ T831] usb 1-1: config 0 descriptor?? [ 1729.925931][ T831] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1730.082025][T12865] usb 6-1: Using ep0 maxpacket: 8 [ 1730.142186][ T831] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1730.149143][ T831] quatech2: probe of 1-1:0.0 failed with error -71 [ 1730.159942][ T831] usb 1-1: USB disconnect, device number 72 [ 1730.202120][T12865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.213529][T12865] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1730.226538][T12865] usb 6-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 1730.235803][T12865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.252657][T12865] usb 6-1: config 0 descriptor?? [ 1730.653275][T12865] usbhid 6-1:0.0: can't add hid device: -71 [ 1730.659560][T12865] usbhid: probe of 6-1:0.0 failed with error -71 [ 1730.669875][T12865] usb 6-1: USB disconnect, device number 63 19:44:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a80)="ad56b6cc0400fb8b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="42305729a1ff6c51a0dc332c3b86d836", 0x10}, {&(0x7f0000000100)="82", 0x1}], 0x2}, 0x0) 19:44:37 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:44:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) 19:44:37 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x281) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f00000001c0)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 19:44:37 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000100), 0x10) 19:44:37 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc0d05640, &(0x7f0000000000)={0x2, {0x0, 0x0, 0x0, 0x50323234}}) 19:44:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)}], 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x1) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_usb_connect(0x0, 0xa1, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xad, 0x8, 0x75, 0x10, 0x573, 0x4d21, 0x8391, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x2, 0xe1, 0xa7, 0xdf, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x83, 0x11}}]}}]}}]}}, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) 19:44:37 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x0, 0x9, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "23bbea4a"}, 0x0, 0x0, @planes=0x0, 0x4}) 19:44:38 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:44:38 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000005000)={&(0x7f0000000540)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x207, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}}, 0xfd79}}, 0x0) read(r1, &(0x7f0000000280)=""/131, 0x3) 19:44:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="bf16000000000000b707000001000000487000000000001dbc700000000000009500000000000000e994d48078a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c870cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e71485a837578e2fa8b621bb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcf5b54affa3c68b08a7d6e12c11fc8d2f2bb852caebe7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d5e087849dd83ffd83dd80ce9b7037af58426117b1371453b214c0b4846131c2a0c3baf80a92d5a671457159e175e169fa847bbe2778bc003dfec63182259ce46865867e70639262f3ebd07b2418b5457d52e5ef2abc0fc805e9edd58914d489ec9ad2db9ca920d11601bf621e4973da2359efc0ee6df93907a03a5e7c2df61eb6ce803c648f392d0b5986495df177110cc6028c20c9f6b9eb1d16bc3ef9413f8ed7b47b4bad063fd6ccc773eef6a57a9b3940055390dcaa20e5d32cbe71d4ee"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) 19:44:38 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x1, r2, 0x0, r3}, 0x30) [ 1734.284317][T12865] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1734.551864][T12865] usb 6-1: Using ep0 maxpacket: 16 [ 1734.672098][T12865] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 1734.680339][T12865] usb 6-1: config 0 has no interface number 0 [ 1734.686603][T12865] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1734.697931][T12865] usb 6-1: New USB device found, idVendor=0573, idProduct=4d21, bcdDevice=83.91 [ 1734.707177][T12865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.716533][T12865] usb 6-1: config 0 descriptor?? [ 1734.777083][T12865] usbvision_probe: Hauppauge WinTV USB Pro (PAL B/G) found [ 1734.784889][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1734.792822][T12865] usbvision_audio_off: can't write reg [ 1734.799444][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1734.810509][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1734.819574][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1734.838563][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1734.845445][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1734.852703][T12865] usbvision_i2c_register: can't write reg [ 1734.861214][T12865] USBVision[0]: registered USBVision Video device video39 [v4l2] [ 1734.884277][T29602] usbvision_set_video_format: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 1734.896464][T29602] usb 6-1: usbvision_set_dram_settings: ERROR=-90 [ 1734.904983][T29602] usbvision_set_compression_params: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 1734.917490][T29602] usb 6-1: usbvision_write_reg: failed: error -90 [ 1734.925320][T29602] usbvision_set_input: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 1734.935140][T29602] usb 6-1: usbvision_set_output failed: error -90 [ 1734.942268][T29602] usb 6-1: usbvision_write_reg: failed: error -90 [ 1734.949198][T29602] usb 6-1: usbvision_write_reg: failed: error -90 [ 1734.957174][T29602] usb 6-1: usbvision_read_reg: failed: error -90 [ 1734.965356][T29602] usb 6-1: usbvision_write_reg: failed: error -90 [ 1734.974461][T29602] usbvision_set_audio: can't write iopin register for audio switching [ 1734.995575][T12865] usb 6-1: USB disconnect, device number 64 [ 1735.003837][T12865] usbvision_disconnect: In use, disconnect pending [ 1735.772037][T12865] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1736.012037][T12865] usb 6-1: Using ep0 maxpacket: 16 [ 1736.132003][T12865] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 1736.143657][T12865] usb 6-1: config 0 has no interface number 0 [ 1736.152677][T12865] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1736.167726][T12865] usb 6-1: New USB device found, idVendor=0573, idProduct=4d21, bcdDevice=83.91 [ 1736.177847][T12865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.188287][T12865] usb 6-1: config 0 descriptor?? [ 1736.237053][T12865] usbvision_probe: Hauppauge WinTV USB Pro (PAL B/G) found [ 1736.246509][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1736.254068][T12865] usbvision_audio_off: can't write reg [ 1736.265817][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1736.278207][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1736.287460][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1736.305753][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1736.315951][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1736.323356][T12865] usbvision_i2c_register: can't write reg [ 1736.333890][T12865] USBVision[1]: registered USBVision Video device video40 [v4l2] [ 1736.359060][T29606] usbvision_set_video_format: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 1736.369216][T29606] usb 6-1: usbvision_set_dram_settings: ERROR=-90 [ 1736.376074][T29606] usbvision_set_compression_params: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 1736.386985][T29606] usb 6-1: usbvision_write_reg: failed: error -90 [ 1736.394289][T29606] usbvision_set_input: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 1736.409300][T29606] usb 6-1: usbvision_set_output failed: error -90 [ 1736.418142][T29606] usb 6-1: usbvision_write_reg: failed: error -90 [ 1736.428991][T29606] usb 6-1: usbvision_write_reg: failed: error -90 [ 1736.437253][T29606] usb 6-1: usbvision_read_reg: failed: error -90 [ 1736.444947][T29606] usb 6-1: usbvision_write_reg: failed: error -90 [ 1736.448681][T12865] usb 6-1: USB disconnect, device number 65 [ 1736.451404][T29606] usbvision_set_audio: can't write iopin register for audio switching [ 1736.469277][T12865] usbvision_disconnect: In use, disconnect pending 19:44:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) setsockopt(r2, 0xff, 0x1, &(0x7f0000000040)="18", 0x373) 19:44:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)}], 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x1) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_usb_connect(0x0, 0xa1, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xad, 0x8, 0x75, 0x10, 0x573, 0x4d21, 0x8391, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x2, 0xe1, 0xa7, 0xdf, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x83, 0x11}}]}}]}}]}}, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) 19:44:42 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:44:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a80)="ad56b6cc0400fb8b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="42305729a1ff6c51a0dc332c3b86d836", 0x10}, {&(0x7f0000000100)="82", 0x1}], 0x2}, 0x0) 19:44:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) 19:44:42 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) 19:44:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="bf16000000000000b707000001000000487000000000001dbc700000000000009500000000000000e994d48078a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c870cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e71485a837578e2fa8b621bb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcf5b54affa3c68b08a7d6e12c11fc8d2f2bb852caebe7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d5e087849dd83ffd83dd80ce9b7037af58426117b1371453b214c0b4846131c2a0c3baf80a92d5a671457159e175e169fa847bbe2778bc003dfec63182259ce46865867e70639262f3ebd07b2418b5457d52e5ef2abc0fc805e9edd58914d489ec9ad2db9ca920d11601bf621e4973da2359efc0ee6df93907a03a5e7c2df61eb6ce803c648f392d0b5986495df177110cc6028c20c9f6b9eb1d16bc3ef9413f8ed7b47b4bad063fd6ccc773eef6a57a9b3940055390dcaa20e5d32cbe71d4ee"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) 19:44:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@dev}, {@in6=@empty, 0x0, 0x33}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xdc}, [@replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, [0x0]}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x158}}, 0x0) 19:44:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041619140950b2a17e99b0000000109021200010000000009044e000019328200cce83c34e78ff219b343c854d106f967a6fe8635f6cd496a8065c95af47c50738204ee5751a21823ac42cc62bebc7d3994aa133c953fc32f39ec5208fce95ff11dddb34201c7eb7c7665a0135ff8f8de72f5b6fc392e7021e87ee2b6f1c7200445a2480ba13da2d19ada24bab6202f2a815903bca01acb3edc178369815440b39b29c9a6420062640ea9db36b21d4de8b3ddca0fd9a65a49a85db8179cec7a6fdf8d6578007b7fe25acf302e1699b0"], 0x0) 19:44:43 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:44:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600"/17], 0x11) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x67}, 0x0) 19:44:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000400500010000e4e6fc4be790f80a00000000b7871001000000002300002560b700eff0ffff0403ff03000001000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x5, 0x2, [{0x38f}]}) [ 1739.252066][T12865] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1739.465086][T24667] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1739.492080][T12865] usb 6-1: Using ep0 maxpacket: 16 [ 1739.612424][T12865] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 1739.620735][T12865] usb 6-1: config 0 has no interface number 0 [ 1739.627082][T12865] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1739.638306][T12865] usb 6-1: New USB device found, idVendor=0573, idProduct=4d21, bcdDevice=83.91 [ 1739.647557][T12865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.657399][T12865] usb 6-1: config 0 descriptor?? [ 1739.707237][T12865] usbvision_probe: Hauppauge WinTV USB Pro (PAL B/G) found [ 1739.715138][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1739.721740][T12865] usbvision_audio_off: can't write reg [ 1739.727510][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1739.734376][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1739.741068][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1739.757844][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1739.764529][T12865] usb 6-1: usbvision_write_reg: failed: error -90 [ 1739.770947][T12865] usbvision_i2c_register: can't write reg [ 1739.779109][T12865] USBVision[2]: registered USBVision Video device video41 [v4l2] [ 1739.804642][T29661] usbvision_set_video_format: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 1739.815236][T29661] usb 6-1: usbvision_set_dram_settings: ERROR=-90 [ 1739.821969][T29661] usbvision_set_compression_params: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 1739.832647][T29661] usb 6-1: usbvision_write_reg: failed: error -90 [ 1739.839071][T29661] usbvision_set_input: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 1739.848551][T29661] usb 6-1: usbvision_set_output failed: error -90 [ 1739.855279][T29661] usb 6-1: usbvision_write_reg: failed: error -90 [ 1739.862020][T29661] usb 6-1: usbvision_write_reg: failed: error -90 [ 1739.868658][T29661] usb 6-1: usbvision_read_reg: failed: error -90 [ 1739.875378][T29661] usb 6-1: usbvision_write_reg: failed: error -90 [ 1739.881911][T29661] usbvision_set_audio: can't write iopin register for audio switching [ 1739.901983][T24667] usb 1-1: config 0 has an invalid interface number: 78 but max is 0 [ 1739.910339][T24667] usb 1-1: config 0 has no interface number 0 [ 1739.916932][T24667] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=9b.e9 [ 1739.926175][T24667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.945497][T12865] usb 6-1: USB disconnect, device number 66 [ 1739.952813][T12865] usbvision_disconnect: In use, disconnect pending [ 1739.962574][T24667] usb 1-1: config 0 descriptor?? [ 1740.222233][T24667] asix 1-1:0.78 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1740.232616][T24667] asix 1-1:0.78 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1740.242774][T24667] asix: probe of 1-1:0.78 failed with error -71 [ 1740.253918][T24667] usb 1-1: USB disconnect, device number 73 [ 1740.982037][T24667] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1741.352107][T24667] usb 1-1: config 0 has an invalid interface number: 78 but max is 0 [ 1741.360278][T24667] usb 1-1: config 0 has no interface number 0 [ 1741.366668][T24667] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=9b.e9 [ 1741.376030][T24667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.385702][T24667] usb 1-1: config 0 descriptor?? [ 1741.632244][T24667] asix 1-1:0.78 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1741.642698][T24667] asix 1-1:0.78 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1741.652688][T24667] asix: probe of 1-1:0.78 failed with error -71 [ 1741.692778][T24667] usb 1-1: USB disconnect, device number 74 19:44:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000400500010000e4e6fc4be790f80a00000000b7871001000000002300002560b700eff0ffff0403ff03000001000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x5, 0x2, [{0x38f}]}) 19:44:49 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000180)={'bridge0\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=0x0}}) 19:44:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca7fc2efbb7cf6425a28845a01000000000000008000f0fffeffe809000000fff5dd00000010000100080c10000a00000400400000", 0x58}], 0x1) 19:44:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)}], 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x1) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_usb_connect(0x0, 0xa1, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xad, 0x8, 0x75, 0x10, 0x573, 0x4d21, 0x8391, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x2, 0xe1, 0xa7, 0xdf, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x83, 0x11}}]}}]}}]}}, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) 19:44:49 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x14840, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x7ffbf, 0x0) truncate(&(0x7f0000000080)='./file0/bus\x00', 0x0) 19:44:49 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0xffffffffffffffff, 0x0) 19:44:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x21, &(0x7f0000000080)={@ipv4={[0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], [], @multicast2}}, 0x20) 19:44:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb8, &(0x7f0000000100)="697015091179540a31911cd630b394fd38") 19:44:49 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x82, 0xfffffffffffffffd, 0x2b) 19:44:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000400500010000e4e6fc4be790f80a00000000b7871001000000002300002560b700eff0ffff0403ff03000001000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x5, 0x2, [{0x38f}]}) 19:44:49 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet6(0xa, 0x803, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@rand_addr="a6ac30405bd92f9bea3c5597afc948ee", 0x0, r2}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000600)={{0x6, 0x6, 0x5f9, 0x81, '\x00', 0x4}, 0x1, [0x5, 0x6, 0xfffffffffffffff8, 0x9, 0x5, 0x104, 0x4, 0x8, 0x10001, 0xff, 0x100, 0x400, 0xffffffff, 0x3, 0x8, 0xfffffffffffffc45, 0x7cd0, 0x4, 0x0, 0x6, 0x9, 0x9, 0x8, 0x5, 0x200, 0x5, 0x7f, 0x100, 0x6, 0xfff, 0xfffffffffffffffc, 0x2c06, 0x3, 0x800, 0x3, 0xfffffffffffffffe, 0x5, 0x0, 0x1f80000000000000, 0x80, 0x800, 0x0, 0x3ff, 0x7fffffff, 0xb5fa, 0x800, 0x4451fb26, 0x0, 0x2, 0x4, 0x8, 0x5, 0x243, 0x1, 0x8001, 0x3ff, 0x1, 0x0, 0x2, 0x4, 0x1ff, 0x1f, 0x800, 0x0, 0x100000001, 0x1f, 0x80000001, 0x3ff, 0x6, 0x1f, 0x0, 0x4, 0xb2d, 0xfff, 0x7, 0x0, 0x3db91317, 0xdc2b, 0xfff, 0x4, 0xa05b, 0x7f, 0x6, 0x0, 0x1000, 0x3, 0xfffffffffffff000, 0x5, 0x99, 0x2, 0xa6, 0x8, 0x3, 0xff, 0xb34, 0x2, 0x1ff, 0x100000001, 0x7d, 0x3, 0x1, 0xffffffffffffffe1, 0x4, 0x1ff, 0xfffffffffffffffe, 0x0, 0x9, 0x8, 0x5, 0x0, 0x6db6, 0x9, 0x5, 0xafe, 0x5, 0x1, 0x1, 0x1, 0x1be, 0xf5, 0x6600, 0x401, 0x1, 0x7ff, 0x6, 0x100000000, 0x1, 0x3ff], {0x0, 0x1c9c380}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) 19:44:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00006f0fc8)={0x0, 0x0, &(0x7f0000e83ff0)={&(0x7f0000000000)=@newpolicy={0xb8, 0x13, 0x221, 0x0, 0x0, {{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}}}, 0xb8}}, 0x0) 19:44:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xb79, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2f, 0x1, 0x0, "dcc3be6175bdf7718f56a6e2217c8d244cfe1172b20100009f4000"}) [ 1745.592813][T24667] usb 6-1: new high-speed USB device number 67 using dummy_hcd 19:44:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000400500010000e4e6fc4be790f80a00000000b7871001000000002300002560b700eff0ffff0403ff03000001000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x5, 0x2, [{0x38f}]}) [ 1745.692429][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1745.698772][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1745.705546][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1745.712004][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1745.718639][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1745.725109][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:44:49 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x101, 0x4) sendmmsg$inet6(r0, &(0x7f00000081c0)=[{{&(0x7f0000002580)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) [ 1745.853992][T24667] usb 6-1: Using ep0 maxpacket: 16 [ 1745.892902][T29701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.984284][T24667] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 1745.992667][T24667] usb 6-1: config 0 has no interface number 0 [ 1745.998863][T24667] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1746.010493][T24667] usb 6-1: New USB device found, idVendor=0573, idProduct=4d21, bcdDevice=83.91 [ 1746.019834][T24667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.029985][T24667] usb 6-1: config 0 descriptor?? [ 1746.043841][T24879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1746.053498][T24879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.062560][T24879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1746.078940][T24667] usbvision_probe: Hauppauge WinTV USB Pro (PAL B/G) found [ 1746.087146][T24667] usb 6-1: usbvision_write_reg: failed: error -90 [ 1746.093701][T24667] usbvision_audio_off: can't write reg [ 1746.099445][T24667] usb 6-1: usbvision_write_reg: failed: error -90 [ 1746.106238][T24667] usb 6-1: usbvision_write_reg: failed: error -90 [ 1746.113006][T24667] usb 6-1: usbvision_write_reg: failed: error -90 [ 1746.130842][T24667] usb 6-1: usbvision_write_reg: failed: error -90 [ 1746.137658][T24667] usb 6-1: usbvision_write_reg: failed: error -90 [ 1746.144236][T24667] usbvision_i2c_register: can't write reg [ 1746.191415][T24667] USBVision[3]: registered USBVision Video device video42 [v4l2] [ 1746.227949][T29724] usbvision_set_video_format: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 1746.237265][T29701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.238150][T29724] usb 6-1: usbvision_set_dram_settings: ERROR=-90 [ 1746.251899][T29724] usbvision_set_compression_params: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 1746.262709][T29724] usb 6-1: usbvision_write_reg: failed: error -90 [ 1746.269258][T29724] usbvision_set_input: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 1746.278881][T29724] usb 6-1: usbvision_set_output failed: error -90 [ 1746.285606][T29724] usb 6-1: usbvision_write_reg: failed: error -90 [ 1746.292358][T29724] usb 6-1: usbvision_write_reg: failed: error -90 [ 1746.298951][T29724] usb 6-1: usbvision_read_reg: failed: error -90 [ 1746.305682][T29724] usb 6-1: usbvision_write_reg: failed: error -90 [ 1746.312244][T29724] usbvision_set_audio: can't write iopin register for audio switching [ 1746.335815][T29712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.345225][T29712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1746.370057][T24667] usb 6-1: USB disconnect, device number 67 [ 1746.379575][T24667] usbvision_disconnect: In use, disconnect pending 19:44:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)}], 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x1) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_usb_connect(0x0, 0xa1, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xad, 0x8, 0x75, 0x10, 0x573, 0x4d21, 0x8391, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x2, 0xe1, 0xa7, 0xdf, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x83, 0x11}}]}}]}}]}}, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) 19:44:50 executing program 3: r0 = socket$inet(0x10, 0x2, 0x4) sendmsg(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000006ff0)=[{&(0x7f0000005000)="10000000150061dd18c84c16290c729b", 0x10}], 0x1}, 0x0) [ 1747.261906][T24667] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1747.511979][T24667] usb 6-1: Using ep0 maxpacket: 16 [ 1747.632042][T24667] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 1747.644680][T24667] usb 6-1: config 0 has no interface number 0 [ 1747.652655][T24667] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1747.666901][T24667] usb 6-1: New USB device found, idVendor=0573, idProduct=4d21, bcdDevice=83.91 [ 1747.677695][T24667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.690090][T24667] usb 6-1: config 0 descriptor?? [ 1747.736835][T24667] usbvision_probe: Hauppauge WinTV USB Pro (PAL B/G) found [ 1747.746281][T24667] usb 6-1: usbvision_write_reg: failed: error -90 [ 1747.754748][T24667] usbvision_audio_off: can't write reg [ 1747.760604][T24667] usb 6-1: usbvision_write_reg: failed: error -90 [ 1747.768460][T24667] usb 6-1: usbvision_write_reg: failed: error -90 [ 1747.777213][T24667] usb 6-1: usbvision_write_reg: failed: error -90 [ 1747.795055][T24667] usb 6-1: usbvision_write_reg: failed: error -90 [ 1747.801988][T24667] usb 6-1: usbvision_write_reg: failed: error -90 [ 1747.808771][T24667] usbvision_i2c_register: can't write reg [ 1747.816490][T24667] USBVision[4]: registered USBVision Video device video43 [v4l2] [ 1747.839568][T29734] usbvision_set_video_format: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 1747.849662][T29734] usb 6-1: usbvision_set_dram_settings: ERROR=-90 [ 1747.856528][T29734] usbvision_set_compression_params: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 1747.867117][T29734] usb 6-1: usbvision_write_reg: failed: error -90 [ 1747.873756][T29734] usbvision_set_input: ERROR=-90. USBVISION stopped - reconnect or reload driver. [ 1747.883284][T29734] usb 6-1: usbvision_set_output failed: error -90 [ 1747.889913][T29734] usb 6-1: usbvision_write_reg: failed: error -90 [ 1747.896640][T29734] usb 6-1: usbvision_write_reg: failed: error -90 [ 1747.903341][T29734] usb 6-1: usbvision_read_reg: failed: error -90 [ 1747.909809][T29734] usb 6-1: usbvision_write_reg: failed: error -90 [ 1747.916445][T29734] usbvision_set_audio: can't write iopin register for audio switching [ 1747.948137][T24667] usb 6-1: USB disconnect, device number 68 [ 1747.956774][T24667] usbvision_disconnect: In use, disconnect pending 19:44:55 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\x00'/10, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t! \n'], 0x4) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000a40)='./file0\x00', 0x0) 19:44:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffffff}}}]}, 0x58}}, 0x0) 19:44:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r2, &(0x7f000086afd0)=[{0x10081, 0x4, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x30) 19:44:55 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) dup2(r4, r3) 19:44:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23afb16f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:44:55 executing program 5: madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x3) 19:44:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000100)) [ 1751.561916][T29744] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 19:44:55 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x20) 19:44:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0xc0010003], [0xc1]}) 19:44:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x7fc, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000000)={0xa}) 19:44:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x18, 0x0, 0x2, 0x3, 0x0, 0x0, {}, [@nested={0x4, 0x2}]}, 0x18}}, 0x0) 19:44:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000400500010000e4e6fc4be790f80a00000000b7871001000000002300002560b700ef"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000e00)={0x0, 0x0, 0x2080, {0x0, 0x0, 0x643b08dd5d464c74}, [], "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", "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"}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 19:45:02 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000140)={0xf000000, 0x1, 0x0, [0x500], &(0x7f0000000000)={0x980912, 0x0, [], @value64}}) 19:45:02 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc0fc) 19:45:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) request_key(0x0, &(0x7f00000004c0)={'\x03\x06\t', 0x1}, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) syz_open_pts(r2, 0x0) write(r2, &(0x7f0000000240)="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", 0xfed7) 19:45:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r2, 0x5}, 0x1c}}, 0x0) 19:45:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0xc0010003], [0xc1]}) 19:45:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr\x00\x00\x10\x00', 0x4002}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) close(r0) 19:45:02 executing program 1: unshare(0x20400) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044df9, &(0x7f0000000040)) 19:45:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0xc0010003], [0xc1]}) 19:45:02 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc0fc) 19:45:03 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc0fc) 19:45:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr\x00\x00\x10\x00', 0x4002}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) close(r0) 19:45:03 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) write$P9_RSTATFS(r0, &(0x7f0000000000)={0xffb1}, 0x301) ioctl$int_in(r0, 0x800060c0045002, &(0x7f0000000140)) 19:45:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000240)={{0x1, 0x0, 0x0, 0x492d}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="1f"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000002000000850400000000000005000006"]) 19:45:07 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) close(r1) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') tkill(r0, 0x1000000000016) 19:45:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0xc0010003], [0xc1]}) 19:45:07 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc0fc) 19:45:07 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr\x00\x00\x10\x00', 0x4002}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) close(r0) 19:45:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x271) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0xf}, {&(0x7f0000000780)=""/98, 0x172}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4, &(0x7f0000000440)=""/45, 0x2d}}], 0x4000000000000e9, 0x0, &(0x7f0000000640)={0x77359400}) 19:45:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x271) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0xf}, {&(0x7f0000000780)=""/98, 0x172}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4, &(0x7f0000000440)=""/45, 0x2d}}], 0x4000000000000e9, 0x0, &(0x7f0000000640)={0x77359400}) 19:45:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) 19:45:07 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) write(r2, &(0x7f0000000000)='\a', 0x1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x7, 0x4) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2) 19:45:07 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr\x00\x00\x10\x00', 0x4002}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) close(r0) 19:45:08 executing program 1: eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff800000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 19:45:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x271) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0xf}, {&(0x7f0000000780)=""/98, 0x172}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4, &(0x7f0000000440)=""/45, 0x2d}}], 0x4000000000000e9, 0x0, &(0x7f0000000640)={0x77359400}) 19:45:15 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000280)={0x1, 0x4000000000005}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000), 0x2) sendmsg(0xffffffffffffffff, 0x0, 0x0) 19:45:15 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/arp\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x8d0519e64bafee0a, 0x40000000000031, 0xffffffffffffffff, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 19:45:15 executing program 3: r0 = socket(0x11, 0x800000000000002, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="01ec00000000060000071a80000001cc", 0x10) 19:45:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x271) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0xf}, {&(0x7f0000000780)=""/98, 0x172}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4, &(0x7f0000000440)=""/45, 0x2d}}], 0x4000000000000e9, 0x0, &(0x7f0000000640)={0x77359400}) 19:45:15 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000140)="6812334f6743a747f8bf094356", 0xd, 0x8800, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000100)='\x00', 0x38, 0x4088, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 19:45:15 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) pipe2(&(0x7f0000000300), 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x4], 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:45:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0xffffffff) r1 = socket$inet6(0xa, 0x3, 0xff) sendmmsg(r1, 0x0, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, &(0x7f0000002b40)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x8b0441) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40800}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000000)={0x2, "95d032ff6eb124cd52b8293658d01d06b511c20a2ea973efe0994fc8bf0e8014"}) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) 19:45:15 executing program 0: ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="020009000000000019000080ec590003060000020000000300000063000000080000000c1e00f6ff23eb5ff7a6b29d08000a000000ff0100cebe010000370b0000e30000d9392d9aa00b19cc9c3bf52e43ee4d8034de74c6e704b387d615f5acc57867c4b1a7cc6a7e3c3500"/117]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = open$dir(0x0, 0x0, 0x0) getdents64(r2, &(0x7f00000002c0)=""/186, 0xba) getdents(r1, &(0x7f0000000140)=""/2, 0x450) getdents64(r1, &(0x7f00000000c0)=""/45, 0x2d) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000640)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x227f, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x8000, 0x4) sendto$inet(r4, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000100), 0x29806c5fa86ed4a, 0x1, 0x0, 0xffffffffffffff06) mkdirat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x1ff) shutdown(r4, 0x1) open_by_handle_at(r4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x2d0800) ioctl$KVM_RUN(r3, 0xae80, 0x900000000000000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR], 0x8) pipe2(0x0, 0x86400) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x8001, 0x727e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:45:15 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="130100000000000826093333000000000001090224000100000000090440000903000000092100000001222200090581030000000000"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x1c, 0x8009}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x22, {0x22, 0x0, "bedc2a5443640a789bdd51ea6221d59bc578290bb75545b86415f523b546d3b9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) write$hidraw(r1, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) 19:45:15 executing program 3: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwrite64(r0, 0x0, 0x194, 0x0) 19:45:15 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=@dstopts, 0x8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 19:45:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x8004550f, &(0x7f0000000000)={0x0, 0x11, 0x0, 0x0, 0xfdc2, 0x0, 0x0}) 19:45:15 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) move_pages(r1, 0x200000c4, &(0x7f0000000080)=[&(0x7f000054e000/0x2000)=nil], &(0x7f0000000000), &(0x7f0000000040), 0x0) [ 1771.471038][T29913] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1771.515146][T29917] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1771.581982][T24667] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1771.831805][T24667] usb 6-1: Using ep0 maxpacket: 8 [ 1771.952114][T24667] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1771.960730][T24667] usb 6-1: config 0 has no interface number 0 [ 1771.967143][T24667] usb 6-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1771.978658][T24667] usb 6-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1771.992514][T24667] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1772.001940][T24667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.011319][T24667] usb 6-1: config 0 descriptor?? [ 1772.513460][T24667] keytouch 0003:0926:3333.0036: fixing up Keytouch IEC report descriptor [ 1772.529490][T24667] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.64/0003:0926:3333.0036/input/input99 [ 1772.618150][T24667] keytouch 0003:0926:3333.0036: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input64 [ 1772.736709][T24667] usb 6-1: USB disconnect, device number 69 [ 1773.561894][T24667] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1773.811842][T24667] usb 6-1: Using ep0 maxpacket: 8 [ 1773.932324][T24667] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1773.940481][T24667] usb 6-1: config 0 has no interface number 0 [ 1773.946806][T24667] usb 6-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1773.957945][T24667] usb 6-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1773.971123][T24667] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1773.980313][T24667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.990050][T24667] usb 6-1: config 0 descriptor?? [ 1774.382340][T24667] usbhid 6-1:0.64: can't add hid device: -71 [ 1774.388690][T24667] usbhid: probe of 6-1:0.64 failed with error -71 [ 1774.402045][T24667] usb 6-1: USB disconnect, device number 70 19:45:21 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xaa, 0x76, 0x5, 0x8, 0x10f0, 0x2002, 0x3ced, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xff, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0xb, 0x8}}, {{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000002980)='\\') 19:45:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="130100000000000826093333000000000001090224000100000000090440000903000000092100000001222200090581030000000000"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x1c, 0x8009}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x22, {0x22, 0x0, "bedc2a5443640a789bdd51ea6221d59bc578290bb75545b86415f523b546d3b9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) write$hidraw(r1, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) 19:45:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x5) setsockopt(r3, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x5697c556c8cc5896, 0x0}}], 0x2ee, 0x8040) 19:45:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0xffffffff) r1 = socket$inet6(0xa, 0x3, 0xff) sendmmsg(r1, 0x0, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, &(0x7f0000002b40)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x8b0441) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40800}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000000)={0x2, "95d032ff6eb124cd52b8293658d01d06b511c20a2ea973efe0994fc8bf0e8014"}) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) 19:45:21 executing program 3: unshare(0x2000400) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x30b000, 0x0) fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x0) 19:45:21 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_int(r0, 0x28, 0x2, 0x0, &(0x7f0000000000)) 19:45:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newtfilter={0x24, 0x65, 0x701, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) 19:45:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0xffffffff) r1 = socket$inet6(0xa, 0x3, 0xff) sendmmsg(r1, 0x0, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, &(0x7f0000002b40)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x8b0441) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40800}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000000)={0x2, "95d032ff6eb124cd52b8293658d01d06b511c20a2ea973efe0994fc8bf0e8014"}) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) 19:45:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="240000001a0007041dfffd946f610500020000001f00000000000800050016000400ff7e", 0x24}], 0x1}, 0x0) 19:45:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0xffffffff) r1 = socket$inet6(0xa, 0x3, 0xff) sendmmsg(r1, 0x0, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, &(0x7f0000002b40)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x8b0441) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40800}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000000)={0x2, "95d032ff6eb124cd52b8293658d01d06b511c20a2ea973efe0994fc8bf0e8014"}) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) [ 1778.012106][ T831] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1778.014387][T24667] usb 6-1: new high-speed USB device number 71 using dummy_hcd 19:45:22 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r5 = dup2(r4, r4) dup2(r5, r0) 19:45:22 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xd1, 0xd2, 0x5c, 0x40, 0x55d, 0x9000, 0xe3ac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x10, 0xe0}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0xac, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1778.252315][ T831] usb 1-1: Using ep0 maxpacket: 8 [ 1778.271930][T24667] usb 6-1: Using ep0 maxpacket: 8 [ 1778.372221][ T831] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 1778.380569][ T831] usb 1-1: config 0 has no interface number 0 [ 1778.387025][ T831] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1778.398273][ T831] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=3c.ed [ 1778.401989][T24667] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1778.407573][ T831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.414644][ T831] usb 1-1: config 0 descriptor?? [ 1778.416369][T24667] usb 6-1: config 0 has no interface number 0 [ 1778.435785][T24667] usb 6-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1778.446978][T24667] usb 6-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1778.459998][T24667] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1778.469255][T24667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.479328][T24667] usb 6-1: config 0 descriptor?? [ 1778.562187][T24879] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1778.882664][ T831] usbtouchscreen: probe of 1-1:0.255 failed with error -71 [ 1778.895663][ T831] usb 1-1: USB disconnect, device number 75 [ 1778.932155][T24879] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=e3.ac [ 1778.941269][T24879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.951485][T24879] usb 5-1: config 0 descriptor?? [ 1778.985700][T24667] keytouch 0003:0926:3333.0037: fixing up Keytouch IEC report descriptor [ 1778.996927][T24879] pwc: Samsung MPC-C10 USB webcam detected. [ 1778.999494][T24667] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.64/0003:0926:3333.0037/input/input103 [ 1779.094427][T24667] keytouch 0003:0926:3333.0037: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input64 [ 1779.207443][T24667] usb 6-1: USB disconnect, device number 71 [ 1779.631943][ T831] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1779.871992][ T831] usb 1-1: Using ep0 maxpacket: 8 [ 1779.992280][ T831] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 1780.000538][ T831] usb 1-1: config 0 has no interface number 0 [ 1780.006895][ T831] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1780.018183][ T831] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=3c.ed [ 1780.027463][ T831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.037066][ T831] usb 1-1: config 0 descriptor?? [ 1780.302597][ T831] usbtouchscreen: probe of 1-1:0.255 failed with error -71 [ 1780.312952][T24879] pwc: recv_control_msg error -71 req 04 val 1000 [ 1780.322435][ T831] usb 1-1: USB disconnect, device number 76 [ 1780.338106][T24879] pwc: recv_control_msg error -71 req 04 val 1300 [ 1780.362336][T24879] pwc: recv_control_msg error -71 req 04 val 1400 [ 1780.382168][T24879] pwc: recv_control_msg error -71 req 02 val 2000 [ 1780.401943][T24879] pwc: recv_control_msg error -71 req 02 val 2100 [ 1780.422069][T24879] pwc: recv_control_msg error -71 req 02 val 2200 [ 1780.442381][T24879] pwc: recv_control_msg error -71 req 06 val 0600 [ 1780.461984][T24879] pwc: recv_control_msg error -71 req 04 val 1500 [ 1780.482082][T24879] pwc: recv_control_msg error -71 req 02 val 2500 [ 1780.502042][T24879] pwc: recv_control_msg error -71 req 02 val 2400 [ 1780.522060][T24879] pwc: recv_control_msg error -71 req 02 val 2600 [ 1780.542892][T24879] pwc: recv_control_msg error -71 req 02 val 2900 [ 1780.561946][T24879] pwc: recv_control_msg error -71 req 02 val 2800 [ 1780.582261][T24879] pwc: recv_control_msg error -71 req 04 val 1100 [ 1780.601954][T24879] pwc: recv_control_msg error -71 req 04 val 1200 [ 1780.609817][T24879] pwc: Registered as video44. [ 1780.616307][T24879] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input105 [ 1780.630730][T24879] usb 5-1: USB disconnect, device number 65 19:45:24 executing program 0: set_mempolicy(0x4003, &(0x7f0000000040)=0x10003, 0x101) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x23, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 1781.141899][T24879] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1781.502198][T24879] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=e3.ac [ 1781.511441][T24879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.521213][T24879] usb 5-1: config 0 descriptor?? [ 1781.566480][T24879] pwc: Samsung MPC-C10 USB webcam detected. [ 1781.812180][T24879] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1781.832113][T24879] pwc: recv_control_msg error -71 req 02 val 2700 [ 1781.852086][T24879] pwc: recv_control_msg error -71 req 04 val 1700 [ 1781.872115][T24879] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1781.892174][T24879] pwc: recv_control_msg error -71 req 04 val 1000 [ 1781.912266][T24879] pwc: recv_control_msg error -71 req 04 val 1300 [ 1781.933866][T24879] pwc: recv_control_msg error -71 req 04 val 1400 [ 1781.952119][T24879] pwc: recv_control_msg error -71 req 02 val 2000 [ 1781.972138][T24879] pwc: recv_control_msg error -71 req 02 val 2100 [ 1781.992147][T24879] pwc: recv_control_msg error -71 req 02 val 2200 [ 1782.012345][T24879] pwc: recv_control_msg error -71 req 06 val 0600 [ 1782.032343][T24879] pwc: recv_control_msg error -71 req 04 val 1500 [ 1782.052137][T24879] pwc: recv_control_msg error -71 req 02 val 2500 [ 1782.072130][T24879] pwc: recv_control_msg error -71 req 02 val 2400 [ 1782.092139][T24879] pwc: recv_control_msg error -71 req 02 val 2600 [ 1782.112135][T24879] pwc: recv_control_msg error -71 req 02 val 2900 [ 1782.132112][T24879] pwc: recv_control_msg error -71 req 02 val 2800 [ 1782.152139][T24879] pwc: recv_control_msg error -71 req 04 val 1100 [ 1782.172149][T24879] pwc: recv_control_msg error -71 req 04 val 1200 [ 1782.179791][T24879] pwc: Registered as video44. [ 1782.186305][T24879] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input106 [ 1782.222528][T24879] usb 5-1: USB disconnect, device number 66 19:45:28 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_int(r0, 0x28, 0x2, 0x0, &(0x7f0000000000)) 19:45:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x40000000000002, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2d, &(0x7f0000000000)={0xffffff49, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x34ec3a42) 19:45:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003700)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x2, 0x0) 19:45:28 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="130100000000000826093333000000000001090224000100000000090440000903000000092100000001222200090581030000000000"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x1c, 0x8009}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x22, {0x22, 0x0, "bedc2a5443640a789bdd51ea6221d59bc578290bb75545b86415f523b546d3b9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) write$hidraw(r1, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) 19:45:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x8840) sendmsg$netlink(r1, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@cred={{0x18, 0x117}}], 0x18}, 0x0) 19:45:28 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xd1, 0xd2, 0x5c, 0x40, 0x55d, 0x9000, 0xe3ac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x10, 0xe0}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0xac, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:45:28 executing program 1: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x0, 0x0, {0x9, @raw_data="08a0243d67e2e273f85a0007649311314e39f12853dcd52275e69cb058ac53ef2cc7efd8d8c59df2e853c33a969ff2f804c6f0ee5204f32a0edecf9067e87309962674ed23032375bc4c738000f250ebf1df1f22295e07de33d8f20a8ab01546b012c94fc4a71621d84bbf2d2094e1287e5a8bc5fcd4b6a200e7afa93a6623e2de49ba88ba92955104f265df4b5004d838db21f425ada3d9395ba18a7592d814c54aa1dea64e7d09b16c4fe83d0065d2b440455f72d6f0462cb9f146a646b9d9bdfc71d6d5fea4f4"}}) 19:45:28 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) 19:45:28 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0xe21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 19:45:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:45:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="f9b936a2e22665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x134, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {0x0, 0xfff3}, {}, {0x3}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x104, 0x2, [@TCA_CGROUP_ACT={0xd4, 0x1, @m_nat={0x59, 0x0, {{0x1be, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}}, {0x94, 0x6, "69b8c5f3ee26789f8763c2702b1139e5e9cf14cde2ebc2e7948cecdf4c3bab8bc1359b090dc500cd8f1a36bc682c7fb6e065aff0f733a31b494f95f19f92a63d2b61709c51709a648e84d18b45c7f953f0790bfae4be05bc901faea6eb6f20b329d9f833c5cb53060664f86188c57816352b517bc61850e110804ebdd9ebe2b783b13aa9c5e7d81c1a0d18568b"}}}}, @TCA_CGROUP_EMATCHES={0x2c, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0xfffffed9}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x134}}, 0x0) 19:45:28 executing program 0: r0 = socket$inet6(0xa, 0x8800000000000001, 0x8010000000000084) shutdown(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local={0xfe, 0x17e9}}, 0x1c) [ 1784.342174][T24879] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1784.382084][T24667] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1784.419017][T30029] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1784.502193][T30032] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1784.511769][T30032] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1784.527876][T30034] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1784.537887][T30034] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1784.642161][T24667] usb 6-1: Using ep0 maxpacket: 8 [ 1784.722826][T24879] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=e3.ac [ 1784.732707][T24879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.744347][T24879] usb 5-1: config 0 descriptor?? [ 1784.782453][T24667] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1784.788472][T24879] pwc: Samsung MPC-C10 USB webcam detected. [ 1784.790632][T24667] usb 6-1: config 0 has no interface number 0 [ 1784.802879][T24667] usb 6-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.814053][T24667] usb 6-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1784.827127][T24667] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1784.836363][T24667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.846484][T24667] usb 6-1: config 0 descriptor?? [ 1785.343814][T24667] keytouch 0003:0926:3333.0038: fixing up Keytouch IEC report descriptor [ 1785.357722][T24667] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.64/0003:0926:3333.0038/input/input107 [ 1785.454056][T24667] keytouch 0003:0926:3333.0038: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input64 [ 1785.563483][T24667] usb 6-1: USB disconnect, device number 72 [ 1786.132090][T24879] pwc: recv_control_msg error -71 req 04 val 1000 [ 1786.152204][T24879] pwc: recv_control_msg error -71 req 04 val 1300 [ 1786.174094][T24879] pwc: recv_control_msg error -71 req 04 val 1400 [ 1786.192157][T24879] pwc: recv_control_msg error -71 req 02 val 2000 [ 1786.212882][T24879] pwc: recv_control_msg error -71 req 02 val 2100 [ 1786.232200][T24879] pwc: recv_control_msg error -71 req 02 val 2200 [ 1786.252143][T24879] pwc: recv_control_msg error -71 req 06 val 0600 [ 1786.272316][T24879] pwc: recv_control_msg error -71 req 04 val 1500 [ 1786.292150][T24879] pwc: recv_control_msg error -71 req 02 val 2500 [ 1786.312080][T24879] pwc: recv_control_msg error -71 req 02 val 2400 [ 1786.332277][T24879] pwc: recv_control_msg error -71 req 02 val 2600 [ 1786.352234][T24879] pwc: recv_control_msg error -71 req 02 val 2900 [ 1786.372247][T24879] pwc: recv_control_msg error -71 req 02 val 2800 [ 1786.392098][T24879] pwc: recv_control_msg error -71 req 04 val 1100 [ 1786.412307][T24879] pwc: recv_control_msg error -71 req 04 val 1200 [ 1786.420025][T24879] pwc: Registered as video44. [ 1786.426585][T24879] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input108 [ 1786.442599][T24879] usb 5-1: USB disconnect, device number 67 19:45:33 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_int(r0, 0x28, 0x2, 0x0, &(0x7f0000000000)) 19:45:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fanotify_mark(0xffffffffffffffff, 0x2, 0x40000038, 0xffffffffffffffff, 0x0) 19:45:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:45:33 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xd1, 0xd2, 0x5c, 0x40, 0x55d, 0x9000, 0xe3ac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x10, 0xe0}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0xac, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:45:33 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="130100000000000826093333000000000001090224000100000000090440000903000000092100000001222200090581030000000000"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x1c, 0x8009}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x22, {0x22, 0x0, "bedc2a5443640a789bdd51ea6221d59bc578290bb75545b86415f523b546d3b9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) write$hidraw(r1, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) 19:45:33 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x21, 0x72, 0xcd, 0x8, 0x582, 0xfffe, 0x3239, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe2, 0x0, 0x1, 0xff, 0xc8, 0xe2, 0x0, [], [{{0x9, 0x5, 0xf, 0x1f}}]}}]}}]}}, 0x0) 19:45:33 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)="ef50213cca2de8879b1e124c15b301f9a5aa710602d24ccc6fe4e61f34c119917ddac56f2625957a44d79fc8abe624ed862fd7d0329b7f8055a6e6063a462e5407cafb90cbc90b85c76db310df91df33d6a799262eec2b3271964ad2190b993cd7e5e75411fe316a59eb4c7fe935dd47cd8b98a03bd18fca4b5cdaed6cd8e3e8b4ec763913", 0x85}], 0x1}}], 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@migrate={0xac, 0x21, 0x21, 0x0, 0x0, {{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@migrate={0x5c, 0x11, [{@in6=@remote, @in=@local, 0x6}, {@in=@broadcast, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}]}, 0xac}}, 0x0) 19:45:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:45:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x2, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x400001f4) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0207000902000000181b9fe0537fa285"], 0x10}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19:45:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1789.372307][T24879] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1789.382076][ T831] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1789.383956][T24667] usb 6-1: new high-speed USB device number 73 using dummy_hcd 19:45:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:45:33 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x4) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f0000000040)) [ 1789.612093][T24879] usb 1-1: Using ep0 maxpacket: 8 [ 1789.642141][T24667] usb 6-1: Using ep0 maxpacket: 8 [ 1789.739569][T24879] usb 1-1: config 0 has an invalid interface number: 226 but max is 0 [ 1789.748411][T24879] usb 1-1: config 0 has no interface number 0 [ 1789.754787][T24879] usb 1-1: config 0 interface 226 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1789.767646][T24879] usb 1-1: New USB device found, idVendor=0582, idProduct=fffe, bcdDevice=32.39 [ 1789.772161][T24667] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1789.776902][T24879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.778159][ T831] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=e3.ac [ 1789.785266][T24667] usb 6-1: config 0 has no interface number 0 [ 1789.785401][T24667] usb 6-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.793558][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.802808][T24667] usb 6-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1789.836712][ T831] usb 5-1: config 0 descriptor?? [ 1789.841027][T24667] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1789.855658][T24667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.876651][T24667] usb 6-1: config 0 descriptor?? [ 1789.880578][T24879] usb 1-1: config 0 descriptor?? [ 1789.901422][ T831] pwc: Samsung MPC-C10 USB webcam detected. [ 1790.130164][T24879] usb 1-1: USB disconnect, device number 77 [ 1790.423913][T24667] keytouch 0003:0926:3333.0039: fixing up Keytouch IEC report descriptor [ 1790.518769][T24667] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.64/0003:0926:3333.0039/input/input109 [ 1790.633143][T24667] keytouch 0003:0926:3333.0039: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input64 [ 1790.685809][T24667] usb 6-1: USB disconnect, device number 73 [ 1790.912118][T24879] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1791.151883][T24879] usb 1-1: Using ep0 maxpacket: 8 [ 1791.202244][ T831] pwc: recv_control_msg error -71 req 04 val 1000 [ 1791.222073][ T831] pwc: recv_control_msg error -71 req 04 val 1300 [ 1791.252538][ T831] pwc: recv_control_msg error -71 req 04 val 1400 [ 1791.272328][T24879] usb 1-1: config 0 has an invalid interface number: 226 but max is 0 [ 1791.280571][T24879] usb 1-1: config 0 has no interface number 0 [ 1791.287466][T24879] usb 1-1: config 0 interface 226 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1791.301251][T24879] usb 1-1: New USB device found, idVendor=0582, idProduct=fffe, bcdDevice=32.39 [ 1791.312599][T24879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.324523][ T831] pwc: recv_control_msg error -71 req 02 val 2000 [ 1791.332846][T24879] usb 1-1: config 0 descriptor?? [ 1791.352286][ T831] pwc: recv_control_msg error -71 req 02 val 2100 [ 1791.381221][ T831] pwc: recv_control_msg error -71 req 02 val 2200 [ 1791.406007][ T831] pwc: recv_control_msg error -71 req 06 val 0600 [ 1791.432358][ T831] pwc: recv_control_msg error -71 req 04 val 1500 [ 1791.452460][ T831] pwc: recv_control_msg error -71 req 02 val 2500 [ 1791.472173][ T831] pwc: recv_control_msg error -71 req 02 val 2400 [ 1791.492067][ T831] pwc: recv_control_msg error -71 req 02 val 2600 [ 1791.511954][ T831] pwc: recv_control_msg error -71 req 02 val 2900 [ 1791.532406][ T831] pwc: recv_control_msg error -71 req 02 val 2800 [ 1791.551979][ T831] pwc: recv_control_msg error -71 req 04 val 1100 [ 1791.571962][ T831] pwc: recv_control_msg error -71 req 04 val 1200 [ 1791.579792][ T831] pwc: Registered as video44. [ 1791.587569][ T831] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input110 [ 1791.608628][T24667] usb 1-1: USB disconnect, device number 78 [ 1791.632865][ T831] usb 5-1: USB disconnect, device number 68 19:45:37 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_int(r0, 0x28, 0x2, 0x0, &(0x7f0000000000)) 19:45:37 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x4) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f0000000040)) 19:45:37 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="24000000220007031dfffd946f610500028cfc000543280000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 19:45:37 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="567bde", 0x3) 19:45:37 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xd1, 0xd2, 0x5c, 0x40, 0x55d, 0x9000, 0xe3ac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x10, 0xe0}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0xac, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:45:37 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '.em0cgroup@wlan1proc//&\'+\x00'}, 0x1f) [ 1793.386000][ T32] audit: type=1400 audit(1571255137.433:32): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=".em0cgroup@wlan1proc//&'+" pid=30200 comm="syz-executor.0" 19:45:37 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x4) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f0000000040)) 19:45:37 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) 19:45:37 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@main=@item_012={0x2, 0x0, 0xa, "1e63"}, @global=@item_012={0x2, 0x1, 0x3, '6)'}]}}, 0x0}, 0x0) 19:45:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffd}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) 19:45:37 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x4) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f0000000040)) [ 1793.651982][ T831] usb 5-1: new high-speed USB device number 69 using dummy_hcd 19:45:37 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa9, 0x0, 0x4f, 0x20, 0x2770, 0x913d, 0xe47, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc3, 0x0, 0x0, 0x49, 0xa9, 0x66}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000005040)={0x2c, &(0x7f0000004e40), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 1793.831903][T24879] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1794.043036][ T831] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=e3.ac [ 1794.052235][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.063598][ T831] usb 5-1: config 0 descriptor?? [ 1794.092085][T24879] usb 1-1: Using ep0 maxpacket: 8 [ 1794.116776][ T831] pwc: Samsung MPC-C10 USB webcam detected. [ 1794.202052][T13223] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1794.212374][T24879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1794.223616][T24879] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1794.236760][T24879] usb 1-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40 [ 1794.246149][T24879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.256198][T24879] usb 1-1: config 0 descriptor?? [ 1794.461776][T13223] usb 4-1: Using ep0 maxpacket: 32 [ 1794.582096][T13223] usb 4-1: config 0 has an invalid interface number: 195 but max is 0 [ 1794.590531][T13223] usb 4-1: config 0 has no interface number 0 [ 1794.597060][T13223] usb 4-1: New USB device found, idVendor=2770, idProduct=913d, bcdDevice= e.47 [ 1794.606430][T13223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.627543][T13223] usb 4-1: config 0 descriptor?? [ 1794.677049][T13223] gspca_main: sq905c-2.14.0 probing 2770:913d [ 1794.734838][T24879] microsoft 0003:045E:009D.003A: unbalanced collection at end of report description [ 1794.746295][T24879] microsoft 0003:045E:009D.003A: parse failed [ 1794.753341][T24879] microsoft: probe of 0003:045E:009D.003A failed with error -22 [ 1794.935940][T24879] usb 1-1: USB disconnect, device number 79 [ 1795.432203][ T831] pwc: recv_control_msg error -71 req 04 val 1000 [ 1795.462803][ T831] pwc: recv_control_msg error -71 req 04 val 1300 [ 1795.492141][ T831] pwc: recv_control_msg error -71 req 04 val 1400 [ 1795.522154][ T831] pwc: recv_control_msg error -71 req 02 val 2000 [ 1795.531844][T24667] usb 4-1: USB disconnect, device number 67 [ 1795.543502][ T831] pwc: recv_control_msg error -71 req 02 val 2100 [ 1795.563681][ T831] pwc: recv_control_msg error -71 req 02 val 2200 [ 1795.583204][ T831] pwc: recv_control_msg error -71 req 06 val 0600 [ 1795.612401][ T831] pwc: recv_control_msg error -71 req 04 val 1500 [ 1795.632063][ T831] pwc: recv_control_msg error -71 req 02 val 2500 [ 1795.652457][ T831] pwc: recv_control_msg error -71 req 02 val 2400 [ 1795.672106][ T831] pwc: recv_control_msg error -71 req 02 val 2600 [ 1795.691997][ T831] pwc: recv_control_msg error -71 req 02 val 2900 [ 1795.712102][T13223] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1795.719936][ T831] pwc: recv_control_msg error -71 req 02 val 2800 [ 1795.742052][ T831] pwc: recv_control_msg error -71 req 04 val 1100 [ 1795.762062][ T831] pwc: recv_control_msg error -71 req 04 val 1200 [ 1795.769739][ T831] pwc: Registered as video44. [ 1795.776209][ T831] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input111 [ 1795.814709][ T831] usb 5-1: USB disconnect, device number 69 [ 1795.952897][T13223] usb 1-1: Using ep0 maxpacket: 8 [ 1796.072441][T13223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1796.084827][T13223] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1796.097996][T13223] usb 1-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40 [ 1796.107767][T13223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.118410][T13223] usb 1-1: config 0 descriptor?? [ 1796.311966][T24667] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1796.425327][T13223] microsoft 0003:045E:009D.003B: unbalanced collection at end of report description [ 1796.435562][T13223] microsoft 0003:045E:009D.003B: parse failed [ 1796.442018][T13223] microsoft: probe of 0003:045E:009D.003B failed with error -22 [ 1796.520243][T13223] usb 1-1: USB disconnect, device number 80 [ 1796.572322][T24667] usb 4-1: Using ep0 maxpacket: 32 [ 1796.692081][T24667] usb 4-1: config 0 has an invalid interface number: 195 but max is 0 [ 1796.700498][T24667] usb 4-1: config 0 has no interface number 0 [ 1796.706994][T24667] usb 4-1: New USB device found, idVendor=2770, idProduct=913d, bcdDevice= e.47 [ 1796.716212][T24667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.725731][T24667] usb 4-1: config 0 descriptor?? [ 1796.767500][T24667] gspca_main: sq905c-2.14.0 probing 2770:913d [ 1797.053669][T24667] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1797.061268][T24667] sq905c: probe of 4-1:0.195 failed with error -71 [ 1797.073283][T24667] usb 4-1: USB disconnect, device number 68 19:45:43 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f00000000c0)=@caif=@dbg, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)={0x1, 0x1, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "aade90e9a2cbcc43"}}, 0x48}}, 0x0) 19:45:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x304}, "f25ce3d001340bf4", "aff14e606daeccbe271d175c8dfd353e", "68e0bf09", "b9a3ef579f6a9469"}, 0x28) sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@txtime={{0xf}}], 0x18}, 0x0) 19:45:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001800010000f3ae34730000000a000000000000000003000008001e000000000008000400", @ANYRES32], 0x2c}}, 0x0) 19:45:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@local, 0x3503, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) 19:45:43 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x24, 0x28, 0xffffff1f, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) 19:45:43 executing program 2: unshare(0x60600) r0 = socket$kcm(0x2, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) connect$netlink(r1, &(0x7f0000000000), 0xc) 19:45:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000440)={r1, 0x1, 0x6}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @remote}, 0x10) 19:45:43 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400), 0x400000000000324, 0x0) sendmsg$sock(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 19:45:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup2(r0, r1) [ 1799.876327][T30280] device syz_tun entered promiscuous mode [ 1799.917783][T30280] device ip6_vti0 entered promiscuous mode [ 1799.940570][T30278] device ip6_vti0 left promiscuous mode [ 1799.947019][T30278] device syz_tun left promiscuous mode 19:45:44 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) pipe2(&(0x7f0000000300), 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000002c0)=0x3) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{}, {0x0, 0xffffffffd927d9bc}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@dev, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1799.977447][T30280] device syz_tun entered promiscuous mode [ 1800.000847][T30290] device ip6_vti0 entered promiscuous mode [ 1800.015782][T30278] device ip6_vti0 left promiscuous mode 19:45:44 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="2f0000001c0005c5ffffff000d0000000200000600000000ec0002c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x4, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1800.022637][T30278] device syz_tun left promiscuous mode 19:45:44 executing program 0: unshare(0x20600) r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) fstat(r0, &(0x7f00000000c0)) 19:45:44 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000740)=""/246) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6}]}) 19:45:44 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff030}, {0x80000006}]}, 0x10) 19:45:44 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="5500000018007fbdb72d23b2a4a280930a0600fec0a8431491000000040008001a000500fec000001900a30700000000000000dc1338d54400009b84136e115afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 1800.381238][T30313] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 19:45:44 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1ffffffffffffd) 19:45:44 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) pipe2(&(0x7f0000000300), 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000002c0)=0x3) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{}, {0x0, 0xffffffffd927d9bc}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@dev, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:45:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x1, 0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) 19:45:50 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) pipe2(&(0x7f0000000300), 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000002c0)=0x3) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{}, {0x0, 0xffffffffd927d9bc}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@dev, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:45:50 executing program 5: seccomp(0x1, 0x0, &(0x7f00000005c0)={0x3, &(0x7f0000000040)=[{}, {0x24}, {0x6, 0x0, 0x0, 0x7fffffff}]}) 19:45:50 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x80001) write(r0, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003bbff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000c3fff4)={0x40000006}) 19:45:50 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r1) socket(0x2, 0x3, 0xff) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) 19:45:50 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 19:45:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000904fcff", 0x58}], 0x1) 19:45:50 executing program 4: connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) perf_event_open(&(0x7f00000000c0)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xffffff49, 0xbd, 0x0, 0xf7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x62, 0x0) dup(0xffffffffffffffff) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) 19:45:50 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x10) 19:45:50 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) 19:45:50 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) 19:45:50 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) pipe2(&(0x7f0000000300), 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000002c0)=0x3) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{}, {0x0, 0xffffffffd927d9bc}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@dev, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:45:50 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) 19:45:56 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0xa, @vbi}) 19:45:56 executing program 1: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000427, 0x40) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7}, 0x3c0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00') 19:45:56 executing program 5: syz_usb_connect(0x0, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 19:45:56 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) 19:45:56 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) 19:45:56 executing program 4: connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) perf_event_open(&(0x7f00000000c0)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xffffff49, 0xbd, 0x0, 0xf7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x62, 0x0) dup(0xffffffffffffffff) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) 19:45:56 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) 19:45:56 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) 19:45:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_mreq(r0, 0x0, 0x29, 0x0, 0x155) [ 1812.594313][T24667] usb 6-1: new high-speed USB device number 74 using dummy_hcd 19:45:56 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) 19:45:56 executing program 1: madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) 19:45:56 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) poll(&(0x7f0000000340)=[{r1}], 0x1, 0x0) [ 1812.965252][T24667] usb 6-1: Using ep0 maxpacket: 8 [ 1813.082380][T24667] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1813.090788][T24667] usb 6-1: config 0 has no interface number 0 [ 1813.097517][T24667] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=a2.2f [ 1813.107354][T24667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.117879][T24667] usb 6-1: config 0 descriptor?? [ 1813.432239][T24667] usb 6-1: string descriptor 0 read error: -71 [ 1813.438577][T24667] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 1813.445749][T24667] uvcvideo: No valid video chain found. [ 1813.454776][T24667] usb 6-1: USB disconnect, device number 74 [ 1814.151789][T24667] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1814.391830][T24667] usb 6-1: Using ep0 maxpacket: 8 [ 1814.511977][T24667] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1814.520093][T24667] usb 6-1: config 0 has no interface number 0 [ 1814.528946][T24667] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=a2.2f [ 1814.538210][T24667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.547963][T24667] usb 6-1: config 0 descriptor?? [ 1814.822061][T24667] usb 6-1: string descriptor 0 read error: -71 [ 1814.828312][T24667] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 1814.835604][T24667] uvcvideo: No valid video chain found. [ 1814.844175][T24667] usb 6-1: USB disconnect, device number 75 19:46:00 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) 19:46:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="118152b44d8b1e6d00060ad6cc4abd48e069266d12e90000d85a060000001b4ba87899a3686efe93e8b0dc0000001b88"], 0x30) ioctl$SG_IO(r0, 0x2285, 0x0) write$P9_RREAD(r0, &(0x7f0000000040)={0x2e, 0x75, 0x0, {0x23, "301f949eec64fef5cbb1d182820bc8bced96d6919b684878bef32af500000000000000"}}, 0x2e) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 19:46:00 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 19:46:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x4f8418a579a0331b, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000500)='/dev/admmidi#\x00', 0x5, 0x40000) r7 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, 0x0) poll(&(0x7f0000000540)=[{}, {r6, 0x8019}, {r4, 0x410}, {r7, 0x4020}], 0x4, 0x0) r8 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 19:46:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$l2tp(0x18, 0x1, 0x1) dup2(r0, r1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x1}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000000c0)) 19:46:00 executing program 4: connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) perf_event_open(&(0x7f00000000c0)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xffffff49, 0xbd, 0x0, 0xf7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x62, 0x0) dup(0xffffffffffffffff) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) 19:46:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001a80)={0x1, 0x0, [{0x40000000}]}) 19:46:00 executing program 3: lsetxattr(&(0x7f0000fc0000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000fc0000)='//selinux\x00\x04\x01\x01', 0x3d0, 0x0) 19:46:00 executing program 3: lsetxattr(&(0x7f0000fc0000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000fc0000)='//selinux\x00\x04\x01\x01', 0x3d0, 0x0) 19:46:00 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 19:46:01 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept$alg(r0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003040), 0x40000000000008a, 0x0) 19:46:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001a80)={0x1, 0x0, [{0x40000000}]}) 19:46:01 executing program 3: lsetxattr(&(0x7f0000fc0000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000fc0000)='//selinux\x00\x04\x01\x01', 0x3d0, 0x0) 19:46:04 executing program 3: lsetxattr(&(0x7f0000fc0000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000fc0000)='//selinux\x00\x04\x01\x01', 0x3d0, 0x0) 19:46:04 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)='attr/current\x00') read(r1, &(0x7f0000000240)=""/4096, 0x1000) write$binfmt_script(r1, &(0x7f00000012c0)={'#! ', './file0'}, 0xb) 19:46:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001a80)={0x1, 0x0, [{0x40000000}]}) 19:46:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 19:46:04 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x4000, 0x1000}, 0x18) 19:46:04 executing program 4: connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) perf_event_open(&(0x7f00000000c0)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xffffff49, 0xbd, 0x0, 0xf7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x62, 0x0) dup(0xffffffffffffffff) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) 19:46:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 19:46:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001a80)={0x1, 0x0, [{0x40000000}]}) 19:46:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 19:46:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) clone(0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000005c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9a", 0x1}], 0x1}}], 0x29b, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x20000000014) 19:46:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00') bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8) r2 = accept$alg(r0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x6) 19:46:05 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x0, 0x1800}, 0x18) 19:46:05 executing program 0: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e000000330005", 0x7}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd20"], 0xfdef) [ 1821.677010][T30508] device nr0 entered promiscuous mode [ 1821.878957][T30508] device nr0 entered promiscuous mode 19:46:11 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000000)=[{0x0, 0xffffffff}], 0x1) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x20}], 0x1, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 19:46:11 executing program 1: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00+e\x00\x00\x00\x00\x00\x00\x00\x00\\\x8d') fchdir(r1) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 19:46:11 executing program 5: r0 = getpid() pause() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 19:46:11 executing program 4: syz_usb_connect(0x0, 0x387, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xbe, 0x23, 0x58, 0x8, 0xbfd, 0x11, 0xa75f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd3, 0x0, 0x2, 0x62, 0x96, 0xbd, 0x0, [], [{{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x8c}}]}}]}}]}}, 0x0) 19:46:11 executing program 0: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e000000330005", 0x7}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd20"], 0xfdef) 19:46:11 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) unshare(0x20400) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000080)=0xffffffffffffffff) [ 1827.148812][T30525] device nr0 entered promiscuous mode 19:46:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa982}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:46:11 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000000ce"], 0x1, 0x0) msgsnd(r0, &(0x7f0000000380)={0x1}, 0x8, 0x0) msgsnd(r0, &(0x7f00000001c0)={0x3}, 0x8, 0x0) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/170}, 0xb2, 0x3, 0x0) [ 1827.392131][T13223] usb 5-1: new high-speed USB device number 70 using dummy_hcd 19:46:11 executing program 0: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e000000330005", 0x7}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd20"], 0xfdef) 19:46:11 executing program 1: ioprio_set$pid(0x3, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioprio_get$pid(0x2, 0x0) 19:46:11 executing program 3: socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x1009a, &(0x7f0000000040)={@local, @link_local, [{[{0x8100}]}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) [ 1827.578016][T30543] device nr0 entered promiscuous mode [ 1827.631823][T13223] usb 5-1: Using ep0 maxpacket: 8 19:46:11 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x3e, 0x59, 0x0, {0x1, @sdr={0x32314d48, 0x8}}}) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x802) r2 = dup(r1) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000140)=""/9, 0x9}], 0x1) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000380)=0x1, 0x4) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000380)=0x1, 0x4) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) [ 1827.752880][T13223] usb 5-1: config 0 has an invalid interface number: 211 but max is 0 [ 1827.761276][T13223] usb 5-1: config 0 has no interface number 0 [ 1827.767948][T13223] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=a7.5f [ 1827.777261][T13223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.854644][T13223] usb 5-1: config 0 descriptor?? [ 1827.893756][T13223] kvaser_usb 5-1:0.211: Cannot get usb endpoint(s) [ 1828.095935][T13223] usb 5-1: USB disconnect, device number 70 [ 1828.861825][T13223] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1829.101803][T13223] usb 5-1: Using ep0 maxpacket: 8 [ 1829.222194][T13223] usb 5-1: config 0 has an invalid interface number: 211 but max is 0 [ 1829.230529][T13223] usb 5-1: config 0 has no interface number 0 [ 1829.237111][T13223] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=a7.5f [ 1829.246410][T13223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.256220][T13223] usb 5-1: config 0 descriptor?? [ 1829.303637][T13223] kvaser_usb 5-1:0.211: Cannot get usb endpoint(s) [ 1829.505870][T13223] usb 5-1: USB disconnect, device number 71 19:46:15 executing program 2: r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_disconnect(r0) syz_usb_disconnect(r2) 19:46:15 executing program 1: ioprio_set$pid(0x3, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioprio_get$pid(0x2, 0x0) 19:46:15 executing program 0: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e000000330005", 0x7}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd20"], 0xfdef) 19:46:15 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$sock_buf(r0, 0x1, 0x10, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x10) 19:46:15 executing program 5: r0 = getpid() pause() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 19:46:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r1, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}]}, 0x20}}, 0x0) 19:46:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) [ 1831.347643][T30569] device nr0 entered promiscuous mode 19:46:15 executing program 1: ioprio_set$pid(0x3, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioprio_get$pid(0x2, 0x0) 19:46:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x2000000003ff, 0x0, 0x0, {0x5}, [@typed={0x8, 0x3, @ipv4=@broadcast}]}, 0x1c}}, 0x0) 19:46:15 executing program 3: io_setup(0x11, &(0x7f0000000240)=0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x145002) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 19:46:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xa93f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0xcffa808b513f9ded, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffcb) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19:46:15 executing program 1: ioprio_set$pid(0x3, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioprio_get$pid(0x2, 0x0) [ 1839.881995][T12865] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1840.242070][T12865] usb 3-1: config 0 has an invalid interface number: 135 but max is 0 [ 1840.250523][T12865] usb 3-1: config 0 has no interface number 0 [ 1840.256889][T12865] usb 3-1: config 0 interface 135 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1840.267635][T12865] usb 3-1: config 0 interface 135 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 1840.279111][T12865] usb 3-1: config 0 interface 135 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 1840.290550][T12865] usb 3-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1840.303831][T12865] usb 3-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 1840.313093][T12865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.322797][T12865] usb 3-1: config 0 descriptor?? [ 1840.369776][T12865] iowarrior 3-1:0.135: IOWarrior product=0x1501, serial= interface=135 now attached to iowarrior0 19:46:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="9dfb9db516f9f234a09024177fad4d05b22378a74308015fd3f09b7da5b1a4f55602056a332f266876bc406cac8bdf0d2905a7bbd4c81f0f01d85bdfddeabca62a26a0bceaed5bf4017f55b6bd93c6235f23b0bd4eae5e11d8fd5d57c9affa30463822a1f3306e3161b20e9302a0502b16ed94a263e83c9f8dd64c247bc1db6502"], 0x81) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x61, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d4a0a13fc833fbb724b6778d0006450eeab88c525717638193a6eade1404dea09ec1c12f0c2a7fb38bdac25bd65ae2d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:46:24 executing program 0: seccomp(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000240)=[{0x100000006}]}) unshare(0x20400) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{}, {}, {}]}, 0x8) ppoll(&(0x7f00000000c0)=[{}, {}, {}, {}], 0x200000000000005b, 0x0, 0x0, 0xfffffffffffffe02) 19:46:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x0, @dev, 0x6}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @broadcast}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000008c0)=[@in={0x2, 0x4e21, @multicast2}], 0x10) 19:46:24 executing program 1: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast1}, 0x80, 0x0}}, {{&(0x7f00000035c0)=@in={0x2, 0x4e20}, 0x80, 0x0}}], 0x2, 0x0) 19:46:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000102, 0x0, 0xc0010006], [0xc1]}) 19:46:24 executing program 5: r0 = getpid() pause() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1840.548430][T13223] usb 3-1: USB disconnect, device number 34 [ 1840.572264][T13223] iowarrior 3-1:0.135: I/O-Warror #0 now disconnected [ 1840.663407][T30624] kvm [30611]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x0 [ 1840.673031][T30624] kvm [30611]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 19:46:24 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r0, 0x0) sendto$inet6(r0, 0x0, 0xfe32, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) [ 1840.696081][ T32] audit: type=1326 audit(1571255184.742:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30616 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 19:46:24 executing program 1: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f30502000a000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x4000000000000002, 0xc) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a0081a4ca2e6bfdeebe00", 0xe3) 19:46:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000102, 0x0, 0xc0010006], [0xc1]}) 19:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0xc}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x9}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x3}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x7}]}}]}, 0x60}}, 0x0) 19:46:24 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x0, 0xff00, 0x0}], 0x1, 0x0) [ 1841.036201][T30646] kvm [30644]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x0 [ 1841.046001][T30646] kvm [30644]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 19:46:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000102, 0x0, 0xc0010006], [0xc1]}) [ 1841.204641][T30654] kvm [30653]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x0 [ 1841.214412][T30654] kvm [30653]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1841.407175][ T32] audit: type=1326 audit(1571255185.452:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30616 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 19:46:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0x9, 0x2, {0x8}}}}]}, 0x38}}, 0x0) 19:46:31 executing program 2: openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x193) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000100)={0x7b}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="d80000", @ANYBLOB="000000000000fbdbdf250f000000080002000400040008000600040002001c000200080001000000000004000400080002000000000004000400700004000c00070008000300000000003c0007000800040004000000080001000000000008000100000000000800010000000000080001000400000008"], 0x2}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000003, 0x0, 0x0, 0x0, 0x4cb], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:46:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in, 0x0, 0x0, 0x0, 0xc4}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a, @loopback}, 0x80, 0x0}}], 0x1, 0x0) 19:46:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000102, 0x0, 0xc0010006], [0xc1]}) 19:46:31 executing program 5: r0 = getpid() pause() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 19:46:31 executing program 0: seccomp(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000240)=[{0x100000006}]}) unshare(0x20400) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{}, {}, {}]}, 0x8) ppoll(&(0x7f00000000c0)=[{}, {}, {}, {}], 0x200000000000005b, 0x0, 0x0, 0xfffffffffffffe02) [ 1847.777692][ T32] audit: type=1326 audit(1571255191.822:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30671 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 [ 1847.806944][T30674] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1847.820769][T30669] kvm [30668]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x0 [ 1847.831707][T30669] kvm [30668]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 19:46:31 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x12, 0xffffffffffffffff, 0x22f) 19:46:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 19:46:32 executing program 4: syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3819, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 19:46:32 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:46:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000100)={0x0, 0xfffdfffd}) [ 1848.119637][T30687] xt_cluster: node mask cannot exceed total number of nodes 19:46:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="b8160000000f23c00f21f83502000e000f23f80f017c5fcb440f20c03505000000440f22c0c744240000000000c74424029e690000c7442406000000000f0114240f20c035020000000f22c0660f38211c8266baf80cb8b0d36f85ef66bafc0ced0ffcda0f0967660f38815800", 0x6d}], 0x1, 0x8, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1848.213857][T30696] usb usb7: selecting invalid altsetting -131075 19:46:32 executing program 4: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) dup2(r1, r0) 19:46:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x1d0, [0x0, 0x20000100, 0x20000130, 0x20000200], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/464]}, 0x248) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x1100000000000000, 0x81, &(0x7f0000000300)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x2, &(0x7f0000000080), 0x0, [{}, {}]}, 0x98) 19:46:39 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="11") mmap(&(0x7f000003c000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 19:46:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) 19:46:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000480)={0x0, 0x2}, 0xc) 19:46:39 executing program 0: seccomp(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000240)=[{0x100000006}]}) unshare(0x20400) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{}, {}, {}]}, 0x8) ppoll(&(0x7f00000000c0)=[{}, {}, {}, {}], 0x200000000000005b, 0x0, 0x0, 0xfffffffffffffe02) 19:46:39 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x7b, 0x0) [ 1855.149809][ T32] audit: type=1326 audit(1571255199.192:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30717 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 19:46:39 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0xfffffffffffffffd) 19:46:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x73}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 19:46:39 executing program 3: msgrcv(0x0, 0x0, 0x0, 0x0, 0x6555cd9d70cb4838) 19:46:39 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c040002ff0f03000004000000000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) 19:46:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000004c0)='./control\x00', 0x0) rename(&(0x7f0000000080)='./control\x00', &(0x7f0000000040)='./file0\x00') r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0xa400295c) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file1\x00') 19:46:39 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c040002ff0f03000004000000000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) 19:46:39 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000000002fd25fdbb3f1ac1de00000000000e04009352"], 0x18}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) 19:46:39 executing program 3: msgrcv(0x0, 0x0, 0x0, 0x0, 0x6555cd9d70cb4838) 19:46:46 executing program 2: seccomp(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000240)=[{0x100000006, 0x0, 0x0, 0x40007ff00000}]}) 19:46:46 executing program 4: r0 = syz_usb_connect$hid(0x0, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1e5e, 0x313, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000760000007600bedc2a5443640a789bdd51ea6221d59bc578290bb75545b86415f535b546"], 0x0, 0x0, 0x0, 0x0}, 0x0) 19:46:46 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c040002ff0f03000004000000000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) 19:46:46 executing program 3: msgrcv(0x0, 0x0, 0x0, 0x0, 0x6555cd9d70cb4838) 19:46:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x2, 0x803, 0x85) sendmmsg$inet(r1, &(0x7f0000003bc0)=[{{&(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001600)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x1, 0x0) 19:46:46 executing program 0: seccomp(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000240)=[{0x100000006}]}) unshare(0x20400) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{}, {}, {}]}, 0x8) ppoll(&(0x7f00000000c0)=[{}, {}, {}, {}], 0x200000000000005b, 0x0, 0x0, 0xfffffffffffffe02) [ 1862.478488][ T32] audit: type=1326 audit(1571255206.522:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30778 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 19:46:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="c80100001300fbff00000000000000003d000000b40152001000300069645f7265736f6c7665720008004a00", @ANYRES32, @ANYBLOB="bc8b27c6e50452bae4c05eea0d862436d6a424375e8ee4581b3f8b1e0169812c7abf58a330a1ad23a18c85c00435ce607403b2105babfb44702aef79d0de05c359659fbc59ac264807d165a04653b24092fc05a8ebe73de7196514f56ed8dbd4b9d6ad2a0dd80d0690170ed60c31077adc95b43cc1e1d79c0c7f162b8033fb38e61c5b18325eabcaf5b298ff3bddeb705c3415c93e95643d4de4ee04003c00a4004b00dd36875305e70467ed49d33c2e1e59593192e6e8e090fa283aa26d5870c7dc127e9ca4ae373bdeda192a2ba653b8f733baad1469c405aec99ba25f9d43d75fd76cf65badb791743801af187993420cb1895db3f7a2d9c3707b24bcb794ab02c0bf58065ad9bef44e71a656f16473015ca8c48e9ae07f3d53204c484094e9b4c056aa755d8297a2fd07aa0d1ce5f7e3363220ded1b462dcbb11ebf99c8f33b221757ccd264ba978324d95610eb8f8b44c77f202000085d5eb0d553105510a448f80ef5da300714673895d4c436aae12185c88cb66980e908c19b2618b818d2bc1462f30102949557d9ace3d3430b9173fe4df6d5dff03a1425e9eea8af249ee1cabbec3038cf68711098a540551b718684ecb21f419c51fd52654ece1fa3257ae13a6994b5ca56e1d282318d4a4a88d"], 0x1c8}, 0x1, 0x68}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x10) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924924924925b9, 0x0) 19:46:46 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c040002ff0f03000004000000000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) 19:46:46 executing program 3: msgrcv(0x0, 0x0, 0x0, 0x0, 0x6555cd9d70cb4838) [ 1862.762316][ T831] usb 5-1: new high-speed USB device number 72 using dummy_hcd 19:46:46 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0900000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60613a027fb50cbcbd92d44076d3b97247e066165ccf1032f51d36ab231f6c20d87e9167edf69776dca67d90a17ccd18fb9c7b21d53478e382dcf296a23a060bfe9ac9d9cd196187d0b64c834783111c7758bf5a62c197735b91d92591d04108e4a92ad8cd3ddf00000000000000c32f5221dbf4", 0xd8}], 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:46:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0x80045700, 0x0) 19:46:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) [ 1863.001825][ T831] usb 5-1: Using ep0 maxpacket: 8 [ 1863.122197][ T831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1863.133823][ T831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1863.146869][ T831] usb 5-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 1863.156103][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.262820][ T831] usb 5-1: config 0 descriptor?? [ 1863.743362][ T831] hid (null): invalid report_size 48640 [ 1863.751071][ T831] hid (null): usage index exceeded [ 1863.756559][ T831] hid (null): unknown global tag 0xd [ 1863.761993][ T831] hid (null): unknown global tag 0xc [ 1863.767305][ T831] hid (null): usage index exceeded [ 1863.772612][ T831] hid (null): global environment stack underflow [ 1863.787951][ T831] hid-generic 0003:1E5E:0313.003C: invalid report_size 48640 [ 1863.795656][ T831] hid-generic 0003:1E5E:0313.003C: item 0 2 1 7 parsing failed [ 1863.803850][ T831] hid-generic: probe of 0003:1E5E:0313.003C failed with error -22 [ 1863.945940][ T831] usb 5-1: USB disconnect, device number 72 [ 1864.711837][ T831] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1864.951845][ T831] usb 5-1: Using ep0 maxpacket: 8 [ 1865.072110][ T831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1865.083269][ T831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1865.096454][ T831] usb 5-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 1865.105642][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.115902][ T831] usb 5-1: config 0 descriptor?? [ 1865.412911][ T831] hid (null): invalid report_size 48640 [ 1865.420812][ T831] hid (null): usage index exceeded [ 1865.426222][ T831] hid (null): unknown global tag 0xd [ 1865.431557][ T831] hid (null): unknown global tag 0xc [ 1865.437109][ T831] hid (null): usage index exceeded [ 1865.442467][ T831] hid (null): global environment stack underflow [ 1865.453885][ T831] hid-generic 0003:1E5E:0313.003D: invalid report_size 48640 [ 1865.462528][ T831] hid-generic 0003:1E5E:0313.003D: item 0 2 1 7 parsing failed [ 1865.470640][ T831] hid-generic: probe of 0003:1E5E:0313.003D failed with error -22 [ 1865.503830][ T831] usb 5-1: USB disconnect, device number 73 [ 1868.657243][ T32] audit: type=1326 audit(1571255212.702:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30780 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x7ff00000 [ 1868.682047][ T32] audit: type=1326 audit(1571255212.702:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30780 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x413681 code=0x7ff00000 [ 1868.708203][ T32] audit: type=1326 audit(1571255212.702:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30780 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x413681 code=0x7ff00000 [ 1868.734167][ T32] audit: type=1326 audit(1571255212.702:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30780 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=231 compat=0 ip=0x459a59 code=0x7ff00000 19:46:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$kcm(0x2, 0x2, 0x73) close(r1) 19:46:53 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0900000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60613a027fb50cbcbd92d44076d3b97247e066165ccf1032f51d36ab231f6c20d87e9167edf69776dca67d90a17ccd18fb9c7b21d53478e382dcf296a23a060bfe9ac9d9cd196187d0b64c834783111c7758bf5a62c197735b91d92591d04108e4a92ad8cd3ddf00000000000000c32f5221dbf4", 0xd8}], 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:46:53 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x5dc291) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(r0, 0x0, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r0, 0x0, 0x0) 19:46:53 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0x20010134}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2) 19:46:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, 0x1e, 0x113, 0x0, 0x0, {0xffffff1f, 0x0, 0x1000000}, [@typed={0xc, 0x119, @u64}]}, 0x20}}, 0x0) 19:46:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="f9b936a2e22665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x134, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x104, 0x2, [@TCA_CGROUP_ACT={0xd4, 0x1, @m_nat={0xd0, 0x0, {{0x1be, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}}, {0x94, 0x6, "69b8c5f3ee26789f8763c2702b1139e5e9cf14cde2ebc2e7948cecdf4c3bab8bc1359b090dc500cd8f1a36bc682c7fb6e065aff0f733a31b494f95f19f92a63d2b61709c51709a648e84d18b45c7f953f0790bfae4be05bc901faea6eb6f20b329d9f833c5cb53060664f86188c57816352b517bc61850e110804ebdd9ebe2b783b13aa9c5e7d81c1a0d18568b"}}}}, @TCA_CGROUP_EMATCHES={0x2c, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0xfffffed9}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x134}}, 0x0) 19:46:53 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000180), 0x8) 19:46:53 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @local, @mcast2={0xff, 0x2, [0xf5ffffff00000000, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x380b, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 19:46:54 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000040), 0x4) sendmsg$kcm(r0, &(0x7f0000001d40)={&(0x7f0000000c00)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001bc0)="01", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000003c0)=""/95, 0x5f}], 0x1}, 0x0) 19:46:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x1a, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 19:46:54 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x5dc291) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(r0, 0x0, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r0, 0x0, 0x0) 19:46:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x1a, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 19:46:58 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x5dc291) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(r0, 0x0, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r0, 0x0, 0x0) 19:46:58 executing program 2: socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r0, 0x28007d) sendfile(r0, r0, 0x0, 0x2008000fffffffe) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r1, 0x28007d) sendfile(r1, r1, 0x0, 0x2008000fffffffe) r2 = dup2(r0, r1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000080)={{0x1, 0x2, 0x4, 0x0, 0x4}, 0xfff, 0x1, 0xffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000004040)={@dev, @dev, @mcast2, 0x0, 0x8, 0x1, 0x0, 0x1, 0x200}) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x28007d) sendfile(r5, r5, 0x0, 0x2008000fffffffe) r6 = socket$unix(0x1, 0x1, 0x0) ftruncate(r6, 0x28007d) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x28007d) sendfile(r7, r7, 0x0, 0x2008000fffffffe) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f0000000140)={'ip6gretap0\x00', @ifru_data=&(0x7f0000000100)="d5acfcc71343fef1333ad087e13e61763e68ee6211700263b2efaea46199d33e"}}) sendfile(r4, r4, 0x0, 0x2008000fffffffe) r8 = dup3(r4, 0xffffffffffffffff, 0x80000) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000000)={0x6, 0xe7, 0x5, 0x3, 0x5, 0xff, 0x3, 0x80, 0x3, 0xc1, 0xfa}, 0xb) 19:46:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x1a, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 19:46:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@srh, 0x8) write$binfmt_aout(r0, &(0x7f0000000400)={{}, "", [[], [], [], [], [], []]}, 0x620) 19:46:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000004080501ff0080fffdffff3e8a0000000c00030088ffffff7d0a00010c000200000022ff02f14000"], 0x2c}}, 0x0) 19:46:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0900000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60613a027fb50cbcbd92d44076d3b97247e066165ccf1032f51d36ab231f6c20d87e9167edf69776dca67d90a17ccd18fb9c7b21d53478e382dcf296a23a060bfe9ac9d9cd196187d0b64c834783111c7758bf5a62c197735b91d92591d04108e4a92ad8cd3ddf00000000000000c32f5221dbf4", 0xd8}], 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1873.935045][T30876] netlink: 'syz-executor.2': attribute type 281 has an invalid length. [ 1874.009284][T30883] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1874.019857][T30883] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 19:46:58 executing program 0: unshare(0x20000200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setns(r0, 0x0) clone(0x38082000, 0x0, 0x0, 0x0, 0x0) 19:46:58 executing program 1: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f00000001c0)="00ec2400"/13, 0xd, 0xfffffffffffffffd) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYBLOB="00b1"], 0x0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000300)="c0dca5055e0bcfec7be070") keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffffa9, 0x0) 19:46:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x1a, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 19:46:58 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140), &(0x7f0000000040)=0x8) 19:46:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x601, 0x1}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f00000000c0)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 19:46:58 executing program 0: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, [0x539c]}) 19:46:58 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x5dc291) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(r0, 0x0, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r0, 0x0, 0x0) 19:47:05 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80284504, &(0x7f0000ffcffc)=0x200) 19:47:05 executing program 4: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000240)) unshare(0x6c060000) 19:47:05 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0xf0e0b85957474be0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x1, 0x129, 0x6}, 0x0}) 19:47:05 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0900000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60613a027fb50cbcbd92d44076d3b97247e066165ccf1032f51d36ab231f6c20d87e9167edf69776dca67d90a17ccd18fb9c7b21d53478e382dcf296a23a060bfe9ac9d9cd196187d0b64c834783111c7758bf5a62c197735b91d92591d04108e4a92ad8cd3ddf00000000000000c32f5221dbf4", 0xd8}], 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:47:05 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100003677a14015661200a8fc0010000109021b0001000000000904fd0001a368ff00090581000000000000"], 0x0) 19:47:05 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000010101000000000000000000f20000000c00020008000100df21f402"], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 19:47:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x12, &(0x7f00000000c0)=""/47, &(0x7f0000000180)=0x2f) 19:47:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7,k\x1a+@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="05030040a3c23e0000c30600c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe57) [ 1881.765628][T13223] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1881.782373][T12865] usb 2-1: new high-speed USB device number 51 using dummy_hcd 19:47:06 executing program 0: r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x1) sendfile(r0, r0, 0x0, 0x2008000fffffffe) [ 1882.023830][T13223] usb 4-1: Using ep0 maxpacket: 16 19:47:06 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x43, 0xec, 0x9d, 0x8, 0x763, 0x2080, 0xcb47, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xbb, 0x3, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2d552b3f4576f05f}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0xac, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x81, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1882.152401][T13223] usb 4-1: config 16 has an invalid interface number: 155 but max is 0 [ 1882.152450][T12865] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 1882.152526][T12865] usb 2-1: config 0 has no interface number 0 [ 1882.162057][T13223] usb 4-1: config 16 has no interface number 0 [ 1882.162169][T13223] usb 4-1: New USB device found, idVendor=8e96, idProduct=747d, bcdDevice=a9.44 [ 1882.195460][T13223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.252364][T12865] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 1882.264136][T12865] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1882.274496][T12865] usb 2-1: Product: syz [ 1882.284314][T12865] usb 2-1: config 0 descriptor?? [ 1882.329167][T12865] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input112 19:47:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1882.502504][ T831] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1882.510728][T13223] wusb-cbaf 4-1:16.155: Not enough data to decode association request (1 vs 10 bytes needed) [ 1882.522385][T13223] wusb-cbaf 4-1:16.155: Missing RETRIEVE_HOST_INFO association request [ 1882.532449][T13223] wusb-cbaf 4-1:16.155: This device is not WUSB-CBAF compliant and is not supported yet. [ 1882.542978][T13223] wusb-cbaf: probe of 4-1:16.155 failed with error -22 [ 1882.555916][T12865] usb 2-1: USB disconnect, device number 51 19:47:06 executing program 4: r0 = socket(0x2, 0x1000000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0), 0x111) 19:47:06 executing program 4: unshare(0x20000) r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x1000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfffffe8b) creat(&(0x7f0000000200)='./file0\x00', 0x0) [ 1882.708169][T13223] usb 4-1: USB disconnect, device number 69 [ 1882.772073][ T831] usb 1-1: Using ep0 maxpacket: 8 [ 1882.914745][ T831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1882.926976][ T831] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=cb.47 [ 1882.939207][ T831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.956358][ T831] usb 1-1: config 0 descriptor?? [ 1883.391939][T12865] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1883.428248][ T831] usb 1-1: USB disconnect, device number 81 [ 1883.491927][T24667] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1883.732010][T24667] usb 4-1: Using ep0 maxpacket: 16 [ 1883.762155][T12865] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 1883.770516][T12865] usb 2-1: config 0 has no interface number 0 [ 1883.852546][T24667] usb 4-1: config 16 has an invalid interface number: 155 but max is 0 [ 1883.860862][T24667] usb 4-1: config 16 has no interface number 0 [ 1883.867376][T24667] usb 4-1: New USB device found, idVendor=8e96, idProduct=747d, bcdDevice=a9.44 [ 1883.876586][T24667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.886044][T12865] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 1883.895288][T12865] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1883.903548][T12865] usb 2-1: Product: syz [ 1883.910150][T12865] usb 2-1: config 0 descriptor?? [ 1883.958323][T12865] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input113 [ 1884.154939][ T831] usb 2-1: USB disconnect, device number 52 [ 1884.172139][T24667] wusb-cbaf 4-1:16.155: Cannot get available association types: -71 [ 1884.180364][T24667] wusb-cbaf 4-1:16.155: This device is not WUSB-CBAF compliant and is not supported yet. [ 1884.191007][T24667] wusb-cbaf: probe of 4-1:16.155 failed with error -71 [ 1884.207706][T24667] usb 4-1: USB disconnect, device number 70 [ 1884.215537][ T3378] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1884.461839][ T3378] usb 1-1: Using ep0 maxpacket: 8 [ 1884.582603][ T3378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1884.593849][ T3378] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=cb.47 [ 1884.603107][ T3378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1884.629360][ T3378] usb 1-1: config 0 descriptor?? [ 1884.936753][ T3378] usb 1-1: USB disconnect, device number 82 19:47:12 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) 19:47:12 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_hci(r0, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xffffffffffffff3f) 19:47:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) rmdir(&(0x7f0000000600)='./file0//ile0\x00') lremovexattr(&(0x7f0000000040)='./file0//ile0\x00', 0x0) 19:47:12 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0xf0e0b85957474be0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x1, 0x129, 0x6}, 0x0}) 19:47:12 executing program 2: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) r1 = socket(0x1, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000040), &(0x7f00000001c0)=0x14) r2 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0xc0487c04, &(0x7f0000000000)=""/226) 19:47:12 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r0, &(0x7f0000000e40), 0xfffffffffffffd77, 0x4000000, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) 19:47:12 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pread64(r0, 0x0, 0x2db, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x800000015) 19:47:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) rmdir(&(0x7f0000000600)='./file0//ile0\x00') lremovexattr(&(0x7f0000000040)='./file0//ile0\x00', 0x0) 19:47:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x64b3cb7426d54726) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000f46000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff02000000000000000000000000000100"/400], 0x190) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/219, 0xdb}], 0x1) sendfile(r1, r2, 0x0, 0xff) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000200)=""/181, 0xb5}], 0x1) 19:47:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48e}]}) 19:47:13 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pread64(r0, 0x0, 0x2db, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x800000015) [ 1889.112602][ T831] usb 4-1: new high-speed USB device number 71 using dummy_hcd 19:47:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) rmdir(&(0x7f0000000600)='./file0//ile0\x00') lremovexattr(&(0x7f0000000040)='./file0//ile0\x00', 0x0) 19:47:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0xfffffe4b) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000540)=0xffff, 0x118) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) [ 1889.372930][ T831] usb 4-1: Using ep0 maxpacket: 16 [ 1889.522290][ T831] usb 4-1: config 16 has an invalid interface number: 155 but max is 0 [ 1889.530720][ T831] usb 4-1: config 16 has no interface number 0 [ 1889.537285][ T831] usb 4-1: New USB device found, idVendor=8e96, idProduct=747d, bcdDevice=a9.44 [ 1889.546473][ T831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.812210][ T831] wusb-cbaf 4-1:16.155: Not enough data to decode association request (1 vs 10 bytes needed) [ 1889.822742][ T831] wusb-cbaf 4-1:16.155: Missing RETRIEVE_HOST_INFO association request [ 1889.831061][ T831] wusb-cbaf 4-1:16.155: This device is not WUSB-CBAF compliant and is not supported yet. [ 1889.841171][ T831] wusb-cbaf: probe of 4-1:16.155 failed with error -22 [ 1890.019409][ T831] usb 4-1: USB disconnect, device number 71 19:47:17 executing program 2: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) r1 = socket(0x1, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000040), &(0x7f00000001c0)=0x14) r2 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0xc0487c04, &(0x7f0000000000)=""/226) 19:47:17 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pread64(r0, 0x0, 0x2db, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x800000015) 19:47:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) io_setup(0x20, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000007c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)='p', 0x1}]) 19:47:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) rmdir(&(0x7f0000000600)='./file0//ile0\x00') lremovexattr(&(0x7f0000000040)='./file0//ile0\x00', 0x0) 19:47:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="200000001a00012f0d000000000000081c140000a0cf80000f00000000800000", 0x20) 19:47:17 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0xf0e0b85957474be0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x1, 0x129, 0x6}, 0x0}) 19:47:17 executing program 1: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) r1 = socket(0x1, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000040), &(0x7f00000001c0)=0x14) r2 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0xc0487c04, &(0x7f0000000000)=""/226) 19:47:17 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pread64(r0, 0x0, 0x2db, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x800000015) 19:47:17 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f0000000000)='./file0\x00') 19:47:17 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0xe4, 0xde, 0x8, 0x3195, 0xf280, 0x6ae6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x45, 0x0, 0x0, 0x6e, 0xd7, 0x5c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f00000000c0)={0x0, 0x0, 0x1, 'E'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:47:17 executing program 1: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) r1 = socket(0x1, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000040), &(0x7f00000001c0)=0x14) r2 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0xc0487c04, &(0x7f0000000000)=""/226) [ 1893.332026][ T3378] usb 4-1: new high-speed USB device number 72 using dummy_hcd 19:47:17 executing program 5: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000280)=""/254, 0xfe}], 0x2, &(0x7f00000003c0)=""/179, 0xb3}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x2e93b8d, @dev={0xfe, 0x80, [], 0x29}, 0x2098bc63}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x5}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x98) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x8e001) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 1893.592964][ T3378] usb 4-1: Using ep0 maxpacket: 16 [ 1893.593013][ T831] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1893.728076][ T3378] usb 4-1: config 16 has an invalid interface number: 155 but max is 0 [ 1893.736486][ T3378] usb 4-1: config 16 has no interface number 0 [ 1893.742896][ T3378] usb 4-1: New USB device found, idVendor=8e96, idProduct=747d, bcdDevice=a9.44 [ 1893.752116][ T3378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1893.832014][ T831] usb 1-1: Using ep0 maxpacket: 8 [ 1893.952208][ T831] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 1893.960481][ T831] usb 1-1: config 0 has no interface number 0 [ 1893.966911][ T831] usb 1-1: New USB device found, idVendor=3195, idProduct=f280, bcdDevice=6a.e6 [ 1893.976071][ T831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1893.985795][ T831] usb 1-1: config 0 descriptor?? [ 1894.024776][ T831] cp210x 1-1:0.69: cp210x converter detected [ 1894.042137][ T3378] wusb-cbaf 4-1:16.155: Not enough data to decode association request (1 vs 10 bytes needed) [ 1894.052479][ T3378] wusb-cbaf 4-1:16.155: Missing RETRIEVE_HOST_INFO association request [ 1894.060766][ T3378] wusb-cbaf 4-1:16.155: This device is not WUSB-CBAF compliant and is not supported yet. [ 1894.071125][ T3378] wusb-cbaf: probe of 4-1:16.155 failed with error -22 [ 1894.251303][T13223] usb 4-1: USB disconnect, device number 72 [ 1894.453208][ T831] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1894.460374][ T831] cp210x: probe of ttyUSB0 failed with error -71 [ 1894.473267][ T831] usb 1-1: USB disconnect, device number 83 [ 1894.480372][ T831] cp210x 1-1:0.69: device disconnected [ 1895.211903][ T831] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1895.452139][ T831] usb 1-1: Using ep0 maxpacket: 8 [ 1895.572130][ T831] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 1895.580417][ T831] usb 1-1: config 0 has no interface number 0 [ 1895.586805][ T831] usb 1-1: New USB device found, idVendor=3195, idProduct=f280, bcdDevice=6a.e6 [ 1895.596033][ T831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.605679][ T831] usb 1-1: config 0 descriptor?? [ 1895.654381][ T831] cp210x 1-1:0.69: cp210x converter detected [ 1895.862391][ T831] cp210x 1-1:0.69: failed to get vendor val 0x370b size 1: -71 [ 1895.873233][ T831] cp210x 1-1:0.69: querying part number failed [ 1895.902460][ T831] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 1895.910673][ T831] cp210x: probe of ttyUSB0 failed with error -71 [ 1895.923406][ T831] usb 1-1: USB disconnect, device number 84 [ 1895.934184][ T831] cp210x 1-1:0.69: device disconnected 19:47:21 executing program 1: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) r1 = socket(0x1, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000040), &(0x7f00000001c0)=0x14) r2 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0xc0487c04, &(0x7f0000000000)=""/226) 19:47:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c) 19:47:21 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2c}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 19:47:21 executing program 5: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000280)=""/254, 0xfe}], 0x2, &(0x7f00000003c0)=""/179, 0xb3}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x2e93b8d, @dev={0xfe, 0x80, [], 0x29}, 0x2098bc63}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x5}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x98) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x8e001) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 19:47:21 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0xf0e0b85957474be0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x1, 0x129, 0x6}, 0x0}) 19:47:21 executing program 2: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) r1 = socket(0x1, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000040), &(0x7f00000001c0)=0x14) r2 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0xc0487c04, &(0x7f0000000000)=""/226) 19:47:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 19:47:21 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x10a000d04) 19:47:21 executing program 4: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x0, r0}) shutdown(r2, 0x1) 19:47:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) [ 1897.585293][ T831] usb 4-1: new high-speed USB device number 73 using dummy_hcd 19:47:21 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='batadv0\x00', 0x154) sendmsg$inet(r0, &(0x7f0000001540)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001500)=[@ip_tos_u8={{0x11}}], 0x18}, 0x0) 19:47:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9a", 0x1}], 0x1}}], 0x29b, 0x0) 19:47:21 executing program 1: futex(0x0, 0x81, 0x0, 0x0, 0x0, 0x0) [ 1897.842109][ T831] usb 4-1: Using ep0 maxpacket: 16 [ 1897.992477][ T831] usb 4-1: config 16 has an invalid interface number: 155 but max is 0 [ 1898.002103][ T831] usb 4-1: config 16 has no interface number 0 [ 1898.008571][ T831] usb 4-1: New USB device found, idVendor=8e96, idProduct=747d, bcdDevice=a9.44 [ 1898.019022][ T831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.372116][ T831] wusb-cbaf 4-1:16.155: Not enough data to decode association request (1 vs 10 bytes needed) [ 1898.383419][ T831] wusb-cbaf 4-1:16.155: Missing RETRIEVE_HOST_INFO association request [ 1898.392343][ T831] wusb-cbaf 4-1:16.155: This device is not WUSB-CBAF compliant and is not supported yet. [ 1898.402654][ T831] wusb-cbaf: probe of 4-1:16.155 failed with error -22 [ 1898.578511][ T831] usb 4-1: USB disconnect, device number 73 19:47:25 executing program 2: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) r1 = socket(0x1, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000040), &(0x7f00000001c0)=0x14) r2 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0xc0487c04, &(0x7f0000000000)=""/226) 19:47:25 executing program 0: r0 = getpgrp(0x0) setpgid(0xffffffffffffffff, r0) 19:47:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2000000002}, 0x1c) sendmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000018c0)=@in={0x2, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x1) 19:47:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x6, 0x0, @buffer={0x10e, 0x0, 0x0}, &(0x7f0000000080)="0008e40200d2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0}) 19:47:25 executing program 5: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000280)=""/254, 0xfe}], 0x2, &(0x7f00000003c0)=""/179, 0xb3}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x2e93b8d, @dev={0xfe, 0x80, [], 0x29}, 0x2098bc63}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x5}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x98) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x8e001) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 19:47:25 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="a4ab12f728db642b2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf574b763e3062d037dca291318d0a17270bbce74b47888318b04aeb0747555ba16ea10e6ddb915ceb6397e514f3482ca3c22e31ebc6da732ee3d854a1d3b9b3c0887a22cf550250fc7204eaa3d026ef9d3f316f9fb6e05b4eb24d9694ae3dce01a835ae120724082b2b82763fd66275454fd21e68eba5114f4ebe4e48166fdd41e0b426647cfba9ae74408ff7d1dba6d65d9631900ff003ad4f3c80ead205548cc3aac1f87c4a7053ee4fba1128180d553a3c7f1c21a6afb033f8fa3b25086b1062693b66545a2fe06c8ce220609c91b8f4e074761527510fae0dd3e9f45c46e7a988aa9beb52f82f5f1f79fade0f346c920f371bdd13639aeb01e8c62af1213970022d876170b0de0a5ae", 0x12b}], 0x4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 19:47:25 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000080000020269a5cdc291e96e7167dd549815de91787d15a77da5302fd46b9f55c044ab05dc005efe703f176"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000340)={0x5, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "eea9a76841849d7d"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "afad0ba330c263d0"}}, 0x48}}, 0x0) 19:47:25 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:47:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r1, r2, 0x0, 0x400000000fee) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@nfc, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123}], 0x0, &(0x7f0000000680)=""/108}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/164, 0x31c}], 0x3c3}, 0x3}], 0x1b1, 0x0, 0x0) 19:47:25 executing program 1: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty=[0xffffffffa0008000, 0xd00, 0x689], [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @remote, {[@timestamp={0x44, 0xc, 0x6, 0x0, 0x0, [{}, {}]}]}}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 19:47:25 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a4, 0x92) 19:47:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x0) [ 1901.881912][T31169] TCP: request_sock_TCP: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 19:47:30 executing program 1: io_setup(0x2, &(0x7f0000000040)=0x0) r1 = socket$netlink(0x10, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0x264}]) 19:47:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x2, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) 19:47:30 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000102505a1a44000010203010902680002010000000904000001020d0000052406000105248000000d240f0100000000000000000006391a00fbff0b241b000000000000000000090581030000000000090401d2a6020d0f00008202000b030000000905030200"/127], 0x0) 19:47:30 executing program 5: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000280)=""/254, 0xfe}], 0x2, &(0x7f00000003c0)=""/179, 0xb3}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x2e93b8d, @dev={0xfe, 0x80, [], 0x29}, 0x2098bc63}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x5}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x98) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x8e001) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 19:47:30 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000), 0x4) 19:47:30 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1a001000044}}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 19:47:30 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000), 0x4) 19:47:30 executing program 4: r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, &(0x7f0000000000)="03", 0x1) 19:47:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x14, r3, 0x201}, 0x14}}, 0x0) 19:47:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000040140001200100001006970366772657461700000002c00020014000700fc000000000000002e3787d4000000011400060000000100"/72], 0x60}}, 0x0) [ 1906.776531][ T3378] usb 1-1: new high-speed USB device number 85 using dummy_hcd 19:47:30 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000), 0x4) [ 1906.942096][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! 19:47:31 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000), 0x4) 19:47:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000040140001200100001006970366772657461700000002c00020014000700fc000000000000002e3787d4000000011400060000000100"/72], 0x60}}, 0x0) [ 1907.022278][ T831] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1907.033239][ T3378] usb 1-1: Using ep0 maxpacket: 16 19:47:31 executing program 3: r0 = socket(0x0, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r4, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) shutdown(r4, 0x0) ppoll(&(0x7f0000000200)=[{r4}, {r0}, {}], 0x3, &(0x7f00000000c0), 0x0, 0x0) [ 1907.162195][ T3378] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1907.172630][ T3378] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1907.182043][ T3378] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1907.261943][ T831] usb 5-1: Using ep0 maxpacket: 16 [ 1907.272108][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1907.382292][ T831] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 1907.391844][ T831] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1907.403577][ T831] usb 5-1: config 0 has no interface number 0 [ 1907.410144][ T831] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 1907.413965][ T3378] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1907.423563][ T831] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 [ 1907.423663][ T831] usb 5-1: config 0 interface 101 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1907.434113][ T3378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.448301][ T831] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=a5.c1 [ 1907.464134][ T3378] usb 1-1: Product: syz [ 1907.472913][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.474032][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1907.475350][ T831] usb 5-1: config 0 descriptor?? [ 1907.485065][ T3378] usb 1-1: Manufacturer: syz [ 1907.485100][ T3378] usb 1-1: SerialNumber: syz [ 1907.535096][ T3378] cdc_ncm 1-1:1.0: skipping garbage [ 1907.540506][ T3378] cdc_ncm 1-1:1.0: bind() failure [ 1907.569892][ T831] yurex 5-1:0.101: USB YUREX device now attached to Yurex #0 [ 1907.736924][ T3378] usb 1-1: USB disconnect, device number 85 [ 1907.767990][T24667] usb 5-1: USB disconnect, device number 74 [ 1907.780681][T24667] yurex 5-1:0.101: USB YUREX #0 now disconnected [ 1908.502081][ T831] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1908.741826][ T831] usb 1-1: Using ep0 maxpacket: 16 [ 1908.751973][T13223] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1908.862095][ T831] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1908.875665][ T831] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1908.885784][ T831] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1909.022030][T13223] usb 5-1: Using ep0 maxpacket: 16 [ 1909.062564][ T831] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1909.072015][ T831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.081107][ T831] usb 1-1: Product: syz [ 1909.085540][ T831] usb 1-1: Manufacturer: syz [ 1909.090345][ T831] usb 1-1: SerialNumber: syz [ 1909.133991][ T831] cdc_ncm 1-1:1.0: skipping garbage [ 1909.139298][ T831] cdc_ncm 1-1:1.0: bind() failure [ 1909.149729][T13223] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 1909.158850][T13223] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1909.170067][T13223] usb 5-1: config 0 has no interface number 0 [ 1909.176833][T13223] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 1909.190326][T13223] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x8C has invalid maxpacket 1792, setting to 1024 [ 1909.202321][T13223] usb 5-1: config 0 interface 101 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1909.215702][T13223] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=a5.c1 [ 1909.225651][T13223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.235773][T13223] usb 5-1: config 0 descriptor?? [ 1909.278345][T13223] yurex 5-1:0.101: USB YUREX device now attached to Yurex #0 [ 1909.334282][T24667] usb 1-1: USB disconnect, device number 86 19:47:33 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000102505a1a44000010203010902680002010000000904000001020d0000052406000105248000000d240f0100000000000000000006391a00fbff0b241b000000000000000000090581030000000000090401d2a6020d0f00008202000b030000000905030200"/127], 0x0) 19:47:33 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000001340)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_settings={0x0, 0x0, @sync=0x0}}) 19:47:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000040140001200100001006970366772657461700000002c00020014000700fc000000000000002e3787d4000000011400060000000100"/72], 0x60}}, 0x0) [ 1909.476108][ T3378] usb 5-1: USB disconnect, device number 75 [ 1909.485969][ T3378] yurex 5-1:0.101: USB YUREX #0 now disconnected [ 1909.582087][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1909.672106][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1909.851931][T24667] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1910.092083][T24667] usb 1-1: Using ep0 maxpacket: 16 [ 1910.212033][T24667] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1910.223249][T24667] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1910.233163][T24667] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1910.402060][T24667] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1910.412714][T24667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.422062][T24667] usb 1-1: Product: syz [ 1910.426559][T24667] usb 1-1: Manufacturer: syz [ 1910.431447][T24667] usb 1-1: SerialNumber: syz [ 1910.473401][T24667] cdc_ncm 1-1:1.0: skipping garbage [ 1910.478743][T24667] cdc_ncm 1-1:1.0: bind() failure [ 1910.681816][T24667] usb 1-1: USB disconnect, device number 87 19:47:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x40000000000000d0, 0x0, 0x0) 19:47:38 executing program 3: r0 = socket(0x0, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r4, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) shutdown(r4, 0x0) ppoll(&(0x7f0000000200)=[{r4}, {r0}, {}], 0x3, &(0x7f00000000c0), 0x0, 0x0) 19:47:38 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0x9, @raw_data="1fcb46d02ab6c63c4e4d31367b3a75537c49b43893fc974900400000463f0437f7ffd8500d384ced6347be0711b5c9cc1bf51d241901c2c02cf411338e817d388054685cbb344a3e0244c4ef0915c7c51d07d272610817ba58559342ce7918de9a85638015aef9a5e3cd6a7c9367289b69f9d462ebe0785411a26cfb487d7bc2a5456cb92cfdad5d3c088a2861de26cdb810b47f7095d5b1a0cf189b5b2fc861f8104c4c07882c2e8345bea52167e2d4f9e707d8df10dfbc8b3f2de6d19f8cec666e98588ed484ee"}) 19:47:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000040140001200100001006970366772657461700000002c00020014000700fc000000000000002e3787d4000000011400060000000100"/72], 0x60}}, 0x0) 19:47:38 executing program 4: unshare(0x20600) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)=ANY=[]) 19:47:38 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000102505a1a44000010203010902680002010000000904000001020d0000052406000105248000000d240f0100000000000000000006391a00fbff0b241b000000000000000000090581030000000000090401d2a6020d0f00008202000b030000000905030200"/127], 0x0) 19:47:39 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x1, @pix_mp={0x0, 0x0, 0x47524247}}) [ 1914.931990][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! 19:47:39 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r3 = creat(0x0, 0x0) fsetxattr$security_smack_transmute(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = getpid() ptrace$getregset(0x4205, r6, 0x2, &(0x7f0000000000)={0x0, 0x10}) sched_setscheduler(0x0, 0x5, &(0x7f00000002c0)) r7 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr="2b0775416dc1f2d7bdc477a3fed7c0bd"}}, 0x9}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r5, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x0, 0x7, @rand_addr="2b0775416dc1f2d7bdc477a3fed7c0bd"}}}, 0x90) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 19:47:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000000280)=0xff, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 19:47:39 executing program 1: r0 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000080)}], 0x3}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', @ifru_flags=0x2}) [ 1915.163755][T13223] usb 1-1: new high-speed USB device number 88 using dummy_hcd 19:47:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x6) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 19:47:39 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x31}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x360}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1915.424636][T13223] usb 1-1: Using ep0 maxpacket: 16 [ 1915.452707][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1915.564904][T13223] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.576919][T13223] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1915.591182][T13223] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1915.769145][T13223] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1915.790117][T13223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.803443][T13223] usb 1-1: Product: syz [ 1915.811430][T13223] usb 1-1: Manufacturer: syz [ 1915.818429][T13223] usb 1-1: SerialNumber: syz [ 1915.864094][T13223] cdc_ncm 1-1:1.0: skipping garbage [ 1915.873244][T13223] cdc_ncm 1-1:1.0: bind() failure [ 1916.071267][T24667] usb 1-1: USB disconnect, device number 88 19:47:45 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x208422, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 19:47:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x6) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 19:47:45 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close(r0) 19:47:45 executing program 3: r0 = socket(0x0, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r4, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) shutdown(r4, 0x0) ppoll(&(0x7f0000000200)=[{r4}, {r0}, {}], 0x3, &(0x7f00000000c0), 0x0, 0x0) 19:47:45 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000102505a1a44000010203010902680002010000000904000001020d0000052406000105248000000d240f0100000000000000000006391a00fbff0b241b000000000000000000090581030000000000090401d2a6020d0f00008202000b030000000905030200"/127], 0x0) 19:47:45 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x31}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x360}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:47:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x6) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 19:47:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x6) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 19:47:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x5d, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x161f, 0x0, &(0x7f0000004dc0)={0x77359400}) shutdown(r0, 0x0) 19:47:45 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000da4bc910968e7d7444a90000000309021200011000000009049b0000ef0301005b66753093ff2fa747691d0bcce19d13d10db7fc6765883d44580babbb6e79e61d7375ffcdae2e7d9bd81720ceae4a8f85990c2a235df5b78720f06a67785f0a591847674feeea9919e670b17f58d18ac089991ef872f4f7ce040c4cbebf6cafb5209d97f081e1fb86c1f24a83001dcae9a3ad5cc8cfa61d207c6627208e67c237c03adc8c657afea13255c83a64347179dc9a0d81f4168cc8a63c7ba24208000000202004af6eec9d5d3320f24fe3524e7c1ad61fba247f4d11d9c52d72a4cd01c06a331e996ccd90b38d3446faa5f91ebb6e91ba6da732c65e92475483bf56edc872ed2e3de23988782ce048267edf5393053500000000000000cc25907c285b500b4b146e41f5e460fba98e2e5a49ee1f7c99c5823c16b4a4d019427d51715ca646355ff38a3e6547f51ce0f968cf9246051d48d19c261354ab932b6ff272780baf86bfb8f2bae19c0f438fe68717689a97122c27c1"], 0x0) [ 1921.482804][T24667] usb 1-1: new high-speed USB device number 89 using dummy_hcd 19:47:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x5d, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x161f, 0x0, &(0x7f0000004dc0)={0x77359400}) shutdown(r0, 0x0) [ 1921.731856][T24667] usb 1-1: Using ep0 maxpacket: 16 [ 1921.791930][ T3378] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1921.852228][T24667] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1921.862508][T24667] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1921.871464][T24667] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 19:47:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x5d, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x161f, 0x0, &(0x7f0000004dc0)={0x77359400}) shutdown(r0, 0x0) [ 1922.042463][ T3378] usb 2-1: Using ep0 maxpacket: 16 [ 1922.072437][T24667] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1922.081553][T24667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.090080][T24667] usb 1-1: Product: syz [ 1922.094385][T24667] usb 1-1: Manufacturer: syz [ 1922.099037][T24667] usb 1-1: SerialNumber: syz [ 1922.144120][T24667] cdc_ncm 1-1:1.0: skipping garbage [ 1922.149489][T24667] cdc_ncm 1-1:1.0: bind() failure [ 1922.184220][ T3378] usb 2-1: config 16 has an invalid interface number: 155 but max is 0 [ 1922.192777][ T3378] usb 2-1: config 16 has no interface number 0 [ 1922.284314][ T3378] usb 2-1: config 16 has an invalid interface number: 155 but max is 0 [ 1922.293078][ T3378] usb 2-1: config 16 has no interface number 0 [ 1922.350256][T13223] usb 1-1: USB disconnect, device number 89 [ 1922.382611][ T3378] usb 2-1: config 16 has an invalid interface number: 155 but max is 0 [ 1922.391191][ T3378] usb 2-1: config 16 has no interface number 0 [ 1922.397816][ T3378] usb 2-1: New USB device found, idVendor=8e96, idProduct=747d, bcdDevice=a9.44 [ 1922.406993][ T3378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.662691][ T3378] wusb-cbaf 2-1:16.155: Cannot get available association types: -71 [ 1922.670758][ T3378] wusb-cbaf 2-1:16.155: This device is not WUSB-CBAF compliant and is not supported yet. [ 1922.680940][ T3378] wusb-cbaf: probe of 2-1:16.155 failed with error -71 [ 1922.690426][ T3378] usb 2-1: USB disconnect, device number 53 [ 1923.421893][T13223] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1923.661812][T13223] usb 2-1: Using ep0 maxpacket: 16 [ 1923.782058][T13223] usb 2-1: config 16 has an invalid interface number: 155 but max is 0 [ 1923.790479][T13223] usb 2-1: config 16 has no interface number 0 [ 1923.871992][T13223] usb 2-1: config 16 has an invalid interface number: 155 but max is 0 [ 1923.880394][T13223] usb 2-1: config 16 has no interface number 0 [ 1923.962040][T13223] usb 2-1: config 16 has an invalid interface number: 155 but max is 0 [ 1923.970391][T13223] usb 2-1: config 16 has no interface number 0 [ 1923.976889][T13223] usb 2-1: New USB device found, idVendor=8e96, idProduct=747d, bcdDevice=a9.44 [ 1923.986254][T13223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.252187][T13223] wusb-cbaf 2-1:16.155: Cannot get available association types: -71 [ 1924.260380][T13223] wusb-cbaf 2-1:16.155: This device is not WUSB-CBAF compliant and is not supported yet. [ 1924.270689][T13223] wusb-cbaf: probe of 2-1:16.155 failed with error -71 [ 1924.279896][T13223] usb 2-1: USB disconnect, device number 54 19:47:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00002900000029000cafa260297958b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 19:47:49 executing program 3: r0 = socket(0x0, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r4, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0}, 0x10) shutdown(r4, 0x0) ppoll(&(0x7f0000000200)=[{r4}, {r0}, {}], 0x3, &(0x7f00000000c0), 0x0, 0x0) 19:47:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x5d, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x161f, 0x0, &(0x7f0000004dc0)={0x77359400}) shutdown(r0, 0x0) 19:47:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8030ae7c, &(0x7f0000000300)={0x0, 0x0, @ioapic}) 19:47:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x31}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x360}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:47:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:47:49 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x2, &(0x7f0000cbc000)=""/244, &(0x7f0000000000)=0xf4) 19:47:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@ipv6_deladdr={0x34, 0x15, 0x9be0f5336b811f95, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8}]}, 0x34}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000080), 0x492492492492751, 0x0) 19:47:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f0000000100)={r4}, 0x8) 19:47:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@ipv6_deladdr={0x34, 0x15, 0x9be0f5336b811f95, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8}]}, 0x34}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000080), 0x492492492492751, 0x0) 19:47:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@ipv6_deladdr={0x34, 0x15, 0x9be0f5336b811f95, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8}]}, 0x34}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000080), 0x492492492492751, 0x0) 19:47:50 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.mems\x00', 0x2, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) [ 1929.881932][ T3378] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1930.121972][ T3378] usb 3-1: Using ep0 maxpacket: 8 [ 1930.242125][ T3378] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1930.253884][ T3378] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1930.266974][ T3378] usb 3-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 1930.276318][ T3378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.285943][ T3378] usb 3-1: config 0 descriptor?? [ 1933.052484][ T3378] usb 3-1: string descriptor 0 read error: -71 [ 1933.072125][ T3378] uclogic 0003:5543:3031.003E: failed retrieving string descriptor #200: -71 [ 1933.081149][ T3378] uclogic 0003:5543:3031.003E: failed retrieving pen parameters: -71 [ 1933.089549][ T3378] uclogic 0003:5543:3031.003E: failed probing pen v2 parameters: -71 [ 1933.097896][ T3378] uclogic 0003:5543:3031.003E: failed probing parameters: -71 [ 1933.105763][ T3378] uclogic: probe of 0003:5543:3031.003E failed with error -71 [ 1933.116715][ T3378] usb 3-1: USB disconnect, device number 35 [ 1933.791901][ T3378] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1934.041903][ T3378] usb 3-1: Using ep0 maxpacket: 8 [ 1934.162043][ T3378] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1934.173321][ T3378] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1934.186387][ T3378] usb 3-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 1934.195649][ T3378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.205355][ T3378] usb 3-1: config 0 descriptor?? 19:47:58 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2) write$FUSE_IOCTL(r0, &(0x7f00000000c0)={0x20, 0x0, 0x2}, 0x20) 19:47:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@ipv6_deladdr={0x34, 0x15, 0x9be0f5336b811f95, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8}]}, 0x34}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000080), 0x492492492492751, 0x0) 19:47:58 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 19:47:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000100)=0x0) close(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 19:47:58 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.mems\x00', 0x2, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) 19:47:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x31}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x360}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1934.557069][ T3378] usb 3-1: string descriptor 0 read error: -71 [ 1934.582293][ T3378] uclogic 0003:5543:3031.003F: failed retrieving string descriptor #200: -71 [ 1934.591285][ T3378] uclogic 0003:5543:3031.003F: failed retrieving pen parameters: -71 [ 1934.599766][ T3378] uclogic 0003:5543:3031.003F: failed probing pen v2 parameters: -71 [ 1934.608243][ T3378] uclogic 0003:5543:3031.003F: failed probing parameters: -71 [ 1934.617292][ T3378] uclogic: probe of 0003:5543:3031.003F failed with error -71 19:47:58 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.mems\x00', 0x2, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) 19:47:58 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1fd, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000200), 0x0}, 0x18) 19:47:58 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x30b) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x0, 0x12, r2, 0x0) [ 1934.804562][ T3378] usb 3-1: USB disconnect, device number 36 19:47:58 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.mems\x00', 0x2, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) 19:47:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1fd, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000200), 0x0}, 0x18) [ 1934.972477][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1934.978816][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1934.985589][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1934.992088][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1934.998672][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1935.005038][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:47:59 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x30b) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x0, 0x12, r2, 0x0) 19:48:02 executing program 2: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000001c0)='B', 0x1, 0x0, 0x0, 0x0) read$rfkill(r1, &(0x7f0000000000), 0x8) 19:48:02 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1fd, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000200), 0x0}, 0x18) 19:48:02 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x30b) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x0, 0x12, r2, 0x0) 19:48:02 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)={0x4, 0x0, [{0x0, 0xd6, &(0x7f0000000200)=""/214}, {0x0, 0x66, &(0x7f0000000000)=""/102}, {0x0, 0x98, &(0x7f0000000300)=""/152}, {0x0, 0xc, &(0x7f0000000400)=""/12}]}) 19:48:02 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 19:48:02 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) 19:48:03 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1fd, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000200), 0x0}, 0x18) 19:48:03 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000180)='fdinfo/3\x00') r1 = socket(0x800000000010, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x40001000000000ea) 19:48:03 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x30b) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x0, 0x12, r2, 0x0) 19:48:03 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000001780)=ANY=[@ANYBLOB="020d0000100000000000000000000015030006000700000002000000e0000001000000f5000000000800120002000200000000000000000030006ce001010000ff3f567b000000200200000000152c000000000000000001020014bb00000000000000000000000003000500000000100200ed00e0000001000000ba000000008756cfe7f86b9bcb27e99152f06adacc9022926a88ea7d6924995f88847b10924000000000000000046969ee5e3b8fd66bce242db3c8b2799f24b48ecd22d38e7aaaa3f287ff13a9454970ebe0cacaa1e0746825eb865098010058f05ac854ddacd95eb6ea1e9c845669fc1e1bf5cc82d91a5a71381f514d7af3e1fcee84e08a1fa0aaec90085fc0991411c8af534117995d7161ed77947e98aa1c91a22965a14f43b07f140f3b0cab86c63250ed8dd848be920814a09d0853a543cfe555c582ea0e584ad332c85d4edd0084773865d79c13e8c5a72874b82bcae7ff075e8c9747cdf0eac8ae4779acbd0167de4c0b5d964aeb2cda78cb28cdfa8129faa572031b2fd03546a2a4fb8f5c8f766a32b1b8900b469d80a878dc5b82a3caebcde6b79557c0f437543dbc192ff7842416342bf9d6469745a4e05fa04cad982994df7f627d20004b253bd0c4c0fac0938d4c2a0239e83942"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) [ 1939.132394][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1939.138820][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1939.145568][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1939.151984][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:48:03 executing program 4: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) 19:48:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'!!\xc9', './file0'}, 0xfdef) 19:48:09 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newtclass={0x2c, 0x28, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 19:48:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IGNORE_DF={0x8, 0x13, 0x1}]]}}}]}, 0x38}}, 0x0) 19:48:09 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100002552eb104c05c3061b94000000010902240001000000000904a9b69460978d1f98aa95d7b9000227c5560009050ee400000000000905817e9b011200000000009d654fa8f7f58f6fc69da3c96a8e5fff331f39540d0991501bc958480d12622a44ab201f117039da16ad5b222a14"], 0x0) 19:48:09 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) read$FUSE(r1, 0x0, 0x79f1) syz_open_dev$evdev(&(0x7f0000000300)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x24020400) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000380)={0x7f}, &(0x7f0000000400)={0x0, 0x1c9c380}, 0x0) 19:48:09 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 19:48:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_ENCAP_TYPE={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x3c}}, 0x0) [ 1945.203646][T31500] netlink: 'syz-executor.5': attribute type 14 has an invalid length. 19:48:09 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0xffffffffffffffff}, 0x200000}) 19:48:09 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 19:48:09 executing program 4: r0 = socket(0x2000000015, 0x80005, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [], @dev}}, 0x1c) [ 1945.372260][ C1] net_ratelimit: 2 callbacks suppressed [ 1945.372281][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1945.384312][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1945.390834][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1945.397123][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1945.403853][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1945.410051][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:48:09 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) [ 1945.512159][T24667] usb 2-1: new high-speed USB device number 55 using dummy_hcd 19:48:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000017c0)="6653a8990785363940aed12f0000000000000022f1f169a4000000000000009f1f8175442cf91022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf9d22168078aba9d7ae45b0051a1221af2772a9567bb82194", 0x57}], 0x4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:48:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xaf) 19:48:09 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) [ 1945.753209][T24667] usb 2-1: Using ep0 maxpacket: 16 [ 1945.872392][T24667] usb 2-1: config 0 has an invalid interface number: 169 but max is 0 [ 1945.880836][T24667] usb 2-1: config 0 has an invalid descriptor of length 152, skipping remainder of the config [ 1945.891516][T24667] usb 2-1: config 0 has no interface number 0 [ 1945.897748][T24667] usb 2-1: too many endpoints for config 0 interface 169 altsetting 182: 148, using maximum allowed: 30 [ 1945.909091][T24667] usb 2-1: config 0 interface 169 altsetting 182 has 0 endpoint descriptors, different from the interface descriptor's value: 148 [ 1945.922894][T24667] usb 2-1: config 0 interface 169 has no altsetting 0 [ 1945.929832][T24667] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=94.1b [ 1945.939149][T24667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1945.948707][T24667] usb 2-1: config 0 descriptor?? [ 1946.222209][T24667] usb 2-1: string descriptor 0 read error: -71 [ 1946.229234][T24667] port100 2-1:0.169: NFC: Could not find bulk-in or bulk-out endpoint [ 1946.244819][T24667] usb 2-1: USB disconnect, device number 55 [ 1946.972484][T24667] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1947.212007][T24667] usb 2-1: Using ep0 maxpacket: 16 [ 1947.332268][T24667] usb 2-1: config 0 has an invalid interface number: 169 but max is 0 [ 1947.340643][T24667] usb 2-1: config 0 has an invalid descriptor of length 152, skipping remainder of the config [ 1947.351373][T24667] usb 2-1: config 0 has no interface number 0 [ 1947.357628][T24667] usb 2-1: too many endpoints for config 0 interface 169 altsetting 182: 148, using maximum allowed: 30 [ 1947.368981][T24667] usb 2-1: config 0 interface 169 altsetting 182 has 0 endpoint descriptors, different from the interface descriptor's value: 148 [ 1947.384376][T24667] usb 2-1: config 0 interface 169 has no altsetting 0 [ 1947.391352][T24667] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=94.1b [ 1947.400753][T24667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1947.410276][T24667] usb 2-1: config 0 descriptor?? [ 1947.682247][T24667] usb 2-1: string descriptor 0 read error: -71 [ 1947.689251][T24667] port100 2-1:0.169: NFC: Could not find bulk-in or bulk-out endpoint [ 1947.704522][T24667] usb 2-1: USB disconnect, device number 56 19:48:15 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 19:48:15 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) 19:48:15 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 19:48:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'\x10%\xd7\x1d8(\xf7\x01\x17\x00.\x00', @ifru_mtu=0x6}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) 19:48:15 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x52, 0x12, 0xb8, 0x8, 0xe9c, 0x0, 0xc70e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x92, 0x0, 0x1, 0xf4, 0xf4, 0x81, 0x0, [], [{{0x9, 0x5, 0x8c}}]}}]}}]}}, 0x0) 19:48:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000002c0)={0x0, 0x0, 'client1\x00', 0x0, "302a757be77ef013", "a2395feb8a9b65d659a8a352dc2d7b4befce9584f854b7ab9ab8eecc7dc69015"}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1951.452621][T31544] netlink: 'syz-executor.2': attribute type 19 has an invalid length. 19:48:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="480000001400190d09004beafd0d8c560a84ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00009052946f02", 0x48}], 0x1) 19:48:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x200000000001) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x20000020000407, 0x0) dup2(r0, r3) [ 1951.612146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1951.618360][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1951.624784][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1951.630978][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1951.637464][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1951.643675][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:48:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)={0x1, 0x0, [{0x0, 0x2}]}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x0, 0x2}) [ 1951.802306][T24667] usb 6-1: new high-speed USB device number 76 using dummy_hcd 19:48:15 executing program 4: futex(0xfffffffffffffffe, 0x84, 0x0, 0x0, 0x0, 0x0) 19:48:15 executing program 1: unshare(0x4000400) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 19:48:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/254, 0xfe}, {&(0x7f00000012c0)=""/210, 0xd2}], 0x3) [ 1952.042562][T24667] usb 6-1: Using ep0 maxpacket: 8 19:48:16 executing program 1: r0 = socket$inet6(0xa, 0x200000000001, 0x0) sendto$inet6(r0, 0x0, 0xffffffffffffffbb, 0xfffffefffffffdfe, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = memfd_create(&(0x7f0000000280)='/selinux\x00', 0x0) write(r1, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000000)) [ 1952.164724][T24667] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1952.173518][T24667] usb 6-1: config 0 has no interface number 0 [ 1952.179751][T24667] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=c7.0e [ 1952.189170][T24667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.224515][T24667] usb 6-1: config 0 descriptor?? [ 1952.268180][T24667] streamzap 6-1:0.146: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1952.467770][T24667] usb 6-1: USB disconnect, device number 76 [ 1953.241881][T24667] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1953.481919][T24667] usb 6-1: Using ep0 maxpacket: 8 [ 1953.602131][T24667] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1953.610374][T24667] usb 6-1: config 0 has no interface number 0 [ 1953.616787][T24667] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=c7.0e [ 1953.626021][T24667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.635840][T24667] usb 6-1: config 0 descriptor?? [ 1953.686787][T24667] streamzap 6-1:0.146: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1953.886645][T24667] usb 6-1: USB disconnect, device number 77 19:48:20 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0x7, 0x4) sendmsg(r3, &(0x7f0000001600)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x1f4}, 0x80, 0x0}, 0x0) 19:48:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240), 0x2305e2b7) poll(&(0x7f0000000100)=[{r1}, {}], 0x2, 0x0) 19:48:20 executing program 1: r0 = socket$inet6(0xa, 0x200000000001, 0x0) sendto$inet6(r0, 0x0, 0xffffffffffffffbb, 0xfffffefffffffdfe, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = memfd_create(&(0x7f0000000280)='/selinux\x00', 0x0) write(r1, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000000)) 19:48:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/254, 0xfe}, {&(0x7f00000012c0)=""/210, 0xd2}], 0x3) 19:48:20 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001480)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x1, 0x0, "51bd6247e9de77312051174ae4736b288d7bcbf8b2198440e2944850054c6fc7c4fc94bb8eaf1068d65036397d0bf1cd00c1ad175e3210004d06d5539901d84c29136aed0e238ca0757aa414ef989c43"}, 0xd8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @empty, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:48:20 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x52, 0x12, 0xb8, 0x8, 0xe9c, 0x0, 0xc70e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x92, 0x0, 0x1, 0xf4, 0xf4, 0x81, 0x0, [], [{{0x9, 0x5, 0x8c}}]}}]}}]}}, 0x0) 19:48:20 executing program 1: r0 = socket$inet6(0xa, 0x200000000001, 0x0) sendto$inet6(r0, 0x0, 0xffffffffffffffbb, 0xfffffefffffffdfe, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = memfd_create(&(0x7f0000000280)='/selinux\x00', 0x0) write(r1, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000000)) 19:48:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x22801) io_setup(0xa, &(0x7f0000000000)=0x0) dup3(r1, r0, 0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) 19:48:20 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/udmabuf\x00', 0x2) pwritev(r0, 0x0, 0x0, 0x0) 19:48:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/254, 0xfe}, {&(0x7f00000012c0)=""/210, 0xd2}], 0x3) 19:48:20 executing program 1: r0 = socket$inet6(0xa, 0x200000000001, 0x0) sendto$inet6(r0, 0x0, 0xffffffffffffffbb, 0xfffffefffffffdfe, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = memfd_create(&(0x7f0000000280)='/selinux\x00', 0x0) write(r1, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000000)) 19:48:20 executing program 0: r0 = epoll_create1(0x0) r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x121002) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040), 0xa) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000080), 0x0, 0x0) [ 1956.842671][T24667] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1957.082221][T24667] usb 6-1: Using ep0 maxpacket: 8 [ 1957.202059][T24667] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1957.210503][T24667] usb 6-1: config 0 has no interface number 0 [ 1957.217003][T24667] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=c7.0e [ 1957.227278][T24667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.237105][T24667] usb 6-1: config 0 descriptor?? [ 1957.285934][T24667] streamzap 6-1:0.146: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1957.488806][T24667] usb 6-1: USB disconnect, device number 78 19:48:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000280)='hugetlb.2MB.limit_in_bytes\x00\nZ\xb4$\x81\xdd\xc3q\xd3\xa17CH-\xe2\xa1H\x9d\xdb\xafY\xbfx07\\;u\xc0\xfa\v\xc1\xad\x8d\x92_\xd0\xa5\x0f\x01;\xfb\x9b\x94\x94:\xb72F\xe7\xcd\xa3\x1c\xce\x9b=\x1b\x81W\xa7\xe98\x1eF]OqUDt\x92\xd4z+\xdcl\x12\x14\xc6\x12?\xc3\x1fR\xe6\xb1\x85n\xf0\x90v\x0f+><\xe6_\x95\x80\xe4\xc2\x0fX\xd8 \xe3Z\x91\xbd.\xc5\x8bn(\x93\x9b$\xd6\x03\x94\x04\x9c\xd7\x1e\xc5\x9d\x90\xc8\xe6c\x18\x00\x00\x00\x00\x00\x00\x00S\x01\xdaUK\xc5\x95\xdd\x89a\xe6\xc3J\xc4\xfd\x9c}_\t\x019\xc3\xf5\xfea\xb3\xa9+\xc7\x1a\x00\\\xd69\v\b-CD\xe5\xb6\xaaW\xaf\xf4\x86\x95\x11\x9d,\x04P=\x00Px\x98F\xe3\xeb\xe5\x92\xcd\x0e4\xbca\xe1\xc7>', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x4d}]}, 0x2) 19:48:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000100)=@ethtool_dump={0x0, 0x0, 0x0, 0x9, "fe8a09029acabaaf3c"}}) 19:48:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/254, 0xfe}, {&(0x7f00000012c0)=""/210, 0xd2}], 0x3) 19:48:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)={0x18, 0x23, 0x829, 0x0, 0x0, {0x4}, [@typed={0x4, 0x12, @binary}]}, 0x18}}, 0x0) 19:48:24 executing program 0: mkdir(&(0x7f0000000680)='./control\x00', 0x0) r0 = open(&(0x7f0000000600)='./control\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mknodat(r0, &(0x7f0000000000)='./control\x00', 0x0, 0x0) faccessat(r0, &(0x7f000003fff6)='./control\x00', 0x0, 0x0) 19:48:24 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x52, 0x12, 0xb8, 0x8, 0xe9c, 0x0, 0xc70e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x92, 0x0, 0x1, 0xf4, 0xf4, 0x81, 0x0, [], [{{0x9, 0x5, 0x8c}}]}}]}}]}}, 0x0) 19:48:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @loopback, 0x0, 0x2, [@remote, @empty]}, 0x18) dup3(r0, r2, 0x0) 19:48:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x40044591) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{}, {}], 0xac, 0x0) 19:48:24 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 19:48:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) 19:48:25 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x84580, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) [ 1961.061875][T24667] usb 6-1: new high-speed USB device number 79 using dummy_hcd 19:48:25 executing program 3: r0 = socket(0x2, 0x10000001, 0x84) connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282}, 0x10) r1 = msgget$private(0x0, 0x12) msgsnd(r1, &(0x7f0000000240)=ANY=[], 0x0, 0x801) msgsnd(r1, &(0x7f0000000500)=ANY=[], 0x0, 0x800) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f00000000c0)=[{}, {r2}], 0x2, 0xfa) msgsnd(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0400000000000000470008adaed82f3e254dbf8da59c017db82a5d519fcf65c5d3de72e45fedf1918fe884b5063215474de13bb2dd9ef832f71e1c951f9cbb96c021a3a8ab862453c3d7458e30a31d2b2fd78e129ffd9339a3898aadff0a81525398b6aefc7c28d544174ff77aca9f61c40cd9e31357769b52d84fcf6d4503d99216973d0ebee1de0789e3b0b1c5299497722254ebf427b951a94a023589ed05b669fd1e05600648a3dbcd2ac56055"], 0x1, 0x800) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x79, 0x3, 0x1000) msgsnd(0x0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x800) [ 1961.302167][T24667] usb 6-1: Using ep0 maxpacket: 8 [ 1961.421997][T24667] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1961.430491][T24667] usb 6-1: config 0 has no interface number 0 [ 1961.436946][T24667] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=c7.0e [ 1961.446290][T24667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.456650][T24667] usb 6-1: config 0 descriptor?? [ 1961.506769][T24667] streamzap 6-1:0.146: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1961.712308][T24667] usb 6-1: USB disconnect, device number 79 19:48:33 executing program 3: r0 = socket(0x2, 0x10000001, 0x84) connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282}, 0x10) r1 = msgget$private(0x0, 0x12) msgsnd(r1, &(0x7f0000000240)=ANY=[], 0x0, 0x801) msgsnd(r1, &(0x7f0000000500)=ANY=[], 0x0, 0x800) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f00000000c0)=[{}, {r2}], 0x2, 0xfa) msgsnd(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0400000000000000470008adaed82f3e254dbf8da59c017db82a5d519fcf65c5d3de72e45fedf1918fe884b5063215474de13bb2dd9ef832f71e1c951f9cbb96c021a3a8ab862453c3d7458e30a31d2b2fd78e129ffd9339a3898aadff0a81525398b6aefc7c28d544174ff77aca9f61c40cd9e31357769b52d84fcf6d4503d99216973d0ebee1de0789e3b0b1c5299497722254ebf427b951a94a023589ed05b669fd1e05600648a3dbcd2ac56055"], 0x1, 0x800) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x79, 0x3, 0x1000) msgsnd(0x0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="0300000000000000529f2ad4010892d82c2a11e1ce06b978236a40c08c610ffa27d26fb58614ccf2bd29f697a40e894e602239c8d9614ff7d85247aab21945c907cb6e068c037e8e9d6a3cd9186c93e7e131b2d6048cc3f145c5982d32860cc04088e75a23dd03105a74e0970054234172999199ced88bc955b6347ec702e4e7ce4cf9a3b9de927a8ea0b6a96f567d0f4b04eaa040d73d51bd7aeb2cdf832d49566453b79d29ee2c93d21f838bc680560ab8c2446ffa891c3b8b4a6fdfe2f93309dececf17d3da549c0a2a7a9732edf0c8e30d79f08844f83abfc33634f34198759d74ec5b9d5dccbb47a23466058a52e48f2536e37d5a90607bf85dc773693e23ec39478e627dbe860c967d0668730eae63d3f5204ed3a0a3b8c43bae47d37ea69396d231ff6841d9f6a8806258cb6ad30cb3374248a12c933b133c950d8a7af8956035d785def25322a47b6f1ed424e0f03cd2fb4198384e8e312c8139d4846aef3f5ae1bb501683104b5de89064fd7535ab00fdfff325d496bd0f15ce7918817101146443ec2cae48dcc47c0e1e333f9a2a15dda5701aab789fa69b3d7f48dcbf0093ffc85f96e2d6318022bd7e799037a3fd2107bd977d6a345466240e1a0d106f942bcb19ef5d9c3d9aabc0a1873b20652e6ec7ef5c3c298712dae543b7a901828fd8e7e97ea9fe727e84b46e89b06ceb7191274582c55c06cec6a11544f6f311e6d9b971a1e88f92a83d63a10a69c538697e04b912ce7d5465f34b0cb6862d1cbfeb59301f8d4551b4cd7c68821269bcce5e645667d909bd21458f3a3f2a68e7ab43b461bf32f563239bf60e9dd1e730e5ea03281a9726049692fb7fe596b57d5ed6e116ead778623234141101ae7cd00d619b347381c3d1d7bff88a8cd0e5ea3115c9f1b04ecb2e621e9e1cda3aba39da75b33bc57ef6f38eddc1d826ffaea0b7185c340d85e852b8132f25607a8f950520c3baa45b7a8e63072f7dbe017792c6db2417170c5d0135a88a6681b49fa93e6db7946ea6921a049c8fa86fd335c31f0d00427dfdf3d3f66957f48ebc93a1c3671538a7f8942b5102b1fec5ed0323889a8053d855e4df929547f81ffcb83881e062d5ac2c32ff728b3696aae93795503c5858551df8f8eb98e13bd49a93a70c482f516ade507c86a80e15de208656186bbc3112af7b3e2326cfe11ece509eca289d44c23b2b522a34328a0b2ebe4868c1af262ea40bff05092e4869ab9eaca981baa39bb410790893b894454e020dcadd0e692944332f8a625d99841d2d7ab7f585eb6208c370a91814709bf0106053a68fe8237162adb1e6b8163b819bf8b194829bb614d4f2e7b38f50bae977c070da3db5a6d877f36b2df3f4ad788fc6ce49ecaec96d170321a2e7f2b5b30e825ae342b782569713bbc3e809fe4aa1c47d1bedf69d9a6f33e9a0d14ebc26a18cc7ab1b7e2a154d0e802a8efc910145905817d142893846b7a462052f6c4d644cfa5233486accaa332cbdd1ca4e6604182bb5957fa50bd2d1dc99e5d61c237ff331adfb6851cf003a1798c54a0cf7e73fb13ef66eb64a04c53c14d812e0367783993f2d51cdd48f8d380f9df8c374acc3017a902c7b9398570bbc905b642996f7dcc90f00f550818de28ba5225113ad666332b617274b89c369c98dc5802f60e2db77287a4e86a4ba7e47eafba180db13896e3db6ed7c6e949a577d0f9c6cfafee949e803e9620b21c84a12f5e45b01867d976f7ef8fed9dedf8e59b87e98b8dc2c8cb51ffcdda22c9028c2bd1f6238aa113358ece1c297aab562fef98ba1d54955ad9e584a1b60e3c14664466c07960c8e1c7d8c3f2c058e58dc69a770242e44bee1d01d2516a4d9aaba1be069f8c5636f6939dc9b90078e6d73045aa9b389539b752ac66a557878df8b952cd9a69093a3d2b238dc86c96e949268938993da4e49df4cbd5c11914b6117da59456b6050405fc623e3f8d58e13b1051b56988824662c7993e05624037171c64946a8607c7bf990a3c0ac2c78697f699776e132554b7259a58898de634b58fd279db253cd791da9efb1d1f62a5fc843d538946c5af8b809685bdfe51a324601ffca3f08ae0e63517bbc7ea75a23d514ef034e8545b9ad22d2db9182f60c59454f3d6afbc0a09c35ce346d78923cf17c684d0885aa0dbee53ea4f7fe1846ae13937b2657ea1d479552e89ad54a5a82b73f8321ad6f848288ab8033d97e1e1eabb3941eee9c5bc103730518cc58e82c14ff23207b1bfa8324fdc4a48e513032f01f489f5023c2cf5eca98b8119e1a6c53414857d1a5e1b253ddc7d917cab325ea8064cc1d13940084aec38c7ddeafae112c8d8ed62dfb738b83f5ae473b922bdcbbb0d63d94f738081278b772478365a37444aff92f7db61028690ab82360a930a88de4987d5a10ae6d7d9a7814dbcff13d54ee80285d0655b88caa946bd622cabe65650f00f250c4c5f8b7440fb02a23ca0ecb34582f9c45dd20dfcfba078a3947a61b76d1ce7c17eb60a111b256ee34bd77b8b981645b1b7cb8300ef96d507aeaa603f53fae6ceb7cbb138c996fc3beb0ff75254133054b7eb4f3bc9d956d779b9a84a72b07f70081a95912b80c77d62a4c4cfb1a2810e1ff50a8445c81aaea34615ccb8c4f536f05c05b4f44b42f2b7bc01de8a5d06028a8e5f99cd3e57fb2bf48de645fc25f3e9209cc686fa71dcc5aa49210dbf4651ea9c568652898cb8e7a2452f24596354f2714fc3db4ae9785856e3a29d90a21ff7368f02f52d318917c1bd4439c0230efedae32784db6c83cb93b6833e15da7ce0a7e0ee6d92cb52837a9b53fc087232a39b16238a71cdc3e2057ee8a762c6ce3a51b1cbab58177736a736e47b052bf3f05894c57393a7022af28d870c14327219f833e055d0a5415d26fcb86339e0d4acc4dae5a6ec2b125b27f125eeef8b7d4475ba02dbfdf71c289ef072333a4858008fd5c4ee072aa5d7ae920c961d929c6dc122b4f1e1252c61495470c9cb65ddf156cc83a804dfe12383ce706d94b349214fdbf7395f3c7c2a6a2180805ed66b21043bb43f7559cbe35e1f64ee8e14b0abfc6e34a868d53d06179922e6c9df7d824c192c04d55adcab29b9f6eecc9bb3214cba24e6ee79fb6cd25be5deca968ec972c7a8f49bf2659d9d3ec79244e550db6c6c6fd2b72a148a086587bc8e2e1569196fced95883de1b6c57fe23a3413a720e7f89dcbd2f897eff6958381af347f5b5c8e643d1a24ecb8196c9ec56663e8a80f4270b8e26a18af94c055cbd2f2959f3afb53e02cfb916ac1eff3e339f4c6d776e11931918c6f8b188f12513ebd7ccdfe9fb0dee9033cd054236053d0e962a1e7cc17556aacf1039560f198def015267d24dda50d460f3ecc4ec971f7d2d997467bc1a8d1c8e8b83c3227b44537b14d278958e358b178c11cc75a3b0b38e567040058d964cd3859b9892155dbe1ccb318d89c57fe647d1cad75ad577d7ef728cc06ef41f840e22c0e672cbe4038c1f2701ae7029d131b77eb0e642e4cd111d290c84d75c971e6a1b8384c3c838de816832f35a4493ffced329734702d008a1bf9fc24856117b80608b8c5786f843abb1d24ad4b62587e0529206e8da3aea7e74c8be13856aca1078c5c09a0f5565097da889027811e245418c7a1b272a0fd14ad20d57f9654333a1f00b07b07642d7839af89360dcfacc679a2063ebd216298eab95531565d6daf3f9cd3b2130fefecee3f0651c68d5b19db062135c0009098658281e7f922197e095281687f419e2646a0e9835af67b68cb9a201f6c197e0cee554838551a3a67c940fbfec18b40e2c352e0cb83c148227983eafb7fa2bddede67f7aea9c4781264ba1164b45c9463f107873d3f0a781f14154077f3d34cbeb1e4b0daca5fb9bd90f3145194ffe2558dd4bfa21187a6c79706202d878e4daefaceb6c3f719a075806103d16706244caeba4a7a332bc954a577a48e33a198065e6b9394eb1925a4c3860c17f68f45d461dbd5a05eaf8675f4068158f6020d175dd7b402c8cabeaaad94908393c93294109ab65ebd780af9b9013ae48eae841570d67a5b2fa4bfa35cfd24b5733d7dbe264ff76f564215871cdd613a16fbb8ff2f5ef7e9bcdf3cefda31d2f427559fca94b863ade38b8dda6efd36bb5c4618150860d17a0fc98293f8deeb5edce8e67dac9e33323b92eb8f8b2993cce8242d28afdba84b7774c4dd826b1bc9eb94c83b03bc0d04f5b80245612e2c08368ef4dadeb3b0580528c3b4513bc985afa420744809c8088c4221d685ea2f1f8a7967e655e6ad23704ae06050b95cfc0f544165879625b42875364eeb2db981505e2ef1529dfb42ba1558d8bbd235e5c6f4940821456d30a8069111b227b559e90762d69caf509e1144513ead404205e6de199046937cfd42c4b8f141e104bd841ee52c9035201775757e13b17f79aa69c86aa23a1e22ddb3adaae8c4ca8ac7641b25c94907874d1cf74aa2e4257e579166939287bf867907e03355b77ce44594246a4ceb6a37fa0217c5acda1e783d208abe51c59196ded13701d08a90a9412a2b5fdca7dbd7101b67b52c6ed8d38ea0e4a3a0dbc97b2c2dbe84a407270e370c98e396ab4ad5b43b7bc8360a4f80918f4f715b359f2eb00fc991421d23c6a9ea1681e9f0abca5b2b3936b130e5b86c5ae33bb5db9ecd3220cd7e44cf78a1889b08fc916ddde4c220f8dada3b4d33346cedfc4a29ea9731603b95a5f89061c32105c6794959cb5defaa5c526225b80be945cd6eca93338c135ffc577417e23a385345b26cc4a96b93e6dab054433eca248b560ead4b02cec80dcdb30df6d9526d6fd0e28057aaef87a51fa8e5fca26c3ea8667e74599e7ef06a3bc24e44c68be1ea4700780ec7b87ae7a1c8f4720d107fae150306eca59f2f2840edc6830960ecf959b390e7fdfca7202e7126cca6315d088c99f3a393d6407a5e9ee94d15c369d2b797c8316846c1e522328892b5e8a609cf9ff3f162ebbd9c4c4246d4d114896d3bcf371e86ab5dadfdc47daf0f553414a94dd114d8f20b06e18229a5aa96eec5ff04a06f660936dcda8339877be6eac93405c8fbd2bfa1d3a832df6310e785a8b781f9cdd987fc4fb5d9ac79b237490c34e603c2c0b2b2d55780c2ac06195ca3a2c97e1ed49913a985b17fea4d3125650cc602cbf39abe30e11d6a6a9b1785f6c13bd5a2e00bef0e7bfe5b1387eb0495242acc88b9808c36f6beb92a4ee1197feb6b6452732fc584e7390413fcb8cdc2ef058496f3f349b008b93e6af021c2fe27bf6dcf5647d94d4a1da1732ef224b7842118ac0cc646aea77c8e1d1748158387e32b5936265e0000d8a6c9816b7ae5b6fc2ced9bb5312c1d1c349f5761c2c4820cbf7db0b4b04e332b8d0364cd49878ae54f769f57e35f7d875527f1398193f15029a825f45ac1334f5bfd344a7b9266dbce1c9c94c7ba81e2ab47bf877fcd5fe04f9db00e3a6a0ab38160f49f37f703ed21277de8508e91d2fd73239d4ecaf52591cd1eecece98788657a1960fd98587e674b51f56692ee54292072e83a22f77aa4e78e1393980b1c6a9d9f08048140eaf3e85626f8c02fb38ebdd7a9f0cb0e6e8398e5a92be88858e472363727e7edb6fe97df878fc2db5b50e64d340c13755bc92e0287d924605cfd7d3414ac180cd50b6f9d1f55a60057137ac69b62f59a0579c29b946b66578d79308a55f17b01fb3dcad726919ac24f1c6d556255c2e62e0bf3a6169cd3f5118e42b0d60fd8c8100726fc9df8eece5487d1411527dca5075cb26e27bf7677a730e63ccaea807b8524b0bb0339b7cd6f5275ad9adc2d41f520b525b21131444b987e82694b05ea8b92dac9b16bd5d331f23114735a469d18739919d97827bcc9c0b7bb42cbc69994b90b6e54e178eb7a8d2ed0a55c6b9a66cb31871f668d324228ca622410b7c712a3d5dde766"], 0x1, 0x800) 19:48:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}]}, 0x60}}, 0x0) 19:48:33 executing program 2: r0 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close(r1) close(r0) 19:48:33 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x52, 0x12, 0xb8, 0x8, 0xe9c, 0x0, 0xc70e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x92, 0x0, 0x1, 0xf4, 0xf4, 0x81, 0x0, [], [{{0x9, 0x5, 0x8c}}]}}]}}]}}, 0x0) 19:48:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter}]}) dup2(r0, r1) 19:48:33 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944000000000000000007bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000006380)=[{{&(0x7f0000000280)=@pppoe, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/100}, {&(0x7f0000000380)=""/21}], 0xa8, &(0x7f0000000400)=""/186}}, {{&(0x7f00000004c0)=@l2, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/13}, {&(0x7f00000005c0)=""/30}, {&(0x7f0000000600)=""/65}, {&(0x7f0000000680)=""/45}, {&(0x7f00000006c0)=""/164}, {&(0x7f0000000780)=""/122}, {&(0x7f0000000840)=""/240}, {&(0x7f0000000f80)=""/4096}, {&(0x7f0000000940)=""/67}]}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001f80)=""/4096}, {&(0x7f0000000a80)=""/161}, {&(0x7f0000000b40)=""/203}, {&(0x7f0000002f80)=""/225}, {&(0x7f0000003080)=""/4096}], 0x0, &(0x7f0000004100)=""/242}}, {{&(0x7f0000004200)=@ipx, 0x0, &(0x7f00000047c0)=[{&(0x7f0000004280)=""/212}, {&(0x7f0000004380)=""/37}, {&(0x7f00000043c0)=""/110}, {&(0x7f0000004440)=""/14}, {&(0x7f0000004480)=""/124}, {&(0x7f0000004500)=""/24}, {&(0x7f0000004540)=""/237}, {&(0x7f0000004640)=""/195}, {&(0x7f0000004740)=""/54}, {&(0x7f0000004780)=""/1}]}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000004880)=""/5}, {&(0x7f00000048c0)=""/26}, {&(0x7f0000004900)=""/4096}, {&(0x7f0000005900)=""/184}], 0x93, &(0x7f0000005a00)=""/21}}, {{&(0x7f0000005a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0, &(0x7f0000005d00)=[{&(0x7f0000005ac0)=""/212}, {&(0x7f0000005bc0)=""/43}, {&(0x7f0000005c40)=""/12}, {&(0x7f0000005c80)=""/81}]}}, {{0x0, 0x0, &(0x7f0000005e40)=[{&(0x7f0000005d40)=""/104}, {&(0x7f0000005dc0)=""/85}], 0x0, &(0x7f0000005e80)=""/127}}, {{0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000005f00)=""/164}, {&(0x7f0000005fc0)=""/168}, {&(0x7f0000006080)=""/168}, {&(0x7f0000006140)=""/137}, {&(0x7f0000006200)=""/36}, {&(0x7f0000006240)=""/47}, {&(0x7f0000006280)=""/71}]}}], 0x4000000000005cd, 0x0, 0x0) 19:48:33 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000013001707ed1233fb0d61e18f3d2fe6a5dd80009d0001080100"/46, 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) 19:48:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter}]}) dup2(r0, r1) 19:48:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter}]}) dup2(r0, r1) [ 1969.339082][T31709] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 19:48:33 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0xe}) [ 1969.464764][T24667] usb 6-1: new high-speed USB device number 80 using dummy_hcd 19:48:33 executing program 3: r0 = socket(0x2, 0x10000001, 0x84) connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282}, 0x10) r1 = msgget$private(0x0, 0x12) msgsnd(r1, &(0x7f0000000240)=ANY=[], 0x0, 0x801) msgsnd(r1, &(0x7f0000000500)=ANY=[], 0x0, 0x800) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f00000000c0)=[{}, {r2}], 0x2, 0xfa) msgsnd(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0400000000000000470008adaed82f3e254dbf8da59c017db82a5d519fcf65c5d3de72e45fedf1918fe884b5063215474de13bb2dd9ef832f71e1c951f9cbb96c021a3a8ab862453c3d7458e30a31d2b2fd78e129ffd9339a3898aadff0a81525398b6aefc7c28d544174ff77aca9f61c40cd9e31357769b52d84fcf6d4503d99216973d0ebee1de0789e3b0b1c5299497722254ebf427b951a94a023589ed05b669fd1e05600648a3dbcd2ac56055"], 0x1, 0x800) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x79, 0x3, 0x1000) msgsnd(0x0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x800) 19:48:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter}]}) dup2(r0, r1) 19:48:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter}]}) dup2(r0, r1) [ 1969.711891][T24667] usb 6-1: Using ep0 maxpacket: 8 [ 1969.832252][T24667] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1969.840609][T24667] usb 6-1: config 0 has no interface number 0 [ 1969.847396][T24667] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=c7.0e [ 1969.856738][T24667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1969.869313][T24667] usb 6-1: config 0 descriptor?? [ 1969.915817][T24667] streamzap 6-1:0.146: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1970.137278][T24667] usb 6-1: USB disconnect, device number 80 19:48:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter}]}) dup2(r0, r1) 19:48:39 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3f535b3e9657bae8}}) 19:48:39 executing program 0: socket(0x1e, 0x0, 0x4) 19:48:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter}]}) dup2(r0, r1) 19:48:39 executing program 3: r0 = socket(0x2, 0x10000001, 0x84) connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282}, 0x10) r1 = msgget$private(0x0, 0x12) msgsnd(r1, &(0x7f0000000240)=ANY=[], 0x0, 0x801) msgsnd(r1, &(0x7f0000000500)=ANY=[], 0x0, 0x800) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f00000000c0)=[{}, {r2}], 0x2, 0xfa) msgsnd(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0400000000000000470008adaed82f3e254dbf8da59c017db82a5d519fcf65c5d3de72e45fedf1918fe884b5063215474de13bb2dd9ef832f71e1c951f9cbb96c021a3a8ab862453c3d7458e30a31d2b2fd78e129ffd9339a3898aadff0a81525398b6aefc7c28d544174ff77aca9f61c40cd9e31357769b52d84fcf6d4503d99216973d0ebee1de0789e3b0b1c5299497722254ebf427b951a94a023589ed05b669fd1e05600648a3dbcd2ac56055"], 0x1, 0x800) msgrcv(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x79, 0x3, 0x1000) msgsnd(0x0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0x1, 0x800) 19:48:39 executing program 5: migrate_pages(0x0, 0x81, &(0x7f0000000000)=0xffffffffffff8e46, &(0x7f0000000240)=0x2) 19:48:39 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x805, 0x0) getsockopt(r0, 0x114, 0x10000002719, 0x0, &(0x7f0000000180)) 19:48:39 executing program 1: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x24) ptrace$cont(0x18, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x800, 0x0, 0x0, 0x8, 0xfa}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 19:48:39 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x9) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r1, 0x0, 0x0) 19:48:39 executing program 1: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x24) ptrace$cont(0x18, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x800, 0x0, 0x0, 0x8, 0xfa}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 19:48:40 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045103, &(0x7f0000000000)) 19:48:40 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x805, 0x0) getsockopt(r0, 0x114, 0x10000002719, 0x0, &(0x7f0000000180)) 19:48:40 executing program 4: fanotify_mark(0xffffffffffffffff, 0x184, 0x0, 0xffffffffffffffff, 0x0) 19:48:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000003c0)) 19:48:43 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x805, 0x0) getsockopt(r0, 0x114, 0x10000002719, 0x0, &(0x7f0000000180)) 19:48:43 executing program 4: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b", 0x5) bind(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x2}}, 0x13) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 19:48:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x2000000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) 19:48:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r1, 0x107, 0x13, &(0x7f0000651000)=""/240, &(0x7f0000000180)=0xf0) 19:48:43 executing program 1: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x24) ptrace$cont(0x18, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x800, 0x0, 0x0, 0x8, 0xfa}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 19:48:43 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x805, 0x0) getsockopt(r0, 0x114, 0x10000002719, 0x0, &(0x7f0000000180)) 19:48:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001000080000000000039b0a1672a"]) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000a80)=ANY=[@ANYBLOB="010000000000fcff400101c0"]) 19:48:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x100000009, @pix_mp}) 19:48:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r1, 0x107, 0x13, &(0x7f0000651000)=""/240, &(0x7f0000000180)=0xf0) 19:48:44 executing program 0: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)=0xfdfdffff) 19:48:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() fcntl$setown(r0, 0x8, r1) exit(0x0) close(r0) 19:48:50 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x404e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x20) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 19:48:50 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_getres(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000180)="67660f38820500000000ea7c00be000f79451e0f7854aabaf80c66b8fae7b68d66efbafc0cec0f2202d6f3df89ce133ccb28a60c0d", 0x35}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:48:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r1, 0x107, 0x13, &(0x7f0000651000)=""/240, &(0x7f0000000180)=0xf0) 19:48:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 19:48:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() fcntl$setown(r0, 0x8, r1) exit(0x0) close(r0) 19:48:50 executing program 1: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x24) ptrace$cont(0x18, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x800, 0x0, 0x0, 0x8, 0xfa}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 19:48:50 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x201) write$binfmt_elf32(r0, 0x0, 0x357) 19:48:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r1, 0x107, 0x13, &(0x7f0000651000)=""/240, &(0x7f0000000180)=0xf0) 19:48:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) sendmmsg(r4, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000300)='o', 0x1}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 19:48:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff], 0x0, 0x200}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:48:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000001000080"]) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19:48:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) dup2(r2, r1) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8) 19:48:50 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000005c0)=0x8a, 0x4) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) recvmsg$kcm(r0, &(0x7f00000008c0)={&(0x7f0000000640)=@un=@abs, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000001a40)=""/217, 0xd9}, 0x0) 19:48:57 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x3d}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 19:48:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) getpeername(r0, 0x0, 0x0) 19:48:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000900)={0x0, 0xb, "d7de2f17d770d5ba4b829d"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:48:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) 19:48:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() fcntl$setown(r0, 0x8, r1) exit(0x0) close(r0) 19:48:57 executing program 1: r0 = getpid() capget(&(0x7f0000000040)={0x20071026, r0}, &(0x7f0000000080)) [ 1993.214470][T31892] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure 19:48:57 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f00000000c0)={0x0, [], 0x4}) 19:48:57 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000140)='GPL\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46000000005374f83d6480ccb90300060000000000000000b7380000000000000000000000000020000204"], 0x2e) execveat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 19:48:57 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000007800)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x2, @output}) 19:48:57 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x43e) close(r0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000001b00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001d00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac'], &(0x7f0000001ac0)=[&(0x7f0000002100)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000840)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a', &(0x7f0000001040)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000a40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a', &(0x7f0000000180)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000440)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac\xe6,\xf9\xec\x84R\xc2\x02\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=f\xf3\xca\'\xa8\x1b\xae\xff\xbe\xf9\xe7\xed34\x1c\xd1\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000640)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac']) 19:48:57 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@setlink={0x70, 0x13, 0x711, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xc, 0x1, @remote}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, [{0x2c, 0x1, [@IFLA_VF_MAC={0x28, 0x4}]}]}]}, 0x70}}, 0x0) 19:48:57 executing program 0: syz_emit_ethernet(0x9ae, &(0x7f0000000680)={@link_local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x978, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, [], @dev, @rand_addr="550a0ea6e380dee66e3c0f0760eeb84c", [{0x4, 0xf, "f5536aec770d0f8ad5957e45eb462405ef301d3d551c93f83f05cfd3e4a7409461f2f72ae92d3f1b9b358cc705e8ace291fa16b7d716abc187a4d221a3e43ed130e89a5d942be1ed416bc7d86ad169ea0f42c7b9a6b7f7846ccba8d9caedcaddaa77e9b759410175433d9d7033ec43ab28cac9a1cc089a4e9a"}, {0x0, 0x9, "f87ab64470e2ab9ecf043ee8341011ba46bd313af74e4e72c0f5c8c49b85162e3d418666257953edbf3af5d3282155ebc1790451a13d09dd1813df257bb839eba685aba24fb52bc3e031"}, {0x0, 0x111, "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"}]}}}}}}, 0x0) [ 1993.676376][T31922] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. 19:48:57 executing program 1: mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 19:49:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a28093020600010001fd01020000003900090035000c00060000001900054006000000000022dc1338d54400009b84136ef75afb83de4411000b00c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 19:49:03 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) tkill(0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:49:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@ipv6_newroute={0xd8, 0x18, 0xad9201a0efabeda5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, [@RTA_METRICS={0xac, 0x8, "178e1db7c46aa0e951df782aee4f9cef232c91991d2ca3b2b43140d55ce3c147bdcffc0147d0e528c9e6517d019e6d5f717b00ac3f1077c65009eed7a3f9088a905b89353eb806372d2163c9bc78b7926b500173d07a2e5db3b84635a4b4a65f14e9737e8515dc3d3fa2834ed9b33b0b5bc9e86dfbf01a9525c1a98d8c8455da04fe17c133d85f219ed05bfcf38cc404b9337e41f5d667262f3711509563a8a328f24e72ba"}, @RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 19:49:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2}, 0x8) 19:49:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x10, 0x18, @str='\t\xac\x0f\x00\x06\xac\x0f\x00ype\x00'}]}, 0x269}}, 0x0) 19:49:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() fcntl$setown(r0, 0x8, r1) exit(0x0) close(r0) 19:49:03 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) tkill(0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1999.508519][T31948] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 1999.530396][T31950] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 19:49:03 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x7, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 19:49:03 executing program 3: syz_emit_ethernet(0x7a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaac17f97f920f286dd60bb561500102f40fe8000000000000000000000000000bbfe8000000000000000000000000000aa042022ebffff020000000800000086dda4c97beabb62040800880020e0782b140fcf4d0000100000000100000000000000080022eb00000000778f3977df6ef51f692fed1a102b200000000200000000009827b2af17e72256000000dc6068821466373d39f1adc7288d06358dfa70932a5354174ec7fd263d0bb4501c744a186155e5ce2cd253da0f60a81aa5957c960ebe1cba882abee2b5d39a5532ba44f5eb51b212b33af51d99dbe9f92767cf1ec48a746af9670362452936e67c307f0236b475f0e78151615589c571e816e6a3bc87380e5d6ae5f48cab1641cdf2e99589ebbeeea0a38f018582316309c035e8f03e268779a834435d7f3163dd0056b15c5f916629c13222258e8251fb90ec3463c1c386d3289bbf9afcc4e449d1a3860a5903aa8b4b5372a836c42a2f60d647d41fb2af5ea87e96c83429b7c302d1af0c06858ef4bcffd17f87b0de1afacbee07d77d8745575594ec8d434b6e98cfe0aceaa367449e96f8b7bc04678a32d118b9bad8857347d118c94a512a7b3f07f11d56ff7e546b3ddf100cdfa95b65da2c000000000000000000"], 0x0) 19:49:03 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) tkill(0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1999.667956][T31961] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 19:49:03 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002800010000000000000000000000000000000000000000000000000000000000000000000000000084b7eb02ce98070f274c1715a5facd3c70e8b3005ed5a8ccd78177b08028b3192f8f56497e108e5b646a4823128e8c916def170c776bf0a805fbe2aba4bba95fd833cd28863cb5cecf7274cb0ca0842684eab3969584129d76cba1e327eee7c217e1ea0d8a269decbfd88576a908809ccf9bf8b74be352218c730b3a2980e60010a342865eb07bae324d9b103e2610f3043c407ae634012bb8e700000000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000028001fff00"/20, @ANYRES32=r5, @ANYBLOB="000000000000000004000000"], 0x24}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1999.824322][T31971] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 19:49:03 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x41, 0x0) write(r0, 0x0, 0x0) 19:49:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0xffffffffffffffab}}]}, 0x13c}}, 0x0) 19:49:08 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) tkill(0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:49:08 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x41, 0x0) write(r0, 0x0, 0x0) 19:49:08 executing program 4: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x3c050f546657f3dd) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) msgctl$IPC_RMID(r0, 0x0) r2 = msgget$private(0x0, 0x0) msgrcv(r2, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)) msgsnd(r2, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r3 = msgget$private(0x0, 0x0) msgrcv(r3, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)) msgsnd(r3, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x12) 19:49:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1a) 19:49:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000dc0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:49:08 executing program 5: unshare(0x400) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 2004.702024][T31997] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved 19:49:08 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6a, 0xf6, 0x6b, 0x10, 0x572, 0xcb00, 0xd156, 0x0, 0x8, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6b, 0x0, 0x0, 0x26, 0x9c, 0x47}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2e, @string={0x2e, 0x3, "114ba6db1a40718d0ff23aee77f8f89f0c74cf7767d496708fe433ba9ac42f75aa056467b1ac5f199f9965d1"}}, 0x0, 0x0}, 0x0) 19:49:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(cast6))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)="e27813cacfcb189134371deecdd0a1f1", 0x10}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)=""/171, 0x200003ab}], 0x1}}], 0x1, 0x0, 0x0) 19:49:08 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x41, 0x0) write(r0, 0x0, 0x0) 19:49:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x4, 0xff08, 0xffffffffffffffff}, 0x14}}, 0x0) 19:49:09 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x41, 0x0) write(r0, 0x0, 0x0) [ 2005.142030][T24667] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2005.381946][T24667] usb 2-1: Using ep0 maxpacket: 16 [ 2005.502103][T24667] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 2005.510478][T24667] usb 2-1: config 0 has no interface number 0 [ 2005.592197][T24667] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=d1.56 [ 2005.601406][T24667] usb 2-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 2005.609770][T24667] usb 2-1: Product: syz [ 2005.615410][T24667] usb 2-1: config 0 descriptor?? [ 2005.872191][T24667] cxacru 2-1:0.107: usbatm_usb_probe: bind failed: -19! [ 2006.082537][T24879] usb 2-1: USB disconnect, device number 57 [ 2006.851972][T24879] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2007.091871][T24879] usb 2-1: Using ep0 maxpacket: 16 [ 2007.212351][T24879] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 2007.220734][T24879] usb 2-1: config 0 has no interface number 0 [ 2007.302327][T24879] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=d1.56 [ 2007.311445][T24879] usb 2-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 2007.319735][T24879] usb 2-1: Product: syz [ 2007.325170][T24879] usb 2-1: config 0 descriptor?? [ 2007.602343][T24879] cxacru 2-1:0.107: usbatm_usb_probe: bind failed: -19! [ 2007.614596][T24879] usb 2-1: USB disconnect, device number 58 19:49:14 executing program 4: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x3c050f546657f3dd) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) msgctl$IPC_RMID(r0, 0x0) r2 = msgget$private(0x0, 0x0) msgrcv(r2, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)) msgsnd(r2, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r3 = msgget$private(0x0, 0x0) msgrcv(r3, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)) msgsnd(r3, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x12) 19:49:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000140)={'lo\x00\n\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'lo\x00'}) 19:49:14 executing program 3: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) close(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000015c0)={r2}, &(0x7f0000001600)=0xc) 19:49:14 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mkdir(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(0x0, &(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x5010, 0x0) 19:49:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 19:49:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0xf0ffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x4}}]}, 0x30}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0xd202, 0xf6, &(0x7f0000000140)=""/246, 0x41000, 0x1, [], r5, 0xa, r6, 0x8, &(0x7f0000000240)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xf, 0x5, 0xffffffff}, 0x10}, 0x70) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f00000001c0)={0x4, 0x6, 0x1ff, 0x2, 0x6, "e45fe086133b5759121742ec207c2d60b73409", 0x7d7, 0x779b}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r7, 0x4}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000200"], 0x48}}, 0x0) 19:49:15 executing program 0: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x1}, 0x10) 19:49:15 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:49:15 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x4c81, &(0x7f0000000300)=""/153) 19:49:15 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="f44337778cba", [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2c, 0x0, @remote, @local, {[], @udp={0x0, 0x7, 0x8}}}}}}, 0x0) 19:49:15 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="11dca50d5e0bcfe47bf070afdb7e9819d361d6b7bdc0335b11a7c17772a5e84d9d62e47b85549f0737109c1d71cd1688e18dad0caed402a55cd479ee1910ed9b861707619380abd7ea316096cc6191cbfb87c3ab4cd7862c0cd3565cc1b990d465cccf62f6d5d6dbe148a62cdb860a3379388c333a86999490a0ec2b8d61170c5d1571f7360a3adccdc966073a9b6036630dd425f335768f057c35d691965433c6319bb597f402dc82f0a6e8ceefc51e82") setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000300], 0x0, 0x0, &(0x7f0000000300)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3}]}, 0x108) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:49:15 executing program 4: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x3c050f546657f3dd) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) msgctl$IPC_RMID(r0, 0x0) r2 = msgget$private(0x0, 0x0) msgrcv(r2, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)) msgsnd(r2, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r3 = msgget$private(0x0, 0x0) msgrcv(r3, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)) msgsnd(r3, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x12) 19:49:15 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000140), 0x150) 19:49:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000340)={0xf4, 0x0, [0x277]}) 19:49:21 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000380)="13", 0x20000081}], 0x1}}], 0x2, 0x18100) 19:49:21 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 19:49:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 19:49:21 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000), 0xc) 19:49:21 executing program 4: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x3c050f546657f3dd) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) msgctl$IPC_RMID(r0, 0x0) r2 = msgget$private(0x0, 0x0) msgrcv(r2, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)) msgsnd(r2, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r3 = msgget$private(0x0, 0x0) msgrcv(r3, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)) msgsnd(r3, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x12) 19:49:21 executing program 0: symlink(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00') execve(&(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x0) 19:49:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 19:49:21 executing program 1: r0 = socket$inet6(0xa, 0x40000000000006, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x7ff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x1000000000004e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xd2, &(0x7f0000000140), &(0x7f0000000080)=0x4) 19:49:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, [{0x2c, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @broadcast}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) 19:49:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) 19:49:21 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 19:49:28 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000525d6f404f17316a70300000000109021200010000000009041c0000f026c30051f7bf13deb7e7e3591a73808a78a9b66534a87c9cf3462a457a3e7c5857932af3fbca1730a27c2a799088e3dca88d19b2c74e34b62f724b3964626a0f89aa5eb4eea1165ce25450e9ab126dcb1c50b83a1572e975625d3ec7a0d3d70d92de73dc590cee32e7352b7a72919e67ad7f87fb24134bb85ee956cbb4995dc0ddad1c93f09bd59ff823b88b34640abbe943f807b6421c0a1d3686dbea5aa1bdf81ca72e6454393b334e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 19:49:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001300090468fe07000000e3d5dbaa913f01000000450001070000001419001a000400030007000a00550e69330f4de5020080080000", 0x39}], 0x1) 19:49:28 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x3, 0x0, {0x0, 0x0, 0x0, 0x17, 0x2, 0x64}}) 19:49:45 executing program 5: unshare(0x20400) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) 19:49:45 executing program 4: creat(&(0x7f0000000040)='./file0\x00', 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd4, 0x0}, 0x146) 19:49:45 executing program 1: unshare(0x40000000) close(0xffffffffffffffff) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) capget(&(0x7f00000000c0)={0xaa47c53e5b3e8e4a}, 0x0) syz_genetlink_get_family_id$tipc(0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r2 = socket$inet(0x2, 0x5, 0x6) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000100)="de2b8e7038ed95868d53acb82e0a99a59bac45bbb0eb", 0x16}, {&(0x7f0000000140)="38784489ccfb27b863997719b81059ceee60da5028a018a69b9d1fe4e75cf29667fef0f1b68738f1803034be7500c8cdef592622af3e957e532cdba0f8627ef085931e45ddb0f02a123c34e3e096d6f2c6cdf41849478af600ae72e7f35624d3222fdb6e268585c6df59e7de61a5bdeaad7e32bca752b5db18fdf3a0020aa446c83ed46298e0f772c9b4d2b42ff10e1b9db336a3aedb4274da8b51db15668e4995c043376055e08142cd7c9c20b544e2da4e6389944494fc141a507e43a3cf4eed2a7b22e41775f51d28f32d7d5e16fa570ef62ed5fafdabd8317bedf09474593dc1f6d4", 0xe4}, {&(0x7f0000000240)="8885257b651fbeb37470adf046b6de6b09b255b61d2e8e38f35c6c4058a09e561bdca5911002efe4d6c9c2a554679431cdeb4c7cd4da429d55e4c18e227e53937d479bd59c4fd26b69d9d86923affc8f0d62598e2dbda81586670e86389b109e4ad59ca31951f436d759a58f6013abf05fa613d71d8448f873bfdc205cf8d708290aac3e090a8c5b8f5b4c6f5e547a2144618dc1d74cd1e378cb136f18c3c1aea86d93a3b80572620b13a0f07eb76848279d88", 0xb3}, {&(0x7f0000000300)="3143b6ad8a27b8e89f0aee3550a0c4802385cf667af5352cddaf2096541c19e54bbba2b99e180ba332a56258ec9bbe75b259efa9af64377e8df7e15bc7bce68241abf155c14dc33dc8d3823f", 0x4c}, {&(0x7f0000000380)="8a53f8e5c1ced88049851ab3f00f4b2720920d867870fc89c9ed3f121e235c735e54a590bbbf8a30e1f2743327aa6922236c35f7c757", 0x36}, {&(0x7f00000003c0)="60ec4939d3aa1b4ec7f063559e3c7bd40f1e54d0d26962413e5785b1378f9714c6daba9cd3917cc2433669321f3c90d140ac4b90914c8ef729d86e4f9e2f5c5b3b6353f81e2d8f2ede16e6d3992d48fd117da4c629912665fd22c38e4b3d26e58d6ca175964c36d7149ed2d1f2361e57593f01d448339b1a8462e89e32e5ce2fa8925a64d16c0acf23230a84a2a270ff73960a9da737941aa4f7a8fe41e91cbbb1a48f797e337ebfa3366821ec", 0xad}], 0x6}, 0x80) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'\x00', @ifru_ivalue=0x4}) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) 19:49:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc926f61aa3cd75a4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:49:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x200000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(r0, 0x0, &(0x7f00000002c0)='y\x00', 0x2, 0x2) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x2e, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) unshare(0x40000000) [ 2041.293124][T32300] IPv6: NLM_F_CREATE should be specified when creating new route [ 2041.356525][T32307] IPVS: ftp: loaded support on port[0] = 21 19:49:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r2, 0x541b, 0x75fffc) [ 2041.461330][T32309] IPVS: ftp: loaded support on port[0] = 21 19:49:45 executing program 5: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000040)=r1, 0xab) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r2}) sendmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000140)={r0}) 19:49:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc926f61aa3cd75a4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:49:45 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x77, 0x2, 0x30, 0x20, 0x6a5, 0xd800, 0xb654, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x57, 0x0, 0x0, 0xca, 0x2d, 0x2d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 19:49:45 executing program 1: unshare(0x40000000) close(0xffffffffffffffff) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) capget(&(0x7f00000000c0)={0xaa47c53e5b3e8e4a}, 0x0) syz_genetlink_get_family_id$tipc(0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r2 = socket$inet(0x2, 0x5, 0x6) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000100)="de2b8e7038ed95868d53acb82e0a99a59bac45bbb0eb", 0x16}, {&(0x7f0000000140)="38784489ccfb27b863997719b81059ceee60da5028a018a69b9d1fe4e75cf29667fef0f1b68738f1803034be7500c8cdef592622af3e957e532cdba0f8627ef085931e45ddb0f02a123c34e3e096d6f2c6cdf41849478af600ae72e7f35624d3222fdb6e268585c6df59e7de61a5bdeaad7e32bca752b5db18fdf3a0020aa446c83ed46298e0f772c9b4d2b42ff10e1b9db336a3aedb4274da8b51db15668e4995c043376055e08142cd7c9c20b544e2da4e6389944494fc141a507e43a3cf4eed2a7b22e41775f51d28f32d7d5e16fa570ef62ed5fafdabd8317bedf09474593dc1f6d4", 0xe4}, {&(0x7f0000000240)="8885257b651fbeb37470adf046b6de6b09b255b61d2e8e38f35c6c4058a09e561bdca5911002efe4d6c9c2a554679431cdeb4c7cd4da429d55e4c18e227e53937d479bd59c4fd26b69d9d86923affc8f0d62598e2dbda81586670e86389b109e4ad59ca31951f436d759a58f6013abf05fa613d71d8448f873bfdc205cf8d708290aac3e090a8c5b8f5b4c6f5e547a2144618dc1d74cd1e378cb136f18c3c1aea86d93a3b80572620b13a0f07eb76848279d88", 0xb3}, {&(0x7f0000000300)="3143b6ad8a27b8e89f0aee3550a0c4802385cf667af5352cddaf2096541c19e54bbba2b99e180ba332a56258ec9bbe75b259efa9af64377e8df7e15bc7bce68241abf155c14dc33dc8d3823f", 0x4c}, {&(0x7f0000000380)="8a53f8e5c1ced88049851ab3f00f4b2720920d867870fc89c9ed3f121e235c735e54a590bbbf8a30e1f2743327aa6922236c35f7c757", 0x36}, {&(0x7f00000003c0)="60ec4939d3aa1b4ec7f063559e3c7bd40f1e54d0d26962413e5785b1378f9714c6daba9cd3917cc2433669321f3c90d140ac4b90914c8ef729d86e4f9e2f5c5b3b6353f81e2d8f2ede16e6d3992d48fd117da4c629912665fd22c38e4b3d26e58d6ca175964c36d7149ed2d1f2361e57593f01d448339b1a8462e89e32e5ce2fa8925a64d16c0acf23230a84a2a270ff73960a9da737941aa4f7a8fe41e91cbbb1a48f797e337ebfa3366821ec", 0xad}], 0x6}, 0x80) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'\x00', @ifru_ivalue=0x4}) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) 19:49:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x200000000803, 0x0) sendto(r2, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/161, 0xa1}, {&(0x7f0000001240)=""/29, 0x1d}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) [ 2041.984020][T32338] IPVS: ftp: loaded support on port[0] = 21 [ 2042.132076][T24879] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2042.381886][T24879] usb 5-1: Using ep0 maxpacket: 32 [ 2042.522489][T24879] usb 5-1: config 0 has an invalid interface number: 87 but max is 0 [ 2042.530901][T24879] usb 5-1: config 0 has no interface number 0 [ 2042.537183][T24879] usb 5-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=b6.54 [ 2042.546534][T24879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.556783][T24879] usb 5-1: config 0 descriptor?? [ 2042.607697][T24879] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 2043.022278][T24879] gspca_nw80x: reg_r err -71 [ 2043.027076][T24879] nw80x: probe of 5-1:0.87 failed with error -71 [ 2043.036406][T24879] usb 5-1: USB disconnect, device number 76 [ 2043.782044][T24667] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2044.031901][T24667] usb 5-1: Using ep0 maxpacket: 32 [ 2044.152225][T24667] usb 5-1: config 0 has an invalid interface number: 87 but max is 0 [ 2044.160612][T24667] usb 5-1: config 0 has no interface number 0 [ 2044.167195][T24667] usb 5-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=b6.54 [ 2044.176415][T24667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2044.187046][T24667] usb 5-1: config 0 descriptor?? [ 2044.236154][T24667] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 2044.442015][T24667] gspca_nw80x: reg_w err -71 [ 2044.446761][T24667] nw80x: probe of 5-1:0.87 failed with error -71 [ 2044.472513][T24667] usb 5-1: USB disconnect, device number 77 19:49:51 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080045002, 0x0) 19:49:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x200000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(r0, 0x0, &(0x7f00000002c0)='y\x00', 0x2, 0x2) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x2e, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) unshare(0x40000000) 19:49:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x200000000803, 0x0) sendto(r2, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/161, 0xa1}, {&(0x7f0000001240)=""/29, 0x1d}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) 19:49:51 executing program 1: unshare(0x40000000) close(0xffffffffffffffff) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) capget(&(0x7f00000000c0)={0xaa47c53e5b3e8e4a}, 0x0) syz_genetlink_get_family_id$tipc(0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r2 = socket$inet(0x2, 0x5, 0x6) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000100)="de2b8e7038ed95868d53acb82e0a99a59bac45bbb0eb", 0x16}, {&(0x7f0000000140)="38784489ccfb27b863997719b81059ceee60da5028a018a69b9d1fe4e75cf29667fef0f1b68738f1803034be7500c8cdef592622af3e957e532cdba0f8627ef085931e45ddb0f02a123c34e3e096d6f2c6cdf41849478af600ae72e7f35624d3222fdb6e268585c6df59e7de61a5bdeaad7e32bca752b5db18fdf3a0020aa446c83ed46298e0f772c9b4d2b42ff10e1b9db336a3aedb4274da8b51db15668e4995c043376055e08142cd7c9c20b544e2da4e6389944494fc141a507e43a3cf4eed2a7b22e41775f51d28f32d7d5e16fa570ef62ed5fafdabd8317bedf09474593dc1f6d4", 0xe4}, {&(0x7f0000000240)="8885257b651fbeb37470adf046b6de6b09b255b61d2e8e38f35c6c4058a09e561bdca5911002efe4d6c9c2a554679431cdeb4c7cd4da429d55e4c18e227e53937d479bd59c4fd26b69d9d86923affc8f0d62598e2dbda81586670e86389b109e4ad59ca31951f436d759a58f6013abf05fa613d71d8448f873bfdc205cf8d708290aac3e090a8c5b8f5b4c6f5e547a2144618dc1d74cd1e378cb136f18c3c1aea86d93a3b80572620b13a0f07eb76848279d88", 0xb3}, {&(0x7f0000000300)="3143b6ad8a27b8e89f0aee3550a0c4802385cf667af5352cddaf2096541c19e54bbba2b99e180ba332a56258ec9bbe75b259efa9af64377e8df7e15bc7bce68241abf155c14dc33dc8d3823f", 0x4c}, {&(0x7f0000000380)="8a53f8e5c1ced88049851ab3f00f4b2720920d867870fc89c9ed3f121e235c735e54a590bbbf8a30e1f2743327aa6922236c35f7c757", 0x36}, {&(0x7f00000003c0)="60ec4939d3aa1b4ec7f063559e3c7bd40f1e54d0d26962413e5785b1378f9714c6daba9cd3917cc2433669321f3c90d140ac4b90914c8ef729d86e4f9e2f5c5b3b6353f81e2d8f2ede16e6d3992d48fd117da4c629912665fd22c38e4b3d26e58d6ca175964c36d7149ed2d1f2361e57593f01d448339b1a8462e89e32e5ce2fa8925a64d16c0acf23230a84a2a270ff73960a9da737941aa4f7a8fe41e91cbbb1a48f797e337ebfa3366821ec", 0xad}], 0x6}, 0x80) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'\x00', @ifru_ivalue=0x4}) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) 19:49:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) unshare(0x8000400) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80033a}) 19:49:51 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x77, 0x2, 0x30, 0x20, 0x6a5, 0xd800, 0xb654, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x57, 0x0, 0x0, 0xca, 0x2d, 0x2d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 2047.683029][T32362] IPVS: ftp: loaded support on port[0] = 21 19:49:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x200000000803, 0x0) sendto(r2, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/161, 0xa1}, {&(0x7f0000001240)=""/29, 0x1d}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) [ 2047.752552][T32367] IPVS: ftp: loaded support on port[0] = 21 19:49:51 executing program 5: r0 = memfd_create(&(0x7f0000000180)='{\x10', 0x0) io_setup(0x7f, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="e5", 0x1, 0x7fffffffffffffff}]) [ 2047.934312][T24879] usb 5-1: new high-speed USB device number 78 using dummy_hcd 19:49:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x200000000803, 0x0) sendto(r2, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/161, 0xa1}, {&(0x7f0000001240)=""/29, 0x1d}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) 19:49:52 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @dev}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) r1 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="2e000000130081c5e4050cecdb4cb9040a485e431d00000081fffffff08ef9000600b0ebb06ac40006001400f9ff", 0x2e}], 0x1}, 0x0) sendmmsg(r0, &(0x7f0000001540), 0x24c, 0x0) [ 2048.225099][T24879] usb 5-1: Using ep0 maxpacket: 32 19:49:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000280)="0adc1f123c123f319bd070") sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x54}}, 0x0) [ 2048.342399][T24879] usb 5-1: config 0 has an invalid interface number: 87 but max is 0 [ 2048.350601][T24879] usb 5-1: config 0 has no interface number 0 [ 2048.357304][T24879] usb 5-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=b6.54 [ 2048.366537][T24879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:49:52 executing program 5: r0 = socket$inet6(0xa, 0x8000008000080003, 0x800000000000003) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2048.453321][T24879] usb 5-1: config 0 descriptor?? [ 2048.507172][T24879] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 2048.942162][T24879] gspca_nw80x: reg_r err -71 [ 2048.947082][T24879] nw80x: probe of 5-1:0.87 failed with error -71 [ 2048.966377][T24879] usb 5-1: USB disconnect, device number 78 19:49:55 executing program 3: r0 = socket$kcm(0x2b, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f00000013c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000000) close(r0) 19:49:55 executing program 2: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 19:49:55 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000f5dfe4), 0x1c) 19:49:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="24000000190007041dfffd946f61050002f80200fe02000000010800080012000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 19:49:55 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x77, 0x2, 0x30, 0x20, 0x6a5, 0xd800, 0xb654, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x57, 0x0, 0x0, 0xca, 0x2d, 0x2d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 19:49:55 executing program 5: socket$caif_seqpacket(0x25, 0x5, 0x5) bind$inet6(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000029c0)={0x90, 0x0, 0x4, {0x4, 0x0, 0x0, 0xd2a6, 0x7f, 0x1ff, {0x2, 0x81, 0x8, 0x0, 0x7, 0xdf, 0x8a, 0x833, 0x16e1, 0x1, 0x4, 0x0, 0x0, 0x2, 0x7f}}}, 0x90) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8001, 0x0) ioctl$int_in(r0, 0x80000080045017, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000002880)={0x0, 0x0, 0x4}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000100)={{0x5, 0x81, 0x23}, 0x0, 0x0, 0x2, 0x0, 0x0, "43a4aa0223c9777c270174ad69d4eeb1529ac8c5895839be2f51f99cfe6c7c08d57453b189da299b638be928d890fc0a336b9092a0e8b9067603c20547eb167211c04ebbc7397a25c432fb8d073e6a3d09e83f4e2bd525ad502afaa5beccf516af349356faf54e33c4d8bda512cb7cfb098c2b823fe2efc1c68797ba428f3f30"}) clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) [ 2051.921315][T32407] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2051.955442][T32411] __sock_release: fasync list not empty! 19:49:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x0, 0x0, 0x3}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1088, 0x44000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000b61b881ab7b874ea45eecc9a5046e7acf102881137531f071dcaaf3921a2e2c53fe21d2236029d2a416609ab70663895ef1a5b7e70696f3746054f5a39fc32935bbf536f3bdacd553fccc0f9e519d148863c346cd6b70c72b8", @ANYRES32=0x0], 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) getpgrp(r3) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) r4 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KDDISABIO(r4, 0x4b37) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0) close(0xffffffffffffffff) connect$l2tp(r5, 0x0, 0x0) ioctl$TCGETS(r5, 0x5401, &(0x7f00000002c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r4, 0x0, 0x0}, 0x10) ioctl$TIOCSWINSZ(r4, 0x5414, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 19:49:56 executing program 5: socket$caif_seqpacket(0x25, 0x5, 0x5) bind$inet6(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000029c0)={0x90, 0x0, 0x4, {0x4, 0x0, 0x0, 0xd2a6, 0x7f, 0x1ff, {0x2, 0x81, 0x8, 0x0, 0x7, 0xdf, 0x8a, 0x833, 0x16e1, 0x1, 0x4, 0x0, 0x0, 0x2, 0x7f}}}, 0x90) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8001, 0x0) ioctl$int_in(r0, 0x80000080045017, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000002880)={0x0, 0x0, 0x4}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000100)={{0x5, 0x81, 0x23}, 0x0, 0x0, 0x2, 0x0, 0x0, "43a4aa0223c9777c270174ad69d4eeb1529ac8c5895839be2f51f99cfe6c7c08d57453b189da299b638be928d890fc0a336b9092a0e8b9067603c20547eb167211c04ebbc7397a25c432fb8d073e6a3d09e83f4e2bd525ad502afaa5beccf516af349356faf54e33c4d8bda512cb7cfb098c2b823fe2efc1c68797ba428f3f30"}) clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) [ 2051.975501][T32409] Option ' ' to dns_resolver key: bad/missing value [ 2051.982627][T32403] __sock_release: fasync list not empty! [ 2052.009435][T32415] Option ' ' to dns_resolver key: bad/missing value 19:49:56 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x3c, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, 0x0) 19:49:56 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) r1 = socket$unix(0x1, 0x3, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r2, 0x0, 0x0) dup3(r1, r2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)) [ 2052.193358][T32422] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2052.195553][T32425] Option ' ' to dns_resolver key: bad/missing value 19:49:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a80)="ad56b6cc0400fb8b65d8b4ac2ca35c6e", 0x10) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x8}, 0x0, 0x400b, 0x448e370e0511d35e}}, 0x2fe40}}, 0x0) 19:49:56 executing program 5: socket$caif_seqpacket(0x25, 0x5, 0x5) bind$inet6(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000029c0)={0x90, 0x0, 0x4, {0x4, 0x0, 0x0, 0xd2a6, 0x7f, 0x1ff, {0x2, 0x81, 0x8, 0x0, 0x7, 0xdf, 0x8a, 0x833, 0x16e1, 0x1, 0x4, 0x0, 0x0, 0x2, 0x7f}}}, 0x90) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8001, 0x0) ioctl$int_in(r0, 0x80000080045017, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000002880)={0x0, 0x0, 0x4}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000100)={{0x5, 0x81, 0x23}, 0x0, 0x0, 0x2, 0x0, 0x0, "43a4aa0223c9777c270174ad69d4eeb1529ac8c5895839be2f51f99cfe6c7c08d57453b189da299b638be928d890fc0a336b9092a0e8b9067603c20547eb167211c04ebbc7397a25c432fb8d073e6a3d09e83f4e2bd525ad502afaa5beccf516af349356faf54e33c4d8bda512cb7cfb098c2b823fe2efc1c68797ba428f3f30"}) clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) [ 2052.325197][T32422] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:49:56 executing program 5: socket$caif_seqpacket(0x25, 0x5, 0x5) bind$inet6(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000029c0)={0x90, 0x0, 0x4, {0x4, 0x0, 0x0, 0xd2a6, 0x7f, 0x1ff, {0x2, 0x81, 0x8, 0x0, 0x7, 0xdf, 0x8a, 0x833, 0x16e1, 0x1, 0x4, 0x0, 0x0, 0x2, 0x7f}}}, 0x90) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8001, 0x0) ioctl$int_in(r0, 0x80000080045017, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000002880)={0x0, 0x0, 0x4}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000100)={{0x5, 0x81, 0x23}, 0x0, 0x0, 0x2, 0x0, 0x0, "43a4aa0223c9777c270174ad69d4eeb1529ac8c5895839be2f51f99cfe6c7c08d57453b189da299b638be928d890fc0a336b9092a0e8b9067603c20547eb167211c04ebbc7397a25c432fb8d073e6a3d09e83f4e2bd525ad502afaa5beccf516af349356faf54e33c4d8bda512cb7cfb098c2b823fe2efc1c68797ba428f3f30"}) clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) [ 2052.458968][T32436] Option ' ' to dns_resolver key: bad/missing value [ 2052.532072][T24879] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2052.680839][T32446] Option ' ' to dns_resolver key: bad/missing value [ 2052.792214][T24879] usb 5-1: Using ep0 maxpacket: 32 [ 2052.912484][T24879] usb 5-1: config 0 has an invalid interface number: 87 but max is 0 [ 2052.921329][T24879] usb 5-1: config 0 has no interface number 0 [ 2052.927802][T24879] usb 5-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=b6.54 [ 2052.936984][T24879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.946619][T24879] usb 5-1: config 0 descriptor?? [ 2052.996221][T24879] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 2053.422199][T24879] gspca_nw80x: reg_r err -71 [ 2053.426989][T24879] nw80x: probe of 5-1:0.87 failed with error -71 [ 2053.436498][T24879] usb 5-1: USB disconnect, device number 79 19:50:02 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 19:50:02 executing program 3: unshare(0x8000400) r0 = creat(&(0x7f0000000000)='./bus\x00', 0xfffffffffffffffc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000122000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000023000/0x3000)=nil, &(0x7f000009f000/0x1000)=nil, &(0x7f000046d000/0x600000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00004c9000/0x8000)=nil, &(0x7f000062b000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000cf000/0x1000)=nil, &(0x7f0000650000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) 19:50:02 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) r1 = socket$unix(0x1, 0x3, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r2, 0x0, 0x0) dup3(r1, r2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)) 19:50:02 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) r1 = socket$unix(0x1, 0x3, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r2, 0x0, 0x0) dup3(r1, r2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)) 19:50:02 executing program 0: unshare(0x400) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x90, &(0x7f00000000c0)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 19:50:02 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x77, 0x2, 0x30, 0x20, 0x6a5, 0xd800, 0xb654, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x57, 0x0, 0x0, 0xca, 0x2d, 0x2d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 2058.172901][T32455] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. 19:50:02 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) r1 = socket$unix(0x1, 0x3, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r2, 0x0, 0x0) dup3(r1, r2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)) 19:50:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000415fc8)={0x0, 0x0, &(0x7f00000daff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c01000010000302000000000000000000000000000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x0) 19:50:02 executing program 0: unshare(0x400) accept(0xffffffffffffffff, &(0x7f0000000040)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0xb) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) 19:50:02 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) r1 = socket$unix(0x1, 0x3, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r2, 0x0, 0x0) dup3(r1, r2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)) 19:50:02 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) r1 = socket$unix(0x1, 0x3, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r2, 0x0, 0x0) dup3(r1, r2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)) [ 2058.561943][T24879] usb 5-1: new high-speed USB device number 80 using dummy_hcd 19:50:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x800000000000003}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x22, &(0x7f0000000080)={@ipv4={[0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], [], @multicast2}, 0x80}, 0x20) [ 2058.822309][T24879] usb 5-1: Using ep0 maxpacket: 32 [ 2058.942139][T24879] usb 5-1: config 0 has an invalid interface number: 87 but max is 0 [ 2058.950313][T24879] usb 5-1: config 0 has no interface number 0 [ 2058.956751][T24879] usb 5-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=b6.54 [ 2058.965946][T24879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2058.975844][T24879] usb 5-1: config 0 descriptor?? [ 2059.016425][T24879] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 2059.442000][T24879] gspca_nw80x: reg_r err -71 [ 2059.446856][T24879] nw80x: probe of 5-1:0.87 failed with error -71 [ 2059.456884][T24879] usb 5-1: USB disconnect, device number 80 19:50:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x9, 0x4000000000000800, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000002180)=""/4096}, 0x18) 19:50:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x24, r1, 0x11, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) 19:50:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r0, &(0x7f0000000540), 0x1000) r1 = socket$unix(0x1, 0x3, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r2, 0x0, 0x0) dup3(r1, r2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)) 19:50:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00', 0x11}, &(0x7f0000000040)=0x1e) 19:50:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 19:50:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002680)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}, @RTA_PRIORITY={0x8, 0x6, 0x101}]}, 0x2c}}, 0x0) 19:50:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x1c, 0x2, [@gre_common_policy=[@IFLA_GRE_ENCAP_DPORT={0x8}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x70b}, @IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}]]}}}]}, 0x4c}}, 0x0) 19:50:09 executing program 5: unshare(0x24020400) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) close(r0) fsync(r0) 19:50:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 19:50:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x24, r1, 0x11, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) 19:50:09 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240000, 0x0) utimensat(r0, 0x0, 0x0, 0x0) [ 2065.738442][T32520] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 2065.746874][T32520] netlink: 'syz-executor.4': attribute type 24 has an invalid length. [ 2065.755291][T32520] netlink: 'syz-executor.4': attribute type 22 has an invalid length. 19:50:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000600)='\x00\x00U\x00\xa3\x9f&0?\x8f\\\x01\x00\x00\x00\x00\xbf\x06\x8a\xa9\xcb3\xe1uf\xdc\x1a\x0e\b\x7f\xc7\x05$\xfdm\xd3y\xa0\xef\xe1\xb6\xe8\xb7 \xc2\x1bnY1\xb3\x8b9\xfb*y\xbe\x0f2\x13 U\xdc\x12\xbf\v/T\xfb%\t\xc9c\x9e\x9e\xe4?\xb1\xab\"\xc8\x15:&h\tZ[\x87\xd7\xaf\xaf6\xdf\xbd#\\\x14i\x1a\xfc\xbbA~\xf1\xe7\xb5\x87y\x1a\xda\xe5f\xd0\f\xd5x;\x00\x90\xcb\x8a\xe6\xdeJ\r\t\x9b\a\xae\xac+\xbc\xd6\xe5\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j,`\x8a\xf3\x85\n\x1d\xecVJ\\t\xe5;\x84\xd2\x036\f\x84]V\x9ew[\xbfb\xbe,\xa0\xb6\x82\x9b_=\x00\x00\x00\x00\x00\x00\x7f\xff\xc7J\xde\xbe\n\b9\xb2\x9b\t0\x17_7Q\xf6\xa9\xf3\xcd\x14\xab\'\x1e.\'>\x05\xcd,\x01w\xda\x94O\xe1\xe0t\xe0;\x9e\xe3\x9f\xe7\xc8\x81d\x19/5\x9b\x80\x9ei\xa3\x83\x85\xb6|\xe6S\xc1\'t\xb3\xdd\x1b\xa3m\xa3=\x1a:\xb6\xdf\xbd\x00X\xbf\xf7[,\xdd\x1dxa\x04\xcaD0\x00}|p\f\xc2kL\x18\xc9\xf5%\xe6\xc46\x1c\xb0>\xb5\x98\x01+N\xb4\x99b\x10\xa2\x12\xea\xf6[F3\xf5\xda\xcf\x8e\x84~\xe4E\xec\x84I\x85`!~\xa1\x0e\x8d\xbd\xcc\xd7\x9f\xe2\xb8s\xd8\xfa\x01_)\xc6\x7f\f\xc7L3\xd8\x03\xe1\\\x87\x05\x00\x00;!]\xff\xc1\x1f\xb4\xde\xfb=\xdf\x1b%\xd8\xd7\f\xa4\xed<\xeb\x1a\xa3\xd7\x89\x88BE\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x18\nSZ\x1f\x06\x88\x9fHGo\xfe\x8c\x93\n\x9f\x9e/\x86\xe5zS\xbe\xea\xf3\x00C\x910To\xeegtEW\xab26\x11s,\x01\x10\xc7\xf65K\'\xf1b7\xffz\x17iA\x14\x97\xa5\xdb\x9c\xaeL*\x94n\v%\xcc\xb1v\x90\xc0\xb6\'\x91q9\x1c?$|\x8bch\xed\x87\xc3\xd57\a{\xb4\x00\x00\x00') socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'hsr0\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r3]}) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) [ 2066.175034][T32538] cgroup: fork rejected by pids controller in /syz5 19:50:15 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1f, 0x0, 0x0) 19:50:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x32}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 19:50:15 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) symlink(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='./file0/bus\x00') 19:50:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x24, r1, 0x11, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) 19:50:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040), 0xa808) 19:50:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 19:50:16 executing program 4: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/attr/sockcrea/e\x00', 0x2, 0x0) 19:50:16 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, {{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000280)=[@dontfrag={{0x14}}, @flowinfo={{0x14}}, @hoplimit={{0x14}}, @hopopts_2292={{0x148, 0x29, 0x36, {0x0, 0x25, [], [@ra, @generic={0x0, 0xca, "11c05f28f33b30c4bea2edae56254ee664d1ad8b5096f15e87c0a6930ee0473c2effc29f7bd92eb554ac64fa211555b7de3da77da788b5ebfb11fa90c3c36a2924702862677b7210791deb48751feaca12d621c9aec5ab22ea849f1a51acd67e101eba381d2ac33a91e1fd3aacd442992e0275f12889ecdaf767977ab066a2ae3657c5826cc1bcbf9c1f1e1cdc91d33eb31c000be915bd32dfc58f6f02578a7b342cce453d7bed66f72ed08c87f6c4906fd32dcfb5dd504126276cfbde57096e2558c403d7e2ff982149"}, @ra, @enc_lim, @calipso={0x7, 0x50, {0x0, 0x12, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}}}, @dontfrag={{0x14}}, @flowinfo={{0x14}}, @tclass={{0x14}}, @hoplimit_2292={{0x14}}], 0x2dc}}], 0x2, 0x0) 19:50:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x24, r1, 0x11, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) 19:50:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 19:50:16 executing program 4: unshare(0x8000400) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc0405519, &(0x7f0000000000)) 19:50:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) r3 = dup3(r0, r1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r3, r2) 19:50:16 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/244) ioctl$PPPIOCSPASS(r0, 0x4010744d, &(0x7f0000000080)={0x0, 0x0}) 19:50:20 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) 19:50:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, 0x0) 19:50:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x3, 0x7, 0x9}, 0x3c) r0 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x400000, 0x0, 0x20820000, r0}, 0x2c) 19:50:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r0, 0x2) 19:50:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLCREATE(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 19:50:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @rand_addr, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r1, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffc5) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self\x00', 0x8200, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, 0x0, 0xfffffffffffffe4c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="5a3a51567044209cfad2615f9cc7b3abbdf361fb3bf04ea55c1c7e053956469bd233d9d65b07690616806173159354a951a8fd4ea98e37c5", 0x38, 0xfffffffffffffff9) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r4) keyctl$unlink(0x9, r3, r4) r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r4) add_key(&(0x7f0000000280)='rxrpc_s\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000640), 0x0, r5) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xffffffffffffff9f) keyctl$clear(0x7, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) getresuid(0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000180)=0x10000000003e, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, 0x0, 0x37e) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x32d) sync() bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000540)='\b', 0x1, 0x3fffffa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) 19:50:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x3}, 0x8) 19:50:20 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 19:50:20 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) unshare(0x4020400) setrlimit(0x7, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) 19:50:20 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x13db, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000180)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000000)="d3", 0x1, 0x0, 0x0, 0x0) 19:50:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x1}) 19:50:20 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10812, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000001480)='./control\x00', 0x0) r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000fc4fbe)=""/80, 0x50) 19:50:26 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}, @in6={0xa, 0x4e21, 0x0, @rand_addr="e9757a3d07723297d7102d4473a108f1"}], 0x38) 19:50:26 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) unshare(0x4020400) setrlimit(0x7, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) 19:50:26 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10812, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000001480)='./control\x00', 0x0) r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000fc4fbe)=""/80, 0x50) 19:50:26 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x13db, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000180)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000000)="d3", 0x1, 0x0, 0x0, 0x0) 19:50:26 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000a40)}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/127}, {&(0x7f0000002040)=""/4096}, {&(0x7f00000002c0)=""/141}, {&(0x7f0000000440)=""/118}, {&(0x7f0000003040)=""/4096}, {&(0x7f00000004c0)=""/136}, {&(0x7f0000000580)=""/148}, {&(0x7f0000000640)=""/157}], 0x0, &(0x7f0000001040)=""/4096, 0x47d}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', @ifru_flags}) 19:50:26 executing program 5: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="25000000130081c5e4050cecdb4c9f0407255e431a00000000fffffff017f3ff0500b0efb0", 0x25}], 0x1}, 0x0) 19:50:26 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) unshare(0x4020400) setrlimit(0x7, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) 19:50:26 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00') 19:50:26 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10812, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000001480)='./control\x00', 0x0) r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000fc4fbe)=""/80, 0x50) 19:50:26 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x13db, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000180)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000000)="d3", 0x1, 0x0, 0x0, 0x0) 19:50:26 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x71, 0x48, 0x1c, 0x400000000010, 0x1058, 0x631, 0x16c7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcb, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0x8f}}]}}]}}]}}, 0x0) 19:50:27 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) unshare(0x4020400) setrlimit(0x7, &(0x7f0000000000)) ioctl$sock_proto_private(r0, 0x894c, 0x0) [ 2083.192073][T24879] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2083.431874][T24879] usb 4-1: Using ep0 maxpacket: 16 [ 2083.552234][T24879] usb 4-1: config 0 has an invalid interface number: 203 but max is 0 [ 2083.560741][T24879] usb 4-1: config 0 has no interface number 0 [ 2083.567544][T24879] usb 4-1: New USB device found, idVendor=1058, idProduct=0631, bcdDevice=16.c7 [ 2083.576977][T24879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.586791][T24879] usb 4-1: config 0 descriptor?? [ 2083.633598][T24879] usb 4-1: This Realtek USB WiFi dongle (0x1058:0x0631) is untested! [ 2083.642208][T24879] usb 4-1: Please report results to Jes.Sorensen@gmail.com [ 2083.892111][T24879] usb 4-1: Unsupported USB TX end-points [ 2083.897870][T24879] usb 4-1: Fatal - failed to identify chip [ 2083.904401][T24879] rtl8xxxu: probe of 4-1:0.203 failed with error -524 [ 2083.917711][T24879] usb 4-1: USB disconnect, device number 74 [ 2084.601912][T24879] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2084.842039][T24879] usb 4-1: Using ep0 maxpacket: 16 [ 2084.962061][T24879] usb 4-1: config 0 has an invalid interface number: 203 but max is 0 [ 2084.970430][T24879] usb 4-1: config 0 has no interface number 0 [ 2084.976772][T24879] usb 4-1: New USB device found, idVendor=1058, idProduct=0631, bcdDevice=16.c7 [ 2084.986521][T24879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.996374][T24879] usb 4-1: config 0 descriptor?? [ 2085.044274][T24879] usb 4-1: This Realtek USB WiFi dongle (0x1058:0x0631) is untested! [ 2085.052961][T24879] usb 4-1: Please report results to Jes.Sorensen@gmail.com [ 2085.292550][T24879] usb 4-1: Unsupported USB TX end-points [ 2085.298315][T24879] usb 4-1: Fatal - failed to identify chip [ 2085.305134][T24879] rtl8xxxu: probe of 4-1:0.203 failed with error -524 [ 2085.317122][T24879] usb 4-1: USB disconnect, device number 75 19:50:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x3011, r0, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000fc0)={'security\x00'}, &(0x7f0000000040)=0x54) 19:50:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:32 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x13db, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000180)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000000)="d3", 0x1, 0x0, 0x0, 0x0) 19:50:32 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10812, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000001480)='./control\x00', 0x0) r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000fc4fbe)=""/80, 0x50) 19:50:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000200)="b9800000c00f3235001000000f30c422d9bb5294b977080000b8b97e0000ba000000000f300f20e035040000000f22e02e0f216d65672e64400fc73ec74424003d000000c744240200800000c7442406000000000f011c240f791b440f79d8b9f70b00000f32", 0x66}], 0x14e, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0x2, 0x0, 0x0, 0x800000000]}) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0x8, 0x9, 0x9, 0x91]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:32 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2, 0x0, 0x6}, 0xc) [ 2088.932240][ T433] kvm [432]: vcpu0, guest rIP: 0x205 Hyper-V unhandled rdmsr: 0x40000075 [ 2088.958073][ T433] kvm [432]: vcpu0, guest rIP: 0x205 Hyper-V unhandled rdmsr: 0x40000036 19:50:33 executing program 3: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @multicast2}, 0x10) sendto(r0, &(0x7f00000003c0)="879d0ebf9cbb", 0x6, 0x8000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="00dd", 0x2, 0x0, 0x0, 0x0) 19:50:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000080)="1b00000042005f0214f90707000904000a00b93756be1c67463100", 0x1b) [ 2088.989686][ T433] kvm [432]: vcpu0, guest rIP: 0x205 Hyper-V unhandled rdmsr: 0x40000044 19:50:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x80000000000000a, 0x2, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) dup3(r3, r1, 0x0) 19:50:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) sendmsg$sock(r0, &(0x7f0000000700)={&(0x7f0000000040)=@ethernet, 0x80, 0x0}, 0x0) 19:50:33 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0xb6, 0xa0, 0x10008, 0x10c4, 0x8244, 0x14b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0xac, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 19:50:33 executing program 4: socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000480)) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x6f) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) [ 2089.611945][T12865] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2089.851957][T12865] usb 6-1: Using ep0 maxpacket: 8 [ 2089.971922][T12865] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 2089.980017][T12865] usb 6-1: config 0 has no interface number 0 [ 2089.986370][T12865] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice= 1.4b [ 2089.995686][T12865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2090.005743][T12865] usb 6-1: config 0 descriptor?? [ 2090.046674][T12865] radio-usb-si4713 6-1:0.4: Si4713 development board discovered: (10C4:8244) [ 2091.332198][T12865] radio-usb-si4713: probe of 6-1:0.4 failed with error -71 [ 2091.339609][T12865] usbhid 6-1:0.4: couldn't find an input interrupt endpoint [ 2091.355138][T12865] usb 6-1: USB disconnect, device number 83 [ 2091.762006][T12865] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2092.022159][T12865] usb 6-1: Using ep0 maxpacket: 8 [ 2092.142096][T12865] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 2092.150242][T12865] usb 6-1: config 0 has no interface number 0 [ 2092.156597][T12865] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice= 1.4b [ 2092.165866][T12865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2092.175486][T12865] usb 6-1: config 0 descriptor?? [ 2092.216901][T12865] radio-usb-si4713 6-1:0.4: Si4713 development board discovered: (10C4:8244) [ 2092.862129][T12865] radio-usb-si4713: probe of 6-1:0.4 failed with error -71 [ 2092.869535][T12865] usbhid 6-1:0.4: couldn't find an input interrupt endpoint [ 2092.884398][T12865] usb 6-1: USB disconnect, device number 84 19:50:39 executing program 0: mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffff54, 0x11, 0x0, 0x27) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 19:50:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x4, 0x0, 0xfffffffd}, 0x3c) 19:50:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) 19:50:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x34, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_hsr\x00'}]}, 0x34}}, 0x0) 19:50:39 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x3e, 0xa, 0x0, "8cac3a94aa7dfd73c37b6187fc5a11e774c84a936b60a327949ce1273b94266c"}) 19:50:39 executing program 5: r0 = socket(0x2, 0x2000000003, 0x100000001) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendto(r0, &(0x7f0000000080)="0400", 0x2, 0x8002, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0xffffffffffffff71, 0x2, 0x8400000000000000}, 0x28) recvmmsg(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/48, 0x30}], 0x1}}], 0x1, 0x0, 0x0) 19:50:39 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb8, 0x1109, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x6, {0x9}, {{}, [{}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) 19:50:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r1, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}}], 0x1, 0x0) 19:50:39 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) close(r0) 19:50:39 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 19:50:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8012, r0, 0x0) madvise(&(0x7f0000cf7000/0x3000)=nil, 0x3000, 0x1020000000c) madvise(&(0x7f0000bba000/0x1000)=nil, 0x1000, 0xc) 19:50:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x10000117, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000683ff4)={@multicast1, @loopback}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x2f) [ 2095.662090][T12865] usb 4-1: new high-speed USB device number 76 using dummy_hcd 19:50:39 executing program 4: r0 = shmget(0x1, 0x5000, 0x200, &(0x7f0000ff9000/0x5000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x525, &(0x7f0000000200)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9206ac3d78578125082f4fcc477cb57f565f04b15a9fdd6c1610c621c85fe3e348527b0"], 0x18}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040)) close(r1) [ 2095.942726][T12865] usb 4-1: Using ep0 maxpacket: 8 [ 2096.072249][T12865] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2096.262266][T12865] usb 4-1: New USB device found, idVendor=0fb8, idProduct=1109, bcdDevice= 0.40 [ 2096.271354][T12865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.279876][T12865] usb 4-1: Product: syz [ 2096.284185][T12865] usb 4-1: Manufacturer: syz [ 2096.288805][T12865] usb 4-1: SerialNumber: syz [ 2096.585963][T12865] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 2096.596044][T12865] usb 4-1: USB disconnect, device number 76 [ 2097.511944][T24879] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2097.751997][T24879] usb 4-1: Using ep0 maxpacket: 8 [ 2097.872135][T24879] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2098.042201][T24879] usb 4-1: New USB device found, idVendor=0fb8, idProduct=1109, bcdDevice= 0.40 [ 2098.051806][T24879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.059829][T24879] usb 4-1: Product: syz [ 2098.064179][T24879] usb 4-1: Manufacturer: syz [ 2098.068838][T24879] usb 4-1: SerialNumber: syz [ 2098.355191][T24879] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 2098.365455][T24879] usb 4-1: USB disconnect, device number 77 19:50:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$sock(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002100)='2', 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[], 0x10040) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0), 0x7, 0x0, 0x21f}, 0x142) 19:50:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x84, 0x7f, 0x0, 0x0) 19:50:43 executing program 5: syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000180)=""/130) 19:50:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0xaaaaaaaaaaaae2f, 0x0, 0x0, 0xffa3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1ed) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0x0, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:43 executing program 4: r0 = shmget(0x1, 0x5000, 0x200, &(0x7f0000ff9000/0x5000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x525, &(0x7f0000000200)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9206ac3d78578125082f4fcc477cb57f565f04b15a9fdd6c1610c621c85fe3e348527b0"], 0x18}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040)) close(r1) 19:50:43 executing program 3: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x5}) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x0) 19:50:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x8, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100), &(0x7f0000000000)=0x18c) 19:50:43 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xe, 0x0, "e74a3b00080520be003f00"}) 19:50:43 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x12, 0x1, 0x0, "616052eabcab615670171ebe6cde243bbf3da07800"}) 19:50:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, @bond_slave={{0x10, 0x1, 'bond_slave\x00'}, {0xc, 0x5, @IFLA_BOND_SLAVE_QUEUE_ID={0x8}}}}]}, 0x40}}, 0x0) 19:50:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0xaaaaaaaaaaaae2f, 0x0, 0x0, 0xffa3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1ed) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0x0, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) [ 2099.865269][ T561] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 2099.940019][ T563] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 19:50:49 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) dup2(r0, r2) 19:50:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$sock(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002100)='2', 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[], 0x10040) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0), 0x7, 0x0, 0x21f}, 0x142) 19:50:49 executing program 4: r0 = shmget(0x1, 0x5000, 0x200, &(0x7f0000ff9000/0x5000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x525, &(0x7f0000000200)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9206ac3d78578125082f4fcc477cb57f565f04b15a9fdd6c1610c621c85fe3e348527b0"], 0x18}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040)) close(r1) 19:50:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, @bond_slave={{0x10, 0x1, 'bond_slave\x00'}, {0xc, 0x5, @IFLA_BOND_SLAVE_QUEUE_ID={0x8}}}}]}, 0x40}}, 0x0) 19:50:49 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/282], 0x0) syz_usb_control_io$printer(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0xfffffffffffffe3e, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x22, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, '\x00', "022000"}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x0, 0x81, {0x81, 0x0, "b24aa67be06392dec5ec2f69d14c0a0dc2760482eef164105b1bf2b7c520b255b46b463f23edcaea567e9a16183e7094d5ef0a11614603f866fea4c5b27c20d604248b2e7af1bcc34c6ad8aa3681ae7e1108283b1db6b33555b8334846248ea81b7da87e439d6de347f215b0c99fd9756e4c0de3270d5ecd9d94ad5c785dc0"}}, 0x0}, 0x0) 19:50:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0xaaaaaaaaaaaae2f, 0x0, 0x0, 0xffa3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1ed) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0x0, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2105.952495][ T583] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 19:50:50 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) dup2(r0, r2) 19:50:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, @bond_slave={{0x10, 0x1, 'bond_slave\x00'}, {0xc, 0x5, @IFLA_BOND_SLAVE_QUEUE_ID={0x8}}}}]}, 0x40}}, 0x0) 19:50:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0xaaaaaaaaaaaae2f, 0x0, 0x0, 0xffa3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1ed) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0x0, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:50 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) dup2(r0, r2) [ 2106.212308][T24879] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2106.225048][ T599] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 19:50:50 executing program 4: r0 = shmget(0x1, 0x5000, 0x200, &(0x7f0000ff9000/0x5000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x525, &(0x7f0000000200)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9206ac3d78578125082f4fcc477cb57f565f04b15a9fdd6c1610c621c85fe3e348527b0"], 0x18}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040)) close(r1) 19:50:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, @bond_slave={{0x10, 0x1, 'bond_slave\x00'}, {0xc, 0x5, @IFLA_BOND_SLAVE_QUEUE_ID={0x8}}}}]}, 0x40}}, 0x0) 19:50:50 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) dup2(r0, r2) [ 2106.451943][T24879] usb 4-1: Using ep0 maxpacket: 16 [ 2106.475796][ T612] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 2106.572791][T24879] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 2106.581179][T24879] usb 4-1: config 0 has no interface number 0 [ 2106.587639][T24879] usb 4-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 2106.596935][T24879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2106.647979][T24879] usb 4-1: config 0 descriptor?? [ 2107.352318][T24879] gtco 4-1:0.219: Collection level already at zero [ 2107.359988][T24879] input: GTCO_CalComp as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.219/input/input114 [ 2107.554859][T24879] usb 4-1: USB disconnect, device number 78 [ 2107.613421][T24879] gtco 4-1:0.219: gtco driver disconnected [ 2108.321938][T12865] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2108.561840][T12865] usb 4-1: Using ep0 maxpacket: 16 [ 2108.692029][T12865] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 2108.700444][T12865] usb 4-1: config 0 has no interface number 0 [ 2108.706953][T12865] usb 4-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 2108.716157][T12865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.726337][T12865] usb 4-1: config 0 descriptor?? [ 2109.073942][T12865] gtco 4-1:0.219: Failed to get HID Report Descriptor of size: 129 [ 2109.082250][T12865] gtco: probe of 4-1:0.219 failed with error -5 [ 2109.095307][T12865] usb 4-1: USB disconnect, device number 79 19:50:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$sock(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002100)='2', 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[], 0x10040) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0), 0x7, 0x0, 0x21f}, 0x142) 19:50:58 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000400)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d) chmod(&(0x7f00000001c0)='./file0\x00', 0x38) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'team_slave_0\x00'}, 0x18) bind$inet(r4, &(0x7f00000004c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0xffffffffffffff62) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth1_to_bridge\x00', 0x3}, 0x18) sendto$inet(r4, &(0x7f0000a88f88), 0x0, 0x2000f401, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0xfffffffffffffff7, 0x0, 0x0, 'queue1\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="dabb28f2c84f1f7294", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet6_dccp_int(r5, 0x21, 0x4, &(0x7f0000000180), &(0x7f0000000300)=0x4) r6 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x240000) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000000c0)={0x9, 0x2, 0x10001, 0x7f, 0x1, 0x200000}) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000480)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1004000000016) r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) fsetxattr(r7, &(0x7f00000003c0)=@known='system.sockprotoname\x00', &(0x7f0000000440)='\x00', 0x1, 0x1) keyctl$restrict_keyring(0x1d, r8, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)='^bdevwlan0procsecurity\x00') 19:50:58 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 19:50:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfafc, {{0x19000000, 0x0, 0x0, @rand_addr="27909b2d67ac0dcded3ed7eeca670d08"}, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, r1}}, 0x48) 19:50:58 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000280)=""/99, 0x42a}], 0x1, 0x0, 0xfffffffffffffcb2, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000002a, 0x0, &(0x7f0000003700)={0x77359400}) 19:50:58 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x8c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 2114.265424][ T640] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid = 0, id = 0 19:50:58 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x204e20, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 2114.315632][ T644] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 3, id = 0 19:50:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc1506315fd047a57a455f5f90bba001b5080da6218a8106df2858ec973328e5a05078a3fe3b52020203417e25ee74e82", 0x82}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:50:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000000)="240000001a005f3814f9f407000904018002020000000000000000000800040040000000", 0x24) 19:50:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00\x1c\x83\xa4\x13+\v\xcef\xc8\xe0O\xc7\xaa\xc5q\x8d\xe3\x1c\x9al\xca8%\xe0(\xa0Si\b\xa2\xe3\x82\x18\xd72\xad)\x00T\xf9\x12\xf6n2d\x92\xaf\xa4\xae?U\nv\xfa,\xc9\x10O\xf1D\xceEP,6\xfd~g\x9b\xc9\xe8') lseek(r2, 0x0, 0x2) 19:50:58 executing program 1: unshare(0x400) r0 = socket(0x40000000002, 0x3, 0x80000000002) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 19:50:58 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) 19:50:58 executing program 3: r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x23d, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0xcd}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/242, 0xf2}], 0x1, 0x0, 0xffffff1c, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x75c}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0xa00}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 2114.991881][T24879] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2115.231977][T24879] usb 5-1: Using ep0 maxpacket: 32 [ 2115.352148][T24879] usb 5-1: config 1 has an invalid descriptor of length 53, skipping remainder of the config [ 2115.362675][T24879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2115.371643][T24879] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2115.541991][T24879] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2115.551128][T24879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.559398][T24879] usb 5-1: Product: syz [ 2115.563755][T24879] usb 5-1: Manufacturer: syz [ 2115.568451][T24879] usb 5-1: SerialNumber: syz [ 2115.854051][T24879] usb 5-1: selecting invalid altsetting 1 [ 2115.872293][T24879] cdc_ncm 5-1:1.0: bind() failure [ 2115.882636][T24879] usb 5-1: USB disconnect, device number 81 [ 2116.601880][T12865] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2116.841910][T12865] usb 5-1: Using ep0 maxpacket: 32 [ 2116.962101][T12865] usb 5-1: config 1 has an invalid descriptor of length 53, skipping remainder of the config [ 2116.972624][T12865] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2116.981584][T12865] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2117.152177][T12865] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2117.161329][T12865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.169574][T12865] usb 5-1: Product: syz [ 2117.173860][T12865] usb 5-1: Manufacturer: syz [ 2117.178483][T12865] usb 5-1: SerialNumber: syz [ 2117.464004][T12865] usb 5-1: selecting invalid altsetting 1 [ 2117.492277][T12865] cdc_ncm 5-1:1.0: bind() failure [ 2117.502832][T12865] usb 5-1: USB disconnect, device number 82 19:51:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$sock(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002100)='2', 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[], 0x10040) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0), 0x7, 0x0, 0x21f}, 0x142) 19:51:04 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff40700000000000f43d0700000000000095000000000000002ba728041598d6fbd30cb599e83d248c7c292014cbb34db754f27bf6a5a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d88ee5c867ddd58211d6ececb0cd2b6d357b8580218ce740068725837fe3c565218f95a074e468ee2000000000000000000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) 19:51:04 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x40002014}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 19:51:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x23d, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0xcd}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/242, 0xf2}], 0x1, 0x0, 0xffffff1c, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x75c}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0xa00}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 19:51:04 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc1506315fd047a57a455f5f90bba001b5080da6218a8106df2858ec973328e5a05078a3fe3b52020203417e25ee74e82", 0x82}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:51:04 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000640)="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", 0x2cf, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000080)=""/62, 0x3e}], 0x2}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000100)={0x1a, 0x4, 0x32cd}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) accept4$inet(r4, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x80000) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 19:51:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2, 0x6, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x0, 0x0) io_submit(r3, 0x20000000000001c3, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x326}]) 19:51:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x23d, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0xcd}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/242, 0xf2}], 0x1, 0x0, 0xffffff1c, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x75c}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0xa00}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 19:51:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") close(r0) 19:51:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x23d, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0xcd}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/242, 0xf2}], 0x1, 0x0, 0xffffff1c, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x75c}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0xa00}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 19:51:05 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000640)="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", 0x2cf, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000080)=""/62, 0x3e}], 0x2}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000100)={0x1a, 0x4, 0x32cd}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) accept4$inet(r4, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x80000) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 19:51:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, &(0x7f0000000080)) 19:51:10 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc1506315fd047a57a455f5f90bba001b5080da6218a8106df2858ec973328e5a05078a3fe3b52020203417e25ee74e82", 0x82}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:51:10 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 19:51:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") close(r0) 19:51:10 executing program 2: r0 = syz_usb_connect(0x0, 0x51, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3, 0x8d, 0x53, 0x100000008, 0x82d, 0x100, 0x87c2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xad, 0x0, 0x0, 0x89, 0xa3, 0x52}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000000c0)={0x0, 0x0, 0x6, "bf132936bec4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 19:51:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x0, 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:51:10 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000640)="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", 0x2cf, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000080)=""/62, 0x3e}], 0x2}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000100)={0x1a, 0x4, 0x32cd}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) accept4$inet(r4, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x80000) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 19:51:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="2e0000001e000503ed0080647e6394f26700d2000500120111407f480f0001002700000002000000f88000f01700", 0x2e}], 0x1}, 0x0) 19:51:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") close(r0) [ 2127.122290][ T853] netlink: 'syz-executor.1': attribute type 274 has an invalid length. [ 2127.142548][T24879] usb 4-1: new high-speed USB device number 80 using dummy_hcd 19:51:11 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b700000001ed01edbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b706000008ffffffdd400300000000005504000001ed00003400000000ffffffbc640000000000007b1a00fe000000001d00000000000000b7010000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693002e7f3be361917adee2ee1caa2b4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51ebd615b6bf01c8e8b1b5e4fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc6422af4516c8608867f3e1b16cb7798b3e6440c2fbdb00a3e35208fc620d2cd8dff0c710e4cdbf4fc41fbb07f94369e646b8ee6de2109fbe4ef154400e2438ec649dc74a1a61ab36a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8a3658d4202c028bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d873fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06ad99edc3a6138d5fcfba53f8d0c5dff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6f7ffffffffffffffd228a40f9411fe7226a4040996e37c4f46756d50b928f63fc77b830282294484fa6da21b62987c71c1d6e6297eadbab95444937b029e3bd90eef517a2d0ab5b79d6041cb17a475f677085eaa790167cdd110d9fcc36a8dc6cf1c8e24fe23d7b67259611b731c6fc186844deadc5bdaa83c0556cbb3c059516806c9b3382fa112a062deb156619f6d14206180c0d4201ddb5e08f8325537bdfcb5e63d851e44dd66a233020e21523d52fb773cae297bb9c53b24e05e3c7e47420849fec082cb98cc58a3005d3dc31ef661261ddce821b6322061516eb2000000632058e42ccbf931b694069c46818c26e5a5396d975aad73cc0c4ea176dd51a6efe7d6c32ff62e0c63aa73feac44dd37775d26a406371fdccc17cfb0688e4a28232980b5ffe4bc8d0df46ad2a47e871ff9b6f2a71c485a1a2c4fc9a1d4dca04bdb2e55f61c585bf681c879457c5b10bd8847d31a11f00fd29f2cd8eeb5ff9150e185077dc6e8f4a8e0b7afc0b84c711233c330767e85e0ad2f55853fb91f6c956d07ba81f690f5f0d5d14cd21b2bd3f884a250e769c3c20dd8260ae6f2dda82ae27012c290920a58f6"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb7}, 0x48) 19:51:11 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000640)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b6921681e5536dbc0f309747cc199a7f9a20d01e04d55fb1c26504e3e4738aac76780b5c2363a6dc4d10fe9adc2b363abf6981a31f6a58ef2103e7a145b11649eac6d4cc29a315faf899c2e35d08b1974199c08bf4798207b78d8dd89e727382318265acc85a4444869dfc22ba7fd79b455635a715fa1e705070e2857ef21a3076cdfc2c29b26547360add94ef9c349ae62f54e7a90e1aae762a11b2cc6bd720034fac41f1de628e2a3166ec21e03c68a60708328e1606a83211bc78be79097861ce52747ac474593d76f9ec5cdd91725cb16e62b4bb027fbb96eab344de0401076c6345a7d32e9fe9ba1e68ac07081a7d1e0ed1eb9e96b41214af554f1831dfd8bd2b466789f4295317d17c138abe5fa9044a44792e9aecfb3f9130ff673786a8ef2b14c4999c29a5713c2fb5e35f2fae0d58b64355a697efd45e36528e57c68a62c6edc7879962e05419c7c5fa64ec92e670821df50d0f3a7312d2120f363954e72ba0322fc4318f819b1e2b1a17fb939a5db9c1a0a83b44abcffc3dd555d4dd30c0a4bd524c29d4d57bc906c012446c99a882162f3f72cce0702d7394288807fe2a308e01adc9bbf2a9cd78fabaa3c10640777e0813726a70df3323924035b235fd39ae4ab08d3f09bd231b38dca4389b098b0d3538dd3ef5bf068c1df8fbe00b0b2aa9ec3de5d3fba56594328a643c2799b8371adc6ecdfd9b9c4e52102eaa83b57da14645e442b4b7ad5f555d872dc50c330d145ca853b768b990dbaa18ab7f7e2e2d695e980f96d646e8c893ad912bc71237e9aa3ef2d8a40b5629ca02a82556bd433a7222dc3257fd6ace72b00b6f8c9d621c54f777ee5fd1fc59d11a7ea96855d58bb21d40d1bbdfecad8ed15a25062f7692e1879793657f91b6c78d739ef6811d677cf64b4346ac28740f143d5fd3e00e15416e2dbc76c17b1c09fd0b4065d2252b29370c", 0x2cf, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000080)=""/62, 0x3e}], 0x2}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000100)={0x1a, 0x4, 0x32cd}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) accept4$inet(r4, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x80000) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 19:51:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x10000000}]}]}, 0x24}}, 0x0) [ 2127.432229][T24879] usb 4-1: Using ep0 maxpacket: 16 19:51:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") close(r0) [ 2127.456726][ T866] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 2127.581270][T24879] usb 4-1: config 0 has an invalid interface number: 249 but max is 0 [ 2127.589651][T24879] usb 4-1: config 0 has no interface number 0 [ 2127.595960][T24879] usb 4-1: config 0 interface 249 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2127.605992][T24879] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=f9.e7 [ 2127.615208][T24879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2127.626830][T24879] usb 4-1: config 0 descriptor?? [ 2127.714706][T24879] cyberjack 4-1:0.249: Reiner SCT Cyberjack USB card reader converter detected [ 2127.725034][T24879] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 2127.771208][T24879] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 2127.920068][T24879] usb 4-1: USB disconnect, device number 80 [ 2127.931460][T24879] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 2127.943711][T24879] cyberjack 4-1:0.249: device disconnected [ 2128.711956][T24879] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2128.951873][T24879] usb 4-1: Using ep0 maxpacket: 16 [ 2129.072112][T24879] usb 4-1: config 0 has an invalid interface number: 249 but max is 0 [ 2129.080924][T24879] usb 4-1: config 0 has no interface number 0 [ 2129.087296][T24879] usb 4-1: config 0 interface 249 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2129.097291][T24879] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=f9.e7 [ 2129.106561][T24879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2129.116115][T24879] usb 4-1: config 0 descriptor?? [ 2129.154444][T24879] cyberjack 4-1:0.249: Reiner SCT Cyberjack USB card reader converter detected [ 2129.164898][T24879] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 2129.182615][T24879] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 2129.354319][T24879] usb 4-1: USB disconnect, device number 81 [ 2129.366697][T24879] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 2129.378319][T24879] cyberjack 4-1:0.249: device disconnected 19:51:13 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc1506315fd047a57a455f5f90bba001b5080da6218a8106df2858ec973328e5a05078a3fe3b52020203417e25ee74e82", 0x82}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:51:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0x800000000802}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) close(r0) 19:51:13 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) [ 2129.960876][ T884] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 2129.969722][ T884] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2129.980808][ T884] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2130.004366][ T884] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2130.012391][ T884] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2130.106275][ T891] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 2130.114912][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2130.134619][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2133.401952][T24879] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2133.641887][T24879] usb 3-1: Using ep0 maxpacket: 8 [ 2133.762065][T24879] usb 3-1: config 1 has an invalid interface number: 173 but max is 0 [ 2133.770437][T24879] usb 3-1: config 1 has no interface number 0 [ 2133.776834][T24879] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=87.c2 [ 2133.786206][T24879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.162238][T24879] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 2134.170673][T24879] visor: probe of 3-1:1.173 failed with error -110 19:51:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="be42690bbbba459e7899004e0dd50738b64feab13891701d58a3c6f61e7b443ec676bd07de202eabe72f2873eccae1f6a87a670aced3f93463f6ac8a534fe40bcb744c12db3d0d42b52a7594e433e875eb91012a1b2ae413", 0x58}], 0x1) writev(r0, &(0x7f00000012c0)=[{&(0x7f0000000000)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x10284}, {&(0x7f0000000280)="aa04484ed0e5910aa84d4577670e12d9fc56c9953fbd806371162abf7ca71e023a27b238", 0xfeb9}], 0x2) 19:51:21 executing program 4: sendmmsg$unix(0xffffffffffffffff, &(0x7f00000096c0)=[{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000300)="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", 0xe42}], 0x1}], 0x1, 0x0) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x4a5, 0x15}) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000180)={{0x29, @loopback, 0x0, 0x0, 'sh\x00'}, {@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x44) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="a97ed998fe8a"}, 0x14) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x5, 0x4) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 19:51:21 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x641002, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) clone3(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xc, @perf_bp={0x0, 0x8}, 0xb5817fce72960c30, 0x0, 0x40000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x80000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) r2 = syz_open_dev$dmmidi(&(0x7f0000000500)='/dev/dmmidi#\x00', 0x1, 0x80) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000540)={0x9, "0432ee38766e8f575213ad59a900fbcf9e98b4c6a91ad04b911e26a70817ee62", 0x2, 0xfffff2a4, 0x0, 0x10}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e21, @multicast2}}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) pread64(r4, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) pread64(r6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000480)={0x0, 0x180000, r6}) ioctl$FITRIM(r7, 0xc0185879, &(0x7f00000004c0)={0x7, 0x101, 0x401}) unshare(0x40000000) r8 = socket$inet6(0xa, 0x3, 0xfc) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0000000000000}}, 0x1c) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) write(r1, &(0x7f0000000200)="716f037b99df338ddf55f0c34b1c5fcac780ca2a109b04b5d0584f5ff9e99e1105132fbe17b5a07c7bc139145e86aeec7ebedcd39b6cac399cc8a7be09db841208bdccc8c72da822bbfa40d9fbb3", 0x4e) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000140)=0xc) 19:51:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0x800000000802}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) close(r0) 19:51:21 executing program 0: syz_usb_connect(0x0, 0x9a, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x85, 0xb7, 0x96, 0x8, 0x421, 0x6510, 0x95ed, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x22, 0x0, 0x0, 0x2, 0xfe, 0xd5}}]}}]}}, 0x0) 19:51:21 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) [ 2137.482058][T24879] usb 3-1: USB disconnect, device number 37 [ 2137.573361][ T903] IPVS: ftp: loaded support on port[0] = 21 19:51:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0x800000000802}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) close(r0) [ 2137.775557][ T903] IPVS: ftp: loaded support on port[0] = 21 [ 2137.872405][T13223] usb 1-1: new high-speed USB device number 90 using dummy_hcd 19:51:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) 19:51:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0x800000000802}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) close(r0) 19:51:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) [ 2138.111823][T13223] usb 1-1: Using ep0 maxpacket: 8 19:51:22 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) [ 2138.232561][T13223] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 2138.241926][T13223] usb 1-1: config 0 has no interface number 0 [ 2138.248396][T13223] usb 1-1: New USB device found, idVendor=0421, idProduct=6510, bcdDevice=95.ed [ 2138.258077][T13223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:51:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00', 0x56}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)) [ 2138.415131][T13223] usb 1-1: config 0 descriptor?? [ 2138.478901][ T933] input: syz0 as /devices/virtual/input/input116 [ 2138.488349][T13223] cdc_phonet: probe of 1-1:0.34 failed with error -22 [ 2138.670415][T13223] usb 1-1: USB disconnect, device number 90 [ 2139.451927][T24667] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2139.702422][T24667] usb 1-1: Using ep0 maxpacket: 8 [ 2139.822358][T24667] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 2139.831129][T24667] usb 1-1: config 0 has no interface number 0 [ 2139.837801][T24667] usb 1-1: New USB device found, idVendor=0421, idProduct=6510, bcdDevice=95.ed [ 2139.847788][T24667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2139.858881][T24667] usb 1-1: config 0 descriptor?? [ 2139.904079][T24667] cdc_phonet: probe of 1-1:0.34 failed with error -22 [ 2140.104494][T13223] usb 1-1: USB disconnect, device number 91 19:51:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000bc0)="230000004300817478d13276ca81deff020000000d0001000000006003000020c9f76c", 0x23}], 0x1}, 0x0) 19:51:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x13}]}}}]}, 0x3c}}, 0x0) 19:51:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) 19:51:26 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) fsmount(r2, 0x0, 0x0) 19:51:26 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 19:51:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="090000000000363940d3c7a3ba27660199783b0a82", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 2142.704961][ T953] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 2142.714639][ T953] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 19:51:26 executing program 0: r0 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000001800)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev}}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001700)=[{0x0}, {&(0x7f0000000100)="96", 0x1}], 0x2}}], 0x2, 0x9400) 19:51:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x0, 0xfffffffffffffe96, 0xfffffffffffffffd}) 19:51:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) 19:51:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") fanotify_mark(0xffffffffffffffff, 0x130, 0x0, 0xffffffffffffffff, 0x0) 19:51:27 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x80000080045010, 0x0) 19:51:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x14}, {0x6, 0x0, 0x0, 0xffffffff7fffffff}]}) 19:51:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000002a40)={{0x12, 0x1, 0x0, 0x94, 0x1b, 0x69, 0x40, 0x711, 0x210, 0x316b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb8, 0x0, 0x2, 0xc4, 0x2f, 0xa9, 0x0, [], [{{0x9, 0x5, 0x88, 0x3}}, {{0x9, 0x5, 0x87, 0x3}}]}}]}}]}}, 0x0) 19:51:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000200)={0x7, @pix={0x1}}) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000200)={0x7, @pix={0x1}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r3, 0x10, &(0x7f00000001c0)={&(0x7f00000002c0)=""/235, 0xeb, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r2, 0x10, &(0x7f00000003c0)={&(0x7f00000000c0)=""/198, 0xc6, r4}}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000080)=0xf5, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0'}, 0x10098) 19:51:30 executing program 4: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f0000000940)={&(0x7f0000000000)=@xdp={0x2c, 0x0, r1}, 0x80, 0x0}, 0x0) 19:51:30 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000003540)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x6d, 0x0}}, {{&(0x7f0000001500)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000002640)=[{&(0x7f0000001540)="6d646f25c8852efcdae48556ee5f676c79f81fc4d03c7eb38fe51151a54287b7bce410331f55e98f22106c5c8e7bf61a2820f33679640fd5c3459dc2499d0f64893e8a58b7ea7c79d02790eb75d8643125d130ba49e7a3e321f7761c884767a53f78887978dec9f1a5add12709047135acae02cd53524e6f388db954382e529628f6ab44f4976b8f1b222bbce5bd8f5858fd344b664e672c5b1b07b61de2f5a4be2e6f3307b054be28c9b5", 0xfef6}, {&(0x7f0000001600)="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", 0x4ee}], 0x2, &(0x7f00000002c0)=ANY=[]}}], 0x2, 0x0) 19:51:30 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x47, &(0x7f0000000680)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x11, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x11, 0x0, [], "d3c904fd8888ac5f07"}}}}}}, 0x0) 19:51:30 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 19:51:31 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x91, 0x14, 0x8f, 0x40, 0x411, 0x12, 0x565f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x0, 0x54, 0x74, 0x24}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000023c0)={0xac, &(0x7f0000000180)=ANY=[@ANYBLOB="000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:51:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'gretap0\x00', {0x2, 0x0, @loopback}}) 19:51:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000a80)={0x1, 0x0, [{0x40000094}]}) 19:51:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c105061aa0e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d333110e000000000000792ad9dfe644c6cc55acf4702e2149cf7a37744b7146dd4f70148779a55ac348323648c6fd4f39d07e3d5d936f"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 19:51:31 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f0000000280)='./file0/../file0\x00') chdir(&(0x7f00000002c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000580)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) [ 2147.732326][T13223] usb 1-1: config 0 has an invalid interface number: 206 but max is 0 [ 2147.741852][T13223] usb 1-1: config 0 has no interface number 0 [ 2147.748042][T13223] usb 1-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=56.5f [ 2147.757686][T13223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.768331][T13223] usb 1-1: config 0 descriptor?? [ 2148.477451][T13223] ===================================================== [ 2148.481677][T13223] BUG: KMSAN: uninit-value in batadv_hard_if_event+0x23c0/0x3260 [ 2148.481677][T13223] CPU: 0 PID: 13223 Comm: kworker/0:3 Not tainted 5.4.0-rc3+ #0 [ 2148.496530][T13223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2148.496530][T13223] Workqueue: usb_hub_wq hub_event [ 2148.496530][T13223] Call Trace: [ 2148.496530][T13223] dump_stack+0x191/0x1f0 [ 2148.496530][T13223] kmsan_report+0x14a/0x2f0 [ 2148.496530][T13223] __msan_warning+0x73/0xf0 [ 2148.496530][T13223] batadv_hard_if_event+0x23c0/0x3260 [ 2148.496530][T13223] ? batadv_hardif_remove_interface+0x3f0/0x3f0 [ 2148.496530][T13223] raw_notifier_call_chain+0x13d/0x240 [ 2148.496530][T13223] register_netdevice+0x2126/0x26a0 [ 2148.496530][T13223] register_netdev+0x93/0xd0 [ 2148.496530][T13223] rtl8150_probe+0x11ef/0x14a0 [ 2148.496530][T13223] ? read_bulk_callback+0x1030/0x1440 [ 2148.496530][T13223] ? read_eprom_word+0xde0/0xde0 [ 2148.496530][T13223] usb_probe_interface+0xd19/0x1310 [ 2148.496530][T13223] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 2148.496530][T13223] ? usb_register_driver+0x860/0x860 [ 2148.496530][T13223] really_probe+0xd91/0x1f90 [ 2148.496530][T13223] driver_probe_device+0x1ba/0x510 [ 2148.496530][T13223] __device_attach_driver+0x5b8/0x790 [ 2148.496530][T13223] bus_for_each_drv+0x28e/0x3b0 [ 2148.496530][T13223] ? deferred_probe_work_func+0x400/0x400 [ 2148.496530][T13223] __device_attach+0x489/0x750 [ 2148.496530][T13223] device_initial_probe+0x4a/0x60 [ 2148.496530][T13223] bus_probe_device+0x131/0x390 [ 2148.496530][T13223] device_add+0x25b5/0x2df0 [ 2148.496530][T13223] usb_set_configuration+0x309f/0x3710 [ 2148.496530][T13223] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 2148.496530][T13223] generic_probe+0xe7/0x280 [ 2148.496530][T13223] ? usb_choose_configuration+0xae0/0xae0 [ 2148.496530][T13223] usb_probe_device+0x146/0x200 [ 2148.496530][T13223] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 2148.496530][T13223] ? usb_register_device_driver+0x500/0x500 [ 2148.496530][T13223] really_probe+0xd91/0x1f90 [ 2148.496530][T13223] driver_probe_device+0x1ba/0x510 [ 2148.496530][T13223] __device_attach_driver+0x5b8/0x790 [ 2148.496530][T13223] bus_for_each_drv+0x28e/0x3b0 [ 2148.496530][T13223] ? deferred_probe_work_func+0x400/0x400 [ 2148.496530][T13223] __device_attach+0x489/0x750 [ 2148.496530][T13223] device_initial_probe+0x4a/0x60 [ 2148.496530][T13223] bus_probe_device+0x131/0x390 [ 2148.496530][T13223] device_add+0x25b5/0x2df0 [ 2148.496530][T13223] usb_new_device+0x23e5/0x2fb0 [ 2148.496530][T13223] hub_event+0x581d/0x72f0 [ 2148.496530][T13223] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 2148.496530][T13223] ? led_work+0x720/0x720 [ 2148.496530][T13223] ? led_work+0x720/0x720 [ 2148.496530][T13223] process_one_work+0x1572/0x1ef0 [ 2148.496530][T13223] worker_thread+0x111b/0x2460 [ 2148.496530][T13223] kthread+0x4b5/0x4f0 [ 2148.496530][T13223] ? process_one_work+0x1ef0/0x1ef0 [ 2148.496530][T13223] ? kthread_blkcg+0xf0/0xf0 [ 2148.496530][T13223] ret_from_fork+0x35/0x40 [ 2148.496530][T13223] [ 2148.496530][T13223] Uninit was stored to memory at: [ 2148.496530][T13223] kmsan_internal_chain_origin+0xbd/0x170 [ 2148.496530][T13223] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 2148.496530][T13223] kmsan_memcpy_metadata+0xb/0x10 [ 2148.496530][T13223] __msan_memcpy+0x56/0x70 [ 2148.496530][T13223] rtl8150_probe+0x1143/0x14a0 [ 2148.496530][T13223] usb_probe_interface+0xd19/0x1310 [ 2148.496530][T13223] really_probe+0xd91/0x1f90 [ 2148.496530][T13223] driver_probe_device+0x1ba/0x510 [ 2148.496530][T13223] __device_attach_driver+0x5b8/0x790 [ 2148.496530][T13223] bus_for_each_drv+0x28e/0x3b0 [ 2148.496530][T13223] __device_attach+0x489/0x750 [ 2148.496530][T13223] device_initial_probe+0x4a/0x60 [ 2148.496530][T13223] bus_probe_device+0x131/0x390 [ 2148.496530][T13223] device_add+0x25b5/0x2df0 [ 2148.496530][T13223] usb_set_configuration+0x309f/0x3710 [ 2148.496530][T13223] generic_probe+0xe7/0x280 [ 2148.496530][T13223] usb_probe_device+0x146/0x200 [ 2148.496530][T13223] really_probe+0xd91/0x1f90 [ 2148.496530][T13223] driver_probe_device+0x1ba/0x510 [ 2148.496530][T13223] __device_attach_driver+0x5b8/0x790 [ 2148.496530][T13223] bus_for_each_drv+0x28e/0x3b0 [ 2148.496530][T13223] __device_attach+0x489/0x750 [ 2148.496530][T13223] device_initial_probe+0x4a/0x60 [ 2148.496530][T13223] bus_probe_device+0x131/0x390 [ 2148.496530][T13223] device_add+0x25b5/0x2df0 [ 2148.496530][T13223] usb_new_device+0x23e5/0x2fb0 [ 2148.496530][T13223] hub_event+0x581d/0x72f0 [ 2148.496530][T13223] process_one_work+0x1572/0x1ef0 [ 2148.496530][T13223] worker_thread+0x111b/0x2460 [ 2148.496530][T13223] kthread+0x4b5/0x4f0 [ 2148.496530][T13223] ret_from_fork+0x35/0x40 [ 2148.496530][T13223] [ 2148.496530][T13223] Local variable description: ----node_id.i@rtl8150_probe [ 2148.496530][T13223] Variable was created at: [ 2148.496530][T13223] rtl8150_probe+0xdc8/0x14a0 [ 2148.496530][T13223] rtl8150_probe+0xdc8/0x14a0 [ 2148.496530][T13223] ===================================================== [ 2148.496530][T13223] Disabling lock debugging due to kernel taint [ 2148.496530][T13223] Kernel panic - not syncing: panic_on_warn set ... [ 2148.531646][ T936] ===================================================== [ 2148.531646][ T936] BUG: KMSAN: uninit-value in hex_string+0x7d8/0x8d0 [ 2148.496530][T13223] CPU: 0 PID: 13223 Comm: kworker/0:3 Tainted: G B 5.4.0-rc3+ #0 [ 2148.496530][T13223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2148.496530][T13223] Workqueue: usb_hub_wq hub_event [ 2148.496530][T13223] Call Trace: [ 2148.496530][T13223] dump_stack+0x191/0x1f0 [ 2148.496530][T13223] panic+0x3c9/0xc1e [ 2148.496530][T13223] kmsan_report+0x2e8/0x2f0 [ 2148.496530][T13223] __msan_warning+0x73/0xf0 [ 2148.496530][T13223] batadv_hard_if_event+0x23c0/0x3260 [ 2148.496530][T13223] ? batadv_hardif_remove_interface+0x3f0/0x3f0 [ 2148.496530][T13223] raw_notifier_call_chain+0x13d/0x240 [ 2148.496530][T13223] register_netdevice+0x2126/0x26a0 [ 2148.496530][T13223] register_netdev+0x93/0xd0 [ 2148.496530][T13223] rtl8150_probe+0x11ef/0x14a0 [ 2148.496530][T13223] ? read_bulk_callback+0x1030/0x1440 [ 2148.496530][T13223] ? read_eprom_word+0xde0/0xde0 [ 2148.496530][T13223] usb_probe_interface+0xd19/0x1310 [ 2148.496530][T13223] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 2148.496530][T13223] ? usb_register_driver+0x860/0x860 [ 2148.496530][T13223] really_probe+0xd91/0x1f90 [ 2148.496530][T13223] driver_probe_device+0x1ba/0x510 [ 2148.496530][T13223] __device_attach_driver+0x5b8/0x790 [ 2148.496530][T13223] bus_for_each_drv+0x28e/0x3b0 [ 2148.496530][T13223] ? deferred_probe_work_func+0x400/0x400 [ 2148.496530][T13223] __device_attach+0x489/0x750 [ 2148.496530][T13223] device_initial_probe+0x4a/0x60 [ 2148.496530][T13223] bus_probe_device+0x131/0x390 [ 2148.496530][T13223] device_add+0x25b5/0x2df0 [ 2148.496530][T13223] usb_set_configuration+0x309f/0x3710 [ 2148.496530][T13223] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 2148.496530][T13223] generic_probe+0xe7/0x280 [ 2148.496530][T13223] ? usb_choose_configuration+0xae0/0xae0 [ 2148.496530][T13223] usb_probe_device+0x146/0x200 [ 2148.496530][T13223] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 2148.496530][T13223] ? usb_register_device_driver+0x500/0x500 [ 2148.496530][T13223] really_probe+0xd91/0x1f90 [ 2148.496530][T13223] driver_probe_device+0x1ba/0x510 [ 2148.496530][T13223] __device_attach_driver+0x5b8/0x790 [ 2148.496530][T13223] bus_for_each_drv+0x28e/0x3b0 [ 2148.496530][T13223] ? deferred_probe_work_func+0x400/0x400 [ 2148.496530][T13223] __device_attach+0x489/0x750 [ 2148.496530][T13223] device_initial_probe+0x4a/0x60 [ 2148.496530][T13223] bus_probe_device+0x131/0x390 [ 2148.496530][T13223] device_add+0x25b5/0x2df0 [ 2148.496530][T13223] usb_new_device+0x23e5/0x2fb0 [ 2148.496530][T13223] hub_event+0x581d/0x72f0 [ 2148.496530][T13223] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 2148.496530][T13223] ? led_work+0x720/0x720 [ 2148.496530][T13223] ? led_work+0x720/0x720 [ 2148.496530][T13223] process_one_work+0x1572/0x1ef0 [ 2148.496530][T13223] worker_thread+0x111b/0x2460 [ 2148.496530][T13223] kthread+0x4b5/0x4f0 [ 2148.496530][T13223] ? process_one_work+0x1ef0/0x1ef0 [ 2148.496530][T13223] ? kthread_blkcg+0xf0/0xf0 [ 2148.496530][T13223] ret_from_fork+0x35/0x40 [ 2148.531646][ T936] CPU: 1 PID: 936 Comm: udevd Tainted: G B 5.4.0-rc3+ #0 [ 2148.531646][ T936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2148.531646][ T936] Call Trace: [ 2148.531646][ T936] dump_stack+0x191/0x1f0 [ 2148.531646][ T936] kmsan_report+0x14a/0x2f0 [ 2148.531646][ T936] __msan_warning+0x73/0xf0 [ 2148.531646][ T936] hex_string+0x7d8/0x8d0 [ 2148.531646][ T936] pointer+0xbfe/0x1d10 [ 2148.531646][ T936] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 2148.531646][ T936] vsnprintf+0x1c0c/0x3210 [ 2148.531646][ T936] scnprintf+0x235/0x300 [ 2148.531646][ T936] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2148.531646][ T936] sysfs_format_mac+0xde/0x100 [ 2148.531646][ T936] address_show+0x159/0x1d0 [ 2148.531646][ T936] ? link_mode_show+0x1a0/0x1a0 [ 2148.531646][ T936] dev_attr_show+0xd8/0x1e0 [ 2148.531646][ T936] sysfs_kf_seq_show+0x434/0x7b0 [ 2148.531646][ T936] ? sysfs_kf_write+0x2a0/0x2a0 [ 2148.531646][ T936] kernfs_seq_show+0x164/0x1e0 [ 2148.531646][ T936] ? kernfs_seq_next+0x3e0/0x3e0 [ 2148.531646][ T936] seq_read+0xac6/0x1d90 [ 2148.531646][ T936] kernfs_fop_read+0x2c3/0x9a0 [ 2148.531646][ T936] ? kernfs_notify_workfn+0x960/0x960 [ 2148.531646][ T936] __vfs_read+0x1a9/0xc90 [ 2148.531646][ T936] ? rw_verify_area+0x3a5/0x5e0 [ 2148.531646][ T936] vfs_read+0x359/0x6f0 [ 2148.531646][ T936] ksys_read+0x265/0x430 [ 2148.531646][ T936] __se_sys_read+0x92/0xb0 [ 2148.531646][ T936] __x64_sys_read+0x4a/0x70 [ 2148.531646][ T936] do_syscall_64+0xb6/0x160 [ 2148.531646][ T936] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 2148.531646][ T936] RIP: 0033:0x7f9c2c86a310 [ 2148.531646][ T936] Code: 73 01 c3 48 8b 0d 28 4b 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 83 3d e5 a2 2b 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e 8a 01 00 48 89 04 24 [ 2148.531646][ T936] RSP: 002b:00007fff40d0a528 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2148.531646][ T936] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f9c2c86a310 [ 2148.531646][ T936] RDX: 0000000000001000 RSI: 00007fff40d0a9d0 RDI: 0000000000000005 [ 2148.531646][ T936] RBP: 00007fff40d0bb00 R08: 00007fff40d0bb00 R09: 00007f9c2c8c07d0 [ 2148.531646][ T936] R10: 312f316273752f30 R11: 0000000000000246 R12: 0000000000cef930 [ 2148.531646][ T936] R13: 0000000000cefa20 R14: 0000000000000001 R15: 0000000000cf258e [ 2148.531646][ T936] [ 2148.531646][ T936] Uninit was stored to memory at: [ 2148.531646][ T936] kmsan_internal_chain_origin+0xbd/0x170 [ 2148.531646][ T936] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 2148.531646][ T936] kmsan_memcpy_metadata+0xb/0x10 [ 2148.531646][ T936] __msan_memcpy+0x56/0x70 [ 2148.531646][ T936] rtl8150_probe+0x1143/0x14a0 [ 2148.531646][ T936] usb_probe_interface+0xd19/0x1310 [ 2148.531646][ T936] really_probe+0xd91/0x1f90 [ 2148.531646][ T936] driver_probe_device+0x1ba/0x510 [ 2148.531646][ T936] __device_attach_driver+0x5b8/0x790 [ 2148.531646][ T936] bus_for_each_drv+0x28e/0x3b0 [ 2148.531646][ T936] __device_attach+0x489/0x750 [ 2148.531646][ T936] device_initial_probe+0x4a/0x60 [ 2148.531646][ T936] bus_probe_device+0x131/0x390 [ 2148.531646][ T936] device_add+0x25b5/0x2df0 [ 2148.531646][ T936] usb_set_configuration+0x309f/0x3710 [ 2148.531646][ T936] generic_probe+0xe7/0x280 [ 2148.531646][ T936] usb_probe_device+0x146/0x200 [ 2148.531646][ T936] really_probe+0xd91/0x1f90 [ 2148.531646][ T936] driver_probe_device+0x1ba/0x510 [ 2148.531646][ T936] __device_attach_driver+0x5b8/0x790 [ 2148.531646][ T936] bus_for_each_drv+0x28e/0x3b0 [ 2148.531646][ T936] __device_attach+0x489/0x750 [ 2148.531646][ T936] device_initial_probe+0x4a/0x60 [ 2148.531646][ T936] bus_probe_device+0x131/0x390 [ 2148.531646][ T936] device_add+0x25b5/0x2df0 [ 2148.531646][ T936] usb_new_device+0x23e5/0x2fb0 [ 2148.531646][ T936] hub_event+0x581d/0x72f0 [ 2148.531646][ T936] process_one_work+0x1572/0x1ef0 [ 2148.531646][ T936] worker_thread+0x111b/0x2460 [ 2148.531646][ T936] kthread+0x4b5/0x4f0 [ 2148.531646][ T936] ret_from_fork+0x35/0x40 [ 2148.531646][ T936] [ 2148.531646][ T936] Local variable description: ----node_id.i@rtl8150_probe [ 2148.531646][ T936] Variable was created at: [ 2148.531646][ T936] rtl8150_probe+0xdc8/0x14a0 [ 2148.531646][ T936] rtl8150_probe+0xdc8/0x14a0 [ 2148.531646][ T936] ===================================================== [ 2148.496530][T13223] Shutting down cpus with NMI [ 2148.496530][T13223] Kernel Offset: disabled [ 2148.496530][T13223] Rebooting in 86400 seconds..