&(0x7f0000002f80)={0xac, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x19, 0x2, "b605"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) 15:26:01 executing program 4: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TI@Cv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1d4, 0x90}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = getpid() fcntl$lock(r2, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r3}) [ 2691.755825][T12808] usb 2-1: new high-speed USB device number 103 using dummy_hcd 15:26:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = getpid() fcntl$lock(r2, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r3}) 15:26:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = getpid() fcntl$lock(r2, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r3}) [ 2692.003822][T12379] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2692.023727][T12808] usb 2-1: Using ep0 maxpacket: 8 [ 2692.153337][T12808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2692.164487][T12808] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2692.177637][T12808] usb 2-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 2692.187744][T12808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2692.197917][T12808] usb 2-1: config 0 descriptor?? [ 2692.363084][T12379] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 2692.371496][T12379] usb 1-1: config 0 has no interface number 0 [ 2692.377865][T12379] usb 1-1: config 0 interface 105 has no altsetting 0 [ 2692.384763][T12379] usb 1-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 2692.394085][T12379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2692.404337][T12379] usb 1-1: config 0 descriptor?? [ 2692.663360][T12379] asix 1-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2692.693927][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.701073][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.708287][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.715427][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.722451][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.729738][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.736806][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.743926][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.750989][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.758097][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.765198][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.772287][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.779379][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.786566][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.793683][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.800696][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.807853][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.814873][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.821836][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.828933][T12808] wacom 0003:056A:0026.006E: unknown main item tag 0x0 [ 2692.836350][T12808] wacom 0003:056A:0026.006E: Unknown device_type for 'HID 056a:0026'. Assuming pen. [ 2692.847376][T12808] input: Wacom Intuos5 touch S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0026.006E/input/input297 [ 2692.866156][T12808] wacom 0003:056A:0026.006E: hidraw0: USB HID v0.00 Device [HID 056a:0026] on usb-dummy_hcd.1-1/input0 [ 2692.905235][ T5396] usb 2-1: USB disconnect, device number 103 [ 2693.743279][T12379] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2693.754009][T12379] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 2693.764924][T12379] asix: probe of 1-1:0.105 failed with error -71 [ 2693.776607][T12379] usb 1-1: USB disconnect, device number 20 [ 2694.493035][T12808] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2694.883356][T12808] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 2694.891653][T12808] usb 1-1: config 0 has no interface number 0 [ 2694.897989][T12808] usb 1-1: config 0 interface 105 has no altsetting 0 [ 2694.904966][T12808] usb 1-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 2694.914159][T12808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2694.924724][T12808] usb 1-1: config 0 descriptor?? [ 2695.183247][T12808] asix 1-1:0.105 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2695.233350][T12808] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2695.243961][T12808] asix 1-1:0.105 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 2695.273287][T12808] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2695.303689][T12808] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2695.314385][T12808] asix 1-1:0.105 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 2695.354288][T12808] asix: probe of 1-1:0.105 failed with error -71 [ 2695.365130][T12808] usb 1-1: USB disconnect, device number 21 15:26:06 executing program 3: unshare(0x40400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x1612a00b2e0a9a7e) 15:26:06 executing program 4: r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000002a002d0500"/20, @ANYRES32=r5, @ANYBLOB="000000000003000000000000"], 0x24}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 15:26:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x56a, 0x26, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0900740000007400bedc2a07000000789b"], 0x0, 0x0, 0x0, 0x0}, 0x0) 15:26:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000003340)="24000000020617031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492805, 0x0) 15:26:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r1) socket$inet_smc(0x2b, 0x1, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0xf, 0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}]) 15:26:06 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x3000000000016) [ 2696.726610][T13141] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:26:06 executing program 2: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000200)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$setregset(0x4205, r0, 0x2, &(0x7f00000000c0)={&(0x7f0000000040)="f5cc1eeb", 0x4}) 15:26:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001400)=ANY=[@ANYBLOB="6e6185fa1d5d3100c62200000100000000000000000000e4dbb76a54e90100008801faad005c1400200000001b2300000503000018030000cc000000ac0100006e01000010010000000000ff00000000e7b8bbb76c"], 0x1) 15:26:06 executing program 0: r0 = socket(0xa, 0x80005, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2}, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2696.983070][T12379] usb 2-1: new high-speed USB device number 104 using dummy_hcd 15:26:07 executing program 2: mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffff54, 0x11, 0x0, 0x27) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 15:26:07 executing program 0: r0 = userfaultfd(0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)={0x80000000}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) [ 2697.226899][T12379] usb 2-1: Using ep0 maxpacket: 8 15:26:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xfffffe1d, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8}, @IFLA_GRE_ERSPAN_HWID={0x8}]]}}}]}, 0x44}}, 0x0) [ 2697.353778][T12379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2697.365399][T12379] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2697.378594][T12379] usb 2-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 2697.387848][T12379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2697.443895][T12379] usb 2-1: config 0 descriptor?? [ 2697.498552][T13845] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2697.933116][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2697.940257][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2697.947513][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2697.954708][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2697.961890][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2697.969122][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2697.976367][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2697.983528][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2697.990744][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2697.997916][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2698.005019][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2698.012019][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2698.019253][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2698.027046][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2698.034245][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2698.041291][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2698.048430][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2698.055586][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2698.062598][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2698.069754][T12379] wacom 0003:056A:0026.006F: unknown main item tag 0x0 [ 2698.077203][T12379] wacom 0003:056A:0026.006F: Unknown device_type for 'HID 056a:0026'. Assuming pen. [ 2698.088143][T12379] input: Wacom Intuos5 touch S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0026.006F/input/input300 [ 2698.107767][T12379] wacom 0003:056A:0026.006F: hidraw0: USB HID v0.00 Device [HID 056a:0026] on usb-dummy_hcd.1-1/input0 [ 2698.141896][T12808] usb 2-1: USB disconnect, device number 104 15:26:10 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) dup2(r1, r2) read$alg(r2, &(0x7f0000000040)=""/33, 0x21) 15:26:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000000)) 15:26:10 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x3000000000016) 15:26:10 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000000140)) 15:26:10 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ff1000/0x4000)=nil) 15:26:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x56a, 0x26, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0900740000007400bedc2a07000000789b"], 0x0, 0x0, 0x0, 0x0}, 0x0) 15:26:11 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x65}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) 15:26:11 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141446, 0x0) truncate(&(0x7f0000000140)='./bus\x00', 0x800da) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x11, r2, 0x0) ioctl$TIOCGETD(r1, 0x5419, &(0x7f00000002c0)) 15:26:11 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$evdev(0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2, 0x0, 0x0, 0xe1) [ 2701.163311][T12379] usb 2-1: new high-speed USB device number 105 using dummy_hcd 15:26:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x1e, &(0x7f0000000000), 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind(0xffffffffffffffff, &(0x7f0000000000)=@hci, 0x74) r5 = dup2(r0, r2) dup3(r5, r1, 0x0) 15:26:11 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141446, 0x0) truncate(&(0x7f0000000140)='./bus\x00', 0x800da) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x11, r2, 0x0) ioctl$TIOCGETD(r1, 0x5419, &(0x7f00000002c0)) [ 2701.403217][T12379] usb 2-1: Using ep0 maxpacket: 8 15:26:11 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141446, 0x0) truncate(&(0x7f0000000140)='./bus\x00', 0x800da) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x11, r2, 0x0) ioctl$TIOCGETD(r1, 0x5419, &(0x7f00000002c0)) [ 2701.525458][T12379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2701.536906][T12379] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2701.549962][T12379] usb 2-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 2701.559228][T12379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2701.679819][T12379] usb 2-1: config 0 descriptor?? [ 2702.167720][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.174966][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.182087][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.189331][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.196511][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.203738][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.210903][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.218271][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.225374][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.232380][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.239679][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.246882][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.254147][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.261307][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.268522][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.275721][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.283088][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.290319][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.297483][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.304717][T12379] wacom 0003:056A:0026.0070: unknown main item tag 0x0 [ 2702.312307][T12379] wacom 0003:056A:0026.0070: Unknown device_type for 'HID 056a:0026'. Assuming pen. [ 2702.323573][T12379] input: Wacom Intuos5 touch S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0026.0070/input/input303 [ 2702.342016][T12379] wacom 0003:056A:0026.0070: hidraw0: USB HID v0.00 Device [HID 056a:0026] on usb-dummy_hcd.1-1/input0 [ 2702.382178][T12808] usb 2-1: USB disconnect, device number 105 15:26:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8000}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x10}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 15:26:17 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) 15:26:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$tipc(0x1e, 0x2, 0x0) poll(&(0x7f0000000100)=[{r1}, {}, {}], 0x3, 0x0) 15:26:17 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141446, 0x0) truncate(&(0x7f0000000140)='./bus\x00', 0x800da) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x11, r2, 0x0) ioctl$TIOCGETD(r1, 0x5419, &(0x7f00000002c0)) 15:26:17 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) write$vhci(r0, &(0x7f0000000080)=@HCI_EVENT_PKT={0x4, "e5"}, 0x2) 15:26:17 executing program 1: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x6c, r4, 0xd0f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0x25, 0x0, 0x0, @local}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @dev}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) [ 2707.245404][T14536] Enabling of bearer rejected, failed to enable media 15:26:17 executing program 1: r0 = socket$packet(0x11, 0x808000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) getsockopt$packet_int(r0, 0x107, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x1c6) 15:26:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x10000040000106], [0xc1]}) 15:26:17 executing program 4: r0 = socket$inet(0x10, 0x20000000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007041dfffd946f610500070000001f00000000000400080007000400ff7e", 0x24}], 0x1}, 0x0) 15:26:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x2c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x14, 0x5, [@IFLA_BRPORT_UNICAST_FLOOD={0x8}, @IFLA_BRPORT_VLAN_TUNNEL={0x8}]}}}]}, 0x4c}}, 0x0) [ 2707.465344][T12379] usb 3-1: new high-speed USB device number 5 using dummy_hcd 15:26:17 executing program 4: r0 = socket$inet(0x10, 0x20000000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007041dfffd946f610500070000001f00000000000400080007000400ff7e", 0x24}], 0x1}, 0x0) 15:26:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @loopback}, 0xb) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) [ 2707.596973][T14656] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 2707.605283][T14656] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 2707.648228][T14658] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 2707.657038][T14658] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 2707.723144][T12379] usb 3-1: Using ep0 maxpacket: 16 [ 2707.843989][T12379] usb 3-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 2707.854529][T12379] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2707.867633][T12379] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2707.874442][T12379] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 2707.883721][T12379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2707.895860][T12379] usb 3-1: config 0 descriptor?? [ 2707.937302][T12379] gtco 3-1:0.0: Invalid number of endpoints [ 2707.944183][T12379] gtco: probe of 3-1:0.0 failed with error -22 [ 2708.155394][T12379] usb 3-1: USB disconnect, device number 5 [ 2708.922953][T12808] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2709.162989][T12808] usb 3-1: Using ep0 maxpacket: 16 [ 2709.283159][T12808] usb 3-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 2709.293989][T12808] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2709.306995][T12808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2709.313853][T12808] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 2709.323127][T12808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2709.332716][T12808] usb 3-1: config 0 descriptor?? [ 2709.377190][T12808] gtco 3-1:0.0: Invalid number of endpoints [ 2709.383616][T12808] gtco: probe of 3-1:0.0 failed with error -22 [ 2709.575331][T12808] usb 3-1: USB disconnect, device number 6 15:26:24 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040), 0x10) 15:26:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4001, r2}]]}}}]}, 0x38}}, 0x0) 15:26:24 executing program 4: r0 = socket$inet(0x10, 0x20000000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007041dfffd946f610500070000001f00000000000400080007000400ff7e", 0x24}], 0x1}, 0x0) 15:26:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x10, 0x0, 0xffff8000}]}) 15:26:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = shmget(0x3, 0x3000, 0x78000200, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) 15:26:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x10, 0x18, @str='\x01\xac\x0f\x00\x06\xac\x0f\x00\b\xac\x0f\x00'}]}, 0x269}}, 0x0) 15:26:27 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3, 0xd3, 0x74, 0x8, 0x781, 0x2, 0x9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe6, 0x0, 0x0, 0x42, 0xe8, 0x5f}}]}}]}}, 0x0) 15:26:27 executing program 4: r0 = socket$inet(0x10, 0x20000000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007041dfffd946f610500070000001f00000000000400080007000400ff7e", 0x24}], 0x1}, 0x0) 15:26:27 executing program 2: r0 = syz_open_dev$video(&(0x7f0000004e80)='/dev/video#\x00', 0xc79, 0x101080) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000004ec0)={0x7, {0x8, 0x8001, 0x2, 0xc8f8}}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000000)='./control\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000006600)={0x0, @in={{0x2, 0x4e23, @remote}}, [0x81, 0x6, 0x3, 0x3, 0x4, 0x5, 0x7, 0x1, 0x8, 0x9, 0x7fff, 0x2, 0x1, 0x0, 0x8]}, &(0x7f0000006400)=0x100) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000006700)={r2, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) write$P9_RMKDIR(r1, &(0x7f0000000340)={0x14, 0x49, 0x1, {0x0, 0x4, 0x5}}, 0x14) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80840, 0x0) r3 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000100)='./control\x00', 0x0) r4 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_INFO(r4, 0x3, &(0x7f0000006300)=""/52) getdents64(r3, &(0x7f0000fc4fbe)=""/80, 0x50) unlinkat(r3, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x400041, 0x0) getsockname$netlink(r5, &(0x7f0000000080), &(0x7f00000000c0)=0xc) clock_gettime(0x0, &(0x7f0000000200)) name_to_handle_at(r1, &(0x7f0000006340)='./control/file0/file0\x00', &(0x7f00000064c0)=ANY=[@ANYBLOB="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"], 0x0, 0x400) clock_gettime(0x0, &(0x7f0000000240)) 15:26:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_STATE={0x8, 0x1, 0x2}]}}}]}, 0x44}}, 0x0) 15:26:28 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2800, 0x0) read(r0, &(0x7f00000000c0)=""/113, 0x71) read(r0, &(0x7f0000000000)=""/113, 0xfffffff2) [ 2718.129738][T15072] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2718.138218][T15072] bridge0: port 1(bridge_slave_0) entered learning state 15:26:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$inet_int(r1, 0x0, 0x100000000000001, 0x0, &(0x7f0000000000)=0x1) 15:26:28 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0x2, 0x4e88, 0x0, @mcast2={0xff, 0x2, [0xe82b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000]}}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180), 0x2}, 0x0) [ 2718.219362][T12379] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2718.505254][T12379] usb 2-1: Using ep0 maxpacket: 8 [ 2718.643284][T12379] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 2718.651718][T12379] usb 2-1: config 0 has no interface number 0 [ 2718.658085][T12379] usb 2-1: New USB device found, idVendor=0781, idProduct=0002, bcdDevice= 0.09 [ 2718.667423][T12379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2718.677102][T12379] usb 2-1: config 0 descriptor?? [ 2718.715659][T12379] usb-storage 2-1:0.230: USB Mass Storage device detected [ 2718.724894][T12379] usb-storage 2-1:0.230: Quirks match for vid 0781 pid 0002: 10 [ 2718.918678][T12379] usb 2-1: USB disconnect, device number 106 [ 2719.692896][T12808] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2719.953003][T12808] usb 2-1: Using ep0 maxpacket: 8 [ 2720.093237][T12808] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 2720.101643][T12808] usb 2-1: config 0 has no interface number 0 [ 2720.108006][T12808] usb 2-1: New USB device found, idVendor=0781, idProduct=0002, bcdDevice= 0.09 [ 2720.117287][T12808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2720.128691][T12808] usb 2-1: config 0 descriptor?? [ 2720.175618][T12808] usb-storage 2-1:0.230: USB Mass Storage device detected [ 2720.185391][T12808] usb-storage 2-1:0.230: Quirks match for vid 0781 pid 0002: 10 [ 2720.374808][T12808] usb 2-1: USB disconnect, device number 107 15:26:33 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7f) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x262) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') sendfile(r0, r1, 0x0, 0x88002) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x5) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 15:26:33 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bff42010b1134200d9fd0000000109021b0001000000000904ad0001258f0400090503030000000000"], 0x0) 15:26:33 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={0x0, 0x0}) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xbf53e) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) 15:26:33 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a010000cd433440f30c75930b000000000109022400010000000009040600023dd487000905845666f3b2cb659f7c819c7c7abfc53d803c6e01000000000009050f0000000000002764f89d6267cd74e6476f28ad50321c4a3eacec1c"], 0x0) 15:26:33 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_PRIORITY={0x8, 0x2, 0x4000000100}]}}}]}, 0x44}}, 0x0) 15:26:33 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) 15:26:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) [ 2723.837077][T15435] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 15:26:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_gettime(0xfffffffffffffffc, &(0x7f0000000080)) 15:26:34 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x42474752}}) 15:26:34 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0xff97) [ 2724.082972][T12808] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2724.093524][T12379] usb 1-1: new high-speed USB device number 22 using dummy_hcd 15:26:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x0, 0x8809, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 15:26:34 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000d11000)=0x3fb, 0x4) listen(r0, 0x50) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x400000004e20, 0x0, @loopback}, 0x1c) [ 2724.323074][T12808] usb 6-1: Using ep0 maxpacket: 16 [ 2724.443558][T12808] usb 6-1: config 0 has an invalid interface number: 173 but max is 0 [ 2724.451899][T12808] usb 6-1: config 0 has no interface number 0 [ 2724.458266][T12808] usb 6-1: config 0 interface 173 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2724.469505][T12808] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=fd.d9 [ 2724.478803][T12808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2724.485306][T12379] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 2724.495295][T12379] usb 1-1: config 0 has an invalid descriptor of length 159, skipping remainder of the config [ 2724.505699][T12379] usb 1-1: config 0 has no interface number 0 [ 2724.512143][T12379] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 870 [ 2724.522501][T12379] usb 1-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2724.535456][T12379] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.0b [ 2724.544636][T12379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2724.557939][T12808] usb 6-1: config 0 descriptor?? [ 2724.561620][T12379] usb 1-1: config 0 descriptor?? [ 2724.625826][T12808] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2724.805807][T12808] usb 6-1: USB disconnect, device number 37 [ 2724.813265][T15773] usb 6-1: Failed to submit usb control message: -71 [ 2724.820104][T15773] usb 6-1: unable to send the bmi data to the device: -71 [ 2724.827484][T15773] usb 6-1: unable to get target info from device [ 2724.833990][T15773] usb 6-1: could not get target info (-71) [ 2724.840019][T15773] usb 6-1: could not probe fw (-71) [ 2724.845774][T12379] ath6kl: Failed to submit usb control message: -71 [ 2724.852484][T12379] ath6kl: unable to send the bmi data to the device: -71 [ 2724.859757][T12379] ath6kl: Unable to send get target info: -71 [ 2724.867026][T12379] ath6kl: Failed to init ath6kl core: -71 [ 2724.874594][T12379] ath6kl_usb: probe of 1-1:0.6 failed with error -71 [ 2724.887226][T12379] usb 1-1: USB disconnect, device number 22 [ 2725.572974][T12808] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2725.602990][T17582] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2725.813097][T12808] usb 6-1: Using ep0 maxpacket: 16 [ 2725.933143][T12808] usb 6-1: config 0 has an invalid interface number: 173 but max is 0 [ 2725.941648][T12808] usb 6-1: config 0 has no interface number 0 [ 2725.948131][T12808] usb 6-1: config 0 interface 173 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2725.959418][T12808] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=fd.d9 [ 2725.968768][T12808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2725.977951][T17582] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 2725.986202][T17582] usb 1-1: config 0 has an invalid descriptor of length 159, skipping remainder of the config [ 2725.996753][T17582] usb 1-1: config 0 has no interface number 0 [ 2726.003087][T17582] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 870 [ 2726.013183][T17582] usb 1-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2726.027375][T17582] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.0b [ 2726.036743][T17582] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2726.046467][T12808] usb 6-1: config 0 descriptor?? [ 2726.052475][T17582] usb 1-1: config 0 descriptor?? [ 2726.087051][T12808] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2726.284937][T12808] usb 6-1: USB disconnect, device number 38 [ 2726.293748][T19479] usb 6-1: Failed to submit usb control message: -71 [ 2726.300614][T19479] usb 6-1: unable to send the bmi data to the device: -71 [ 2726.308000][T19479] usb 6-1: unable to get target info from device [ 2726.314517][T19479] usb 6-1: could not get target info (-71) [ 2726.320451][T19479] usb 6-1: could not probe fw (-71) [ 2726.325989][T17582] ath6kl: Failed to submit usb control message: -71 [ 2726.332629][T17582] ath6kl: unable to send the bmi data to the device: -71 [ 2726.340008][T17582] ath6kl: Unable to send get target info: -71 [ 2726.350768][T17582] ath6kl: Failed to init ath6kl core: -71 [ 2726.360147][T17582] ath6kl_usb: probe of 1-1:0.6 failed with error -71 [ 2726.371587][T17582] usb 1-1: USB disconnect, device number 23 15:26:40 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7f) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x262) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') sendfile(r0, r1, 0x0, 0x88002) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x5) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 15:26:40 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0xff97) 15:26:40 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x18}}], 0x2, 0x0) 15:26:40 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000d11000)=0x3fb, 0x4) listen(r0, 0x50) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x400000004e20, 0x0, @loopback}, 0x1c) 15:26:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 15:26:40 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x2c, 0xfc, 0x8c, 0x40, 0xbda, 0x184, 0x6a64, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5e, 0x0, 0x0, 0xd1, 0x5, 0x55}}]}}]}}, 0x0) 15:26:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f000018efdc)="240000001a001f0014f9f407000904000a00071010000700feffffff0800030003400000", 0x24) 15:26:40 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0xff97) 15:26:40 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x18}}], 0x2, 0x0) 15:26:40 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000d11000)=0x3fb, 0x4) listen(r0, 0x50) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x400000004e20, 0x0, @loopback}, 0x1c) [ 2730.403267][T12379] usb 1-1: new high-speed USB device number 24 using dummy_hcd 15:26:40 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x02\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00'/209) 15:26:40 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x18}}], 0x2, 0x0) [ 2730.763872][T12379] usb 1-1: config 0 has an invalid interface number: 94 but max is 0 [ 2730.772117][T12379] usb 1-1: config 0 has no interface number 0 [ 2730.778993][T12379] usb 1-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=6a.64 [ 2730.788209][T12379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2730.857363][T12379] usb 1-1: config 0 descriptor?? [ 2730.913169][T12379] ums-realtek 1-1:0.94: USB Mass Storage device detected [ 2731.114072][T17582] usb 1-1: USB disconnect, device number 24 [ 2731.903004][T17582] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2732.303217][T17582] usb 1-1: config 0 has an invalid interface number: 94 but max is 0 [ 2732.311406][T17582] usb 1-1: config 0 has no interface number 0 [ 2732.317708][T17582] usb 1-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=6a.64 [ 2732.326890][T17582] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2732.336342][T17582] usb 1-1: config 0 descriptor?? [ 2732.375670][T17582] ums-realtek 1-1:0.94: USB Mass Storage device detected [ 2732.574885][T17582] usb 1-1: USB disconnect, device number 25 15:26:44 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7f) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x262) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') sendfile(r0, r1, 0x0, 0x88002) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x5) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 15:26:44 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0xff97) 15:26:44 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000d11000)=0x3fb, 0x4) listen(r0, 0x50) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x400000004e20, 0x0, @loopback}, 0x1c) 15:26:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x56}}, &(0x7f0000000040)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\x8d+\xf7\xa60\xbb\xca\x06\xc4\xd3B\xf1\xd1\x14H\xbeTo\xbb\xfb\xc0\xebV\xff\xbb\xbe\xa2\x90J|s\xc2\xc7\xe5;\xdax\xb9o|\x8ck', 0x4, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) 15:26:44 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x18}}], 0x2, 0x0) 15:26:44 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x1, 0x0) io_setup(0x101, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x1}]) 15:26:44 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)) 15:26:44 executing program 1: r0 = socket(0x22, 0x2, 0x1) ioctl$IMGETVERSION(r0, 0x80044943, &(0x7f0000000140)) 15:26:44 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001746bc108106090001a000000001090212000100000000090400e3ff376d77004d53e9c95a5cf219ef893be26b80d1988844654851632df3f0d440c0038f35d545adf42b4ad54c7f320505aa8b31c82c120dba4e21"], 0x0) 15:26:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="763f018baca576b5074c484279a54de4e765000000000004000000000000000000854bb610ceee46cedc3df67e37ee9c1f75a89d004ab2d83e0fb3e0339679650c6dc99dd0b2df43208a5ad4e0c7f72a67"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:44 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:26:44 executing program 1: r0 = socket(0x22, 0x2, 0x1) ioctl$IMGETVERSION(r0, 0x80044943, &(0x7f0000000140)) [ 2735.063252][T17582] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2735.333056][T17582] usb 5-1: Using ep0 maxpacket: 16 [ 2735.483144][T17582] usb 5-1: too many endpoints for config 0 interface 0 altsetting 227: 255, using maximum allowed: 30 [ 2735.494631][T17582] usb 5-1: config 0 interface 0 altsetting 227 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2735.508128][T17582] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2735.514897][T17582] usb 5-1: New USB device found, idVendor=0681, idProduct=0009, bcdDevice=a0.01 [ 2735.524458][T17582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2735.534914][T17582] usb 5-1: config 0 descriptor?? [ 2735.588574][T17582] usb 5-1: unsupported altsetting 227 - skip [ 2735.788928][T17582] usb 5-1: USB disconnect, device number 115 [ 2736.573092][T17582] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2736.843012][T17582] usb 5-1: Using ep0 maxpacket: 16 [ 2736.963201][T17582] usb 5-1: too many endpoints for config 0 interface 0 altsetting 227: 255, using maximum allowed: 30 [ 2736.974466][T17582] usb 5-1: config 0 interface 0 altsetting 227 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2736.987874][T17582] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2736.994770][T17582] usb 5-1: New USB device found, idVendor=0681, idProduct=0009, bcdDevice=a0.01 [ 2737.003925][T17582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2737.013760][T17582] usb 5-1: config 0 descriptor?? [ 2737.072665][T17582] usb 5-1: unsupported altsetting 227 - skip [ 2737.268702][T17582] usb 5-1: USB disconnect, device number 116 15:26:48 executing program 1: r0 = socket(0x22, 0x2, 0x1) ioctl$IMGETVERSION(r0, 0x80044943, &(0x7f0000000140)) 15:26:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0xa97, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0xfd, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 15:26:48 executing program 5: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000080)=ANY=[@ANYBLOB="209de90003010100000000001ade882a0dcf"], 0x1f}}, 0x0) r0 = socket(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000001000ff55f660cc33f6834500000501fe070001", 0x17) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") 15:26:48 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7f) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x262) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') sendfile(r0, r1, 0x0, 0x88002) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x5) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 15:26:48 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="240000001c0007031dfffd946f610500000000000543000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 15:26:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000900)={"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"}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x5) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2738.716995][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2738.745157][T16270] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:26:48 executing program 1: r0 = socket(0x22, 0x2, 0x1) ioctl$IMGETVERSION(r0, 0x80044943, &(0x7f0000000140)) 15:26:48 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="240000001c0007031dfffd946f610500000000000543000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 15:26:49 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x400) ioctl$IMSETDEVNAME(r0, 0x80184947, 0x0) [ 2738.964467][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 15:26:49 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="240000001c0007031dfffd946f610500000000000543000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 15:26:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 15:26:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005c00)=[{{&(0x7f0000002240)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000025c0)={0xa, 0x4e23, 0x0, @dev, 0xe}, 0x1c, 0x0, 0x0, &(0x7f0000002d00)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x2, 0x0) [ 2739.166787][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 15:26:49 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="240000001c0007031dfffd946f610500000000000543000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 2739.404007][T16603] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 15:26:52 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000003640)={&(0x7f0000000080)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000003480)=[{0x10, 0x1}], 0x10}, 0x0) 15:26:52 executing program 1: lchown(0x0, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) 15:26:52 executing program 5: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000080)=ANY=[@ANYBLOB="209de90003010100000000001ade882a0dcf"], 0x1f}}, 0x0) r0 = socket(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000001000ff55f660cc33f6834500000501fe070001", 0x17) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") 15:26:52 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7, 0x3, 0x2, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 15:26:52 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07681dfffd946fa2830020200a0009007100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 15:26:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020400000c00000000000000000000000200010000000000000000000000000005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000030005000000000002000000e0000001000000000000000091602eac31afca5256c66c2271ad52ce5c1f367bc797ee8b5112c9bac270d15df9225965dcc3f877035f1bc3c9d418aec0295326e56d6f7eaa"], 0x60}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) [ 2742.967740][T16723] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:26:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x1, 0x0, 0x0, 0x4}}) 15:26:53 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="250000001a008100a00f80ecdb4cb904024865160b000000d4126efb090010005200000040", 0x25}], 0x1}, 0x0) 15:26:53 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) 15:26:53 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @local}, @dccp={{0x0, 0x0, 0x4, 0x60, 0x0, 0x0, 0x3, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) [ 2743.179177][T16740] netlink: 'syz-executor.0': attribute type 16 has an invalid length. 15:26:53 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) listen(r0, 0xffffffffefffffff) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)='#', 0x1}], 0x1, 0x0, 0x0, 0x3c01}, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}}], 0x4000000000003ab, 0x0, 0x0) 15:26:53 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @local}, @dccp={{0x0, 0x0, 0x4, 0x60, 0x0, 0x0, 0x3, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) 15:26:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x1, 0x0, 0x0, 0x4}}) 15:26:53 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @local}, @dccp={{0x0, 0x0, 0x4, 0x60, 0x0, 0x0, 0x3, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) 15:26:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x5, &(0x7f0000e530e9)=""/16, &(0x7f0000000080)=0x10) 15:26:53 executing program 5: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000080)=ANY=[@ANYBLOB="209de90003010100000000001ade882a0dcf"], 0x1f}}, 0x0) r0 = socket(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000001000ff55f660cc33f6834500000501fe070001", 0x17) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") 15:26:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x1, 0x0, 0x0, 0x4}}) [ 2743.749301][T16899] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:27:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020400000c00000000000000000000000200010000000000000000000000000005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000030005000000000002000000e0000001000000000000000091602eac31afca5256c66c2271ad52ce5c1f367bc797ee8b5112c9bac270d15df9225965dcc3f877035f1bc3c9d418aec0295326e56d6f7eaa"], 0x60}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 15:27:00 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @local}, @dccp={{0x0, 0x0, 0x4, 0x60, 0x0, 0x0, 0x3, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) 15:27:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x1, 0x0, 0x0, 0x4}}) 15:27:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x5, &(0x7f0000e530e9)=""/16, &(0x7f0000000080)=0x10) 15:27:00 executing program 5: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000080)=ANY=[@ANYBLOB="209de90003010100000000001ade882a0dcf"], 0x1f}}, 0x0) r0 = socket(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000001000ff55f660cc33f6834500000501fe070001", 0x17) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") 15:27:00 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) listen(r0, 0xffffffffefffffff) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)='#', 0x1}], 0x1, 0x0, 0x0, 0x3c01}, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}}], 0x4000000000003ab, 0x0, 0x0) [ 2750.104450][T17111] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:27:00 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) listen(r0, 0xffffffffefffffff) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)='#', 0x1}], 0x1, 0x0, 0x0, 0x3c01}, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}}], 0x4000000000003ab, 0x0, 0x0) 15:27:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x5, &(0x7f0000e530e9)=""/16, &(0x7f0000000080)=0x10) 15:27:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x2, &(0x7f0000004b40), 0x16, &(0x7f0000004bc0)}, 0xf401}], 0x19cbcb36e8172e, 0x0) 15:27:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x5, &(0x7f0000e530e9)=""/16, &(0x7f0000000080)=0x10) 15:27:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe63) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0x1d0003}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:27:00 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) listen(r0, 0xffffffffefffffff) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)='#', 0x1}], 0x1, 0x0, 0x0, 0x3c01}, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}}], 0x4000000000003ab, 0x0, 0x0) 15:27:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020400000c00000000000000000000000200010000000000000000000000000005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000030005000000000002000000e0000001000000000000000091602eac31afca5256c66c2271ad52ce5c1f367bc797ee8b5112c9bac270d15df9225965dcc3f877035f1bc3c9d418aec0295326e56d6f7eaa"], 0x60}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 15:27:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x11, &(0x7f0000000040)={@ipv4={[0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], [], @multicast2}}, 0x20) 15:27:06 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000001200)=0xd21) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r0, 0x4c01) 15:27:06 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) listen(r0, 0xffffffffefffffff) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)='#', 0x1}], 0x1, 0x0, 0x0, 0x3c01}, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}}], 0x4000000000003ab, 0x0, 0x0) 15:27:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0xf6}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x59, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0) 15:27:06 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) listen(r0, 0xffffffffefffffff) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)='#', 0x1}], 0x1, 0x0, 0x0, 0x3c01}, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}}], 0x4000000000003ab, 0x0, 0x0) [ 2756.607704][ T3263] print_req_error: 90 callbacks suppressed [ 2756.607808][ T3263] blk_update_request: I/O error, dev loop0, sector 128 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2756.626928][ T3263] buffer_io_error: 86 callbacks suppressed [ 2756.626956][ T3263] Buffer I/O error on dev loop0, logical block 16, lost async page write [ 2756.641587][ T3263] blk_update_request: I/O error, dev loop0, sector 136 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2756.653375][ T3263] Buffer I/O error on dev loop0, logical block 17, lost async page write [ 2756.661992][ T3263] blk_update_request: I/O error, dev loop0, sector 144 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2756.675652][ T3263] Buffer I/O error on dev loop0, logical block 18, lost async page write [ 2756.684542][ T3263] blk_update_request: I/O error, dev loop0, sector 152 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2756.696317][ T3263] Buffer I/O error on dev loop0, logical block 19, lost async page write [ 2756.705211][ T3263] blk_update_request: I/O error, dev loop0, sector 160 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2756.716861][ T3263] Buffer I/O error on dev loop0, logical block 20, lost async page write [ 2756.725771][ T3263] blk_update_request: I/O error, dev loop0, sector 168 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2756.737628][ T3263] Buffer I/O error on dev loop0, logical block 21, lost async page write [ 2756.746687][ T3263] blk_update_request: I/O error, dev loop0, sector 176 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2756.759341][ T3263] Buffer I/O error on dev loop0, logical block 22, lost async page write [ 2756.768058][ T3263] blk_update_request: I/O error, dev loop0, sector 184 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2756.779672][ T3263] Buffer I/O error on dev loop0, logical block 23, lost async page write [ 2756.788538][ T3263] blk_update_request: I/O error, dev loop0, sector 192 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2756.800421][ T3263] Buffer I/O error on dev loop0, logical block 24, lost async page write 15:27:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x38}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x300}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2756.809227][ T3263] blk_update_request: I/O error, dev loop0, sector 200 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 2756.821055][ T3263] Buffer I/O error on dev loop0, logical block 25, lost async page write 15:27:06 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000001200)=0xd21) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r0, 0x4c01) 15:27:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000001200)=0xd21) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r0, 0x4c01) 15:27:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'eth0-.%lo'}], 0xa, "0554a30e53949d1b1002758332bbed"}, 0x24) 15:27:07 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000001200)=0xd21) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r0, 0x4c01) 15:27:07 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) listen(r0, 0xffffffffefffffff) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)='#', 0x1}], 0x1, 0x0, 0x0, 0x3c01}, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}}], 0x4000000000003ab, 0x0, 0x0) 15:27:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020400000c00000000000000000000000200010000000000000000000000000005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000030005000000000002000000e0000001000000000000000091602eac31afca5256c66c2271ad52ce5c1f367bc797ee8b5112c9bac270d15df9225965dcc3f877035f1bc3c9d418aec0295326e56d6f7eaa"], 0x60}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 15:27:12 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x240002, 0x0) pread64(r0, 0x0, 0x0, 0x0) 15:27:12 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000001200)=0xd21) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r0, 0x4c01) 15:27:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r4, {0xffffff7f}}}, 0x24}}, 0x0) 15:27:12 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000001200)=0xd21) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r0, 0x4c01) 15:27:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x0, r1}, 0x10) [ 2762.771943][T17767] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:27:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@setlink={0x4c, 0x13, 0x311, 0x0, 0x0, {}, [@IFLA_IFALIASn={0x4}, @IFLA_IFALIAS={0x14, 0x28, 'veth0_to_team\x00'}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x4c}}, 0x0) 15:27:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x2, @vbi={0x0, 0x0, 0x33424752}}) [ 2763.009267][T18063] netlink: 'syz-executor.1': attribute type 40 has an invalid length. [ 2763.019507][T18063] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. 15:27:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000001200)=0xd21) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r0, 0x4c01) 15:27:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@setlink={0x4c, 0x13, 0x311, 0x0, 0x0, {}, [@IFLA_IFALIASn={0x4}, @IFLA_IFALIAS={0x14, 0x28, 'veth0_to_team\x00'}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x4c}}, 0x0) 15:27:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 15:27:13 executing program 0: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000003640)=ANY=[@ANYBLOB="b800000019000100000000005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000d94bfeadbfce0d4ed6f71be32b9f3542000000ea0000000000000000d736942e9c351c64e1f5553d2cb8d6cc000000000000000000000000000000000000000000000000000000000000e6ffffffffffffff00"/128], 0xb8}}, 0x0) r3 = dup3(r1, r2, 0x0) bind$inet6(r3, &(0x7f0000000580)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 2763.438054][T18233] netlink: 'syz-executor.1': attribute type 40 has an invalid length. [ 2763.448061][T18233] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. 15:27:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@setlink={0x4c, 0x13, 0x311, 0x0, 0x0, {}, [@IFLA_IFALIASn={0x4}, @IFLA_IFALIAS={0x14, 0x28, 'veth0_to_team\x00'}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x4c}}, 0x0) 15:27:17 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x163, 0x11, 0x104}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:27:17 executing program 4: syz_open_dev$usbmon(0x0, 0x1, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x32, 0x82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x48042, 0x0) ftruncate(r1, 0x88001) r2 = socket(0x11, 0x3, 0x0) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5061b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendfile(r2, r3, 0x0, 0x4e68d5f8) 15:27:17 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_int(r0, 0x0, 0xd0, 0x0, 0xb3) 15:27:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x500, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 15:27:17 executing program 3: syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x81, 0x0) r0 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix={0x0, 0x0, 0x34325258}}) [ 2767.104604][T18531] netlink: 'syz-executor.1': attribute type 40 has an invalid length. [ 2767.115055][T18531] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. 15:27:17 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2f0000001800030007fffd946fa283bc8020000000040005031d85680c0009000800000016ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) [ 2767.292348][T18576] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.5'. 15:27:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x144, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/192, 0xc0}, {0x0, 0x169}, {&(0x7f0000000440)=""/143, 0x8f}], 0x3}, 0x0) 15:27:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x24}, @local}, @dccp={{0x3281, 0x880b, 0x4, 0x60, 0x0, 0x0, 0x2, 0x0, 0x0, "e70100", 0x0, "cd0021"}}}}}}, 0x0) 15:27:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@setlink={0x4c, 0x13, 0x311, 0x0, 0x0, {}, [@IFLA_IFALIASn={0x4}, @IFLA_IFALIAS={0x14, 0x28, 'veth0_to_team\x00'}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x4c}}, 0x0) 15:27:17 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_int(r0, 0x0, 0xd0, 0x0, 0xb3) [ 2767.597089][T18655] netlink: 'syz-executor.1': attribute type 40 has an invalid length. [ 2767.607211][T18655] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. 15:27:17 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_int(r0, 0x0, 0xd0, 0x0, 0xb3) 15:27:17 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb5, 0xfe, 0xd, 0x8, 0xabf, 0x3370, 0x5c3d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1a, 0x0, 0x0, 0x36, 0x4a, 0x79}}]}}]}}, 0x0) 15:27:17 executing program 4: syz_open_dev$usbmon(0x0, 0x1, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x32, 0x82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x48042, 0x0) ftruncate(r1, 0x88001) r2 = socket(0x11, 0x3, 0x0) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5061b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendfile(r2, r3, 0x0, 0x4e68d5f8) 15:27:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unshare(0x8000400) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fcntl$addseals(r0, 0x40b, 0x4000000000008) 15:27:18 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$inet_int(r0, 0x0, 0xd0, 0x0, 0xb3) 15:27:18 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001a005f0023b3f40700090400020000000010000000100000080001007f000001", 0x24) [ 2768.203041][T17582] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2768.453086][T17582] usb 3-1: Using ep0 maxpacket: 8 [ 2768.573249][T17582] usb 3-1: config 0 has an invalid interface number: 26 but max is 0 [ 2768.581528][T17582] usb 3-1: config 0 has no interface number 0 [ 2768.588437][T17582] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5c.3d [ 2768.597621][T17582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2768.607237][T17582] usb 3-1: config 0 descriptor?? [ 2768.846735][T17582] usb 3-1: USB disconnect, device number 7 [ 2769.612931][T12379] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2769.852976][T12379] usb 3-1: Using ep0 maxpacket: 8 [ 2769.973169][T12379] usb 3-1: config 0 has an invalid interface number: 26 but max is 0 [ 2769.981559][T12379] usb 3-1: config 0 has no interface number 0 [ 2769.987960][T12379] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5c.3d [ 2769.997261][T12379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2770.006881][T12379] usb 3-1: config 0 descriptor?? [ 2770.244725][T12379] usb 3-1: USB disconnect, device number 8 15:27:23 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="ce", 0x1}], 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) splice(r0, 0x0, r3, 0x0, 0x7f, 0x0) 15:27:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300030468fe0704000000000000ff3f03000000450001070000001419001a000a000a00050008000300000800005d14a4e91ee438", 0x39}], 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@rand_addr="1003d3e1f7cb2f672a22a665b795df82", @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, 0xe8) 15:27:23 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001a005f0023b3f40700090400020000000010000000100000080001007f000001", 0x24) 15:27:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@newlink={0xd8, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_BROADCAST={0xc, 0x2, @local}, @IFLA_LINKINFO={0xa4, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x90, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_REMOTE={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @empty}}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @gre_common_policy=[@IFLA_GRE_ENCAP_FLAGS={0x8, 0xf, 0x9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x8, 0x10, 0x4e22}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x3}, @IFLA_GRE_IFLAGS={0x8, 0x2, 0x81}, @IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_SPORT={0x8, 0x10, 0x4e22}, @IFLA_GRE_TOS={0x8, 0x9, 0x1}]]}}}]}, 0xd8}}, 0x0) 15:27:23 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:27:23 executing program 4: syz_open_dev$usbmon(0x0, 0x1, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x32, 0x82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x48042, 0x0) ftruncate(r1, 0x88001) r2 = socket(0x11, 0x3, 0x0) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5061b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendfile(r2, r3, 0x0, 0x4e68d5f8) [ 2773.447911][T18990] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 2773.456528][T18990] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 2773.464909][T18990] netlink: 'syz-executor.0': attribute type 24 has an invalid length. [ 2773.473256][T18990] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2773.481438][T18990] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 2773.489798][T18990] netlink: 'syz-executor.0': attribute type 16 has an invalid length. 15:27:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000b67000), &(0x7f0000000000)=0x4) 15:27:23 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001a005f0023b3f40700090400020000000010000000100000080001007f000001", 0x24) 15:27:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005a001f000807f4f9002304000a04f51108000100020100020800d88009000000", 0x24) 15:27:23 executing program 1: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x5f, 0x80ffff], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x3c) 15:27:24 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001a005f0023b3f40700090400020000000010000000100000080001007f000001", 0x24) 15:27:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r1, 0x0, 0x2}, 0xc) 15:27:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=@acquire={0x128, 0x17, 0x301, 0x0, 0x0, {{@in6=@mcast2}, @in=@dev, {@in=@multicast1, @in=@multicast2}, {{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb5}}}, 0x128}}, 0x0) 15:27:30 executing program 3: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f00000000c0)) read(r0, &(0x7f0000000100)=""/166, 0xa6) 15:27:30 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x42, 0x0, 0x8b, 0x10, 0xbda, 0x159, 0x5c63, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x86, 0x0, 0x0, 0x55, 0xc9, 0x63}}]}}]}}, 0x0) 15:27:30 executing program 4: syz_open_dev$usbmon(0x0, 0x1, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x32, 0x82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x48042, 0x0) ftruncate(r1, 0x88001) r2 = socket(0x11, 0x3, 0x0) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5061b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendfile(r2, r3, 0x0, 0x4e68d5f8) 15:27:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 15:27:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r1, 0x0, 0x2}, 0xc) 15:27:30 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:27:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r1, 0x0, 0x2}, 0xc) [ 2780.953239][T12379] usb 2-1: new high-speed USB device number 108 using dummy_hcd 15:27:31 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r1, 0x0, 0x2}, 0xc) [ 2781.193047][T12379] usb 2-1: Using ep0 maxpacket: 16 15:27:31 executing program 5: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7, 0x800, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) [ 2781.317089][T12379] usb 2-1: config 0 has an invalid interface number: 134 but max is 0 [ 2781.325543][T12379] usb 2-1: config 0 has no interface number 0 [ 2781.331786][T12379] usb 2-1: New USB device found, idVendor=0bda, idProduct=0159, bcdDevice=5c.63 [ 2781.341051][T12379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:27:31 executing program 4: mbind(&(0x7f00007d3000/0x1000)=nil, 0x1000, 0x4002, &(0x7f0000000180)=0x3, 0x28e8, 0x0) mprotect(&(0x7f00007d3000/0x4000)=nil, 0x4000, 0x0) 15:27:31 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8ffffff0000000200000000030005000000000002004e20e00000010000000000000000"], 0x60}}, 0x0) [ 2781.514868][T12379] usb 2-1: config 0 descriptor?? [ 2781.562490][T12379] ums-realtek 2-1:0.134: USB Mass Storage device detected 15:27:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000440)=0x5) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) [ 2781.758469][T12379] usb 2-1: USB disconnect, device number 108 [ 2782.552978][T17582] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2782.792991][T17582] usb 2-1: Using ep0 maxpacket: 16 [ 2782.913244][T17582] usb 2-1: config 0 has an invalid interface number: 134 but max is 0 [ 2782.921627][T17582] usb 2-1: config 0 has no interface number 0 [ 2782.928029][T17582] usb 2-1: New USB device found, idVendor=0bda, idProduct=0159, bcdDevice=5c.63 [ 2782.937223][T17582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2782.946930][T17582] usb 2-1: config 0 descriptor?? [ 2782.985393][T17582] ums-realtek 2-1:0.134: USB Mass Storage device detected [ 2783.184856][T17582] usb 2-1: USB disconnect, device number 109 15:27:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup2(r0, r1) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000040)) 15:27:37 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:27:37 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="0900000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60613a027fb50cbcbd92d44076d3b97247e066165ccf1032f51d36ab231f6c20d87e9167edf69776dca67d90a17ccd18fb9c7b21d53478e382dcf296a23a060bfe9ac9d9cd196187d0b64c834783111c7758bf5a62c197735b91", 0xbe}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:27:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="021000000a000000000010ec0000920008001200ce840404460bb100006c004007000000b4cb8cb61b1205000b41bbc2e0e82efd273aa2768a790297c1060c612b4300010034f5000000393300000000a3160a534f18dd0d444e100a9c5a28162feba4c431ce6254084eace6e4c5585ba2d77202e47320f439661bff009dddd1f457399fcab3001bb1cc4ca78794880a7299ea50dd9114c9ba5c9175ada67600c99e25977f0811f4eff2ec4995a3a2d5fdc2b24b7d940279b836cd19095a98a8399103b6f6958079110fdf20171b39faf21574243927b0302b2bebb67914bebe6d876692cf5159929cea97a1ba8938972cb036b8778b231c46cb8a98361d6f338b53c6f4668ed244c60aa1f43eb84507a7825971cceb1dec777f8d63b128"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000054, 0x0) 15:27:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x5, 0x0, 0xf}}) 15:27:37 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xe, 0x3}}}}}, &(0x7f0000000100)) 15:27:37 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000100)=""/4096, 0x1000) 15:27:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x20, 0x19, 0x5, 0x0, 0x0, {0x9801}, [@typed={0xc, 0x6, @u64}]}, 0x2bb}}, 0x0) 15:27:37 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000034}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x22) [ 2787.374763][T19686] picdev_write: 6 callbacks suppressed [ 2787.374818][T19686] kvm: pic: non byte write 15:27:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x20, 0x19, 0x5, 0x0, 0x0, {0x9801}, [@typed={0xc, 0x6, @u64}]}, 0x2bb}}, 0x0) [ 2787.450078][T19686] kvm: pic: non byte write [ 2787.457907][T19686] kvm: pic: non byte write [ 2787.464105][T19686] kvm: pic: non byte write [ 2787.470085][T19686] kvm: pic: non byte write [ 2787.476078][T19686] kvm: pic: non byte write [ 2787.480709][T19686] kvm: pic: non byte write [ 2787.485360][T19686] kvm: pic: non byte write [ 2787.490093][T19686] kvm: pic: non byte write [ 2787.494899][T19686] kvm: pic: non byte write 15:27:37 executing program 1: syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb2, 0x9f, 0xbf, 0x8, 0xe8d, 0x4, 0x64a4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xec, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@usb_cdc={{0x5}, {0x5}, {0xd}, [@acm={0x4}, @acm={0x4, 0x24, 0x2, 0x12}]}]}}]}}]}}, 0x0) 15:27:37 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000340)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000380)) [ 2788.043069][T17582] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2788.283147][T17582] usb 2-1: Using ep0 maxpacket: 8 [ 2788.403430][T17582] usb 2-1: config 0 has an invalid interface number: 236 but max is 0 [ 2788.411994][T17582] usb 2-1: config 0 has no interface number 0 [ 2788.418399][T17582] usb 2-1: New USB device found, idVendor=0e8d, idProduct=0004, bcdDevice=64.a4 [ 2788.427688][T17582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2788.437967][T17582] usb 2-1: config 0 descriptor?? [ 2788.723312][T17582] usb 2-1: string descriptor 0 read error: -71 [ 2788.732181][T17582] usb 2-1: USB disconnect, device number 110 [ 2789.453059][T17582] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2789.702959][T17582] usb 2-1: Using ep0 maxpacket: 8 [ 2789.823095][T17582] usb 2-1: config 0 has an invalid interface number: 236 but max is 0 [ 2789.831471][T17582] usb 2-1: config 0 has no interface number 0 [ 2789.837965][T17582] usb 2-1: New USB device found, idVendor=0e8d, idProduct=0004, bcdDevice=64.a4 [ 2789.847158][T17582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2789.856842][T17582] usb 2-1: config 0 descriptor?? [ 2790.123393][T17582] usb 2-1: string descriptor 0 read error: -71 [ 2790.132110][T17582] usb 2-1: USB disconnect, device number 111 15:27:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001ffff04000000000000ff010000000000a85400000000000001e000000100000000000000000000000000000000000000000a0000000000000029430f7a21dda26d37ff6842a842fdfe0632078a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0000000000000000000000000000e33eb88500a22580106acb896827348a8f4df0744c73a5fd4bb1bff83e874c60070d634a3c9097ad93ec3d5d4488fa286145aaa8bf5bf03374a977b588c801e1f42c54460d9ea61c9749ae06a2289c3395839605854e8c617261f43bad0fd3ba5ade9fbb68c08e83"], 0xb8}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0x0) 15:27:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x20, 0x19, 0x5, 0x0, 0x0, {0x9801}, [@typed={0xc, 0x6, @u64}]}, 0x2bb}}, 0x0) 15:27:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x803, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@rand_addr="a6ac30405bd92f9bea3c5597afc948ee", 0x0, r5}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 15:27:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)) fchdir(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/\x00yz0\x00\xbb\xd3\xc2\x83\x0f*\x10.\xd2\x06\v\xdc\x00\xca\n\xfc\n\n\xb4\x04\x00\x00]\x8e\xa9t\xc2\x81\xf5\xf1\xa6\xd1\x18\xbc8\xd1\xa3\x1dlz\x9a\xc8o\a&\x82\xcf\t\xde\f\xb8\xbe\xf5Z\x1aS\n=,\xee\x9e\xd8%\x16\xa5\x00\xcaq\xb2\xd0Bk\x9e\xcd\x1e%g\xf5_\xc22\x02\x1c\xcc\xb1\xdca\x80V\xac\xf41\x02zU++7\xcfS\x17\xc9\x19G\x89\xfb\xfb\xfe\xc9\x15\x9d\xe6\ar\x99\"\"3Lg\xe8N\xc1', 0x1ff) 15:27:43 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:27:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x4018) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x2}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000480)='{{nodev\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2793.386384][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2793.392886][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2793.399430][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2793.405841][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2793.412540][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2793.419181][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2793.425840][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2793.432155][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:27:43 executing program 0: mkdir(&(0x7f0000a7aff6)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x40) [ 2793.598435][T20027] bridge0: port 1(bridge_slave_0) entered disabled state 15:27:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x20, 0x19, 0x5, 0x0, 0x0, {0x9801}, [@typed={0xc, 0x6, @u64}]}, 0x2bb}}, 0x0) 15:27:43 executing program 5: r0 = socket(0x400000000000010, 0x802, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r0, &(0x7f0000000200)="24000000200099f0003be90000ed190e028a08160000120000ba1080050002007f196be0", 0x24) 15:27:43 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x10a000d02) 15:27:44 executing program 0: mkdir(&(0x7f0000a7aff6)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x40) 15:27:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x2, 0x273) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2794.105920][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2794.112081][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:27:49 executing program 3: mkdir(&(0x7f0000000240)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) mknod$loop(&(0x7f0000000000)='./control/file0\x00', 0x0, 0xffffffffffffffff) close(r0) 15:27:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:27:49 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x10a000d02) 15:27:49 executing program 0: mkdir(&(0x7f0000a7aff6)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x40) 15:27:49 executing program 4: r0 = socket(0x11, 0x80a, 0x0) r1 = dup(r0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x28001, 0x0) read(r2, &(0x7f0000000040)=""/87, 0x57) ioctl$int_in(r2, 0x800060c004500a, &(0x7f0000000100)=0xffffffffffffff00) ioctl$int_in(r2, 0x800000c0045005, &(0x7f00000000c0)=0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 15:27:49 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 15:27:49 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x10a000d02) 15:27:49 executing program 0: mkdir(&(0x7f0000a7aff6)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x40) 15:27:50 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x10a000d02) [ 2799.963028][T12379] usb 6-1: new high-speed USB device number 39 using dummy_hcd 15:27:50 executing program 2: syz_open_dev$loop(&(0x7f0000001a40)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c81, 0xfffffffffffffffe) 15:27:50 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x1c}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) 15:27:50 executing program 4: unshare(0x2000400) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000005c0)) [ 2800.203254][T12379] usb 6-1: Using ep0 maxpacket: 8 [ 2800.323557][T12379] usb 6-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 2800.493376][T12379] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2800.502541][T12379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2800.511060][T12379] usb 6-1: Product: syz [ 2800.515427][T12379] usb 6-1: Manufacturer: syz [ 2800.520215][T12379] usb 6-1: SerialNumber: syz [ 2800.805020][T12379] usb 6-1: bad CDC descriptors [ 2800.818301][T12379] usb 6-1: USB disconnect, device number 39 [ 2801.542981][T12379] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2801.784623][T12379] usb 6-1: Using ep0 maxpacket: 8 [ 2801.923509][T12379] usb 6-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 2802.093177][T12379] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2802.102530][T12379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2802.110794][T12379] usb 6-1: Product: syz [ 2802.115076][T12379] usb 6-1: Manufacturer: syz [ 2802.119706][T12379] usb 6-1: SerialNumber: syz [ 2802.405071][T12379] usb 6-1: bad CDC descriptors [ 2802.415193][T12379] usb 6-1: USB disconnect, device number 40 15:27:56 executing program 3: mkdir(&(0x7f0000000240)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) mknod$loop(&(0x7f0000000000)='./control/file0\x00', 0x0, 0xffffffffffffffff) close(r0) 15:27:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000004fc0)={0x0, 0x22, 0x22, {[@main=@item_4={0x3, 0x0, 0xb, "cf87f96f"}, @global=@item_012={0x2, 0x1, 0x0, 'b]'}, @local=@item_012={0x2, 0x2, 0x0, "8c93"}, @local=@item_4={0x3, 0x2, 0x0, "af9db9b5"}, @main=@item_012={0x2, 0x0, 0x9, "0162"}, @global=@item_4={0x3, 0x1, 0x0, "d9c68a50"}, @local=@item_4={0x3, 0x2, 0x0, "18c1187b"}, @main=@item_4={0x3, 0x0, 0x0, "4ba4cd92"}]}}, 0x0}, 0x0) 15:27:56 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x43, 0x7e, 0x2}, 0x3c) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/233}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000002c0), &(0x7f00000012c0), 0x1}, 0x20) 15:27:56 executing program 2: syz_open_dev$loop(&(0x7f0000001a40)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c81, 0xfffffffffffffffe) 15:27:56 executing program 4: unshare(0x2000400) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000005c0)) 15:27:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff8c, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:27:56 executing program 2: syz_open_dev$loop(&(0x7f0000001a40)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c81, 0xfffffffffffffffe) 15:27:56 executing program 4: unshare(0x2000400) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000005c0)) 15:27:56 executing program 0: mkdir(&(0x7f0000000240)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) mknod$loop(&(0x7f0000000000)='./control/file0\x00', 0x0, 0xffffffffffffffff) close(r0) 15:27:56 executing program 2: syz_open_dev$loop(&(0x7f0000001a40)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c81, 0xfffffffffffffffe) 15:27:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000001010000000000ffffffff0200000010000100050002000000000000000000"], 0x24}}, 0x0) 15:27:56 executing program 4: unshare(0x2000400) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000005c0)) [ 2806.286517][ T5396] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2806.534188][ T5396] usb 2-1: Using ep0 maxpacket: 16 [ 2806.653206][ T5396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2806.664800][ T5396] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2806.677959][ T5396] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2806.687277][ T5396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2806.697439][ T5396] usb 2-1: config 0 descriptor?? [ 2807.175750][ T5396] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 2807.184185][ T5396] microsoft 0003:045E:07DA.0071: No inputs registered, leaving [ 2807.193581][ T5396] microsoft 0003:045E:07DA.0071: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2807.376106][ T5198] usb 2-1: USB disconnect, device number 112 [ 2808.153029][ T5396] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2808.393104][ T5396] usb 2-1: Using ep0 maxpacket: 16 [ 2808.513347][ T5396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2808.524654][ T5396] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2808.537766][ T5396] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2808.546972][ T5396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2808.556728][ T5396] usb 2-1: config 0 descriptor?? [ 2808.856576][ T5396] microsoft 0003:045E:07DA.0072: unknown main item tag 0x0 [ 2808.865021][ T5396] microsoft 0003:045E:07DA.0072: No inputs registered, leaving [ 2808.883099][ T5396] microsoft 0003:045E:07DA.0072: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2809.015998][ T5396] usb 2-1: USB disconnect, device number 113 15:28:03 executing program 3: mkdir(&(0x7f0000000240)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) mknod$loop(&(0x7f0000000000)='./control/file0\x00', 0x0, 0xffffffffffffffff) close(r0) 15:28:03 executing program 0: mkdir(&(0x7f0000000240)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) mknod$loop(&(0x7f0000000000)='./control/file0\x00', 0x0, 0xffffffffffffffff) close(r0) 15:28:03 executing program 2: unshare(0x20020400) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x40480923, 0x0) 15:28:03 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 15:28:03 executing program 5: r0 = socket(0x2, 0x803, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev}}}}}}, 0x0) 15:28:03 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000004fc0)={0x0, 0x22, 0x22, {[@main=@item_4={0x3, 0x0, 0xb, "cf87f96f"}, @global=@item_012={0x2, 0x1, 0x0, 'b]'}, @local=@item_012={0x2, 0x2, 0x0, "8c93"}, @local=@item_4={0x3, 0x2, 0x0, "af9db9b5"}, @main=@item_012={0x2, 0x0, 0x9, "0162"}, @global=@item_4={0x3, 0x1, 0x0, "d9c68a50"}, @local=@item_4={0x3, 0x2, 0x0, "18c1187b"}, @main=@item_4={0x3, 0x0, 0x0, "4ba4cd92"}]}}, 0x0}, 0x0) 15:28:03 executing program 0: mkdir(&(0x7f0000000240)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) mknod$loop(&(0x7f0000000000)='./control/file0\x00', 0x0, 0xffffffffffffffff) close(r0) 15:28:03 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f0000013000)=0xfffffffffffffed4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 15:28:03 executing program 4: unshare(0x400) r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0x100000) 15:28:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_IF_NETNSID={0x8}]}, 0x28}}, 0x0) 15:28:03 executing program 5: r0 = socket(0x2, 0x803, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev}}}}}}, 0x0) [ 2813.545260][ T5396] usb 2-1: new high-speed USB device number 114 using dummy_hcd 15:28:03 executing program 5: r0 = socket(0x2, 0x803, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev}}}}}}, 0x0) [ 2813.796738][ T5396] usb 2-1: Using ep0 maxpacket: 16 [ 2813.915264][ T5396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2813.926863][ T5396] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2813.939992][ T5396] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2813.949243][ T5396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2813.966274][ T5396] usb 2-1: config 0 descriptor?? [ 2814.445720][ T5396] microsoft 0003:045E:07DA.0073: unknown main item tag 0x0 [ 2814.454202][ T5396] microsoft 0003:045E:07DA.0073: No inputs registered, leaving [ 2814.467106][ T5396] microsoft 0003:045E:07DA.0073: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2814.650858][ T5198] usb 2-1: USB disconnect, device number 114 15:28:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 15:28:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000004fc0)={0x0, 0x22, 0x22, {[@main=@item_4={0x3, 0x0, 0xb, "cf87f96f"}, @global=@item_012={0x2, 0x1, 0x0, 'b]'}, @local=@item_012={0x2, 0x2, 0x0, "8c93"}, @local=@item_4={0x3, 0x2, 0x0, "af9db9b5"}, @main=@item_012={0x2, 0x0, 0x9, "0162"}, @global=@item_4={0x3, 0x1, 0x0, "d9c68a50"}, @local=@item_4={0x3, 0x2, 0x0, "18c1187b"}, @main=@item_4={0x3, 0x0, 0x0, "4ba4cd92"}]}}, 0x0}, 0x0) 15:28:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x131fca40, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c76574092e6687b3d7972c534d31898a183af2c6784617c01244cf1f8a73ece1"}}) 15:28:07 executing program 3: mkdir(&(0x7f0000000240)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) mknod$loop(&(0x7f0000000000)='./control/file0\x00', 0x0, 0xffffffffffffffff) close(r0) 15:28:07 executing program 5: r0 = socket(0x2, 0x803, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev}}}}}}, 0x0) 15:28:07 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) clone(0x30a4d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:28:07 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000580)={0x6, @output}) 15:28:07 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000001c0)) 15:28:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x64b3cb7426d54726) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000f46000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000400)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x64b3cb7426d54726) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/219, 0xdb}], 0x1) sendfile(r2, r3, 0x0, 0xff) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000200)=""/181, 0xb5}], 0x1) 15:28:07 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x2) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x82, 0x4}, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106, 0x8}}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x0, @multicast2}}) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000200)) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) unshare(0x40000000) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000140)=""/124) [ 2817.713785][ T5396] usb 2-1: new high-speed USB device number 115 using dummy_hcd 15:28:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 15:28:07 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/36, 0x24}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x100000001}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x482, 0x0) [ 2817.953296][ T5396] usb 2-1: Using ep0 maxpacket: 16 [ 2818.036640][T22332] IPVS: ftp: loaded support on port[0] = 21 [ 2818.073453][ T5396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 15:28:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) [ 2818.084693][ T5396] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2818.097819][ T5396] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2818.107025][ T5396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2818.216567][ T5396] usb 2-1: config 0 descriptor?? [ 2818.826211][ T5396] microsoft 0003:045E:07DA.0074: unknown main item tag 0x0 [ 2818.834945][ T5396] microsoft 0003:045E:07DA.0074: No inputs registered, leaving [ 2818.850161][ T5396] microsoft 0003:045E:07DA.0074: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2819.031011][ T5396] usb 2-1: USB disconnect, device number 115 15:28:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 15:28:13 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') socket$kcm(0x29, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1a4, 0x182) 15:28:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r4, {}, {0x4}}, [@filter_kind_options=@f_flow={{0xc, 0x1, 'flow\x00'}, {0x4}}]}, 0x34}}, 0x0) 15:28:13 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000900)) 15:28:13 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000004fc0)={0x0, 0x22, 0x22, {[@main=@item_4={0x3, 0x0, 0xb, "cf87f96f"}, @global=@item_012={0x2, 0x1, 0x0, 'b]'}, @local=@item_012={0x2, 0x2, 0x0, "8c93"}, @local=@item_4={0x3, 0x2, 0x0, "af9db9b5"}, @main=@item_012={0x2, 0x0, 0x9, "0162"}, @global=@item_4={0x3, 0x1, 0x0, "d9c68a50"}, @local=@item_4={0x3, 0x2, 0x0, "18c1187b"}, @main=@item_4={0x3, 0x0, 0x0, "4ba4cd92"}]}}, 0x0}, 0x0) 15:28:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) 15:28:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xb}}) 15:28:13 executing program 4: setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x7844}, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:28:14 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) [ 2824.007574][T22819] kvm_hv_get_msr: 40 callbacks suppressed [ 2824.007609][T22819] kvm [22797]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000085 [ 2824.025400][ T5396] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2824.033553][T22819] kvm [22797]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000086 [ 2824.045226][T22819] kvm [22797]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000087 15:28:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0x1}]}, 0x10) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 2824.059213][T22819] kvm [22797]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000088 [ 2824.079066][T22819] kvm [22797]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000089 [ 2824.091520][T22819] kvm [22797]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x4000008a [ 2824.105046][T22819] kvm [22797]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x4000008b [ 2824.114294][T22819] kvm [22797]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x4000008c [ 2824.124410][T22819] kvm [22797]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x4000008d [ 2824.133726][T22819] kvm [22797]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x4000008e 15:28:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_mreq(r2, 0x0, 0x22, &(0x7f0000000000)={@multicast2}, 0x8) [ 2824.283284][ T5396] usb 2-1: Using ep0 maxpacket: 16 [ 2824.423833][ T5396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2824.435053][ T5396] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2824.448377][ T5396] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2824.457657][ T5396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2824.473643][ T5396] usb 2-1: config 0 descriptor?? 15:28:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) 15:28:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x180, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x20000000004e20, 0x0, @ipv4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000002c0)=0x8, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000) 15:28:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0xc8d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0f7ffffffffff}}, @IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x40}}, 0x0) 15:28:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890e, &(0x7f00000000c0)="000001000080000000e500") r1 = socket$inet6(0xa, 0x2000000080803, 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) r3 = dup2(r2, r2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000200)) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000000240)={0x72, 0x8, 0x10001}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x1, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 15:28:14 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x0, 0x403, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_key={0x1, 0x9}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x78}}, 0x0) [ 2824.959854][ T5396] microsoft 0003:045E:07DA.0075: unknown main item tag 0x0 [ 2824.968496][ T5396] microsoft 0003:045E:07DA.0075: No inputs registered, leaving [ 2825.018011][ T5396] microsoft 0003:045E:07DA.0075: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2825.164600][ T5396] usb 2-1: USB disconnect, device number 116 15:28:15 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") write$FUSE_CREATE_OPEN(r0, &(0x7f0000001340)={0xa0, 0x0, 0x2, {{0x800000000007, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xa0) [ 2825.716052][T23686] CUSE: unknown device info "" [ 2825.721074][T23686] CUSE: DEVNAME unspecified 15:28:21 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 15:28:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 15:28:21 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RLOCK(r0, &(0x7f00000000c0)={0x8}, 0x1) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001000)) 15:28:21 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7, 0x0) 15:28:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000), 0x1c) 15:28:21 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8}], 0x1) [ 2831.104935][T23794] sg_read: process 21089 (syz-executor.0) called from kernel context, this is not allowed. 15:28:21 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c410600050001019fa5d4b378102699cf3012f8"], 0x16) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd6e) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:28:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 15:28:21 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @ptr=0x400000}}) 15:28:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 15:28:21 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0xc204, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 15:28:21 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000020a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 15:28:21 executing program 4: r0 = io_uring_setup(0x72, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 15:28:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 15:28:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r1, &(0x7f0000000440)={&(0x7f0000000180)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000000)="9cabbf0451dc6e29419b80008100254588a8596088ca", 0x16}], 0x1}, 0x0) 15:28:27 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffd6a, &(0x7f0000000080)={0x0, 0x102}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a00000000000000000008003900090035000c000600000019000500de800000000000dc1338d54400009b84132000000083de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492502, 0x0) 15:28:27 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c410600050001019fa5d4b378102699cf3012f8"], 0x16) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd6e) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:28:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x14, 0x2}]}}}]}, 0x3c}}, 0x0) 15:28:27 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x20f) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) [ 2837.362232][T24353] IPv6: NLM_F_REPLACE set, but no existing node found! 15:28:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) 15:28:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x40000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xd}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x80c4) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4), 0x0) socket(0x10, 0x3, 0x0) 15:28:27 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c410600050001019fa5d4b378102699cf3012f8"], 0x16) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd6e) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 2837.622068][T24451] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 15:28:27 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c410600050001019fa5d4b378102699cf3012f8"], 0x16) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd6e) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 2837.819551][T24451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:28:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 15:28:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socket$unix(0x1, 0x5, 0x0) io_setup(0x20, &(0x7f0000000080)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 15:28:28 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x19, 0x342) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000008dc0)=[{&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0}], 0x1, 0x0) [ 2845.635685][T24791] net_ratelimit: 2 callbacks suppressed [ 2845.635707][T24791] batman_adv: batadv0: adding TT local entry 6e:29:41:9b:80:00 to non-existent VLAN 1349 [ 2845.705023][T24791] batman_adv: batadv0: adding TT local entry 6e:29:41:9b:80:00 to non-existent VLAN 1349 15:28:35 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x19, 0x342) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000008dc0)=[{&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0}], 0x1, 0x0) 15:28:35 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x0, 0x7, 0x4, 0x0, {0x77359400}, {}, 0x0, 0x0, @fd, 0x4}) 15:28:35 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x7ffff000}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="be", 0x246c3}], 0x1}, 0x60) 15:28:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="0f01c92e0f00106626dd7e0066b88c000f00d0c4c301688079670000bdb97b080000b8b1bae9baba000000000f304366b881008ed00f01c966b807018ec0", 0x3e}], 0x1, 0x0, 0x0, 0x3b1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60a9f72b108d2c00fe8000000000000000000d00000000aafe8000000000000000000000000000aa8800907800000000fe8000000000000000000000000000002210585d95a6066078c42cc03afc5274fc5ffe0af15136a0c37c3b2a9f82e0bb63c61750ef45bef598598bb2085ed0b34c1e80ba1d9ff09bc60749ad7f099cbb3b51212a48ba26d68d1ededb7c4325cc812be1badef97a6f6ea6566d0b013f301d2db5fdb51a7f52c290cdd26b82a1221db730cd306764d0be1aff13601318fe87afae8facbdbdc37ea7c201b33f313ef4f91cd49723d523dec8fad5846524e0005b988e682ad9ac500569a1de8ff8127673c936316de037e51f7128a6737f5644638ee7ef4d20324376a62b1cf92faca13ca647e75e1e426eee58b22fb80d1d63c6747e8373a792af364d75f9a09b38592ae59815ef6145176a02b52622436e3f83fc3b23a7141cb50983f951eac1fffa9f1a7c30137e7bb95052e99cd314e2c61c05d8d0fbfb5d320a894109df803dd5cf311ec4b24c5953153d7722bf4503f53481c4156b677c51730d09d285c116d0d3cd3ceed1169c1172350aff56b134c4df7719ac9de23afaacb84bb82d9d63b9a5cd9d6e6ede8471f78fa228128306f5f6b7c871bf8e9086ff8a76abfb557a94edc97063c95aad518cb39dbee6a9f34ab0691ce1ddc892929b170511ab339a8d355669df247b498b29edd1e6d30d20a6b96759b89e84f66aa1396b3730debb4b98e0f88908e899231c079a2fda34b70693b2a9312d6083cf6adbfe4f3031475d99f550b6f8f9ecc95fc1126695aa38043eabb93ec083bb00dc0a6848910b8acde145041aaf376e27f554ebecd611a011a8bcbb6bca4b323776af31cf6daad61c9fd93719d6a4d4352268ada0854114d82c10178f8e9d5b6cb969f346c0d30977e73fc63a398d626ebdf16566682bc8764998f9fd29cd68110dd13415f1a7e7d4875bb3444b1fc2f55e72d09ca7725c5852ff585077ccaf37bd16105c45b274a2bbfd0176d1c92b4cc250aba0f3b57c50220ba84ce00c807ad2b795589ce02463b856bf89ecde07c3afc8cc03c6c5b2ed574c18faacf6e7cc2c4b0a8817a03d870b892674b8b2e40afba640841a8c666bfa288cb646cc6740e51ebada611829b023684acd06503e4bc93f5f63741031a3f5285e7b90a54af23301a0a25ea820acce74dc271ef869da7204b0dbc8e750ed5cc934513acca3ba6c2071e51b83b3dcb8efa31a890cba219029dfe9dc8a0d9c901d5dabc069540a8297614d3cbd9a3fbdc42506f0d3b4c66e6e8f158a2e128c7323636d4f56426bf2b642502868256790c5c90d7ba586b963f76e0829d36e04d9602cae3fa952cc7f9f7caf1de4482c8970c30b9cd120c4753438cfa149a7a82380136ddd4d1a9e59cb2331610985501e5ef97a637c1df2afddb6eb09d0a403dad2025d6b27d9b37cfb81faa02a7f58baf5bb86d93167df5bcf731d0b1e96343fd4dbe6024939e39472513bda942054356b8c5510f41df3f483dca0845563d9193f4a279599e3da63cf510a970e9d67f95f0782f7d93174df04e873af7f4eda13272d7bab15630a14dd3ce1b98433e9ce54523d3ad3efc0c107504b1ad38a468f6120d17a0ddb24fc8e780f1a24e8a792e1d456a5ac32b3cc95fdf7f774c1d9ea7603e58aacd491d0d6b7212014fbf4d1783e12a5bd7e38c0dda31961c979ce244c319358aedcfd6994c7dbb2ffef0dde1179025313de74352d4001f031bc743ca1ff51a9f83dda2d687bf8a3abc08fe8e9ba4dfa40bbd890be328b5d2a80cee8185c2347cb8d2bc4e4f3a793f1a42c5f8d164d7c2d1d37264c97286dfd82d15713453353886925f56b2bb9d07fc05132404aacaf2d95fb34401245f157e4435fdeb76c62906ff0aa89dc7881a8b81c2fd9c936069c5d93a230d217d04afcf5b4125ab478dea65ec0ea8cff14ed065a63399be52d901f5eb05562566d20ef2d125b0a9909a113d5de7be1b2644384aeafda2f2721b958a5645cf2ed1f4cc8ddcff05d65fbf09f65b56c375c9f1820904dc79e22ddf387469681b17f08710258be06ca78de4877ea5831c2be9d14a631bec767baa012d06d26487da366c09c802b3bbd396ba71e600c967a7cbf8b717a3961a7f0245ebeab49bc7d0527b63734b34b5709a33dacad8ed30f5bf382921194b125d7c8cd85f12332ec1c7a01f57e8c8c3b56f6cffa9cd7a2fcb40db5290c421a1ee104744dde5a2d3bcd027728e3d245ad28f9cacceec65772744e76a703a159581ae980831fce6174e54826ac92ee3236345edf50d98e232a73414fa2b6ea70000000e0bd012d3408981eaa21462e3e209e2e6776b4d001913dea8e7424999eb11b8d27940759bb1c6507c81c9eeef901c4c00593bc75b56789fbbdb4c23dd772543f2c647e6a9edfe7dbeef334b77a424a3741fd9b24d3636b043c5ad1ac1044044cce0839f2a97ddc92275b3593de98e1c77c37cdfb9e5898c84e672e62009162e69e5beaf5098e72f181645cf13c46319cf9ef8f8201dd9e1922ab09acf15efcc622756c8b32ec70246c51b65dc5457e85a4cbee85ea0e9f1c6a0fd390058f8f69d5432fca17a4ede6c92a65ad426bc7da414f7a47d526df78c20710cd8c92a868b5a25cadf9e3cf9ecf45901bfd7c9fe677ab4703c10808d6ed530c20057fb3627c167625264c9870c421f9c92fa3edbd4e06b36d59edd818defc548778ebcfccc463a9f5e3468294cfd1d403500a13abfd183f9135339e0ec0e44c77b73008611e9936ec47cd37d3f8b268d4978beb33e58a2469f69ef4d4e248566e536070da579fadf18729d18bf36a6c2cb7a94da560a4e7b5d35be22016d60a0fc206ba9a20229b29ed8c78e5902c371fbf658c53850c10572d662d8b1111b2238f5f2424233f86113481e6101c7a6910766a3c453e0dce9e4ef18a85ca9e0f7dc480e5915511f137038e755fb9eb3b0e4d3ffb3688354fc645946378574363c754338f2699ed9837c5da4d95b0f6ba5b259636e51463312fbc54d65130e0da4240d5456d6b68cf7aefde8309cc6bdf985c5b76825d19ee1922da594d9ad06413e811a7620a2d60e0a927ef5040c2ce9935a0e59998b22901675895f93bd3732d5b6bf4932f1ce6a0051b7cc4ba52d37eadfc8ee7b1f7275a17bb0f8775ae9dd96ecc70ccf1e7b758718fbc9ef62877958ef18fd74f0b70af82c4145fff18030bddd337753a68fda2d13962aa3cb4c4031187c7c02edd9751907787359952690e9214a5b8b7046eaf3615421c7e45c92d65d9966521bf6459759f85226bed277a547ab60b4e77ff771c2a83b2e00032ed16a64862c8220d90909c56c3c7e74d3ba0b0259991732b5955b786e4ddb434a00e86cf8816286f991463f47040b9a2abb9225c585a80ee631c2d7843a2e63d9f87bf5be9385aedb9888efaee199ffce527ebc54bc58de306bd0fc02377007ea67eb0ebe9b18474350788a0b258508f5b2cdd099a3bf56023e436f7643fcbee71aafa516b3f761fa7a90ef26917c673d9fe614f0afe271d4da6af2bd3a86f77cd7c5b89bfd2a455104649a79a9a4ab0ef815dbd533af90054f60558e431d31b5315f07f348d79f933d67047228f892b7c3319e8e55964c9df1ec84b7fe80227019a7e478a43dc6dbf52b5bc654d2be92465d5b31c8dd6b4ee05cfb0eb83462b788cd719df23a12017b0352cd2d2fe4b9988eb10f5f4d1416884644cfb1c0881e7f0ff070ca12c03ab9da2ca59bf824397f690d7c4ff32abf3c89c3aa41afb7410ebaaca1915f6679b65281f3c54a6b243e1b164021f6d50b0fb2991f047fdeeb3d954ae492522224e811554289b21881867dbc7d3d90ed684d74abc390f541d50a812acb5f163c21dfe6c241c77ba882744190d2f46ef68bcd30ef00f862d17bed5f75fcf3474e3ad23ec403f28fffdc5a40c8260de23be93ec3385fe37359ae75c69e4e59066f6560564fb67ac8cff93b7a40176be0a84ae517319ff4e533501756307d968c2019adc81bee19a2d4fc12e86db96cd0a4a3971fa35def409c9e04ddc6b410e1cad04f9767e33af98a62a9190e2f7b25b175a7faed8fe0b35a9874d4dee227cbb916f461bb5dd72a43e1b3a5a0d992146e5bbaf0b51016e019fc2ddbfbd3d9d9698ccb22cf5af43a01ddffd12241e93cc02b512659f3b67d8589343139f7ba968cf19d309b9228c9ec1b59b27904ef94abcb3c1ad6ea9e0210566cc9c7bd559a997ecad47e3d09d03c45e0a4bbe65d74ebb1d9eedd04149f0fd2b0e82b895eea1d9a017c1c7799e801c315ed1dd87bbfac0a93a07f2fe4ee92374c522b30110ca"], 0x0) 15:28:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x1, r1}, 0x20) 15:28:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000000000001000000e9bb628a9e"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7b, 0x5, [0x48e], [0xc1]}) 15:28:36 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x19, 0x342) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000008dc0)=[{&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0}], 0x1, 0x0) 15:28:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1e, 0x11, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xf0}}, 0x1c}}, 0x0) 15:28:36 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) dup2(r1, r0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xd9f, 0x4, {0x1, @raw_data="7a96b6fbdf62bba845a52d283bb5a8dd7f85e61011ce5e9f9b04ddb9012500247fbf42196476f3d9503327a912bd364605e0446a5559377e7bf92ef30863951aaa53f7270160142e2eeaef347c1e02f86b9b6d4bb3c26f51d9fbf95a71bcd057022d48177863b1f3c453ffc3707cabc8eb6356a35480256ccf100f0699de633c9c7d1e7392d5322ba8cb887f11ce6b63f76445cc8d3cb45ecd3e2bbac22aea5bfc2abd157b05d12e9e772f0adcf0fa4b686c7272b6d4089d037562eeddd4c8d170f697a243b6f096"}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000480)={0x1, @vbi}) 15:28:36 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000000000843553130082e000000010902240001000000000904000009030000000921000000012229000905810300000000007f6817afcfcf904bbad482adca878a347f6a49981bbe29d05455c017f59f2ca96322c451c01b61d51830cd5099"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x29, {0x29, 0x0, "0c53a260298b58b1743f7f0f72a48fc93cedee42366a179660567a17e17f7cbb49c4256e41feea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 15:28:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r4}, [@filter_kind_options=@f_cgroup={{0xd, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c, 0x3}}]}}]}, 0x74}}, 0x0) 15:28:36 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x19, 0x342) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000008dc0)=[{&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0}], 0x1, 0x0) 15:28:36 executing program 1: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x200000004, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0xe0]}, 0x3c) [ 2846.523262][ T5396] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2846.773010][ T5396] usb 1-1: Using ep0 maxpacket: 8 [ 2846.913332][ T5396] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2846.924966][ T5396] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2846.939139][ T5396] usb 1-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice=2e.08 [ 2846.948375][ T5396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2846.958923][ T5396] usb 1-1: config 0 descriptor?? [ 2847.673296][ T5396] usb 1-1: language id specifier not provided by device, defaulting to English [ 2847.903457][ T5396] uclogic 0003:5543:3031.0076: failed retrieving Huion firmware version: -71 [ 2847.913665][ T5396] uclogic 0003:5543:3031.0076: failed probing parameters: -71 [ 2847.921530][ T5396] uclogic: probe of 0003:5543:3031.0076 failed with error -71 [ 2847.933541][ T5396] usb 1-1: USB disconnect, device number 26 [ 2848.643195][T12808] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2848.903019][T12808] usb 1-1: Using ep0 maxpacket: 8 [ 2849.023193][T12808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2849.035818][T12808] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2849.052364][T12808] usb 1-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice=2e.08 [ 2849.069198][T12808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2849.082226][T12808] usb 1-1: config 0 descriptor?? [ 2849.443670][T12808] usbhid 1-1:0.0: can't add hid device: -71 [ 2849.450056][T12808] usbhid: probe of 1-1:0.0 failed with error -71 [ 2849.461273][T12808] usb 1-1: USB disconnect, device number 27 15:28:43 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x4000201f}) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0xffffffffffffffc3) 15:28:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), 0x4) 15:28:43 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x77, 0x2, 0x30, 0x20, 0x6a5, 0xd800, 0xb654, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x57, 0x0, 0x0, 0xca, 0x2d, 0x2d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0xac, &(0x7f0000001900), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000001940), 0x0, 0x0, 0x0, 0x0, 0x0}) 15:28:43 executing program 5: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004e00), 0x27b, 0x0, 0x0) 15:28:43 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0xd8, 0xd2, 0x31, 0x8, 0x110a, 0x1131, 0x5e0a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1b, 0x0, 0x1, 0x8f, 0x1b, 0xe6, 0x0, [], [{{0x9, 0x5, 0x5, 0x2}}]}}]}}]}}, 0x0) 15:28:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4028af11, &(0x7f0000000080)) [ 2852.996943][T25441] sctp: [Deprecated]: syz-executor.2 (pid 25441) Use of int in maxseg socket option. [ 2852.996943][T25441] Use struct sctp_assoc_value instead 15:28:43 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x2, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x88001) sendfile(r0, r1, 0x0, 0x800000000024) 15:28:43 executing program 2: r0 = epoll_create(0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) fcntl$setstatus(r3, 0x4, 0x42800) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) 15:28:43 executing program 5: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004e00), 0x27b, 0x0, 0x0) 15:28:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x1e, 0x0, 0x0) r5 = dup2(r2, r4) dup3(r5, r3, 0x0) [ 2853.333591][T12808] usb 5-1: new high-speed USB device number 117 using dummy_hcd 15:28:43 executing program 5: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004e00), 0x27b, 0x0, 0x0) 15:28:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000040)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x1, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmmsg(r3, &(0x7f0000005040)=[{{&(0x7f0000000180)=@xdp={0x2c, 0xffffa888, r5}, 0x80, 0x0}}], 0x300, 0x0) 15:28:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@dev}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) [ 2853.573333][T12808] usb 5-1: Using ep0 maxpacket: 8 [ 2853.715194][T12808] usb 5-1: config 0 has an invalid interface number: 27 but max is 0 [ 2853.723543][T12808] usb 5-1: config 0 has no interface number 0 [ 2853.729798][T12808] usb 5-1: config 0 interface 27 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2853.739785][T12808] usb 5-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=5e.0a [ 2853.749071][T12808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2853.804015][T12808] usb 5-1: config 0 descriptor?? [ 2853.856895][T12808] ti_usb_3410_5052 5-1:0.27: TI USB 3410 1 port adapter converter detected [ 2853.866684][T12808] usb 5-1: Direct firmware load for moxa/moxa-1131.fw failed with error -2 [ 2853.875672][T12808] usb 5-1: ti_download_firmware - firmware not found [ 2853.890142][T12808] ti_usb_3410_5052: probe of 5-1:0.27 failed with error -2 [ 2854.055777][T12808] usb 5-1: USB disconnect, device number 117 [ 2854.863138][T12808] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2855.122986][T12808] usb 5-1: Using ep0 maxpacket: 8 [ 2855.273196][T12808] usb 5-1: config 0 has an invalid interface number: 27 but max is 0 [ 2855.281486][T12808] usb 5-1: config 0 has no interface number 0 [ 2855.287792][T12808] usb 5-1: config 0 interface 27 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2855.297697][T12808] usb 5-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=5e.0a [ 2855.306873][T12808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2855.316616][T12808] usb 5-1: config 0 descriptor?? [ 2855.366392][T12808] ti_usb_3410_5052 5-1:0.27: TI USB 3410 1 port adapter converter detected [ 2855.376294][T12808] usb 5-1: Direct firmware load for moxa/moxa-1131.fw failed with error -2 [ 2855.385407][T12808] usb 5-1: ti_download_firmware - firmware not found [ 2855.392489][T12808] ti_usb_3410_5052: probe of 5-1:0.27 failed with error -2 [ 2855.564620][T12808] usb 5-1: USB disconnect, device number 118 [ 2857.513113][T12808] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2857.783034][T12808] usb 4-1: Using ep0 maxpacket: 32 [ 2857.903175][T12808] usb 4-1: config 0 has an invalid interface number: 87 but max is 0 [ 2857.911443][T12808] usb 4-1: config 0 has no interface number 0 [ 2857.917804][T12808] usb 4-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=b6.54 [ 2857.926972][T12808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2857.936615][T12808] usb 4-1: config 0 descriptor?? [ 2857.987369][T12808] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 2858.533042][T12808] gspca_nw80x: reg_w err -110 [ 2858.537966][T12808] nw80x: probe of 4-1:0.87 failed with error -110 15:28:50 executing program 3: unshare(0x2040400) r0 = socket$inet(0x2, 0x3, 0x81) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000062c0)) 15:28:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x32e) 15:28:50 executing program 5: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000004e00), 0x27b, 0x0, 0x0) 15:28:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00') bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00005ec000)="366521ab415b7ac7", 0x8) read(r1, &(0x7f00000001c0)=""/117, 0xffffffdf) r2 = accept$alg(r0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xa3d) 15:28:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x14, 0x2, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @tunl_policy=[@IFLA_IPTUN_TTL={0x8, 0x4, 0x8}]]}}}]}, 0x44}}, 0x0) 15:28:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180), 0x20000180) [ 2860.238511][ T5396] usb 4-1: USB disconnect, device number 88 [ 2860.268944][T25991] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 15:28:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x109000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="f30f09b9dd090000b810000000ba008000000f300f00db0f001f1a5b000f01d8c4e209bbbe04000000b90f0400000f32d0a09b000bb8260f01d1", 0x3a}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000ac0)="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", 0x596}], 0x1}}], 0x1, 0x0) 15:28:50 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="03"], 0x1, 0x0) msgrcv(r1, &(0x7f00000001c0)={0x0, ""/113}, 0x79, 0x3, 0x405a556a350f348f) msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[]], 0x1, 0x0) 15:28:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = dup2(r1, r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x0, r1}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000013c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/177, 0xb1}], 0x1) 15:28:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000100)=ANY=[]) 15:28:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x24, &(0x7f0000000000), 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r0, r2) dup3(r5, r1, 0x0) 15:28:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000140)={0x3, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff}, [], "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", "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"}) 15:28:56 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x800, 0x31, "26787be022bc5275268afc498c567d04a9c815d40a0317702a13f2e695227e2cea7e623cca31f62b4303855fa2ec65566a"}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendto$inet(r0, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x3f00}, 0x300) 15:28:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f00000004c0)='/dev/input/mice\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000500)={0x9, 0xd7, [0x1091, 0x0, 0x1ff, 0x9, 0x200], 0x1}) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00c\x9e\x8f\xf1\x05\b\x1dA\x96\xa2\a\r+\xb7\xba\x93\xe1\x03\xa2]{\x9a\xbf\xd3\fm$\x15se\xa4~\xff\xe8\xf2\xc9\xf6\xa6\x13\x80f\x8c\xe6\xc1\xecA\x8dd\xf4\xee\x85\xefRh\xeb6\x99\x03\x8fo\xd3\xee\xab\xe4_n\x98S0xffffffffffffffff}) r8 = dup(r7) syz_kvm_setup_cpu$x86(r8, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r8, 0xc0105303, &(0x7f0000000100)={0x1c, 0x8, 0x6}) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="bd000000", @ANYRES16=r2, @ANYBLOB="000100000000fedbdf250b00000034000200080006002231000008000400fca34a7a08000900ff07000008000b0000000000080009000000000008000e004e20000014000100080006006c63000008000600727200003c000100080001000a000000080004004e2400000c000700090000002400000014000300ffffffff00000000000000000000000008000b0073697000080005000900000008000400ff0700000800040000000080"], 0xb0}}, 0x8081) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r12, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r16, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r16, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r16, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r16, &(0x7f0000000140)="05", 0x1, 0x0, 0x0, 0x0) splice(r16, 0x0, r15, 0x0, 0x10000011001, 0x0) splice(r14, 0x0, r16, 0x0, 0xffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r14, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) r17 = dup(r13) syz_kvm_setup_cpu$x86(r17, r11, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r17, 0x40345410, &(0x7f00000000c0)={{0x2, 0x1, 0x7, 0x2, 0xfffffffd}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 15:28:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100002, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x4) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x3) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 15:28:56 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e8f63d08c4108a8191f10000000109022400010000000009046700020300000009050600000000000009050b9ba25637820595000000000000"], 0x0) 15:28:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) listen(r1, 0x0) close(r1) [ 2866.580324][ C1] sd 0:0:1:0: [sg0] tag#7465 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2866.590058][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB: Test Unit Ready [ 2866.596839][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2866.606660][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2866.616532][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2866.626341][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2866.628450][T26643] input: syz0 as /devices/virtual/input/input313 [ 2866.636255][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2866.636342][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2866.636415][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2866.636494][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2866.636571][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2866.636658][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2866.701602][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2866.711440][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2866.721281][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2866.731128][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2866.740961][ C1] sd 0:0:1:0: [sg0] tag#7465 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 2866.833248][T12808] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2866.845378][T26895] input: syz0 as /devices/virtual/input/input314 15:28:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:28:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") unshare(0x400) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0x691, &(0x7f0000000400)="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"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x4) [ 2867.085224][T12808] usb 1-1: Using ep0 maxpacket: 8 [ 2867.204261][T26954] ptrace attach of "/root/syz-executor.1"[12431] was attempted by " °ÿ àÿ 0 p €  ÿ Àÿ ðÿ ÿÿÿÿ   x ^\x0bÏè{ q ‘  @ = [ 2867.206495][T12808] usb 1-1: config 0 has an invalid interface number: 103 but max is 0 15:28:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rseq(&(0x7f0000000600), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) [ 2867.303326][T12808] usb 1-1: config 0 has no interface number 0 [ 2867.309902][T12808] usb 1-1: config 0 interface 103 altsetting 0 endpoint 0xB has an invalid bInterval 55, changing to 9 [ 2867.321525][T12808] usb 1-1: config 0 interface 103 altsetting 0 endpoint 0xB has invalid maxpacket 1698, setting to 1024 [ 2867.332879][T12808] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=f1.91 [ 2867.341994][T12808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:28:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0xff, 0x2}, 0x20) 15:28:57 executing program 5: unshare(0x24020400) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0) 15:28:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:28:57 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100000dab1440861201206df4000000010902240001000010000904b20002b90b2a0009058102e9020000000905030259030000008d29fe377202bb345953b7e8f35f05000000023d082c27c67ff3c1ed2c423c6a179bb633e0e433c8f4f079340508ff82144f139bf7"], 0x0) [ 2867.364486][T26963] ptrace attach of "/root/syz-executor.1"[12431] was attempted by " °ÿ àÿ 0 p €  ÿ Àÿ ðÿ ÿÿÿÿ   x ^\x0bÏè{ q ‘  @ = [ 2867.879078][T12808] usb 1-1: config 0 descriptor?? [ 2868.054847][T12808] radio-si470x 1-1:0.103: could not find interrupt in endpoint [ 2868.062667][T12808] radio-si470x: probe of 1-1:0.103 failed with error -5 [ 2868.213616][T12808] radio-raremono 1-1:0.103: this is not Thanko's Raremono. [ 2868.221311][T12808] usbhid 1-1:0.103: couldn't find an input interrupt endpoint [ 2868.232200][T12808] usb 1-1: USB disconnect, device number 28 [ 2868.253176][ T5198] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2868.643286][ T5198] usb 3-1: config 0 has an invalid interface number: 178 but max is 0 [ 2868.651755][ T5198] usb 3-1: config 0 has no interface number 0 [ 2868.658174][ T5198] usb 3-1: config 0 interface 178 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 745 [ 2868.668562][ T5198] usb 3-1: config 0 interface 178 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 857 [ 2868.678882][ T5198] usb 3-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=f4.6d [ 2868.688320][ T5198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2868.698009][ T5198] usb 3-1: config 0 descriptor?? [ 2868.761446][T12808] usb 3-1: Direct firmware load for libertas/usb8388_olpc.bin failed with error -2 [ 2868.772031][T12808] usb 3-1: Direct firmware load for libertas/usb8388_v9.bin failed with error -2 [ 2868.784895][T12808] usb 3-1: Direct firmware load for libertas/usb8388_v5.bin failed with error -2 [ 2868.795383][T12808] usb 3-1: Direct firmware load for libertas/usb8388.bin failed with error -2 [ 2868.806150][T12808] usb 3-1: Direct firmware load for usb8388.bin failed with error -2 [ 2868.814422][T12808] usb8xxx: failed to find firmware (-2) [ 2868.956842][T12808] usb 3-1: USB disconnect, device number 9 [ 2868.973090][ T5396] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2869.213206][ T5396] usb 1-1: Using ep0 maxpacket: 8 [ 2869.333166][ T5396] usb 1-1: config 0 has an invalid interface number: 103 but max is 0 [ 2869.341509][ T5396] usb 1-1: config 0 has no interface number 0 [ 2869.347953][ T5396] usb 1-1: config 0 interface 103 altsetting 0 endpoint 0xB has an invalid bInterval 55, changing to 9 [ 2869.359209][ T5396] usb 1-1: config 0 interface 103 altsetting 0 endpoint 0xB has invalid maxpacket 1698, setting to 1024 [ 2869.370718][ T5396] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=f1.91 [ 2869.380002][ T5396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2869.389718][ T5396] usb 1-1: config 0 descriptor?? [ 2869.438065][ T5396] radio-si470x 1-1:0.103: could not find interrupt in endpoint [ 2869.446255][ T5396] radio-si470x: probe of 1-1:0.103 failed with error -5 [ 2869.653303][ T5396] radio-raremono 1-1:0.103: this is not Thanko's Raremono. [ 2869.661142][ T5396] usbhid 1-1:0.103: couldn't find an input interrupt endpoint [ 2869.672093][ T5396] usb 1-1: USB disconnect, device number 29 [ 2869.732991][T12379] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2870.103163][T12379] usb 3-1: config 0 has an invalid interface number: 178 but max is 0 [ 2870.111519][T12379] usb 3-1: config 0 has no interface number 0 [ 2870.118058][T12379] usb 3-1: config 0 interface 178 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 745 [ 2870.128314][T12379] usb 3-1: config 0 interface 178 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 857 [ 2870.138545][T12379] usb 3-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=f4.6d [ 2870.147698][T12379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2870.157304][T12379] usb 3-1: config 0 descriptor?? [ 2870.199913][ T5396] usb 3-1: Direct firmware load for libertas/usb8388_olpc.bin failed with error -2 [ 2870.212300][ T5396] usb 3-1: Direct firmware load for libertas/usb8388_v9.bin failed with error -2 [ 2870.223072][ T5396] usb 3-1: Direct firmware load for libertas/usb8388_v5.bin failed with error -2 [ 2870.234604][ T5396] usb 3-1: Direct firmware load for libertas/usb8388.bin failed with error -2 [ 2870.243951][ T5396] usb 3-1: Direct firmware load for usb8388.bin failed with error -2 [ 2870.252058][ T5396] usb8xxx: failed to find firmware (-2) [ 2870.395486][T12808] usb 3-1: USB disconnect, device number 10 15:29:04 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) 15:29:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:29:04 executing program 1: r0 = socket$kcm(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x3c) setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000000)=r0, 0x1b) 15:29:04 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x15, 0x35b, 0x0}) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x51, 0xffffffff, 0x0, {}, {}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}}) write$hidraw(r1, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) 15:29:04 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e8f63d08c4108a8191f10000000109022400010000000009046700020300000009050600000000000009050b9ba25637820595000000000000"], 0x0) 15:29:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r1) socket$rds(0x15, 0x5, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0xf, 0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) 15:29:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:29:05 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x47}, [@call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff86}, 0x70) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)='15', 0x2}], 0x3e3) [ 2875.055744][T27305] syz-executor.1 (27305): /proc/27295/oom_adj is deprecated, please use /proc/27295/oom_score_adj instead. 15:29:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x14, 0x2, [@IFLA_IPTUN_PMTUDISC={0x8, 0xa, 0x1}, @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x44}}, 0x0) 15:29:05 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x47}, [@call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff86}, 0x70) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)='15', 0x2}], 0x3e3) [ 2875.143237][T12808] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2875.153076][ T5396] usb 1-1: new high-speed USB device number 30 using dummy_hcd 15:29:05 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001e78511023398a713798000000010902240001000000000904bd0002d085180009050b04000000000009058a020000000000"], 0x0) 15:29:05 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x47}, [@call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff86}, 0x70) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)='15', 0x2}], 0x3e3) [ 2875.225598][T27331] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 2875.234064][T27331] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 2875.392996][ T5396] usb 1-1: Using ep0 maxpacket: 8 [ 2875.403545][T12808] usb 6-1: Using ep0 maxpacket: 8 [ 2875.513140][ T5396] usb 1-1: config 0 has an invalid interface number: 103 but max is 0 [ 2875.521533][ T5396] usb 1-1: config 0 has no interface number 0 [ 2875.527811][ T5396] usb 1-1: config 0 interface 103 altsetting 0 endpoint 0xB has an invalid bInterval 55, changing to 9 [ 2875.539169][ T5396] usb 1-1: config 0 interface 103 altsetting 0 endpoint 0xB has invalid maxpacket 1698, setting to 1024 [ 2875.543153][T12808] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 2875.550505][ T5396] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=f1.91 [ 2875.558832][T12808] usb 6-1: config 0 has no interface number 0 [ 2875.567868][ T5396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2875.574036][T12808] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2875.593108][T12808] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 2875.604391][T12808] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 2875.608222][ T5396] usb 1-1: config 0 descriptor?? [ 2875.613597][T12808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2875.622340][ T5198] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2875.635375][T12808] usb 6-1: config 0 descriptor?? [ 2875.668604][ T5396] radio-si470x 1-1:0.103: could not find interrupt in endpoint [ 2875.676549][ T5396] radio-si470x: probe of 1-1:0.103 failed with error -5 [ 2875.698873][T12808] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2875.710688][T12808] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input315 [ 2875.883483][ T5396] radio-raremono 1-1:0.103: this is not Thanko's Raremono. [ 2875.891327][ T5396] usbhid 1-1:0.103: couldn't find an input interrupt endpoint [ 2875.898193][T27217] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2875.909685][ T5396] usb 1-1: USB disconnect, device number 30 [ 2875.921744][T12808] usb 6-1: USB disconnect, device number 41 [ 2875.927424][T27209] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2875.937745][ C0] xpad 6-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2875.947817][T12808] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2875.959029][ T5198] usb 3-1: Using ep0 maxpacket: 16 [ 2876.093371][ T5198] usb 3-1: config 0 has an invalid interface number: 189 but max is 0 [ 2876.101690][ T5198] usb 3-1: config 0 has no interface number 0 [ 2876.108043][ T5198] usb 3-1: config 0 interface 189 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 2876.118145][ T5198] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=98.37 [ 2876.127357][ T5198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2876.136927][ T5198] usb 3-1: config 0 descriptor?? [ 2876.181914][ T5198] ni6501 3-1:0.189: driver 'ni6501' failed to auto-configure device. [ 2876.378827][T12808] usb 3-1: USB disconnect, device number 11 [ 2876.772933][ T5198] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2877.022959][ T5198] usb 6-1: Using ep0 maxpacket: 8 [ 2877.153027][ T5396] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2877.153280][ T5198] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 2877.169137][ T5198] usb 6-1: config 0 has no interface number 0 [ 2877.175422][ T5198] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2877.186434][ T5198] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 2877.197669][ T5198] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 2877.206866][ T5198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2877.216518][ T5198] usb 6-1: config 0 descriptor?? [ 2877.258966][ T5198] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2877.270961][ T5198] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input316 [ 2877.392997][ T5396] usb 3-1: Using ep0 maxpacket: 16 [ 2877.513404][ T5396] usb 3-1: config 0 has an invalid interface number: 189 but max is 0 [ 2877.521756][ T5396] usb 3-1: config 0 has no interface number 0 [ 2877.528167][ T5396] usb 3-1: config 0 interface 189 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 2877.538443][ T5396] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=98.37 [ 2877.547955][ T5396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2877.559120][ T5396] usb 3-1: config 0 descriptor?? [ 2877.610054][ T5396] ni6501 3-1:0.189: driver 'ni6501' failed to auto-configure device. [ 2877.641892][ T5198] usb 6-1: USB disconnect, device number 42 [ 2877.649228][ T5198] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2877.804762][T12808] usb 3-1: USB disconnect, device number 12 15:29:11 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, [], &(0x7f0000000100)={0x98f905, 0x4, [], @value=0x70e000}}) 15:29:11 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/576]}, 0x2b8) 15:29:11 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x47}, [@call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff86}, 0x70) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)='15', 0x2}], 0x3e3) 15:29:11 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e8f63d08c4108a8191f10000000109022400010000000009046700020300000009050600000000000009050b9ba25637820595000000000000"], 0x0) 15:29:11 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000000)={@random="c5d32df662eb", @local, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x40, 0x3a, 0x0, @remote={0xfe, 0x80, [0x29c, 0x58, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "b66cb8", 0x0, 0xffffff88, 0x0, @empty, @rand_addr="31e8015c1c5d7206a0d800", [@dstopts={0x0, 0x0, [], [@padn={0x1, 0xffffff84, [0x0]}, @padn]}]}}}}}}}, 0x0) 15:29:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x268, 0x0, 0x704}]}) 15:29:11 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) [ 2881.226422][T27468] x_tables: eb_tables: mark_m.0 match: invalid size 24 (kernel) != (user) 0 15:29:11 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7311000000009b00c31e14aae3da0f48d9961e0eeaae2c08f5193a5b492b9ae9d4cf0010"], 0xff86) close(r2) socket$netlink(0x10, 0x3, 0x4) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:29:11 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) [ 2881.463232][ T5396] usb 1-1: new high-speed USB device number 31 using dummy_hcd 15:29:11 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x0, "d0199187fac60e846a6da4842314a5aa17f360e3838fde3827d63272a7edbb365fe82acc99566556d8b9751c77ce86ba6678a36a46c3931bd9e045597c7b968d754da97fc55f6389b212b58b346636d4"}, 0xd8) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$inet(0x2, 0xa, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) chroot(0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000000002, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x63) connect$inet6(r1, 0x0, 0x0) ioctl(r1, 0x4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x17bf30b1db7a326a) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) listxattr(0x0, 0x0, 0x0) r3 = dup(r2) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 15:29:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0xa, 0x0, 0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 15:29:11 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) [ 2881.704866][ T5396] usb 1-1: Using ep0 maxpacket: 8 [ 2881.823544][ T5396] usb 1-1: config 0 has an invalid interface number: 103 but max is 0 [ 2881.831929][ T5396] usb 1-1: config 0 has no interface number 0 [ 2881.838275][ T5396] usb 1-1: config 0 interface 103 altsetting 0 endpoint 0xB has an invalid bInterval 55, changing to 9 [ 2881.849517][ T5396] usb 1-1: config 0 interface 103 altsetting 0 endpoint 0xB has invalid maxpacket 1698, setting to 1024 [ 2881.860878][ T5396] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=f1.91 [ 2881.870075][ T5396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2881.929672][ T5396] usb 1-1: config 0 descriptor?? [ 2881.980050][ T5396] radio-si470x 1-1:0.103: could not find interrupt in endpoint [ 2881.988896][ T5396] radio-si470x: probe of 1-1:0.103 failed with error -5 [ 2882.183604][ T5396] radio-raremono 1-1:0.103: this is not Thanko's Raremono. [ 2882.191400][ T5396] usbhid 1-1:0.103: couldn't find an input interrupt endpoint [ 2882.201645][ T5396] usb 1-1: USB disconnect, device number 31 15:29:17 executing program 4: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000060165cf24a58bcbb33e094e5681ad9850a101f5ffffffffaed5125e"], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 15:29:17 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [], {}, [], {0x4}}, 0x24, 0x0) 15:29:17 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) 15:29:17 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000feb000)=0xa90d, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x1000022, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}, 0x8000) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) 15:29:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x0, "d0199187fac60e846a6da4842314a5aa17f360e3838fde3827d63272a7edbb365fe82acc99566556d8b9751c77ce86ba6678a36a46c3931bd9e045597c7b968d754da97fc55f6389b212b58b346636d4"}, 0xd8) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$inet(0x2, 0xa, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) chroot(0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000000002, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x63) connect$inet6(r1, 0x0, 0x0) ioctl(r1, 0x4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x17bf30b1db7a326a) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) listxattr(0x0, 0x0, 0x0) r3 = dup(r2) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 15:29:17 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e8f63d08c4108a8191f10000000109022400010000000009046700020300000009050600000000000009050b9ba25637820595000000000000"], 0x0) [ 2887.476491][T28035] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 15:29:17 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1b0000001a00813c4a5f94303d00a00f80ecdb4cb904024865160b", 0x1b}], 0x1}, 0x0) 15:29:17 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 2887.693864][ T5396] usb 1-1: new high-speed USB device number 32 using dummy_hcd 15:29:17 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f0000010000000009000000ac1e7bf5000000ec0201ac26ea15ac14140dac1414aaffff000000ec3c5e52bbe622e35a5322df851b948df96cd8d66aeafbae78ceec18e8b105ed1ab59308268a8903384e9099ef2a812adb24ab7e41c4ca749f54cf5bbaa737f62543b5a3616919a8aaf2ee23926feba29ae54182f24975d42e9c35fab91e7b85f487d92b9f7065c9b18f0e2720c7a053abed9031b02364f100100aa2d92f903600"/184], 0x34) close(r3) 15:29:17 executing program 5: unshare(0x24020400) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') lseek(r0, 0x0, 0x3) 15:29:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)=ANY=[@ANYBLOB="1f0000000000000000000040050000a90000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700fff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x390, 0x0, 0x4d564b}]}) [ 2887.936964][ T5396] usb 1-1: Using ep0 maxpacket: 8 15:29:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x0, "d0199187fac60e846a6da4842314a5aa17f360e3838fde3827d63272a7edbb365fe82acc99566556d8b9751c77ce86ba6678a36a46c3931bd9e045597c7b968d754da97fc55f6389b212b58b346636d4"}, 0xd8) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$inet(0x2, 0xa, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) chroot(0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000000002, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x63) connect$inet6(r1, 0x0, 0x0) ioctl(r1, 0x4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x17bf30b1db7a326a) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) listxattr(0x0, 0x0, 0x0) r3 = dup(r2) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 2888.055590][ T5396] usb 1-1: config 0 has an invalid interface number: 103 but max is 0 [ 2888.064370][ T5396] usb 1-1: config 0 has no interface number 0 [ 2888.070683][ T5396] usb 1-1: config 0 interface 103 altsetting 0 endpoint 0xB has an invalid bInterval 55, changing to 9 [ 2888.081937][ T5396] usb 1-1: config 0 interface 103 altsetting 0 endpoint 0xB has invalid maxpacket 1698, setting to 1024 [ 2888.093291][ T5396] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=f1.91 15:29:18 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00002f5ff8)) madvise(&(0x7f0000381000/0x3000)=nil, 0x3000, 0x4) [ 2888.102410][ T5396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2888.117414][ T5396] usb 1-1: config 0 descriptor?? [ 2888.174080][ T5396] radio-si470x 1-1:0.103: could not find interrupt in endpoint [ 2888.181902][ T5396] radio-si470x: probe of 1-1:0.103 failed with error -5 [ 2888.373641][ T5396] radio-raremono 1-1:0.103: this is not Thanko's Raremono. [ 2888.381734][ T5396] usbhid 1-1:0.103: couldn't find an input interrupt endpoint [ 2888.401536][ T5396] usb 1-1: USB disconnect, device number 32 15:29:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'teql0\x00', 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 15:29:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x23, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 15:29:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2c, 0x20000000000031, 0x11d, 0x0, 0x0, {0x3}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @binary="9262e42416716e41471a65aafaee86"}]}]}, 0x2c}}, 0x0) 15:29:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0x3, 0x100000000000001}, 0x20) accept$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0x40000003}, 0x20) 15:29:21 executing program 3: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) 15:29:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x0, "d0199187fac60e846a6da4842314a5aa17f360e3838fde3827d63272a7edbb365fe82acc99566556d8b9751c77ce86ba6678a36a46c3931bd9e045597c7b968d754da97fc55f6389b212b58b346636d4"}, 0xd8) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$inet(0x2, 0xa, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) chroot(0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000000002, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x63) connect$inet6(r1, 0x0, 0x0) ioctl(r1, 0x4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x17bf30b1db7a326a) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) listxattr(0x0, 0x0, 0x0) r3 = dup(r2) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 15:29:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0x4000005c], [0xc1]}) 15:29:21 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4d, 0x10, 0xc3, 0x10, 0x45ba, 0x92dc, 0x5ce, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8, 0x0, 0x2, 0xfe, 0x3, 0x0, 0x0, [], [{{0x9, 0x5, 0x5, 0x2}}, {{0x9, 0x5, 0x8f, 0x1e, 0x18}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0xac, &(0x7f0000000040)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:29:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0x3, 0x100000000000001}, 0x20) accept$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0x40000003}, 0x20) [ 2891.853006][T28639] kvm_hv_get_msr: 1 callbacks suppressed [ 2891.853044][T28639] kvm [28622]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x4000005c 15:29:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0x3, 0x100000000000001}, 0x20) accept$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0x40000003}, 0x20) 15:29:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'teql0\x00', 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 15:29:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0x3, 0x100000000000001}, 0x20) accept$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0x40000003}, 0x20) 15:29:22 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x310) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) [ 2892.213044][T12808] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2892.463940][T12808] usb 5-1: Using ep0 maxpacket: 16 [ 2892.596885][T12808] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 2892.605280][T12808] usb 5-1: config 0 has no interface number 0 [ 2892.611402][T12808] usb 5-1: config 0 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2892.621248][T12808] usb 5-1: config 0 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24 [ 2892.631328][T12808] usb 5-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce [ 2892.640535][T12808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2892.650045][T12808] usb 5-1: config 0 descriptor?? [ 2893.126831][T12808] usb 5-1: USB disconnect, device number 119 [ 2893.923031][T12808] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2894.183041][T12808] usb 5-1: Using ep0 maxpacket: 16 [ 2894.313216][T12808] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 2894.321354][T12808] usb 5-1: config 0 has no interface number 0 [ 2894.327724][T12808] usb 5-1: config 0 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2894.337540][T12808] usb 5-1: config 0 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24 [ 2894.347549][T12808] usb 5-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce [ 2894.356808][T12808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2894.366484][T12808] usb 5-1: config 0 descriptor?? [ 2894.633320][T12808] usb 5-1: usb_control_msg returned -71 [ 2894.639089][T12808] usbtmc 5-1:0.8: can't read capabilities [ 2894.650806][T12808] usb 5-1: USB disconnect, device number 120 15:29:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000100)=0xd83ea930166eb54c) 15:29:30 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x23a, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_delrule={0x34, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_SRC={0x14, 0x2, @mcast1}]}, 0x34}}, 0x0) 15:29:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'teql0\x00', 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 15:29:30 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x41, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="ea", 0x1}], 0x1, 0x0) 15:29:30 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002aa3ad1d453aacc0886e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff020000000000000000000000000001000000000800000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000404110061ca7c55a5e42d81d1e234c789375b23d36d0b7bd15e04e813cd723f47ce56dffa04c1f203e51942829b769c021a132a47ccf4ac88c150bfed88c8aa4db6efaf6839814663b22c44fc5c577657253c50de4d1797c8a8195d482f8537d4f9aeaf495c01d5a31348917325b55b4136f49a20b50d881350d03870439d9749097585033743069099a0c14b7ca9b9fdbba4b31e8658d38d801fc0741fd6d09437d0c202fbea3f51c4598700dfb9c978c98cf54a544361fed7900e39dec76fb7322bd16fb90b8a7c264221d2cbd1"], 0x310) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) 15:29:30 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090c00000000000000cc26ff6b02000800030000000000000000000000030006000000000002000000e0000001000000000000000002000100000000000000020400000000030005000000000002000000e00000010000000000000000"], 0x60}, 0x1, 0x2000000000000000}, 0x0) 15:29:30 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x310) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) 15:29:30 executing program 1: mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) setrlimit(0x2, &(0x7f0000000780)={0x2000000, 0x20080000000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:29:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'teql0\x00', 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 15:29:30 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x310) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) 15:29:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2a2b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 15:29:30 executing program 1: syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9e, 0x802) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@deltaction={0x28, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x28}}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000040)=[{}], 0xf4, 0x0) 15:29:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2a2b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 15:29:34 executing program 3: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, @tcp={{0x0, 0x4e20, 0x42424242, 0x41424344, 0x0, 0x0, 0x5, 0x1a}}}}}}, 0x0) 15:29:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x47, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x16, 0xfffffffffffffffd, 0x0, 0x0, {0xa}, [@nested={0xc, 0x0, [@typed={0x8, 0x9, @ipv4=@multicast1}]}]}, 0x20}}, 0x0) 15:29:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000a80)={0x1, 0x0, [{0x40000101}]}) 15:29:34 executing program 5: mmap(&(0x7f0000197000/0x10000)=nil, 0x7fffdfe68000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) 15:29:34 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000340)={0xfffffffa}) 15:29:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2a2b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 15:29:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)=0xffffffffffffffff) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000080)=0x1) 15:29:34 executing program 0: unshare(0x2000400) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) 15:29:34 executing program 1: ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000140)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6], 0xd0}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) splice(r0, 0x0, r4, 0x0, 0x19404, 0x0) 15:29:34 executing program 4: prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) 15:29:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2a2b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 15:29:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x2000000000000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x10004e21}, 0x10) 15:29:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') mkdirat$cgroup(r0, &(0x7f00000005c0)='syz1\x00', 0x1ff) 15:29:40 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x1000000000000003, 0x0, 0xfffffffffffffffd}) 15:29:40 executing program 0: r0 = fsopen(&(0x7f0000000280)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\x00', &(0x7f0000000140)=')\x13,vboxnet0cgroup^\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='proc\x00', &(0x7f0000000200)='\x00', 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f0000000080)=""/8, 0x8}], 0x2) 15:29:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d00001000000000000000efffffff020006000100000002000000f0000001000000f5000000000800120002000200000000400000000030006cff030000000000007b000000200a0000c4bb152c00000000000000000102001cbb00000000000000000000000003000500000000000200ed00e0000001000000ba00000000be8ab56512d0aa29c0427991bdd25f9e5680076a8b662d1cb830e4de9fdf5277c62be0812b77258d4f69fc59b0f906a5796a832e22d82273130443ec4da50596c26281b42967"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400024c, 0x0) 15:29:40 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c56c17104f1711a323910000000109021b00010000000009047e0001ffffff0009058f01000000000080a6663780b68d49b4d90231f21a88123b1ff7e000f448450b756277eec52a3705bfcffe2d455cb357978cc5"], 0x0) 15:29:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@deltfilter={0x58, 0x28, 0x421, 0x0, 0x0, {0x0, r4}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x0, 0x3, [@TCA_EMATCH_TREE_HDR, @TCA_EMATCH_TREE_LIST={0x0, 0x2, @TCF_EM_CANID}, @TCA_EMATCH_TREE_HDR, @TCA_EMATCH_TREE_HDR, @TCA_EMATCH_TREE_HDR, @TCA_EMATCH_TREE_HDR, @TCA_EMATCH_TREE_LIST={0x0, 0x2, @TCF_EM_IPSET}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, @TCF_EM_CMP}, @TCA_EMATCH_TREE_HDR, @TCA_EMATCH_TREE_LIST={0x0, 0x2, @TCF_EM_CANID}]}]}}]}, 0x58}}, 0x0) [ 2910.595449][T29624] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 15:29:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffdc9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1b) dup3(r1, r0, 0x0) [ 2910.656911][T29668] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 15:29:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) dup2(r2, r4) 15:29:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) 15:29:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000beeff0)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev}, {@in6=@mcast2, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2910.844858][T12808] usb 5-1: new high-speed USB device number 121 using dummy_hcd 15:29:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)='z', 0xfffffe51}], 0x1) ioctl$int_in(r2, 0x8000008004500b, 0x0) 15:29:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r3, 0x0, [0x305f, 0x2e, 0x32e, 0x182e, 0x600005f, 0x80ffff, 0x5f]}, 0x2c) 15:29:41 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120) [ 2911.114060][T12808] usb 5-1: Using ep0 maxpacket: 16 15:29:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000dee11606e3b94158e4c461b8f20842859c62615b4540655b8e0f443798ad95e3749bef219ceffd7bbd707f453151028ce57097e3bb4cd8e4b825102a9d49db730b59b508d52620571a990e8d77787ddca16b75378e106adff06b6bb851cd58f8abde4e951210b1fc48af6cc706d7f7b2021527a522caff0c5e284d402322d665a25808a355000000000000000000b92eb980e15da0e1a1ff5ef2892e019529513f0753c5cdfe58e5b9e60933907e69d14155d3f829fb24c4cf9a004f4c7773a34fc7c6edfea858a973e10040029e228199d57379231d"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) sendto$inet(r0, &(0x7f0000000280)="2fbde7", 0xfffffffffffffdf7, 0x0, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x200ca, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) [ 2911.264127][T12808] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 2911.272596][T12808] usb 5-1: config 0 has no interface number 0 [ 2911.278952][T12808] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2911.290237][T12808] usb 5-1: New USB device found, idVendor=174f, idProduct=a311, bcdDevice=91.23 [ 2911.299515][T12808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2911.313944][T12808] usb 5-1: config 0 descriptor?? 15:29:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r3, 0x0, [0x305f, 0x2e, 0x32e, 0x182e, 0x600005f, 0x80ffff, 0x5f]}, 0x2c) [ 2911.362574][T12808] stkwebcam: Syntek USB2.0 Camera is now controlling device video39 [ 2911.563898][ T5198] usb 5-1: USB disconnect, device number 121 [ 2911.575064][ T5198] stkwebcam: Syntek USB2.0 Camera release resources device video39 [ 2912.353033][ T5198] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2912.593011][ T5198] usb 5-1: Using ep0 maxpacket: 16 [ 2912.713114][ T5198] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 2912.721935][ T5198] usb 5-1: config 0 has no interface number 0 [ 2912.728271][ T5198] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2912.739825][ T5198] usb 5-1: New USB device found, idVendor=174f, idProduct=a311, bcdDevice=91.23 [ 2912.749419][ T5198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2912.759003][ T5198] usb 5-1: config 0 descriptor?? [ 2912.809715][ T5198] stkwebcam: Syntek USB2.0 Camera is now controlling device video39 [ 2913.004822][ T5198] usb 5-1: USB disconnect, device number 122 [ 2913.011341][ T5198] stkwebcam: Syntek USB2.0 Camera release resources device video39 15:29:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r3, 0x0, [0x305f, 0x2e, 0x32e, 0x182e, 0x600005f, 0x80ffff, 0x5f]}, 0x2c) 15:29:47 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x81, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 15:29:47 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create(0x100004) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$adsp(0x0, 0x0, 0x0) ioctl$TIOCSBRK(r2, 0x40044591) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 15:29:47 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000000019, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r0, 0x0, 0xffffff22, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e1e, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80000000002000) 15:29:47 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x77ff, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0x9, @raw_data="1fcb46d02ab6c63c524742317b3a75537c49b43893fc974900400000463f0437f7ffd8500d384ced6347be0711b5c9cc1bf51d241901c2c02cf411338e817d388054685cbb344a3e0244c4ef0915c7c51d07d272610817ba58559342ce7918de9a85638015aef9a5e3cd6a7c9367289b69f9d462ebe0785411a26cfb487d7bc2a5456cb92cfdad5d3c088a2861de26cdb810b47f7095d5b1a0cf189b5b2fc861f8104c4c07882c2e8345bea52167e2d4f9e707d8df10dfbc8b3f2de6d19f8cec666e98588ed484ee"}) 15:29:47 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') 15:29:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r3, 0x0, [0x305f, 0x2e, 0x32e, 0x182e, 0x600005f, 0x80ffff, 0x5f]}, 0x2c) 15:29:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x35, 0xb) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[{0x10, 0x1, 0x2}], 0x10}}], 0x1, 0x0) 15:29:47 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') 15:29:47 executing program 2: mmap(&(0x7f0000003000/0x8000)=nil, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) mprotect(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a\xc9n;v<\xd6h\xb0\x15\xaf;x\xb5;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK(\x0f\xadG\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x5002}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) [ 2917.584736][T30767] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2917.639590][T30849] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:29:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000004000), 0xffec, 0xfffc, &(0x7f0000002000), 0x10) 15:29:51 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') 15:29:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x2000004}, 0x10) write(r0, &(0x7f0000000140)="240000004a005f0014f9f407000909000a00800000000000000000001000020000000000", 0x24) 15:29:51 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000140001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 15:29:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x10, 0x1, 0x2, &(0x7f0000000080)}) 15:29:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d05], [0x3a]}) [ 2921.232715][T31036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2921.252230][T31038] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2921.261803][T31038] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:29:51 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') 15:29:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x2000004}, 0x10) write(r0, &(0x7f0000000140)="240000004a005f0014f9f407000909000a00800000000000000000001000020000000000", 0x24) 15:29:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff00000000080001006362710018040200100005000500000000000000070000000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ff00009300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaff00000000000000000000000000000000000000000000000000000000000000000000000000000011abf8afc6423630b247b578aa13308f5644d3a55d452a009c0a6d6129ae7f0837e23358a203749d8ecdf84b86f57c4295831d5dff46ea8b695f4c3f34d00e4b8ff5be033592cc680403fb995179b8d575e0df8e06543d6349f364e0f26c05672c21c617c3c99b6f8ccda5b0a982f374f8362d69878dddb4c57eaa52859b6a398c736ecb61363c5299b1e4922ab1ea3dfd10e68fb70825f547b36fb6639228385b968eebc5d4001bf693ea3258a78c80e02e4891d115789a4ed7abdfea665391d60819c868efed861cad6aa27af640e478f10ee6b54e59dc1d952a0e7bf8239c7033cdaf21c851ef432d118b435e2fda"], 0x444}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r3, {}, {0x2}}}, 0x24}}, 0x0) 15:29:51 executing program 5: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000040)=r1, 0xab) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r2}) sendmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000140)={r0}) [ 2921.518268][T31099] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:29:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000780)="0f", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="8d1eb80ac037cc2a98178f", 0xb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 15:29:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x2000004}, 0x10) write(r0, &(0x7f0000000140)="240000004a005f0014f9f407000909000a00800000000000000000001000020000000000", 0x24) [ 2921.786278][T31300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:29:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000013c0), 0x576, 0x400000fc, 0x0) 15:29:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe63) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0x1d0003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="2667670f3801e90f21750f01cf82510978ba4000b80030efbaf80c66b8e4b4d18f66efbafc0ced0f8a0d00bab7480000c1880000ebba410066ef", 0x3a}], 0x1, 0x0, 0x0, 0x330) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") 15:29:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff00000000080001006362710018040200100005000500000000000000070000000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ff00009300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaff00000000000000000000000000000000000000000000000000000000000000000000000000000011abf8afc6423630b247b578aa13308f5644d3a55d452a009c0a6d6129ae7f0837e23358a203749d8ecdf84b86f57c4295831d5dff46ea8b695f4c3f34d00e4b8ff5be033592cc680403fb995179b8d575e0df8e06543d6349f364e0f26c05672c21c617c3c99b6f8ccda5b0a982f374f8362d69878dddb4c57eaa52859b6a398c736ecb61363c5299b1e4922ab1ea3dfd10e68fb70825f547b36fb6639228385b968eebc5d4001bf693ea3258a78c80e02e4891d115789a4ed7abdfea665391d60819c868efed861cad6aa27af640e478f10ee6b54e59dc1d952a0e7bf8239c7033cdaf21c851ef432d118b435e2fda"], 0x444}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r3, {}, {0x2}}}, 0x24}}, 0x0) 15:29:55 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x8}, 0x0, 0x0, &(0x7f0000000ff8)={0x0, 0x989680}, 0x0) 15:29:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x802) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = socket$inet6(0xa, 0x3, 0x100000006) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x8010, r3, 0x0) socket$netlink(0x10, 0x3, 0x4) sendfile(r0, r0, 0x0, 0x24000000) close(r0) 15:29:55 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x15000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x14, 0x14, 0xd}, @remote, {[@timestamp={0x8, 0x30, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {[@remote]}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 2925.476160][T31489] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 15:29:55 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) 15:29:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff00000000080001006362710018040200100005000500000000000000070000000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ff00009300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaff00000000000000000000000000000000000000000000000000000000000000000000000000000011abf8afc6423630b247b578aa13308f5644d3a55d452a009c0a6d6129ae7f0837e23358a203749d8ecdf84b86f57c4295831d5dff46ea8b695f4c3f34d00e4b8ff5be033592cc680403fb995179b8d575e0df8e06543d6349f364e0f26c05672c21c617c3c99b6f8ccda5b0a982f374f8362d69878dddb4c57eaa52859b6a398c736ecb61363c5299b1e4922ab1ea3dfd10e68fb70825f547b36fb6639228385b968eebc5d4001bf693ea3258a78c80e02e4891d115789a4ed7abdfea665391d60819c868efed861cad6aa27af640e478f10ee6b54e59dc1d952a0e7bf8239c7033cdaf21c851ef432d118b435e2fda"], 0x444}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r3, {}, {0x2}}}, 0x24}}, 0x0) 15:29:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4}]}, @IFLA_BROADCAST={0xc, 0x2, @broadcast}]}, 0x34}}, 0x0) 15:29:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000180)={0x18, 0x2, 0xb0302ae1f9c92e07, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x4, 0x7}]}, 0x18}}, 0x0) 15:29:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x802) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = socket$inet6(0xa, 0x3, 0x100000006) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x8010, r3, 0x0) socket$netlink(0x10, 0x3, 0x4) sendfile(r0, r0, 0x0, 0x24000000) close(r0) [ 2926.054071][T31904] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:29:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff00000000080001006362710018040200100005000500000000000000070000000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ff00009300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaff00000000000000000000000000000000000000000000000000000000000000000000000000000011abf8afc6423630b247b578aa13308f5644d3a55d452a009c0a6d6129ae7f0837e23358a203749d8ecdf84b86f57c4295831d5dff46ea8b695f4c3f34d00e4b8ff5be033592cc680403fb995179b8d575e0df8e06543d6349f364e0f26c05672c21c617c3c99b6f8ccda5b0a982f374f8362d69878dddb4c57eaa52859b6a398c736ecb61363c5299b1e4922ab1ea3dfd10e68fb70825f547b36fb6639228385b968eebc5d4001bf693ea3258a78c80e02e4891d115789a4ed7abdfea665391d60819c868efed861cad6aa27af640e478f10ee6b54e59dc1d952a0e7bf8239c7033cdaf21c851ef432d118b435e2fda"], 0x444}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r3, {}, {0x2}}}, 0x24}}, 0x0) [ 2926.236587][T31954] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 15:30:02 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000000561"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffeb0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:30:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000000)) 15:30:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x0, 0x0, 0x9a84df586bbb3750}, 0x3c) 15:30:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x14b, &(0x7f0000000040)={@broadcast, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "a1bba9", 0x115, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x300000000000000]}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[], @gre={{0x0, 0x501}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "cc70ac501e57fc689ae21fb59faaff0c45eab02acb3c1ad413e019489f701505a1914b51540a99f156a239d149eb9210858b289333011f741b08f324df961a40b66d95adc78939f41eeb6e0dd9188421545ef7635c473d3aa9e6e198ae7b3261aa051ac426377c52762f7ec308f9d4758fe40eb815204b937f5333ba54bc90ae19283ae3754ae7bad6977daa53f1e1e538323e1c9691119bd19664d1e4a4495c876242fea922b6061d0e9050420eddedbbf830837789551123e83b2e7b82ba444e0dd0d3fddd064e42fdb90070a84ae655"}}}}}}}, 0x0) 15:30:02 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$inet6(r0, 0x0, &(0x7f0000000140)) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfffffffffffeffff}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$tipc(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fe", 0x1}], 0x1}, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc0585611, 0x0) sendto$inet(r1, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 15:30:02 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x802) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = socket$inet6(0xa, 0x3, 0x100000006) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x8010, r3, 0x0) socket$netlink(0x10, 0x3, 0x4) sendfile(r0, r0, 0x0, 0x24000000) close(r0) [ 2932.809399][T32132] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 15:30:02 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) 15:30:03 executing program 0: mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x8001}) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000240)="db", 0x1) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, &(0x7f0000000040)=""/83, 0x53, 0x0) 15:30:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffed1, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, r1, 0x615, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 15:30:03 executing program 0: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000120007031dfffd946fa2830012000a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 15:30:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x802) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = socket$inet6(0xa, 0x3, 0x100000006) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x8010, r3, 0x0) socket$netlink(0x10, 0x3, 0x4) sendfile(r0, r0, 0x0, 0x24000000) close(r0) [ 2933.789488][T32579] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2933.852087][T32601] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 15:30:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1043, 0x0) 15:30:04 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, r0) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'rmd256-generic\x00'}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffff00000000]}) 15:30:07 executing program 3: unshare(0x400) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000001100)) 15:30:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x13) 15:30:07 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$inet6(r0, 0x0, &(0x7f0000000140)) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfffffffffffeffff}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$tipc(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fe", 0x1}], 0x1}, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc0585611, 0x0) sendto$inet(r1, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 15:30:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x4) read(r0, 0x0, 0x0) 15:30:07 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs user:'], 0x1, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 15:30:07 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 2937.915322][ T620] encrypted_key: master key parameter 'user:' is invalid [ 2937.916131][ T630] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000006061903000400001a00f00000000000"], 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x167790321923d50, 0x0) 15:30:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c1207849bd070") r1 = socket(0x400020000000010, 0x2, 0x0) write(r1, &(0x7f00000000c0)="1f0000005e000d0000000000fc07ff1b070404000d00000029030100010039", 0x1f) 15:30:08 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, 0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 15:30:08 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6f) sendmmsg$inet6(r0, &(0x7f000000a240)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000001080)={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001700)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}}], 0x2, 0x0) 15:30:08 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 2938.649562][ T885] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840000001400050200000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000100fe8001000000010000000000000000aa14000600050000000180000034fd00000800000014000200ff8000000000000000000000000000aa14000100fe8000000000000000000000000000aa140006000900000001f8ffff20000000060000000800080000040000efa8b6f723ba4e21997e96a65b8bae48ebd711a0562393748650a7b6247517e546c7bd4cf3c720a544325026771f1f1defad8ec349ce039e4c33d2255d32ec7fb26603d848b57034cfe71d829b4595ba47271c47a0271448b38f6618bbe347b5d5310bc4166e6bdcd4a8f68a9d9f7c1e9f75d38a63ef798f1ce3237308f823a6bbee0f99232ea5e028d839647186d1"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x800400000000) 15:30:08 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 2939.011771][ T1055] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x100, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018005f00e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500154002008178a80016000f000300e558f03003ac000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81edff0f0000b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 15:30:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 15:30:14 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x800000003}, 0x8) write(r0, &(0x7f0000000040)="240000001a005f0214f9f407000904008100000001000000000200000800040003000000", 0x24) 15:30:14 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 15:30:14 executing program 1: setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x9ec0faea642bb54b}, "a4c4b8fb191e59c8", "5aad11be0442e2a1e740c64de9554dde18ef7d681ee527f23336ed1a1c731db7", "3c7ecde3", "49ae091dd011de60"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000340)=0x1, 0x45) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0xffffff60, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x3a3, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) accept4(0xffffffffffffffff, &(0x7f0000000200)=@x25={0x9, @remote}, &(0x7f0000000280)=0x80, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, &(0x7f0000000040)=@l2={0x1f, 0x9, {0x7, 0x100, 0x9, 0x2, 0x80000001, 0xfffffffffffffa3f}, 0x3, 0x101}, 0x80) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) unshare(0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @mss, @window, @sack_perm], 0x20000000000001ce) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 15:30:14 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$inet6(r0, 0x0, &(0x7f0000000140)) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfffffffffffeffff}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$tipc(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fe", 0x1}], 0x1}, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc0585611, 0x0) sendto$inet(r1, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) [ 2944.258253][ T1074] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:30:14 executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7400000024000b0500000000000000edffffff00", @ANYRES32=r2, @ANYBLOB="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"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0xfe2d4a820052a11e, 0x0) r5 = open(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000380)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8f89cd1c4cfe7237, 0x13, r5, 0x62) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02620000cef51a18da7722f394ba64ad"], 0x8, 0x0) r6 = open(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000000000eaffffffffffffff00000000000000000010d6f59773cfa7d5963be2cca151c89a6e4f2387a0af20ac5339325ebea6a8ab"]) r7 = open(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000380)) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000c80)={0x0, @bt={0x6, 0x1, 0x0, 0x3, 0x100000001, 0x1, 0x7bdd, 0x400, 0x1000, 0x6251, 0x9, 0xb6f, 0x8, 0x6, 0x6}}) getsockopt$packet_buf(r6, 0x107, 0xd, &(0x7f0000000b80)=""/204, &(0x7f0000000280)=0xcc) r8 = open(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000380)) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8}]]}}}]}, 0x68}}, 0x0) 15:30:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r1, 0x0, 0x0) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TCFLSH(r0, 0x541b, 0x71dff6) 15:30:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x45c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x430, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3f}}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) 15:30:15 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000002d000100"/20, @ANYRES32, @ANYBLOB="81e3241b0aee81cbb2a1faa142c98cd884c58d47c0f500d08f1d08144d2a9a43894c2583430c843c00006cb861b6906ab0c4061122bb5669bfb18edfe5374652f00fff17f972c0defec69176b970f84d55fd03bcdb20da208d9525a4f92317448978e293244a788257519167934363652e09da3fc92e115575c0af56a09d8042aa1a35fe1067b632110e23fd849a120a35e34c1500c202adfca5b2560131090000000000000050d9c5470e0832848c65a6f25608657c7a3d19648aa354ab253ffe7748f7f01da33c24cb46f20918c120d65548aaea96978c447beb673debbc6b5919fe7cb240cfc0000000"], 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) 15:30:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x400000)=nil, 0x400000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 15:30:15 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000400)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000040)='../file0\x00', 0x2) unlink(&(0x7f0000000380)='./file0/file0/../file0\x00') 15:30:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x2, 'htb\x00'}, {0x4}}]}, 0x30}}, 0x0) 15:30:18 executing program 5: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) unshare(0x20400) flock(r0, 0x0) 15:30:18 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x40029}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x29, {0x29, 0x0, "90a6895aefd79b87429d14ba8a6a2c922a8bb666b2dfea61dcba9f5bf786627df702a30d6479aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:30:18 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$inet6(r0, 0x0, &(0x7f0000000140)) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfffffffffffeffff}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$tipc(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fe", 0x1}], 0x1}, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc0585611, 0x0) sendto$inet(r1, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 15:30:18 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f0000000180)="6963e64243ea480b5de56946c568f95d22467104000000000000006f156c9c8a2ac4677b00000000000000000000e38a00f8e154da33000000000000000000000058", 0x42) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040), 0x4) 15:30:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x22, {0x22, 0x0, "bedc2a5443640a789bdd51ea6221d59bc578290bb75545b86415f523b546d3b9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) [ 2948.427066][ T1805] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 15:30:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x46, "26c141e7554fb8273e566fd8b353940963941aef778ea525bd033c5d877c5757c45a925c44460ef54b12ddbd2aeb3c162cfe26531727772ae178c0d6494586e2f0e2ebd82323"}, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) [ 2948.785088][ T5396] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2948.842255][ T2031] Invalid option length (0) for dns_resolver key 15:30:19 executing program 0: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002580)={0x1c, r2, 0x1ef6325be532a5eb, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 2949.033182][ T5396] usb 3-1: Using ep0 maxpacket: 8 [ 2949.153374][ T5396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2949.164816][ T5396] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2949.177901][ T5396] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 2949.187164][ T5396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2949.201932][ T5396] usb 3-1: config 0 descriptor?? 15:30:19 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000740)='net/ip_vs_stats\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/audio\x00', 0x2, 0x0) 15:30:19 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x12) [ 2949.686622][ T5396] keytouch 0003:0926:3333.0077: fixing up Keytouch IEC report descriptor [ 2949.727171][ T5396] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0077/input/input317 15:30:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0), 0x4) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) 15:30:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x24, 0x4000080000002, 0x1, 0xfffffffffffffffd, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @nested={0x8, 0x8, [@typed={0x4, 0x0, @binary}]}]}, 0x24}}, 0x0) [ 2949.969424][ T5396] keytouch 0003:0926:3333.0077: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 2950.033900][T17582] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2950.098972][ T5396] usb 3-1: USB disconnect, device number 13 [ 2950.303236][T17582] usb 2-1: Using ep0 maxpacket: 32 [ 2950.433434][T17582] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2950.444883][T17582] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2950.458052][T17582] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 2950.467401][T17582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2950.477162][T17582] usb 2-1: config 0 descriptor?? [ 2950.823450][T17582] usbhid 2-1:0.0: can't add hid device: -71 [ 2950.829669][T17582] usbhid: probe of 2-1:0.0 failed with error -71 [ 2950.838909][T17582] usb 2-1: USB disconnect, device number 117 [ 2950.853215][ T5198] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2951.113056][ T5198] usb 3-1: Using ep0 maxpacket: 8 [ 2951.253323][ T5198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2951.264617][ T5198] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2951.277656][ T5198] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 2951.286845][ T5198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2951.296454][ T5198] usb 3-1: config 0 descriptor?? [ 2951.493220][ T5396] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2951.673444][ T5198] usbhid 3-1:0.0: can't add hid device: -71 [ 2951.679660][ T5198] usbhid: probe of 3-1:0.0 failed with error -71 [ 2951.688867][ T5198] usb 3-1: USB disconnect, device number 14 [ 2951.733087][ T5396] usb 2-1: Using ep0 maxpacket: 32 [ 2951.853234][ T5396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2951.864430][ T5396] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2951.877525][ T5396] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 2951.886692][ T5396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2951.896405][ T5396] usb 2-1: config 0 descriptor?? [ 2952.201520][ T5396] logitech 0003:046D:C298.0078: unknown main item tag 0x0 [ 2952.211521][ T5396] logitech 0003:046D:C298.0078: hidraw0: USB HID v0.00 Device [HID 046d:c298] on usb-dummy_hcd.1-1/input0 [ 2952.223218][ T5396] logitech 0003:046D:C298.0078: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 2952.251018][ T5396] logitech: probe of 0003:046D:C298.0078 failed with error -1 [ 2952.262543][ T5396] usb 2-1: USB disconnect, device number 118 15:30:25 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x89, 0x88, 0x8a, 0x40, 0x582, 0x44, 0xaaa0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xe7, 0x7, 0x30}}]}}]}}, 0x0) 15:30:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040)="11ee791a805ee066a85db4095b36e218e7cbdb8c1e308dc69462007706cf1924ed6f7a", 0x23) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xffff1e77}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:30:25 executing program 5: io_setup(0x7, &(0x7f0000000040)) io_setup(0x53b, &(0x7f0000000000)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 15:30:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r2, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000180)) 15:30:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x22, {0x22, 0x0, "bedc2a5443640a789bdd51ea6221d59bc578290bb75545b86415f523b546d3b9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) 15:30:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv-_(hainiv(rfc)106(ccm_base(cbc(camellia),sha3-224-generic))'}, 0x58) 15:30:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x1000000002714, 0x0, &(0x7f00000000c0)) 15:30:26 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000000)) dup(r0) 15:30:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x1000000002714, 0x0, &(0x7f00000000c0)) [ 2956.003064][ T5396] usb 3-1: new high-speed USB device number 15 using dummy_hcd 15:30:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040)="11ee791a805ee066a85db4095b36e218e7cbdb8c1e308dc69462007706cf1924ed6f7a", 0x23) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xffff1e77}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:30:26 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:30:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x1000000002714, 0x0, &(0x7f00000000c0)) [ 2956.243655][ T5396] usb 3-1: Using ep0 maxpacket: 8 [ 2956.363521][ T5396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2956.374802][ T5396] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2956.387844][ T5396] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 2956.397345][ T5396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2956.451465][ T5396] usb 3-1: config 0 descriptor?? [ 2956.934826][ T5396] keytouch 0003:0926:3333.0079: fixing up Keytouch IEC report descriptor [ 2956.950408][ T5396] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0079/input/input318 [ 2957.045327][ T5396] keytouch 0003:0926:3333.0079: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 2957.343325][ T5198] usb 3-1: USB disconnect, device number 15 [ 2960.153160][ T5198] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2960.573267][ T5198] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 2960.581446][ T5198] usb 4-1: config 0 has no interface number 0 [ 2960.587791][ T5198] usb 4-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=aa.a0 [ 2960.596998][ T5198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2960.606761][ T5198] usb 4-1: config 0 descriptor?? [ 2960.649231][ T5198] usb 4-1: interface 1 not found [ 2960.846444][ T5198] usb 4-1: USB disconnect, device number 89 [ 2961.623183][ T5198] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2962.003164][ T5198] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 2962.012062][ T5198] usb 4-1: config 0 has no interface number 0 [ 2962.018442][ T5198] usb 4-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=aa.a0 [ 2962.027777][ T5198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2962.037677][ T5198] usb 4-1: config 0 descriptor?? [ 2962.089199][ T5198] usb 4-1: interface 1 not found [ 2962.284802][ T5198] usb 4-1: USB disconnect, device number 90 15:30:32 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x1, 0x71, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), 0x4) 15:30:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x1000000002714, 0x0, &(0x7f00000000c0)) 15:30:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040)="11ee791a805ee066a85db4095b36e218e7cbdb8c1e308dc69462007706cf1924ed6f7a", 0x23) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xffff1e77}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:30:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x2, 0x0, "8b63e98a6e9a990ccccaa0722f7b17adbfb251c09e5993d319d88199f6923e646c1d3eaad49bc3c0a86bd1683c51ec36b5d2dab5a220e04e0b20637e2b5a8dd3403bbe1ccf681d083e2307d3f5597b00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "521353f37dcd64c12799efb9dbad200b6cf433289feda8725ba79dbc26d16f9663b3df59d7b9d07abd8ae0918551393a71edeeba68925770399de3c38f23825d021cc14f2ea21c5dd607e8a85d8c9cfd"}, 0xd8) 15:30:32 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_bcm(0x1d, 0x2, 0x2) connect(0xffffffffffffffff, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r3, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x65}}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001b00)=""/218, 0x20001b04}], 0x1) 15:30:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x22, {0x22, 0x0, "bedc2a5443640a789bdd51ea6221d59bc578290bb75545b86415f523b546d3b9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) 15:30:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040)="11ee791a805ee066a85db4095b36e218e7cbdb8c1e308dc69462007706cf1924ed6f7a", 0x23) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xffff1e77}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:30:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4040aea0, &(0x7f0000000a80)={0x1, 0x0, [{0x0, 0x0, 0x0, 0xb}]}) 15:30:33 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_bcm(0x1d, 0x2, 0x2) connect(0xffffffffffffffff, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r3, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x65}}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001b00)=""/218, 0x20001b04}], 0x1) [ 2963.135377][ T5396] usb 3-1: new high-speed USB device number 16 using dummy_hcd 15:30:33 executing program 0: unshare(0x20600) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ']) 15:30:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{}, 0x15, 0x0, 0xffffffff80000004}, 0x18) 15:30:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="2e26ff56", 0x4) fcntl$setstatus(r2, 0x4, 0xa1a3f945407a2941) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) [ 2963.316894][ T3376] input: syz1 as /devices/virtual/input/input319 [ 2963.389804][ T5396] usb 3-1: Using ep0 maxpacket: 8 [ 2963.515516][ T5396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2963.526930][ T5396] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2963.540099][ T5396] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 2963.549342][ T5396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2963.582651][ T5396] usb 3-1: config 0 descriptor?? [ 2964.074728][ T5396] keytouch 0003:0926:3333.007A: fixing up Keytouch IEC report descriptor [ 2964.090140][ T5396] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.007A/input/input321 [ 2964.173863][ T5396] keytouch 0003:0926:3333.007A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 2964.483780][ T5198] usb 3-1: USB disconnect, device number 16 15:30:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @typed={0x8, 0x8, @binary="a5"}]}, 0x24}, 0x1, 0xf000}, 0x0) 15:30:37 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_bcm(0x1d, 0x2, 0x2) connect(0xffffffffffffffff, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r3, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x65}}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001b00)=""/218, 0x20001b04}], 0x1) 15:30:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="071f080000000000970600c6fe76cff3e26def23000200000811000013", 0x1d) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000001000)=""/4096, &(0x7f00000001c0)=0x1000) 15:30:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffe31, 0x0, 0x0, 0x207) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000001c0)="2e660f7f54009a00800f0066b9800000c00f326635002000000f3065f30f11d7640f789b0b20ba4100ed440f20c066350e000000440f22c0660f3881950000f20f005265ba2000b80800ef", 0x4b}], 0xaaaaaaaaaaaaabc, 0x0, 0x0, 0x29) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:30:37 executing program 0: creat(&(0x7f0000000200)='./bus\x00', 0x5aa9e39db596d48b) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000122000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000023000/0x3000)=nil, &(0x7f000009f000/0x1000)=nil, &(0x7f000046d000/0x600000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00004c9000/0x8000)=nil, &(0x7f000062b000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000cf000/0x1000)=nil, &(0x7f0000650000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) 15:30:37 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x22, {0x22, 0x0, "bedc2a5443640a789bdd51ea6221d59bc578290bb75545b86415f523b546d3b9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$hidraw(&(0x7f0000000b00)='/dev/hidraw#\x00', 0x0, 0x0) 15:30:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c65300a9b04830fe0ab398016289475b1a924d98639ca024ece3211ba1f4751031872"], 0x2a) write$binfmt_elf64(r0, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x227c, 0x0) 15:30:38 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$can_bcm(0x1d, 0x2, 0x2) connect(0xffffffffffffffff, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r3, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x65}}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001b00)=""/218, 0x20001b04}], 0x1) 15:30:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) sendmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 2968.235007][ T5396] usb 3-1: new high-speed USB device number 17 using dummy_hcd 15:30:38 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 15:30:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) [ 2968.483125][ T5396] usb 3-1: Using ep0 maxpacket: 8 15:30:38 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8800000000000001, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040), 0x98) [ 2968.603273][ T5396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2968.614456][ T5396] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2968.628583][ T5396] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 2968.637912][ T5396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2968.673894][ T5396] usb 3-1: config 0 descriptor?? [ 2969.154802][ T5396] keytouch 0003:0926:3333.007B: fixing up Keytouch IEC report descriptor [ 2969.170067][ T5396] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.007B/input/input322 [ 2969.263377][ T5396] keytouch 0003:0926:3333.007B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 2969.564407][ T5396] usb 3-1: USB disconnect, device number 17 15:30:43 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x6}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/214, 0xd6}], 0x1) 15:30:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x25, 0x52d, 0x0, 0x0, {0x0, r3, {}, {0x0, 0xf0801b}}}, 0x24}}, 0x0) 15:30:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x38) setsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, 0x0) 15:30:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={0x0, 0xffa4, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001ffff04000000000000ff010000000000a85400000000000001e000000100000000000000000000000000000000000000000a0000000000000029430f7a21dda26d37ff6842a842fdfe0632078a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0000000800000000000000000000e33eb88500a22580106acb896827348a8f4df0744c73a5fd4bb1bff83e874c60070d634a3c9097ad93ec3d5d4488fa286145aaa8bf5bf03374a977b588c801e1f42c54460d9ea61c9749ae06a2289c3395839605854e8c617261f43bad0fd3ba5ade9fbb68c08e83955f4b76eda5"], 0xb8}}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, 0x0, 0x0) 15:30:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti6'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}]}, 0x38}}, 0x0) 15:30:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3d49}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x1c) 15:30:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_G_CROP(r1, 0xc01456b8, &(0x7f0000000080)={0x0, {0x4000000000000014, 0x14, 0xffffffff38424752}}) 15:30:43 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffeffffefffffffb) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x18, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x3c, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 15:30:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x12d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x541d, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x1}, 0xb) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:30:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3d49}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x1c) 15:30:43 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="1f00000000000000000000400500ef000000e7fc4b0900980000000000b7871001000000000000002560b700eff0ffff0403ffffffff00000a"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000200000086010000000000003c0040"]) 15:30:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3d49}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x1c) 15:30:43 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0xfffffffffffffffd) 15:30:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) write$UHID_INPUT(r1, &(0x7f0000000240)={0x8, "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", 0x1000}, 0x1006) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x6) 15:30:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="a48b1bf72801002b4d2f2fba4fad273b1ea3e46f905080af4c90ccb15322", 0x1e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x24e, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:30:49 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xa2a5, &(0x7f0000000100)={&(0x7f0000001900)=ANY=[@ANYBLOB="5000000010000307ebff000600e7000040040000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:30:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x20a154cc) 15:30:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8246200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000c659ca800537f400000028000000960000000000000020200000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x2) 15:30:49 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3d49}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x1c) 15:30:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000003200010b0000e6ff00000000000000000c0002000100000000000000553ec9878d4609f84cc79d4bdf769fcf7363c8a1908ae631f29e7f15b1a4f2f85513c869bd059b3b0cd6e3a9423c3aa8e0a83c429004ccbf47d6d09f91d94ec7db0586ba6b99782bb25fa428cb673465b152aa3e8d311bfd52dcd4ca7b6f2e842faac52559a0a78c29e7789074984e42bfef18fba3483e790b049b5c0ca3480e98b15da0121918a70de1493858fc0257ca09ecca8441e08ef6c4282c3c8a2f7e8c287875551992cc2abaa9fe8b1f67bb636347d2712cf6a386f8"], 0x20}}, 0x0) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x42, 0x0) 15:30:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3) 15:30:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x216, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x29, {0x29, 0x0, "90861c9b5edf0ef70a3e257eef9f911bdeb7c22db7b1ae26c9d6080ec08dd0465102cbd7b197d2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:30:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@flushpolicy={0x5c, 0x1d, 0x413, 0x0, 0x0, "", [@algo_auth_trunc={0x4c, 0x14, {{'rmd320\x00'}}}]}, 0x5c}}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002ec0)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e80)={0x14, 0x4000000001a, 0x105}, 0x14}}, 0x0) 15:30:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@isdn={0x22, 0x0, 0x0, 0x9, 0x1f}, 0x80) 15:30:49 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x8}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f00000001c0), &(0x7f0000000100)=""/108}, 0x18) 15:30:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:30:50 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x4003d, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="8100", 0x2}], 0x1, 0x0) [ 2980.054595][ T5198] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2980.303070][ T5198] usb 5-1: Using ep0 maxpacket: 8 [ 2980.423142][ T5198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2980.434595][ T5198] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2980.447761][ T5198] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 2980.457001][ T5198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2980.466673][ T5198] usb 5-1: config 0 descriptor?? [ 2980.935990][ T5198] pyra 0003:1E7D:2C24.007C: report_id 39708 is invalid [ 2980.943303][ T5198] pyra 0003:1E7D:2C24.007C: item 0 2 1 8 parsing failed [ 2980.950911][ T5198] pyra 0003:1E7D:2C24.007C: parse failed [ 2980.956942][ T5198] pyra: probe of 0003:1E7D:2C24.007C failed with error -22 [ 2981.169195][ T5198] usb 5-1: USB disconnect, device number 123 [ 2981.943112][ T5198] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2982.183166][ T5198] usb 5-1: Using ep0 maxpacket: 8 [ 2982.313131][ T5198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2982.324678][ T5198] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2982.337711][ T5198] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 2982.346942][ T5198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2982.356580][ T5198] usb 5-1: config 0 descriptor?? [ 2982.723468][ T5198] usbhid 5-1:0.0: can't add hid device: -71 [ 2982.729721][ T5198] usbhid: probe of 5-1:0.0 failed with error -71 [ 2982.738781][ T5198] usb 5-1: USB disconnect, device number 124 15:30:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') write$binfmt_aout(r0, &(0x7f0000000240)={{}, "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", [[], [], [], [], [], [], [], [], []]}, 0x1000) 15:30:56 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000180)={0x0, 0x1}) 15:30:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r0, &(0x7f0000001240)="150000000000080083a66dd2c86b652502", 0x11) 15:30:56 executing program 5: write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0xffffff96}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_acct\x00') preadv(r0, &(0x7f0000000480), 0x3cd, 0x0) 15:30:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="46b10b8b8a50"}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="05033a0089063e0000000100c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe29) 15:30:56 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x216, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x29, {0x29, 0x0, "90861c9b5edf0ef70a3e257eef9f911bdeb7c22db7b1ae26c9d6080ec08dd0465102cbd7b197d2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2986.827064][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2986.834781][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2986.844226][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2986.851940][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2986.861742][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2986.869765][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2986.879935][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2986.888275][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:30:56 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKRRPART(r0, 0x301, 0x719000) 15:30:56 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x200, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x300f}}) [ 2986.973373][ T5198] usb 5-1: new high-speed USB device number 125 using dummy_hcd 15:30:57 executing program 2: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) [ 2987.215305][ T5198] usb 5-1: Using ep0 maxpacket: 8 [ 2987.223673][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2987.229924][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2987.333603][ T5198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2987.345625][ T5198] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2987.358728][ T5198] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 2987.368002][ T5198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:30:57 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000100)=@llc={0x1a, 0x0, 0xa, 0x0, 0x0, 0x0, @random="16b29a3288a8"}, 0xea91f05536b33e3b, 0x0}, 0x0) [ 2987.560534][ T5198] usb 5-1: config 0 descriptor?? 15:30:57 executing program 2: syz_usb_connect(0x0, 0x1f4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 15:30:57 executing program 5: write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0xffffff96}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_acct\x00') preadv(r0, &(0x7f0000000480), 0x3cd, 0x0) [ 2988.048673][ T5198] pyra 0003:1E7D:2C24.007D: report_id 39708 is invalid [ 2988.055823][ T5198] pyra 0003:1E7D:2C24.007D: item 0 2 1 8 parsing failed [ 2988.063497][ T5198] pyra 0003:1E7D:2C24.007D: parse failed [ 2988.069312][ T5198] pyra: probe of 0003:1E7D:2C24.007D failed with error -22 [ 2988.163021][ T9803] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2988.310024][ T5198] usb 5-1: USB disconnect, device number 125 [ 2988.403063][ T9803] usb 3-1: Using ep0 maxpacket: 16 [ 2988.523342][ T9803] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 2988.531806][ T9803] usb 3-1: config 0 has no interface number 0 [ 2988.538307][ T9803] usb 3-1: New USB device found, idVendor=1737, idProduct=0039, bcdDevice=82.31 [ 2988.547559][ T9803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2988.562184][ T9803] usb 3-1: config 0 descriptor?? [ 2988.823383][ T9803] asix 3-1:0.113 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2988.834042][ T9803] asix: probe of 3-1:0.113 failed with error -71 [ 2988.863350][ T9803] usb 3-1: USB disconnect, device number 18 [ 2989.592982][ T9803] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2989.853085][ T9803] usb 3-1: Using ep0 maxpacket: 16 [ 2989.993316][ T9803] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 2990.001581][ T9803] usb 3-1: config 0 has no interface number 0 [ 2990.007966][ T9803] usb 3-1: New USB device found, idVendor=1737, idProduct=0039, bcdDevice=82.31 [ 2990.017150][ T9803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2990.026782][ T9803] usb 3-1: config 0 descriptor?? [ 2990.353241][ T9803] asix 3-1:0.113 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2990.364225][ T9803] asix: probe of 3-1:0.113 failed with error -71 [ 2990.378458][ T9803] usb 3-1: USB disconnect, device number 19 15:31:02 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980913, 0x0, [0x5000000], @p_u32=0x0}}) 15:31:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000000)={0x7b, 0x0, [0x48b]}) 15:31:02 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x5423, 0x0) 15:31:02 executing program 5: write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0xffffff96}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_acct\x00') preadv(r0, &(0x7f0000000480), 0x3cd, 0x0) 15:31:02 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x216, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x29, {0x29, 0x0, "90861c9b5edf0ef70a3e257eef9f911bdeb7c22db7b1ae26c9d6080ec08dd0465102cbd7b197d2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:31:02 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0) write(r0, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000180)=0x1777d0606b188202) 15:31:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x1, 0x0, 0x30, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x2, 0x4, 0x6, 0x1]}) [ 2993.243723][ T9803] usb 5-1: new high-speed USB device number 126 using dummy_hcd 15:31:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\x05\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) sendfile(r3, r1, 0x0, 0x80) 15:31:03 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x3, "c8b3bd"}, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2993.483354][ T9803] usb 5-1: Using ep0 maxpacket: 8 [ 2993.603541][ T9803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2993.614813][ T9803] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2993.627868][ T9803] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 2993.637057][ T9803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2993.655669][ T6081] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present 15:31:03 executing program 5: write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0xffffff96}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_acct\x00') preadv(r0, &(0x7f0000000480), 0x3cd, 0x0) 15:31:03 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x0, 0x20323159, 0x780, 0x0, 0x0, @stepwise}) [ 2993.876150][ T9803] usb 5-1: config 0 descriptor?? 15:31:04 executing program 2: unshare(0x28020400) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) bpf$MAP_DELETE_ELEM(0x16, &(0x7f0000000240)={r0, 0x0}, 0x10) [ 2994.956626][ T9803] pyra 0003:1E7D:2C24.007E: report_id 39708 is invalid [ 2994.963873][ T9803] pyra 0003:1E7D:2C24.007E: item 0 2 1 8 parsing failed [ 2994.971569][ T9803] pyra 0003:1E7D:2C24.007E: parse failed [ 2994.977592][ T9803] pyra: probe of 0003:1E7D:2C24.007E failed with error -22 [ 2995.207685][ T9803] usb 5-1: USB disconnect, device number 126 15:31:09 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980913, 0x0, [0x5000000], @p_u32=0x0}}) 15:31:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r0, &(0x7f0000000500)=""/175, 0x5d) exit(0x0) getdents64(r0, &(0x7f0000000080)=""/143, 0x1e6) 15:31:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, [{0x2c, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @broadcast}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) 15:31:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x10, 0x2, [@IFLA_BOND_ARP_IP_TARGET={0xc}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x40}}, 0x0) 15:31:09 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="2400000020007be11dfffd946f6105000a0000031f00000000000800080011000400ff7e280000001100ffffba16a0aa1c0900000000000020000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 15:31:09 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x216, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x29, {0x29, 0x0, "90861c9b5edf0ef70a3e257eef9f911bdeb7c22db7b1ae26c9d6080ec08dd0465102cbd7b197d2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2999.527031][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2999.779952][ T6425] bond0: (slave bond_slave_1): Releasing backup interface [ 2999.813120][ T9803] usb 5-1: new high-speed USB device number 127 using dummy_hcd 15:31:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r1, 0x0, r3) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f00000005c0)={0x0, 0x0, @ioapic}) [ 2999.846310][ T6428] net_ratelimit: 2 callbacks suppressed [ 2999.846341][ T6428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 15:31:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd58, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, '\np6gre0\x00'}}}}}, 0x34}}, 0x0) [ 3000.060154][ T9803] usb 5-1: Using ep0 maxpacket: 8 15:31:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet(0x10, 0x20000000000002, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007041dfffd946f610500070000001f0000000000010008000a000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 3000.151605][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3000.183457][ T9803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 15:31:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) [ 3000.194658][ T9803] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3000.207833][ T9803] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 3000.217009][ T9803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:31:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x5, 0x4000000000000800, 0x1, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r3, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) 15:31:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)='D'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) [ 3000.269358][ T9803] usb 5-1: config 0 descriptor?? [ 3000.746235][ T9803] pyra 0003:1E7D:2C24.007F: report_id 39708 is invalid [ 3000.753596][ T9803] pyra 0003:1E7D:2C24.007F: item 0 2 1 8 parsing failed [ 3000.761196][ T9803] pyra 0003:1E7D:2C24.007F: parse failed [ 3000.767220][ T9803] pyra: probe of 0003:1E7D:2C24.007F failed with error -22 [ 3000.984593][ T9803] usb 5-1: USB disconnect, device number 127 15:31:13 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980913, 0x0, [0x5000000], @p_u32=0x0}}) 15:31:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x802c542a, &(0x7f0000000140)) 15:31:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 15:31:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x5, 0x4000000000000800, 0x1, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r3, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) 15:31:13 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0xb, 0x0, &(0x7f0000000040)) 15:31:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@tunl_policy=[@IFLA_IPTUN_TOS={0x8}], @tunl_policy=[@IFLA_IPTUN_TTL={0x8, 0xa}]]}}}]}, 0x40}}, 0x0) [ 3003.781336][ T6975] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 3003.789803][ T6975] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:31:13 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\x96\xc8\xf5|a\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0ea\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\x83=\t\\\xb4\xdaOO\xb7\xc88\x962\b\x96\xba\xfc\xae\xc2\x19\xeb\x91\xc9\'\xdfn(Q=v-<\r\xd1\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9fT\xe7\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c6Jn\xffn&\xba[\xc9W\x00\xe1\xcb\x0e\x7f\x00'/209) 15:31:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 15:31:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x5, 0x4000000000000800, 0x1, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r3, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) 15:31:14 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x2) 15:31:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 15:31:14 executing program 0: mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x0) 15:31:18 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980913, 0x0, [0x5000000], @p_u32=0x0}}) 15:31:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x5, 0x4000000000000800, 0x1, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r3, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) 15:31:18 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev, 0x0, 0x0, 0xff, 0x9}, 0x20) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x9, @mcast1}, 0x1c) 15:31:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8000000000c, &(0x7f0000000040)='\x006Y\x00', 0x4) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0xfea6) 15:31:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd0000001000010009030800fcff0000040e05a5", 0x58}], 0x1) 15:31:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000200)={0x0, 0x56595559}) 15:31:18 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100), 0xfffffffffffffffd) 15:31:18 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) 15:31:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="681588473b2227d8ae1e"], 0xa) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd6e) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:31:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x18, &(0x7f0000000100), 0x8) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 15:31:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f0000000000)=[{r1}, {r1}], 0x2, &(0x7f0000000040), 0x0, 0x0) 15:31:18 executing program 5: r0 = socket$inet6(0xa, 0x4000000080002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x338, 0x29, 0x4, "2b642da16f430fb87e9d337a648e416b285c0de8e179f42e251fc7261ea8a6b73c6e8981f793b0e25f3295173912fc9db1f2efd56478442ce59db4b01e4f0b3c5be3f90200629e91531f998e51c6ca2f83104f8ee2fc81db7000c4af6d1ee0c99802df968b3f4b6c6a40559223f3bb1e844f58756630e0fa14674ee628a9db9cf0bdb740ea80f8dc8fec0db3c2c76c525abe8053faed86798b35ff1cb1312ec73c240c6518525d9ea8041def0adc181d5f65a9df302cf2d7a98978ae1daaa52fcc37f8e3b9473907e5fbee3ebc752ed6165d2f3e31e486fc93070733d3327ca1f4e605da3a9b93c65ab963061bf7fbf360ef3c7e71b73054303411ab34d801f0f6f48560b7be6b8111d4a2ea9f9b8a8f4ace2d813e11182655b774ed1f09084d69255bdb202f9e033b689e87d1e2cd8f38ae7500c56d21ae28a020021468c51099af41565b1f5c27f96fd21c55b7f90bd7708e27af8e2e9cc34504236dc7d73c1b78dcbba6695e1d96b9b5e9d936e7e133e4959e8e138c6070f3797fcbcc3eb7392529440c6d6e3673252cad0e7ea74fada9c8b44f886b89f705d4c6e2252f0265762cfb89611e33055099781e526a7098b8749d6618cf0aaf2397337d48973238863d0b018c66e4b66306f506f76e3b4306a34805e53b4635ae68c4b21b7863990c64c7be2da3ed550c512eaf3d622831eaeb7527d70b9d12563ab3f13198fe836cea343f548dd2b6d0ed0098df746fb9951f776e946a0f624015481030e4f967531127a098f2861f7e64459fca8b98d4e084319e9318c6ec34435588fc8b4a2c740725b08c7c009e43c8eeb09b7ba2b21685cacbdfee2faf5367c5dc2a5025700412fd6abe46ac39f6bf68b2af33ff982961be359a97833c5de0d49180ee234fbc658c323ef5ec93060ab291c76af0aa28fb8dbc519954d427d64bfc1abb0333a7abc817ed1abea89193268cac54b213b4040ef80a3d8e34ca000796fe1c0373784e00dcb2843a4b05b6ba2738671b8191fca33be2877b4b04492f9ee1945ff9fb478ec8fdc1cb3243622a8b1f6dd32119605fb445a62e2254280360de059e4c3e5004c78575b4a130454490094ff8642d4c1a60322b365b2e7e0bab3e0f41a7"}], 0x338}}], 0x2, 0x0) 15:31:24 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000480)={0x0, 0x6, 0x6, 0xfff}) getxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2020200}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[]}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x4}, 0x68) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:31:24 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 15:31:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) 15:31:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) 15:31:24 executing program 5: mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @tid=0xffffffffffffffff}) 15:31:24 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x13) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x18) 15:31:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x2f, 0x829, 0x0, 0x0, {0x5, 0x1000000}}, 0x14}}, 0x0) 15:31:24 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000480)={0x0, 0x6, 0x6, 0xfff}) getxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2020200}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[]}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x4}, 0x68) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:31:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 15:31:24 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x300}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x18, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x4, 'f8'}]}}}}}}}}, 0x0) 15:31:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) [ 3014.715822][ T8167] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:31:24 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00$'], 0x0, 0x0, 0x0, 0x0}, 0x0) 15:31:24 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000480)={0x0, 0x6, 0x6, 0xfff}) getxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2020200}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[]}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x4}, 0x68) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:31:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000980000400000e073dea506"]) 15:31:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) 15:31:25 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000480)={0x0, 0x6, 0x6, 0xfff}) getxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2020200}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[]}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x4}, 0x68) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3015.275027][T12379] usb 6-1: new high-speed USB device number 43 using dummy_hcd 15:31:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) [ 3015.525805][T12379] usb 6-1: Using ep0 maxpacket: 8 [ 3015.643375][T12379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3015.654622][T12379] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3015.667627][T12379] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 3015.676862][T12379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3015.693852][T12379] usb 6-1: config 0 descriptor?? [ 3016.182781][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.189978][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.197072][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.204201][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.211262][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.218366][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.225275][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.232084][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.239068][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.245994][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.252975][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.259825][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.266822][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.273739][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.280568][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.287532][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.294440][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.301244][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.308225][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.315405][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.322247][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.329295][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.336181][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.343819][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.350809][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.357795][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.364658][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.371529][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.378612][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.386268][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.393204][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.400106][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.407259][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.414160][T12379] kye 0003:0458:5019.0080: unknown main item tag 0x0 [ 3016.422807][T12379] kye 0003:0458:5019.0080: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.5-1/input0 [ 3016.434303][T12379] kye 0003:0458:5019.0080: tablet-enabling feature report not found [ 3016.442555][T12379] kye 0003:0458:5019.0080: tablet enabling failed [ 3016.455615][T12379] usb 6-1: USB disconnect, device number 43 [ 3017.173032][ T9803] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 3017.432970][ T9803] usb 6-1: Using ep0 maxpacket: 8 [ 3017.553294][ T9803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3017.564469][ T9803] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3017.577628][ T9803] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 3017.586803][ T9803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3017.596360][ T9803] usb 6-1: config 0 descriptor?? [ 3017.963303][ T9803] usbhid 6-1:0.0: can't add hid device: -71 [ 3017.969724][ T9803] usbhid: probe of 6-1:0.0 failed with error -71 [ 3017.979061][ T9803] usb 6-1: USB disconnect, device number 44 15:31:29 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x3}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 15:31:29 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x1c, 0x0, [@guehdr={0x4020, 0x0, 0x0, 0x0, 0x0, [0x0]}, @guehdr], "4ea29b4b3ab06ffa"}}}}}, 0x0) 15:31:29 executing program 4: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="11dc") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfc0004) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0xe, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 15:31:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 15:31:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff30}, 0x48) 15:31:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x0, 0x0) 15:31:29 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fc382d17"}, 0x0, 0x0, @userptr, 0x4}) 15:31:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 15:31:29 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) pread64(r0, 0x0, 0x0, 0x0) 15:31:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0xf, 0xfffffffffffffffd, 0x3) [ 3019.888604][ T8825] bridge2: the hash_elasticity option has been deprecated and is always 16 15:31:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0xc0010117], [0xc1]}) 15:31:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) [ 3020.155118][ T8936] bridge3: the hash_elasticity option has been deprecated and is always 16 15:31:35 executing program 3: unshare(0x28020400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0x7005, 0x0) 15:31:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000f3ff95000000000000001739f486a0ef063f588c86600e3f2814643ccf55929be57c4f3c167972fc5489a4ef75c6020d447d9d007970d52bafd9c4365dde7fb54e13f6667d868b3bbfcb8129a6ef0ba516b4f002e9e67ef97a9029fd336949c2aba9c74e66b880084c49dc9d0654d6538094d26a9eacb2ae39233f0494d22dee05438afb2c0c710cdaee6d1638c8a46f7f20161953d412002048bf8f0000010035b249bdca000c4ee981d6ddd903"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="b7", 0x2}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)='Z', 0x8d7fa}], 0x1}}], 0x34000, 0x1f4) 15:31:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f0000000280)={&(0x7f0000000580)={'rmd128-generic\x00'}, &(0x7f0000000240)}) 15:31:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 15:31:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 15:31:35 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000040)="240000001a0025f0001b000400edfc0e1c0b0020e80000001009ffeb0800010000004002", 0x24) [ 3025.864862][ T9054] bridge4: the hash_elasticity option has been deprecated and is always 16 15:31:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 15:31:36 executing program 4: add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0100000000080000000000000041fc8cd97893961adc2d60", 0x18, 0xfffffffffffffffe) 15:31:36 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000100)=0x0) r3 = dup2(r1, r0) io_submit(r2, 0x2, &(0x7f0000001680)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xfffffffffffffffe, 0x2c2, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) 15:31:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000240)={0x100007ff}, 0x10) write(r1, &(0x7f000018efdc)="1c0000005e001f0014f9f4ff08000000060003400000000000000000", 0x1c) 15:31:36 executing program 4: r0 = epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000500)) [ 3026.283200][ T9364] bridge5: the hash_elasticity option has been deprecated and is always 16 15:31:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x0) 15:31:42 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="24000000320007041dfffd946f6105000a600000fe02000000000800080006000400ff7e", 0x24}], 0x1}, 0x0) 15:31:42 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r0 = gettid() syz_open_procfs(r0, &(0x7f0000000140)='auxv\x00') exit(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 15:31:42 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x4e24, @broadcast}], 0x10) 15:31:42 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000500)={0xa, @vbi}) 15:31:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x0) 15:31:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 3032.217941][ T9802] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 15:31:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x0) 15:31:42 executing program 4: move_pages(0x0, 0x20000000000001b0, &(0x7f0000000080)=[&(0x7f0000000000/0x3000)=nil], &(0x7f0000000040)=[0x400000000000001], 0xfffffffffffffffd, 0x0) 15:31:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x40000001, 0x0, 0x0) 15:31:42 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) 15:31:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x0) 15:31:42 executing program 5: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e670000000000000000000000000000000000000000000000000000001804000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000800"/2376]}, 0x9c0) 15:31:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x1000000000011, &(0x7f0000003980), 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000080), 0x8, 0x0) 15:31:47 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x15}) 15:31:47 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x0, {0xc, @sliced}}) 15:31:47 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$binderN(&(0x7f0000000680)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x15}) 15:31:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 15:31:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@delpolicy={0x6c, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@dev}}, [@encap={0x1c, 0x8, {0x0, 0x0, 0x0, @in=@loopback}}]}, 0x6c}, 0x8}, 0x0) 15:31:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x9, 0x0, 0x0) 15:31:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, &(0x7f0000001800)) 15:31:47 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 3037.876088][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:31:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000640)={0x40000000, 0x0, "d76162547c0dc8681f1078211e1056f3a058db5b67492e59e875ae1d08bb15d6"}) 15:31:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x7b, 0x0, [0x4b564d01, 0xfff]}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xae80) 15:31:48 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4d}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 15:31:48 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x4}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3ad) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r1}, 0x8) 15:31:52 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="7525820aedb8", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0xfb}}], 0x1, 0x0, 0x0) 15:31:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x401}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x0, 0x8001}, 0x8) 15:31:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x2e, 0x32e, 0x182e, 0x600005f, 0x80ffff, 0x80ffff, 0x2e, 0x80ffff]}, 0x2c) 15:31:53 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x4}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3ad) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r1}, 0x8) 15:31:53 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0xcc6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e21}, 0x10) recvmmsg(r0, &(0x7f0000004800)=[{{&(0x7f0000002a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}], 0x1, 0x12001, 0x0) 15:31:53 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) 15:31:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x14}, 0x3c) 15:31:53 executing program 2: syz_emit_ethernet(0x574, &(0x7f0000000080)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x566, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) 15:31:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x1c, 0x1e, 0x20000001, 0x0, 0x0, {0xa}, [@typed={0x8, 0x4, @uid}]}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:31:53 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x4}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3ad) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r1}, 0x8) 15:31:53 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x1, @pix={0x6a, 0x0, 0x34424752}}) 15:31:53 executing program 2: syz_usb_connect(0x0, 0x48, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4d, 0x6, 0x19, 0x10, 0x8087, 0x7d6, 0x5252, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x4, 0x1a, 0x17, 0xf1, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x8}}, {{0x9, 0x5, 0xe}}, {{0x9, 0x5, 0xb}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3044.324848][T12379] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 3044.663061][T12379] usb 3-1: Using ep0 maxpacket: 16 [ 3044.783272][T12379] usb 3-1: config 0 has an invalid interface number: 166 but max is 0 [ 3044.791647][T12379] usb 3-1: config 0 has no interface number 0 [ 3044.798025][T12379] usb 3-1: New USB device found, idVendor=8087, idProduct=07d6, bcdDevice=52.52 [ 3044.807375][T12379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3044.817029][T12379] usb 3-1: config 0 descriptor?? [ 3044.856583][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3044.865176][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3044.874133][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3044.882495][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3044.890950][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3044.899305][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3044.909438][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3044.917853][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3044.926193][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3044.934591][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3044.942997][T12379] i2400m_usb 3-1:0.166: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3044.954045][T12379] i2400m_usb 3-1:0.166: warm reset failed (-8); trying USB reset [ 3044.962120][T12379] i2400m_usb 3-1:0.166: boot-mode cmd -1: error waiting for an ack: -8 [ 3044.970740][T12379] i2400m_usb 3-1:0.166: device reboot: error -8 while waiting for reboot barker - rebooting [ 3044.981170][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3044.989687][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3044.998565][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.006966][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.015285][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.023824][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.032160][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.040666][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.049099][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.057923][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.066325][T12379] i2400m_usb 3-1:0.166: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3045.066423][T12379] i2400m_usb 3-1:0.166: warm reset failed (-8); trying USB reset [ 3045.085032][T12379] i2400m_usb 3-1:0.166: boot-mode cmd -1: error waiting for an ack: -8 [ 3045.093426][T12379] i2400m_usb 3-1:0.166: device reboot: error -8 while waiting for reboot barker - rebooting [ 3045.103749][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.112155][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.120635][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.128956][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.137496][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.145806][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.154434][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.162917][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.171249][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.179622][T12379] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3045.188206][T12379] i2400m_usb 3-1:0.166: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3045.199229][T12379] i2400m_usb 3-1:0.166: warm reset failed (-8); trying USB reset [ 3045.207088][T12379] i2400m_usb 3-1:0.166: boot-mode cmd -1: error waiting for an ack: -8 [ 3045.215777][T12379] i2400m_usb 3-1:0.166: device reboot: error -8 while waiting for reboot barker - rebooting [ 3045.225975][T12379] i2400m_usb 3-1:0.166: Timed out waiting for reboot ack [ 3045.233311][T12379] i2400m_usb 3-1:0.166: read mac addr: bootrom init failed: -110 [ 3045.241200][T12379] i2400m_usb 3-1:0.166: cannot setup device: -110 [ 3045.247971][T12379] i2400m_usb: probe of 3-1:0.166 failed with error -110 [ 3045.261714][T12379] usb 3-1: USB disconnect, device number 20 [ 3045.863132][T17582] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 3046.123033][T17582] usb 3-1: Using ep0 maxpacket: 16 [ 3046.263278][T17582] usb 3-1: config 0 has an invalid interface number: 166 but max is 0 [ 3046.271586][T17582] usb 3-1: config 0 has no interface number 0 [ 3046.278140][T17582] usb 3-1: New USB device found, idVendor=8087, idProduct=07d6, bcdDevice=52.52 [ 3046.287318][T17582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3046.296920][T17582] usb 3-1: config 0 descriptor?? [ 3046.346748][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.355265][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.363708][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.372109][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.380446][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.389015][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.397448][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.405826][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.414172][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.422408][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.430870][T17582] i2400m_usb 3-1:0.166: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3046.441693][T17582] i2400m_usb 3-1:0.166: warm reset failed (-8); trying USB reset [ 3046.449635][T17582] i2400m_usb 3-1:0.166: boot-mode cmd -1: error waiting for an ack: -8 [ 3046.458034][T17582] i2400m_usb 3-1:0.166: device reboot: error -8 while waiting for reboot barker - rebooting [ 3046.468415][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.476729][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.485299][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.493737][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.502020][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.510542][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.518994][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.527436][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.535938][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.544532][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.552945][T17582] i2400m_usb 3-1:0.166: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3046.563874][T17582] i2400m_usb 3-1:0.166: warm reset failed (-8); trying USB reset [ 3046.571727][T17582] i2400m_usb 3-1:0.166: boot-mode cmd -1: error waiting for an ack: -8 [ 3046.580219][T17582] i2400m_usb 3-1:0.166: device reboot: error -8 while waiting for reboot barker - rebooting [ 3046.590620][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.599057][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.607505][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.616116][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.624521][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.624629][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.641059][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.649484][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.657916][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.666411][T17582] i2400m_usb 3-1:0.166: W: __i2400mu_send_barker: cannot send URB: -8 [ 3046.674855][T17582] i2400m_usb 3-1:0.166: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3046.685754][T17582] i2400m_usb 3-1:0.166: warm reset failed (-8); trying USB reset [ 3046.693655][T17582] i2400m_usb 3-1:0.166: boot-mode cmd -1: error waiting for an ack: -8 [ 3046.701993][T17582] i2400m_usb 3-1:0.166: device reboot: error -8 while waiting for reboot barker - rebooting [ 3046.712211][T17582] i2400m_usb 3-1:0.166: Timed out waiting for reboot ack [ 3046.719399][T17582] i2400m_usb 3-1:0.166: read mac addr: bootrom init failed: -110 [ 3046.727372][T17582] i2400m_usb 3-1:0.166: cannot setup device: -110 [ 3046.734124][T17582] i2400m_usb: probe of 3-1:0.166 failed with error -110 [ 3046.751817][T17582] usb 3-1: USB disconnect, device number 21 15:31:58 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="7525820aedb8", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0xfb}}], 0x1, 0x0, 0x0) 15:31:58 executing program 0: mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 15:31:58 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x4}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3ad) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r1}, 0x8) 15:31:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000004e001f00ff03f4f9002304000a04f51109000100020100020800028001000000", 0x24) 15:31:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r2, 0x8990, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000040)={'bond0\x00\xe1\x00\n\x00!!\x0f\xdb\x00', @ifru_names='bond_slave_1\x00\x06\x00'}) 15:31:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) [ 3048.896942][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3048.916148][T11222] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 3048.944375][T11222] bond0: (slave bond_slave_1): Releasing backup interface 15:31:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r1, &(0x7f0000000440)="93a72de77e77f902f7278981629baff91c91212e5b6528a430d7d7a1d14d58d6b5d932ed123e5b7e29505670a6cf4f19a69784ba8d3484c0991a71acd4a8fe362dd8b3a7c8cef75fb14feccc4075a727d798a15349af72932f16692eb5b2117c8eb00877782e06902bf52f6b9b41b0f11af43f2242c952fe13ca0a7b4b743754327ba23e", 0x84) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f0000000080)) 15:31:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xf0ffff, &(0x7f0000000040)=[{&(0x7f0000000200)="4c000000120081ae08060c0f006b10007f03e3e900000000000000ca1b4e0906a636d5bd7c493872f750375ed08a56331dbf64700169381ad6e74703972f37ab00c9fca1571c8ada04848f93", 0x4c}], 0x1}, 0x0) 15:31:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r2 = shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) shmdt(r2) 15:31:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) [ 3049.244718][T11400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:31:59 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180), 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000ee000003ed94c700030006000000000002000004000000bb000000000000000003000500000000000200423b000000000012b478407f8604"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400000000000003, 0x0) 15:31:59 executing program 1: r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000480)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r2, 0x0, 0x0) 15:32:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) 15:32:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000480)=0x98) 15:32:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000b7dff0)={0x0, 0x989680}, &(0x7f0000048000), 0x0) 15:32:04 executing program 4: r0 = fsopen(&(0x7f0000000140)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='noMand\x00', 0x0, 0x0) 15:32:04 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="7525820aedb8", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0xfb}}], 0x1, 0x0, 0x0) 15:32:04 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000600)={0xfffffffd, 0x4}, 0xc) 15:32:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xff81, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) 15:32:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffe) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x18, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2800]}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 15:32:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) [ 3054.243904][T11833] binder: 11815:11833 unknown command -1 [ 3054.249767][T11833] binder: 11815:11833 ioctl c0306201 20000000 returned -22 15:32:04 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000600)={0xfffffffd, 0x4}, 0xc) 15:32:04 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200]) semtimedop(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000300)) 15:32:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x10020}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}]}) 15:32:08 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="7525820aedb8", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0xfb}}], 0x1, 0x0, 0x0) 15:32:08 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000080)) 15:32:08 executing program 4: r0 = socket(0x40100000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2720, 0x0, &(0x7f0000000000)) 15:32:08 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000600)={0xfffffffd, 0x4}, 0xc) 15:32:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) sendto(r1, &(0x7f0000000080)="05", 0x1, 0xfffffffffffffffe, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) sendto$inet6(r1, 0x0, 0xffffffffffffff3b, 0x0, 0x0, 0xffffffffffffffb5) 15:32:08 executing program 2: syz_usb_connect(0x0, 0x52, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0xc0, 0x96, 0x10, 0x2912, 0x1, 0xefb4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x0, 0xe6, 0x62, 0xf1, 0x0, [@usb_cdc={{0x5}, {0x5}, {0xd}}, @usb_cdc={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) 15:32:08 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000600)={0xfffffffd, 0x4}, 0xc) 15:32:08 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x83, &(0x7f0000000280)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x4d, 0x6, 0x0, @dev, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x400000000000018d}, {"1d036b55ff420f92789c0b7ba6f17dc72d66bc62a1b25d570e9f9fd11d2d8e8f31cc06ca31aefe3b0d4730737669d91879f87f9de2042ad5c2"}}}}}}}, 0x0) 15:32:08 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1) keyctl$search(0xa, r1, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000001d80)={'\x00', 0x1, 0x2e}, 0x0) 15:32:08 executing program 0: setrlimit(0x2, &(0x7f0000000040)={0x0, 0x2000000}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r0, r2) dup3(r3, r1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 3058.518321][T12379] usb 3-1: new high-speed USB device number 22 using dummy_hcd 15:32:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(r2, &(0x7f00000001c0)="110000005a001f0001000007000904fcff", 0x11) 15:32:08 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x83, &(0x7f0000000280)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x4d, 0x6, 0x0, @dev, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x400000000000018d}, {"1d036b55ff420f92789c0b7ba6f17dc72d66bc62a1b25d570e9f9fd11d2d8e8f31cc06ca31aefe3b0d4730737669d91879f87f9de2042ad5c2"}}}}}}}, 0x0) [ 3058.774097][T12379] usb 3-1: Using ep0 maxpacket: 16 [ 3058.893825][T12379] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 3058.902188][T12379] usb 3-1: config 0 has no interface number 0 [ 3058.908954][T12379] usb 3-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice=ef.b4 [ 3058.918229][T12379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3058.933829][T12379] usb 3-1: config 0 descriptor?? [ 3058.990303][T12379] cdc_acm 3-1:0.205: More than one union descriptor, skipping ... [ 3059.192663][T12379] usb 3-1: USB disconnect, device number 22 [ 3059.963146][T17582] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 3060.223063][T17582] usb 3-1: Using ep0 maxpacket: 16 [ 3060.353358][T17582] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 3060.361761][T17582] usb 3-1: config 0 has no interface number 0 [ 3060.368184][T17582] usb 3-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice=ef.b4 [ 3060.377367][T17582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3060.386978][T17582] usb 3-1: config 0 descriptor?? [ 3060.435825][T17582] cdc_acm 3-1:0.205: More than one union descriptor, skipping ... [ 3060.636275][T12379] usb 3-1: USB disconnect, device number 23 15:32:12 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x8, 0x4000000000000800, 0x1}, 0xe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) 15:32:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) read(r2, &(0x7f0000000180)=""/80, 0x6) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0xffffffffffffff32}, 0x7) 15:32:12 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x83, &(0x7f0000000280)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x4d, 0x6, 0x0, @dev, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x400000000000018d}, {"1d036b55ff420f92789c0b7ba6f17dc72d66bc62a1b25d570e9f9fd11d2d8e8f31cc06ca31aefe3b0d4730737669d91879f87f9de2042ad5c2"}}}}}}}, 0x0) 15:32:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000003c0)={0x0, 0x14371bfa, 0x4, {0x1, @raw_data="f79dd9524c61a7945790ca039664a46fa42cebdb98d059820d5a05496951095404dc369b487724b2cff745d5d908c9f0ea97b24954fbbd2f2ec1168573f130109611459c0df2733e93be33680e0e1fa26ffc8b668ecb501a181f33f5f0ee6b24d43cac905e9d1d35204a1084bd03ee2a4976b814f77784ab1a762ea8ed910b2b9dd87991ab05725ba663e0e4e37f7583203f4e144fdce1d512a0a3a0c2f611c52f4a9f9fc5f87d3258c77dd06c829e577151783ee64c56779e260d180578c6980e0d09c002f75222"}}) ioctl$VIDIOC_TRY_FMT(r2, 0x40045612, &(0x7f0000000000)={0x1, @pix_mp}) close(r2) 15:32:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) 15:32:12 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffef3}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020f0000100000000000000000000000080012000000dba1ed13b0000000000046000057000000000000000007593bcf2102fd5100400000082574f9000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd3b8200000000000c7"], 0x80}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 15:32:12 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x83, &(0x7f0000000280)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x4d, 0x6, 0x0, @dev, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x400000000000018d}, {"1d036b55ff420f92789c0b7ba6f17dc72d66bc62a1b25d570e9f9fd11d2d8e8f31cc06ca31aefe3b0d4730737669d91879f87f9de2042ad5c2"}}}}}}}, 0x0) 15:32:12 executing program 2: keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={'crc32-generi_(((?p~B\xcf\x00'}}) 15:32:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x40000100}]}) 15:32:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2b, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000780], 0x0, 0x0, 0x0}, 0x108) 15:32:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001c008104e00f80ecdb4cb91a02c804a001000000810040fb12000100040eda1b40d819a906000500000f", 0x223}], 0x1, 0x0, 0x0, 0x10}, 0x0) 15:32:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000001c00)="11dca5055e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000580)={0x7b, 0x5, [0xc001102a], [0xc1]}) [ 3062.966359][T13013] could not allocate digest TFM handle crc32-generi_(((?p~BÏ 15:32:13 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 '], 0xb) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 3063.055395][T13013] could not allocate digest TFM handle crc32-generi_(((?p~BÏ 15:32:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000440)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xffffffffffffffff}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x8, 0x2}) 15:32:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = epoll_create(0x803) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) shutdown(r0, 0x0) 15:32:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000039c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000200)={0x0, 0x5005000000000000, &(0x7f00000001c0)={&(0x7f0000000040)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x2, {{0x20, 0x1, @in6={0x2, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0x3, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) 15:32:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3063.383679][T13269] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 3063.391871][T13269] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 15:32:16 executing program 4: unshare(0x400) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9204, &(0x7f0000000040)) 15:32:16 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x114, 0x271e, 0x0, &(0x7f0000000200)) 15:32:16 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)=0x199) 15:32:16 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xb79, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1, 0x3, 0x0, "dcc3be6275bdf7719b56a6e2217c8d244cfe1172b20100009f4000"}) 15:32:16 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x8) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000000040)=0x28a329bc) 15:32:16 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) 15:32:16 executing program 1: mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, 0x0) 15:32:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000580, 0x0, 0x0, 0x200005b0, 0x200005e0], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) 15:32:17 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'bpq0\xf3\x00', 0x8}, 0xfffffffffffffec4) ioctl(r0, 0x8918, &(0x7f0000000000)) 15:32:17 executing program 5: syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ppoll(&(0x7f0000001180)=[{r0}], 0x1, &(0x7f00000011c0), 0x0, 0x0) 15:32:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="0f"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:32:17 executing program 4: unshare(0x400) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9204, &(0x7f0000000040)) 15:32:17 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000364000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000a62000/0x1000)=nil) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 15:32:25 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0) 15:32:25 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x100000000, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc0d05605, &(0x7f0000000000)={0xa, 0x0, 0x0, {0x0, 0x32314d4e, 0x8}}) 15:32:25 executing program 4: unshare(0x400) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9204, &(0x7f0000000040)) 15:32:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@upd={0xe0, 0x12, 0x7cc71bf9b425e6b7, 0x0, 0x0, {{'drbg_pr_ctr_aes192\x00'}}}, 0xe0}}, 0x0) 15:32:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x1}]}) 15:32:25 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x5a60c7b5}, 0x73) sendmmsg(r1, &(0x7f0000003d40), 0x4000000000002be, 0x0) close(r1) close(r0) [ 3075.326043][T14241] ebt_among: src integrity fail: 200 15:32:25 executing program 4: unshare(0x400) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9204, &(0x7f0000000040)) 15:32:25 executing program 1: unshare(0x20600) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x75, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 15:32:25 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7b, 0xaa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x2, 0xfd13, &(0x7f0000000240)=""/195}, 0x26) 15:32:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x7ff) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) 15:32:25 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r2}, 0x8) 15:32:25 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x3c) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000840), 0x250) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r6, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 15:32:25 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x30, &(0x7f0000b56f40)=""/192, &(0x7f0000000000)=0xc0) 15:32:29 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff\xc8z', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='@'], 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x75, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)) 15:32:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 15:32:29 executing program 1: request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffffa) fstat(0xffffffffffffffff, &(0x7f00000000c0)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000300)) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES32], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xfffffffffffffd64) sendmsg$nl_generic(r6, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x20000000}, 0x0) request_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='\x00', 0xfffffffffffffffb) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r7) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xfffffffffffffd64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="a27fbbc4b7546cf70e169f8008004202", @ANYRES32=r12], 0x4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) request_key(&(0x7f0000000400)='rxrpc_s\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='self\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f00000004c0)) request_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0xfffffffffffffffa) request_key(&(0x7f0000000740)='rxrpc\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', 0x0) 15:32:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r1, 0x107, 0x12, &(0x7f0000651000)=""/240, &(0x7f0000000180)=0x201) 15:32:29 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x3c) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000840), 0x250) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r6, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 15:32:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x22801) io_setup(0xa, &(0x7f0000000000)=0x0) dup3(r1, r0, 0x0) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 15:32:29 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x3c) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000840), 0x250) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r6, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 15:32:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newqdisc={0x7c, 0x24, 0x507, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x7c}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7bf070") r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000000)}], 0x9249249249249e1, 0x0) 15:32:29 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000006700000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 15:32:30 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x6c00, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400f3a4748635e200db000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x74}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 15:32:30 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x3c) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000840), 0x250) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r6, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 15:32:30 executing program 1: request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffffa) fstat(0xffffffffffffffff, &(0x7f00000000c0)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000300)) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES32], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xfffffffffffffd64) sendmsg$nl_generic(r6, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x20000000}, 0x0) request_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='\x00', 0xfffffffffffffffb) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r7) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xfffffffffffffd64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="a27fbbc4b7546cf70e169f8008004202", @ANYRES32=r12], 0x4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) request_key(&(0x7f0000000400)='rxrpc_s\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='self\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f00000004c0)) request_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0xfffffffffffffffa) request_key(&(0x7f0000000740)='rxrpc\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', 0x0) [ 3080.126099][T15100] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3080.197427][T15100] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 15:32:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 15:32:36 executing program 0: request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffffa) fstat(0xffffffffffffffff, &(0x7f00000000c0)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000300)) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="540100003000020226bd7000fedbdf2515000000180159000400680004005200c40b3564393dfa2db577e6f23e2c0f05a21051683eff83e03e564700e1bc33156a00c46b6a1f4f01710e7ae8924d95237ff98b7ade16553fcefadb7bd3d9970000138d2256bd05e79aa3099771989772ee1d05e76f21aea218eebad5cd8991d10c6a4beace96296fd54672d137e2027cb0fd6df114c2b85971fefee230267b0a88a66f5b3468e81cb6619f9663e03e6d780c192e350bf80773c86bd8ddc1b9464763ab99e22d443aea53319b5ceb2c819f58b957e5812f96e6594ce98bc100291243c18bf385f69fb2a65572aebce004404baf9b325572b4b4582dc8e4fe70e014b977fcd02db11b45cb6291f1a7212f60bfe7b94c260b58f702c1e61c9f470d054ec6e2801f0acc4900000020005700080004000b0700000c002300200000000000000008002e00", @ANYRES32=r2, @ANYRES32], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xfffffffffffffd64) sendmsg$nl_generic(r6, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x20000000}, 0x0) request_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='\x00', 0xfffffffffffffffb) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r7) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xfffffffffffffd64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="a27fbbc4b7546cf70e169f8008004202", @ANYRES32=r12], 0x4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) request_key(&(0x7f0000000400)='rxrpc_s\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='self\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f00000004c0)) request_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0xfffffffffffffffa) request_key(&(0x7f0000000740)='rxrpc\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', 0x0) 15:32:36 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000006700000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 15:32:36 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @multicast2}, 0xd) 15:32:36 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x6c00, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400f3a4748635e200db000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x74}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 15:32:36 executing program 1: request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffffa) fstat(0xffffffffffffffff, &(0x7f00000000c0)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000300)) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES32], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xfffffffffffffd64) sendmsg$nl_generic(r6, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x20000000}, 0x0) request_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='\x00', 0xfffffffffffffffb) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r7) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xfffffffffffffd64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="540100003000020226bd7000fedbdf2515000000180159000400680004005200c40b3564393dfa2db577e6f23e2c0f05a21051683eff83e03e564700e1bc33156a00c46b6a1f4f01710e7ae8924d95237ff98b7ade16553fcefadb7bd3d9970000138d2256bd05e79aa3099771989772ee1d05e76f21aea218eebad5cd8991d10c6a4beace96296fd54672d137e2027cb0fd6df114c2b85971fefee230267b0a88a66f5b3468e81cb6619f9663e03e6d780c192e350bf80773c86bd8ddc1b9464763ab99e22d443aea53319b5ceb2c819f58b957e5812f96e6594ce98bc100291243c18bf385f69fb2a65572aebce004404baf9b325572b4b4582dc8e4fe70e014b977fcd02db11b45cb6291f1a7212f60bfe7b94c260b58f702c1e61c9f470d054ec6e2801f0acc490000002000570008000400", @ANYRES32=r11, @ANYBLOB="a27fbbc4b7546cf70e169f8008004202", @ANYRES32=r12], 0x4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) request_key(&(0x7f0000000400)='rxrpc_s\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='self\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f00000004c0)) request_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0xfffffffffffffffa) request_key(&(0x7f0000000740)='rxrpc\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', 0x0) [ 3086.955728][T15375] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3086.994655][T15375] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 15:32:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000006700000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 15:32:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x2, 0x2], [], @empty}}]}, 0x28}}, 0x0) 15:32:37 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x6c00, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400f3a4748635e200db000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x74}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 3087.267626][T15497] netlink: 'syz-executor.2': attribute type 23 has an invalid length. 15:32:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000006700000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 15:32:37 executing program 0: request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffffa) fstat(0xffffffffffffffff, &(0x7f00000000c0)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000300)) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES32], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xfffffffffffffd64) sendmsg$nl_generic(r6, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x20000000}, 0x0) request_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='\x00', 0xfffffffffffffffb) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r7) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xfffffffffffffd64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="a27fbbc4b7546cf70e169f8008004202", @ANYRES32=r12], 0x4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) request_key(&(0x7f0000000400)='rxrpc_s\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='self\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f00000004c0)) request_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0xfffffffffffffffa) request_key(&(0x7f0000000740)='rxrpc\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', 0x0) 15:32:37 executing program 1: request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffffa) fstat(0xffffffffffffffff, &(0x7f00000000c0)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000300)) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES32], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xfffffffffffffd64) sendmsg$nl_generic(r6, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x20000000}, 0x0) request_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='\x00', 0xfffffffffffffffb) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r7) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xfffffffffffffd64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="a27fbbc4b7546cf70e169f8008004202", @ANYRES32=r12], 0x4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) request_key(&(0x7f0000000400)='rxrpc_s\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='self\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f00000004c0)) request_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0xfffffffffffffffa) request_key(&(0x7f0000000740)='rxrpc\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', 0x0) [ 3087.331519][T15499] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3087.360581][T15499] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 15:32:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85513, &(0x7f0000001000)) 15:32:43 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x49, 0xf7, 0xd7, 0x40, 0xeef, 0x1, 0x26f4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x77, 0x0, 0x0, 0x3, 0xab, 0x28}}]}}]}}, 0x0) 15:32:43 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x6c00, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400f3a4748635e200db000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x74}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 15:32:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8d, 0x0, [], 0xff}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:32:43 executing program 0: request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffffa) fstat(0xffffffffffffffff, &(0x7f00000000c0)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000300)) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="540100003000020226bd7000fedbdf2515000000180159000400680004005200c40b3564393dfa2db577e6f23e2c0f05a21051683eff83e03e564700e1bc33156a00c46b6a1f4f01710e7ae8924d95237ff98b7ade16553fcefadb7bd3d9970000138d2256bd05e79aa3099771989772ee1d05e76f21aea218eebad5cd8991d10c6a4beace96296fd54672d137e2027cb0fd6df114c2b85971fefee230267b0a88a66f5b3468e81cb6619f9663e03e6d780c192e350bf80773c86bd8ddc1b9464763ab99e22d443aea53319b5ceb2c819f58b957e5812f96e6594ce98bc100291243c18bf385f69fb2a65572aebce004404baf9b325572b4b4582dc8e4fe70e014b977fcd02db11b45cb6291f1a7212f60bfe7b94c260b58f702c1e61c9f470d054ec6e2801f0acc4900000020005700080004000b0700000c002300200000000000000008002e00", @ANYRES32=r2, @ANYRES32], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xfffffffffffffd64) sendmsg$nl_generic(r6, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x20000000}, 0x0) request_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='\x00', 0xfffffffffffffffb) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r7) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xfffffffffffffd64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400003}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="a27fbbc4b7546cf70e169f8008004202", @ANYRES32=r12], 0x4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) request_key(&(0x7f0000000400)='rxrpc_s\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='self\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f00000004c0)) request_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0xfffffffffffffffa) request_key(&(0x7f0000000740)='rxrpc\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', 0x0) 15:32:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000514ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0) [ 3093.276397][T15639] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3093.304124][T15641] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3093.312390][T15641] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3093.339842][T15639] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 15:32:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000514ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0) [ 3093.513471][T17582] usb 3-1: new high-speed USB device number 24 using dummy_hcd 15:32:43 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x502, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000000fffd}) 15:32:43 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x84, 0x0, &(0x7f0000000000)) [ 3093.653502][T15853] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3093.661812][T15853] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 15:32:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000514ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0) 15:32:43 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$int_in(r0, 0x8000008004500f, 0x0) [ 3093.859526][T15945] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3093.867937][T15945] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3093.886538][T17582] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 3093.894932][T17582] usb 3-1: config 0 has no interface number 0 [ 3093.901174][T17582] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice=26.f4 [ 3093.910428][T17582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:32:44 executing program 5: syz_usb_connect$hid(0x0, 0x304, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x25a, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) [ 3093.985095][T17582] usb 3-1: config 0 descriptor?? [ 3094.030844][T17582] usbhid 3-1:0.119: couldn't find an input interrupt endpoint [ 3094.227943][ T5396] usb 3-1: USB disconnect, device number 24 [ 3094.413105][T17582] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 3094.663104][T17582] usb 6-1: Using ep0 maxpacket: 16 [ 3094.793258][T17582] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3094.806507][T17582] usb 6-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 3094.815951][T17582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3094.826181][T17582] usb 6-1: config 0 descriptor?? [ 3094.869187][T17582] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input324 [ 3095.003289][ T5396] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 3095.066077][T12379] usb 6-1: USB disconnect, device number 45 [ 3095.363089][ T5396] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 3095.371604][ T5396] usb 3-1: config 0 has no interface number 0 [ 3095.378007][ T5396] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice=26.f4 [ 3095.387322][ T5396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3095.397725][ T5396] usb 3-1: config 0 descriptor?? [ 3095.448446][ T5396] usbhid 3-1:0.119: couldn't find an input interrupt endpoint [ 3095.644902][T12379] usb 3-1: USB disconnect, device number 25 [ 3095.833016][ T5396] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 3096.072965][ T5396] usb 6-1: Using ep0 maxpacket: 16 [ 3096.193425][ T5396] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3096.206466][ T5396] usb 6-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 3096.215694][ T5396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3096.225010][ T5396] usb 6-1: config 0 descriptor?? [ 3096.268419][ T5396] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input325 [ 3096.466436][T17582] usb 6-1: USB disconnect, device number 46 15:32:48 executing program 3: creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000740)='cgroup\x00', 0x0, &(0x7f0000000000)='na\ne\x00H\xe8\xce\xa2}t\x05\xab0,\xd6\n\xf0Q\x13\xe0\xc5\t\x00\x00\x00b\xa6\x8c\xd0\x9b=\x15\xa4()\x819\xa2\xbb\xfd8\xa9/X\xbbiB\xc5$/\xab\x1cS\xdf3/L\xd6\xa7|x\x119\xd9\x1c\xb1\x1bx\xfd\xe0\x87\xe9B6V\xff\b\xf9\xc9\xc0\x81C\xc3\xc5I\xe8\x9b\x0eb/\xf1\xecj\x19a_\xd5w\xb8\x1e\x1eo|C\xf5<\xe0\x04\x85Q\x8dKhP\xbf?\xa5\xa4\xf8\x04\x8f\xd0$\xe6\xcd%\xff\xc8H\xb7\x93\xa3\xec\x1b\xc5\xf17\xe9\xe7\xa5\xc7\x03\xa4\xcb\v\xbc3\x8c\xf3\n\xe2\x1a\xfd\x99\xa6\xaa\t') 15:32:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001e000514ed0080637e6394f20100d2000500fcb711407f480f0001000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0) 15:32:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)='-06', 0x3}], 0x1) 15:32:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) listen(0xffffffffffffffff, 0x10000000002) semget(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) semget(0x0, 0x0, 0x80) personality(0xffffffffffffffff) 15:32:48 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1345, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00E'], 0x0, 0x0, 0x0, 0x0}, 0x0) 15:32:48 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x36) ptrace(0x10, r0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) [ 3098.461499][T16090] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3098.469886][T16090] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 15:32:48 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) writev(0xffffffffffffffff, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a", 0x11}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000800000000000a3f96f655cb527e29be3b681ffd2b316a43a6b0f16d48098743d768634cb8e277ba59285c33ecebcc61f4decb911559164a4717240364660535e56f9c0b6cc319b926173d7cd9b451878f2743dbb854660e6e8164d7545adb92949badd188ac14fce457368a6957d26ea03390c211a1b43c95168245864b29bedfe5339d757b37c018c00"/154], 0xa) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffc4b, 0x0}, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:32:48 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000003639405cb4aed14e0000000000ae475ae64f8f36460234432479aed75f492b41fd983f91", 0x2a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 3098.535962][T16091] IPVS: ftp: loaded support on port[0] = 21 [ 3098.703968][ T5396] usb 3-1: new high-speed USB device number 26 using dummy_hcd 15:32:48 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000015c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000002f80)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0) 15:32:48 executing program 5: mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x0, 0xffffffffffffffff) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', 0x0, 0x0, 0x0) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64\x00', 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$security_smack_entry(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.SMACK64IPIN\x00', 0x0, 0x0, 0x0) [ 3098.943436][ T5396] usb 3-1: Using ep0 maxpacket: 8 15:32:49 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000030807031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 3099.065616][ T5396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3099.077631][ T5396] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3099.090790][ T5396] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 3099.100018][ T5396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:32:49 executing program 0: r0 = socket(0x2, 0x1000000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0xff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000010) [ 3099.239841][T16278] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 3099.349559][ T5396] usb 3-1: config 0 descriptor?? [ 3099.827028][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.834226][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.841295][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.848484][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.855636][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.862685][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.872813][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.879870][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.887170][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.894201][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.901257][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.908486][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.915516][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.922576][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.929679][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.936729][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.943812][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.950798][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.957880][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.964970][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.972167][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.979530][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.986557][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3099.993581][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3100.000673][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3100.007707][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3100.014663][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3100.021550][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3100.028583][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3100.035587][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3100.042548][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3100.049619][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3100.056699][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3100.063716][ T5396] sony 0003:1345:3008.0081: unknown main item tag 0x0 [ 3100.079460][ T5396] sony 0003:1345:3008.0081: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 3100.091521][ T5396] sony 0003:1345:3008.0081: failed to claim input [ 3100.107872][ T5396] usb 3-1: USB disconnect, device number 26 [ 3100.833015][T17582] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3101.093027][T17582] usb 3-1: Using ep0 maxpacket: 8 [ 3101.223589][T17582] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3101.234728][T17582] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3101.248884][T17582] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 3101.258043][T17582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3101.267920][T17582] usb 3-1: config 0 descriptor?? [ 3101.643510][T17582] usbhid 3-1:0.0: can't add hid device: -71 [ 3101.649917][T17582] usbhid: probe of 3-1:0.0 failed with error -71 [ 3101.659077][T17582] usb 3-1: USB disconnect, device number 27 15:32:54 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000200), 0x24, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') 15:32:54 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c250f30882050300eef70000000109022400010000000009040200090033cb00090501120800000000090b08000000000c40c8a32820aaf2f1c0bc93b09135d694d46a99023df703f2edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea30000"], 0x0) 15:32:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x9800, 0x0, 0x0, 0x8, 0x25}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) 15:32:54 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c00020008002c0002000000"], 0x3c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x4924a2f, 0x0) 15:32:54 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x1}}) 15:32:54 executing program 2: syz_open_procfs(0x0, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000240)={'team0\x00\x030\xff\xfd\x00%`\xc3\xff\xff', 0xb5}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) [ 3104.685872][T16626] cgroup1: Unknown subsys name 'na [ 3104.685872][T16626] e' [ 3104.750541][T16628] netlink: 'syz-executor.1': attribute type 44 has an invalid length. 15:32:55 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0}) 15:32:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5424, &(0x7f0000000180)) 15:32:55 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000040)=@name, 0x10) [ 3105.228307][T17005] netlink: 'syz-executor.1': attribute type 44 has an invalid length. 15:32:55 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80000001}, 0x4e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind(r0, 0x0, 0x0) close(r0) 15:32:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) 15:32:55 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) lseek(r0, 0x7fffffffffffd, 0x1) 15:32:55 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@loopback, @in=@empty}}, {{@in6=@remote}, 0x0, @in=@local}}, 0xe8) [ 3107.092982][T12379] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 3107.332967][T12379] usb 4-1: Using ep0 maxpacket: 8 [ 3107.453135][T12379] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 3107.461616][T12379] usb 4-1: config 0 has no interface number 0 [ 3107.467931][T12379] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 3107.477911][T12379] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3107.491031][T12379] usb 4-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 3107.500246][T12379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3107.509812][T12379] usb 4-1: config 0 descriptor?? [ 3107.559746][T12379] usb 4-1: invalid MIDI in EP 0 [ 3107.567336][T12379] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 3108.908635][T12379] usb 4-1: USB disconnect, device number 91 [ 3109.673154][T12379] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 3109.913007][T12379] usb 4-1: Using ep0 maxpacket: 8 [ 3110.033178][T12379] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 3110.041376][T12379] usb 4-1: config 0 has no interface number 0 [ 3110.047744][T12379] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 3110.057620][T12379] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3110.070713][T12379] usb 4-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 3110.079893][T12379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3110.089990][T12379] usb 4-1: config 0 descriptor?? [ 3110.139820][T12379] usb 4-1: invalid MIDI in EP 0 [ 3110.147337][T12379] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 3110.335007][T12379] usb 4-1: USB disconnect, device number 92 15:33:00 executing program 1: r0 = userfaultfd(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xc0000010}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 15:33:00 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, '\xa3\x99\xe9\xc5X\x00\x00\x04\x00\x00\x00\x00\x00\xf0u1\xdcaP\xde\xfa\xcan\xdd\xaf\x1b\x8b\x8c6\x18L\x8f\x01;\xe9n\xa3\x1e\xfb\xd2\x9c\xa9\xb9\xd7'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'eS\x97\xebJ\x90\xdc\rK\xbdt0\xf3\xaaP\xc6\xa1zL\xbeF\xf9\xa2\x7fg\x1d\x17\x1cJ$P\xf2\x88I9)\xc1\xe0\xfe\x94h\xa5\xebUeT\xa2\x80;%P.\xf5\xbcE\r_X\xf2\x8b\x16\xe1\x19\x8d', 0x0, 0x0, [], [0x2, 0x1, 0x80000001, 0x5]}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, "b1abe2da02000000e1000000fc00000000000000dc98784b49e0007e00002fd9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 15:33:00 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x277) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") 15:33:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:33:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@ipv6_newroute={0xd8, 0x18, 0xad9201a0efabeda5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, [@RTA_METRICS={0xac, 0x8, "178e1db7c46aa0e951df782aee4f9cef232c91991d2ca3b2b43140d55ce3c147bdcffc0147d0e528c9e6517d019e6d5f717b00ac3f1077c65009eed7a3f9088a905b89353eb806372d2163c9bc78b7926b500173d07a2e5db3b84635a4b4a65f14e9737e8515dc3d3fa2834ed9b33b0b5bc9e86dfbf01a9525c1a98d8c8455da04fe17c133d85f219ed05bfcf38cc404b9337e41f5d667262f3711509563a8a328f24e72ba"}, @RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 15:33:00 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c250f30882050300eef70000000109022400010000000009040200090033cb00090501120800000000090b08000000000c40c8a32820aaf2f1c0bc93b09135d694d46a99023df703f2edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea30000"], 0x0) [ 3110.905870][T17312] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 3110.936111][T17317] sctp: [Deprecated]: syz-executor.5 (pid 17317) Use of int in maxseg socket option. [ 3110.936111][T17317] Use struct sctp_assoc_value instead 15:33:01 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ff9000/0x3000)=nil) 15:33:01 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) unshare(0x400) ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000000100)={{&(0x7f0000ffc000/0x2000)=nil, 0x2002}}) 15:33:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) 15:33:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000100), 0x10) setsockopt(r1, 0x65, 0x1, &(0x7f0000000000)="f3050acc96289cad", 0x8) 15:33:01 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) unshare(0x400) ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000000100)={{&(0x7f0000ffc000/0x2000)=nil, 0x2002}}) 15:33:01 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:33:01 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000680)={[0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000000640)) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3111.441498][T17685] sctp: [Deprecated]: syz-executor.5 (pid 17685) Use of int in maxseg socket option. [ 3111.441498][T17685] Use struct sctp_assoc_value instead 15:33:01 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) unshare(0x400) ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000000100)={{&(0x7f0000ffc000/0x2000)=nil, 0x2002}}) 15:33:01 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:33:01 executing program 4: r0 = socket(0x80000000000000a, 0x3, 0x2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x36, &(0x7f0000000fc0)={'raw\x00', 0x2, [{}, {}]}, 0x48) [ 3111.670225][T17872] sctp: [Deprecated]: syz-executor.5 (pid 17872) Use of int in maxseg socket option. [ 3111.670225][T17872] Use struct sctp_assoc_value instead 15:33:01 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) unshare(0x400) ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000000100)={{&(0x7f0000ffc000/0x2000)=nil, 0x2002}}) [ 3113.253083][T17582] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 3113.503167][T17582] usb 4-1: Using ep0 maxpacket: 8 [ 3113.623522][T17582] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 3113.631651][T17582] usb 4-1: config 0 has no interface number 0 [ 3113.637980][T17582] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 3113.647906][T17582] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3113.660869][T17582] usb 4-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 3113.670042][T17582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3113.679671][T17582] usb 4-1: config 0 descriptor?? [ 3113.740298][T17582] usb 4-1: invalid MIDI in EP 0 [ 3113.747704][T17582] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 3117.150228][T12379] usb 4-1: USB disconnect, device number 93 15:33:07 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c250f30882050300eef70000000109022400010000000009040200090033cb00090501120800000000090b08000000000c40c8a32820aaf2f1c0bc93b09135d694d46a99023df703f2edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea30000"], 0x0) 15:33:07 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:33:07 executing program 2: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x36, &(0x7f00000016c0)={@local, @local, [{}], {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @link_local, "4ba80768f143a3f288af886badfff157"}}}}, 0x0) 15:33:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000bfcffc), &(0x7f0000d12ffc)=0xffffffffffffff3b) 15:33:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_nanosleep(0xfffffffffffffff5, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 15:33:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) dup2(r3, r0) write$P9_RREMOVE(r3, &(0x7f00000000c0)={0x7}, 0x7) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 15:33:07 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt(r0, 0x1, 0x2, &(0x7f0000000000)=""/106, &(0x7f0000000080)=0x6a) [ 3117.754488][T18022] sctp: [Deprecated]: syz-executor.5 (pid 18022) Use of int in maxseg socket option. [ 3117.754488][T18022] Use struct sctp_assoc_value instead 15:33:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) 15:33:07 executing program 2: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x36, &(0x7f00000016c0)={@local, @local, [{}], {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @link_local, "4ba80768f143a3f288af886badfff157"}}}}, 0x0) 15:33:08 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000280)='user\x00', 0x0, &(0x7f0000001040)="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", 0xdd1, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000100)=0x0) r4 = dup2(r0, r2) io_submit(r3, 0x2, &(0x7f0000001680)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x0, r4, 0xfffffffffffffffe, 0x2c2, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x40000000) 15:33:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_nanosleep(0xfffffffffffffff5, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 15:33:08 executing program 2: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x36, &(0x7f00000016c0)={@local, @local, [{}], {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @link_local, "4ba80768f143a3f288af886badfff157"}}}}, 0x0) [ 3118.089303][T18237] IPVS: ftp: loaded support on port[0] = 21 [ 3122.133014][T12808] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 3122.373160][T12808] usb 4-1: Using ep0 maxpacket: 8 [ 3122.493275][T12808] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 3122.501512][T12808] usb 4-1: config 0 has no interface number 0 [ 3122.508970][T12808] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 3122.518867][T12808] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3122.531800][T12808] usb 4-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 3122.541025][T12808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3122.550492][T12808] usb 4-1: config 0 descriptor?? [ 3122.601139][T12808] usb 4-1: invalid MIDI in EP 0 [ 3122.608780][T12808] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 3122.801006][ T2029] usb 4-1: USB disconnect, device number 94 15:33:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_nanosleep(0xfffffffffffffff5, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 15:33:13 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c250f30882050300eef70000000109022400010000000009040200090033cb00090501120800000000090b08000000000c40c8a32820aaf2f1c0bc93b09135d694d46a99023df703f2edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea30000"], 0x0) 15:33:13 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0/bus\x00', 0x1008, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x7efbf, 0x0) open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x2, 0x0) 15:33:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffdfff8588aebd, 0x0) 15:33:13 executing program 2: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x36, &(0x7f00000016c0)={@local, @local, [{}], {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @link_local, "4ba80768f143a3f288af886badfff157"}}}}, 0x0) 15:33:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000280)='user\x00', 0x0, &(0x7f0000001040)="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", 0xdd1, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000100)=0x0) r4 = dup2(r0, r2) io_submit(r3, 0x2, &(0x7f0000001680)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x0, r4, 0xfffffffffffffffe, 0x2c2, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x40000000) [ 3123.419687][T18366] IPVS: ftp: loaded support on port[0] = 21 15:33:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_nanosleep(0xfffffffffffffff5, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 15:33:13 executing program 1: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0045401, 0x0) 15:33:13 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='\f,9', 0x3) 15:33:13 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="000100009fd287080304106094b00094d301090212000100000000090477000000197400"], 0x0) 15:33:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x7c) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500088, r1}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 15:33:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}}, 0x0) 15:33:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000280)='user\x00', 0x0, &(0x7f0000001040)="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", 0xdd1, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000100)=0x0) r4 = dup2(r0, r2) io_submit(r3, 0x2, &(0x7f0000001680)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x0, r4, 0xfffffffffffffffe, 0x2c2, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x40000000) [ 3124.004022][T18695] IPVS: ftp: loaded support on port[0] = 21 [ 3124.062293][ T2029] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 3124.302960][ T2029] usb 1-1: Using ep0 maxpacket: 8 [ 3124.423383][ T2029] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 3124.431932][ T2029] usb 1-1: config 0 has no interface number 0 [ 3124.553515][ T2029] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=b0.94 [ 3124.564862][ T2029] usb 1-1: New USB device strings: Mfr=0, Product=148, SerialNumber=211 [ 3124.573478][ T2029] usb 1-1: Product: syz [ 3124.577698][ T2029] usb 1-1: SerialNumber: syz [ 3124.584373][ T2029] usb 1-1: config 0 descriptor?? [ 3124.626365][ T2029] ftdi_sio 1-1:0.119: FTDI USB Serial Device converter detected [ 3124.635147][ T2029] usb 1-1: Detected FT-X [ 3124.833732][ T2029] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 3124.853826][ T2029] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 3124.873167][ T2029] ftdi_sio 1-1:0.119: GPIO initialisation failed: -71 [ 3124.881248][ T2029] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3124.892525][ T2029] usb 1-1: USB disconnect, device number 33 [ 3124.902489][ T2029] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3124.914111][ T2029] ftdi_sio 1-1:0.119: device disconnected [ 3125.593034][ T2029] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 3125.832963][ T2029] usb 1-1: Using ep0 maxpacket: 8 [ 3125.953341][ T2029] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 3125.961841][ T2029] usb 1-1: config 0 has no interface number 0 [ 3126.083165][ T2029] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=b0.94 [ 3126.092467][ T2029] usb 1-1: New USB device strings: Mfr=0, Product=148, SerialNumber=211 [ 3126.101099][ T2029] usb 1-1: Product: syz [ 3126.105432][ T2029] usb 1-1: SerialNumber: syz [ 3126.111914][ T2029] usb 1-1: config 0 descriptor?? [ 3126.156148][ T2029] ftdi_sio 1-1:0.119: FTDI USB Serial Device converter detected [ 3126.165180][ T2029] usb 1-1: Detected FT-X [ 3126.365010][ T2029] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 3126.395925][ T2029] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 3126.423753][ T2029] ftdi_sio 1-1:0.119: GPIO initialisation failed: -71 [ 3126.431693][ T2029] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3126.447310][ T2029] usb 1-1: USB disconnect, device number 34 [ 3126.457220][ T2029] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3126.467786][ T2029] ftdi_sio 1-1:0.119: device disconnected [ 3127.733096][ T2029] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 3127.972955][ T2029] usb 4-1: Using ep0 maxpacket: 8 [ 3128.093335][ T2029] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 3128.101420][ T2029] usb 4-1: config 0 has no interface number 0 [ 3128.108333][ T2029] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 3128.118288][ T2029] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3128.131337][ T2029] usb 4-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 3128.140581][ T2029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3128.150149][ T2029] usb 4-1: config 0 descriptor?? [ 3128.199836][ T2029] usb 4-1: invalid MIDI in EP 0 [ 3128.207445][ T2029] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 3128.401000][ T2029] usb 4-1: USB disconnect, device number 95 15:33:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x200) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "b1034b903a64f865"}, 0x38) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) close(r1) 15:33:18 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000001080), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 15:33:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000280)='user\x00', 0x0, &(0x7f0000001040)="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", 0xdd1, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000100)=0x0) r4 = dup2(r0, r2) io_submit(r3, 0x2, &(0x7f0000001680)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x0, r4, 0xfffffffffffffffe, 0x2c2, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x40000000) 15:33:18 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000003c0)={0xa925, 0x2, 0x1, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x0) 15:33:18 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x60) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2315212c0f0df81f47084421256b3a3d2c3c75ca8df994764256383746aac819ff3865404e274d809d060bb1823c0e12db80ecf8ac5adcb992348cdea4949eda84a96775c72343de482d8bfc9a62bab74cc21c18e2afc2374978f2fd69872d3588874f17e4da1f824e95c47c825a19d166c919517c5e6b1c74b2ba5f1e16af00ed012a00e867243ac71c6cba5700e9bbaa3ff6552eeb2b9a5da03b0b09aa8e4d247a5e7fe98cb992b8c1b24be64683dec3d5833cbb5d1c0e29c3b1e8e0f984f2c5f2772af6e0f0006c0587749081e9abd8570b01982693fe386174410a448b782ca79e9ae641761961779fe1b9"], 0x10094) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x1037b) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0'}, 0x1999c) 15:33:19 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000100000004147, 0x0) 15:33:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x200000008002) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 3129.076405][T18721] IPVS: ftp: loaded support on port[0] = 21 15:33:19 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}}}, 0x80, 0x0}}], 0x2, 0x0) 15:33:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="000000100000fbdbdf25"], 0x1}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x30, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x1d55}}}}, 0x30}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:33:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6aebe8423e44093ee135e142d1b9b7", 0xf) 15:33:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000000)=0x4b1e, 0x15) 15:33:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x200) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "b1034b903a64f865"}, 0x38) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) close(r1) 15:33:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r2, 0x0, 0x6, &(0x7f00006ed000), &(0x7f0000000000)=0x3) 15:33:19 executing program 1: syz_emit_ethernet(0x5e, &(0x7f0000000240)={@broadcast, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x28, 0x40000000003a, 0x43ff, @ipv4={[0xffff80fe, 0x689], [], @broadcast}, @local, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, [], @mcast2={0xff, 0x5}, @rand_addr="e1f6eb163ae885d39b587147dbb22425"}}}}}}, 0x0) 15:33:19 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x200200, 0x11) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0x1, @raw_data="321d18bdcc9cc5eb8f5ac79d7d85f94e208583e7ffb9e15f273e9b31a33dcc079fd63d46ab8760edb8a9eb07fb7e121fdc81c21a177f2d1f06e94586f711c40ca10cdabf74a664dce8e398fecda052bcf5bfc6a5f9f6ab6b1994cd36ab0e8ad0e1a4ae9818f95c751fdb6876abaf819a505f99e14cec1b18a0edb9bfed9c65acf9815f3b7b83012c4f31e1bd9530152e4620c54d1b940184c0b539f8ebe781fc60ec3d4ab4da620aaf02be8be978d019736e2e23bdaaa37becfe3e01d3672972372cc22508b0b1e8"}) clock_nanosleep(0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0xc72f, 0x200000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(r1, 0x4, 0x3, &(0x7f00000006c0)=""/205) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r2 = open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x6, 'sh\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x11f7) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000480)=0x59c7, 0xfffffffffffffff8) r5 = fcntl$dupfd(r3, 0x406, r3) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x8884) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) recvfrom$packet(r5, &(0x7f0000000600)=""/134, 0x86, 0x100, &(0x7f00000004c0)={0x11, 0x17, r6, 0x1, 0x2, 0x6, @local}, 0x14) sendfile(r3, r3, &(0x7f00000000c0), 0x6) ioctl(r4, 0x800000000008982, &(0x7f0000000280)="61cfbfb5f9fbfba89a8bfeaa535219b0e4e230aa08aab2130fcaf044bfce320e86dfe8dc73c5ac00273ee4b4d06864f7035c401c8f8a1fd98bf60920000000000000ba6f6af8e490df94a71d5ce22a6b700853772b976d3b94ef9563c89fce8d01593779") signalfd4(r0, &(0x7f0000000540)={0x4}, 0x3, 0x80800) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ppp\x00', 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101800, 0x0) 15:33:19 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000240)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe03) 15:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x200) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "b1034b903a64f865"}, 0x38) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) close(r1) 15:33:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000480), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000080000020269a5cdc291e96e7167dd549815de917874ab05dc005efe703f17600000000000000000000000017b986782b7e02387583cf7649905d058fdebb4e0e4ba4020602c02766114790713b5691214344a17b9b9582e700000000b33eb4e783d6a003966aa174f3a387524e79d763d0ade262bf49a49a043c2ecc4613947d42cd8e5058183fb8f3de0d347ee8924da2c5db49a35727be06fff1ce6b0cd260c885dfb84f5fc528"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5, 0x800, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "3652d1c2cf78c41230901c3083bff968c65bf616ae16d3515b088355635e7416bdd571c44d316bf65b4df645d2e6e13e0d90c3098b3db54c25ca641c155f19cd"}}, 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x7, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "afad0ba330c263d0"}}, 0x48}}, 0x0) 15:33:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x3}, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) utimes(&(0x7f0000000080)='./file0\x00', 0x0) 15:33:23 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0x0, 0x0, 0x3234564e}}) 15:33:23 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x200200, 0x11) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0x1, @raw_data="321d18bdcc9cc5eb8f5ac79d7d85f94e208583e7ffb9e15f273e9b31a33dcc079fd63d46ab8760edb8a9eb07fb7e121fdc81c21a177f2d1f06e94586f711c40ca10cdabf74a664dce8e398fecda052bcf5bfc6a5f9f6ab6b1994cd36ab0e8ad0e1a4ae9818f95c751fdb6876abaf819a505f99e14cec1b18a0edb9bfed9c65acf9815f3b7b83012c4f31e1bd9530152e4620c54d1b940184c0b539f8ebe781fc60ec3d4ab4da620aaf02be8be978d019736e2e23bdaaa37becfe3e01d3672972372cc22508b0b1e8"}) clock_nanosleep(0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0xc72f, 0x200000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(r1, 0x4, 0x3, &(0x7f00000006c0)=""/205) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r2 = open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x6, 'sh\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x11f7) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000480)=0x59c7, 0xfffffffffffffff8) r5 = fcntl$dupfd(r3, 0x406, r3) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x8884) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) recvfrom$packet(r5, &(0x7f0000000600)=""/134, 0x86, 0x100, &(0x7f00000004c0)={0x11, 0x17, r6, 0x1, 0x2, 0x6, @local}, 0x14) sendfile(r3, r3, &(0x7f00000000c0), 0x6) ioctl(r4, 0x800000000008982, &(0x7f0000000280)="61cfbfb5f9fbfba89a8bfeaa535219b0e4e230aa08aab2130fcaf044bfce320e86dfe8dc73c5ac00273ee4b4d06864f7035c401c8f8a1fd98bf60920000000000000ba6f6af8e490df94a71d5ce22a6b700853772b976d3b94ef9563c89fce8d01593779") signalfd4(r0, &(0x7f0000000540)={0x4}, 0x3, 0x80800) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ppp\x00', 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101800, 0x0) 15:33:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002100fbff0000000000000000000000003bc7b547292a33e1b65b7864075aafd8379c618490e17195b470be18ba00979f23575f4934e0ba7a6b36c491d3f0fb6fc7"], 0x14}, 0x1, 0x68}, 0x0) r2 = socket(0x10, 0x80002, 0x8000000010) sendmmsg$alg(r2, &(0x7f0000000080), 0x492492492492751, 0x0) 15:33:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x200) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "b1034b903a64f865"}, 0x38) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) close(r1) 15:33:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x80045432, 0x0) syz_open_procfs(0x0, 0xfffffffffffffffe) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x6}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) 15:33:23 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'veth0_to_team\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047437, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 15:33:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1004e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000140)="6812334f6743a747f8bf094356", 0xd, 0x8800, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000100)='\x00', 0x38, 0x4088, 0x0, 0x0) r2 = dup(r1) write$P9_RGETATTR(r2, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006980)=[{{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000006b00)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 15:33:23 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x200200, 0x11) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0x1, @raw_data="321d18bdcc9cc5eb8f5ac79d7d85f94e208583e7ffb9e15f273e9b31a33dcc079fd63d46ab8760edb8a9eb07fb7e121fdc81c21a177f2d1f06e94586f711c40ca10cdabf74a664dce8e398fecda052bcf5bfc6a5f9f6ab6b1994cd36ab0e8ad0e1a4ae9818f95c751fdb6876abaf819a505f99e14cec1b18a0edb9bfed9c65acf9815f3b7b83012c4f31e1bd9530152e4620c54d1b940184c0b539f8ebe781fc60ec3d4ab4da620aaf02be8be978d019736e2e23bdaaa37becfe3e01d3672972372cc22508b0b1e8"}) clock_nanosleep(0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0xc72f, 0x200000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(r1, 0x4, 0x3, &(0x7f00000006c0)=""/205) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r2 = open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x6, 'sh\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x11f7) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000480)=0x59c7, 0xfffffffffffffff8) r5 = fcntl$dupfd(r3, 0x406, r3) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x8884) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) recvfrom$packet(r5, &(0x7f0000000600)=""/134, 0x86, 0x100, &(0x7f00000004c0)={0x11, 0x17, r6, 0x1, 0x2, 0x6, @local}, 0x14) sendfile(r3, r3, &(0x7f00000000c0), 0x6) ioctl(r4, 0x800000000008982, &(0x7f0000000280)="61cfbfb5f9fbfba89a8bfeaa535219b0e4e230aa08aab2130fcaf044bfce320e86dfe8dc73c5ac00273ee4b4d06864f7035c401c8f8a1fd98bf60920000000000000ba6f6af8e490df94a71d5ce22a6b700853772b976d3b94ef9563c89fce8d01593779") signalfd4(r0, &(0x7f0000000540)={0x4}, 0x3, 0x80800) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ppp\x00', 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101800, 0x0) 15:33:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0x0, 0x2], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 15:33:24 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x200200, 0x11) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0x1, @raw_data="321d18bdcc9cc5eb8f5ac79d7d85f94e208583e7ffb9e15f273e9b31a33dcc079fd63d46ab8760edb8a9eb07fb7e121fdc81c21a177f2d1f06e94586f711c40ca10cdabf74a664dce8e398fecda052bcf5bfc6a5f9f6ab6b1994cd36ab0e8ad0e1a4ae9818f95c751fdb6876abaf819a505f99e14cec1b18a0edb9bfed9c65acf9815f3b7b83012c4f31e1bd9530152e4620c54d1b940184c0b539f8ebe781fc60ec3d4ab4da620aaf02be8be978d019736e2e23bdaaa37becfe3e01d3672972372cc22508b0b1e8"}) clock_nanosleep(0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0xc72f, 0x200000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(r1, 0x4, 0x3, &(0x7f00000006c0)=""/205) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r2 = open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x6, 'sh\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x11f7) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000480)=0x59c7, 0xfffffffffffffff8) r5 = fcntl$dupfd(r3, 0x406, r3) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x8884) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) recvfrom$packet(r5, &(0x7f0000000600)=""/134, 0x86, 0x100, &(0x7f00000004c0)={0x11, 0x17, r6, 0x1, 0x2, 0x6, @local}, 0x14) sendfile(r3, r3, &(0x7f00000000c0), 0x6) ioctl(r4, 0x800000000008982, &(0x7f0000000280)="61cfbfb5f9fbfba89a8bfeaa535219b0e4e230aa08aab2130fcaf044bfce320e86dfe8dc73c5ac00273ee4b4d06864f7035c401c8f8a1fd98bf60920000000000000ba6f6af8e490df94a71d5ce22a6b700853772b976d3b94ef9563c89fce8d01593779") signalfd4(r0, &(0x7f0000000540)={0x4}, 0x3, 0x80800) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ppp\x00', 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101800, 0x0) 15:33:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000001000010002040800410400000000fcff", 0x58}], 0x1) 15:33:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000000)={'lo\x00\x00\x00\x00\x00\xd3\xd9\xcd{\x00@\x00\xa2\xde', @ifru_flags}) 15:33:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x80045432, 0x0) syz_open_procfs(0x0, 0xfffffffffffffffe) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x6}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) 15:33:29 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x321c620b39e70a0c, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 15:33:29 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x40096100, 0x70f000) 15:33:29 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x5b, 0x92, 0xd8, 0x8, 0x13b1, 0x42, 0xf805, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x73, 0x0, 0x2, 0x9b, 0xc2, 0xec, 0x0, [], [{{0x9, 0x5, 0xb}}, {{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) 15:33:29 executing program 5: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 15:33:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil) 15:33:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 3139.893581][T17582] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 3139.909822][T20427] binder: 20401:20427 ioctl c0306201 0 returned -14 [ 3139.963697][T20427] binder: 20401:20427 ioctl c0306201 0 returned -14 15:33:30 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000480)={0x5, &(0x7f0000000340)=[{}, {0x85}, {0x1ff, 0x401}, {0x9}, {}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x4, 0x800000ec2, 0x4000000000002}, 0x1a) bpf$MAP_CREATE(0x2, &(0x7f0000000080)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x29) bpf$MAP_CREATE(0x2, &(0x7f00000000c0)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 15:33:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x28, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @dev}, @gre_common_policy=[@IFLA_GRE_IFLAGS={0x8}, @IFLA_GRE_OFLAGS={0x8}]]}}}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x60}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3140.153501][T17582] usb 5-1: Using ep0 maxpacket: 8 [ 3140.219032][T20652] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 3140.227377][T20652] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 15:33:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x80045432, 0x0) syz_open_procfs(0x0, 0xfffffffffffffffe) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x6}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) [ 3140.285486][T17582] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 3140.294045][T17582] usb 5-1: config 0 has no interface number 0 [ 3140.300307][T17582] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f8.05 [ 3140.309645][T17582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3140.329816][T17582] usb 5-1: config 0 descriptor?? [ 3140.402268][T17582] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 3140.579650][T17582] usb 5-1: USB disconnect, device number 2 [ 3140.603460][T15773] usb 5-1: Failed to submit usb control message: -71 [ 3140.610463][T15773] usb 5-1: unable to send the bmi data to the device: -71 [ 3140.617806][T15773] usb 5-1: unable to get target info from device 15:33:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_adjtime(0x62297840e65b5adb, &(0x7f0000000180)) 15:33:33 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 15:33:33 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef007b0a00f4afd7030a7c", 0x12, 0x0, 0x0, 0x1d4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0xffffffffffffff56, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/119, 0x79}], 0x2, 0x0, 0xfffffffffffffd18}}], 0x4000000000001d9, 0x0, 0x0) 15:33:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x80045432, 0x0) syz_open_procfs(0x0, 0xfffffffffffffffe) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x6}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) 15:33:33 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f0000013000)) close(r1) 15:33:33 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x5b, 0x92, 0xd8, 0x8, 0x13b1, 0x42, 0xf805, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x73, 0x0, 0x2, 0x9b, 0xc2, 0xec, 0x0, [], [{{0x9, 0x5, 0xb}}, {{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) 15:33:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") socketpair(0x11, 0x3, 0x7, &(0x7f0000000340)) 15:33:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 15:33:34 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0xe07000, 0x3, 0x12, r0, 0x0) [ 3144.113030][T17582] usb 5-1: new high-speed USB device number 4 using dummy_hcd 15:33:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0xfffffffffffffffe}) 15:33:34 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) [ 3144.376423][T17582] usb 5-1: Using ep0 maxpacket: 8 15:33:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 15:33:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) [ 3144.513856][T17582] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 3144.522177][T17582] usb 5-1: config 0 has no interface number 0 [ 3144.528536][T17582] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f8.05 [ 3144.537768][T17582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3144.633792][T17582] usb 5-1: config 0 descriptor?? [ 3144.727975][T17582] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 3144.896144][T17582] usb 5-1: USB disconnect, device number 4 [ 3144.913242][ T8170] usb 5-1: Failed to submit usb control message: -71 [ 3144.920086][ T8170] usb 5-1: could not get target info (-71) [ 3144.926341][ T8170] usb 5-1: could not probe fw (-71) 15:33:39 executing program 3: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 15:33:39 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_ROUTER={0x8}]}}}]}, 0x44}}, 0x0) 15:33:39 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) flock(r0, 0x0) 15:33:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 15:33:39 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0xdf, 0x84, 0x40, 0xc45, 0x613e, 0x7c88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x0, 0x1, 0x47, 0x89}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0}) 15:33:39 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x5b, 0x92, 0xd8, 0x8, 0x13b1, 0x42, 0xf805, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x73, 0x0, 0x2, 0x9b, 0xc2, 0xec, 0x0, [], [{{0x9, 0x5, 0xb}}, {{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) 15:33:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) [ 3149.455936][T21631] netlink: 'syz-executor.5': attribute type 22 has an invalid length. 15:33:39 executing program 1: unshare(0x400) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000100), 0x0) 15:33:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) 15:33:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$int_out(r1, 0xa000002270, &(0x7f0000fd3ffc)) [ 3149.713432][T17582] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 3149.721586][T12808] usb 5-1: new high-speed USB device number 5 using dummy_hcd 15:33:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r0}) 15:33:39 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000400)='cpuacct.usage\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x508) [ 3149.976316][T12808] usb 5-1: Using ep0 maxpacket: 8 [ 3150.093542][T17582] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 3150.102065][T17582] usb 1-1: config 0 has no interface number 0 [ 3150.109168][T17582] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=7c.88 [ 3150.118393][T17582] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3150.127525][T12808] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 3150.136039][T12808] usb 5-1: config 0 has no interface number 0 [ 3150.142298][T12808] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f8.05 [ 3150.151605][T12808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3150.161443][T12808] usb 5-1: config 0 descriptor?? [ 3150.167882][T17582] usb 1-1: config 0 descriptor?? [ 3150.230588][T17582] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 3150.248604][T12808] ath10k_warn: 2 callbacks suppressed [ 3150.248726][T12808] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 3150.430380][T12808] usb 5-1: USB disconnect, device number 5 [ 3150.453717][ T8170] usb 5-1: Failed to submit usb control message: -71 [ 3150.460770][ T8170] usb 5-1: unable to send the bmi data to the device: -71 [ 3150.468459][ T8170] usb 5-1: unable to get target info from device [ 3150.475373][ T8170] usb 5-1: could not get target info (-71) [ 3150.481410][ T8170] usb 5-1: could not probe fw (-71) [ 3152.393384][T17582] gspca_sonixj: reg_w1 err -71 [ 3152.398478][T17582] sonixj: probe of 1-1:0.237 failed with error -71 [ 3152.424506][T17582] usb 1-1: USB disconnect, device number 35 [ 3153.143028][T12379] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 3153.503333][T12379] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 3153.511615][T12379] usb 1-1: config 0 has no interface number 0 [ 3153.518032][T12379] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=7c.88 [ 3153.527354][T12379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3153.537100][T12379] usb 1-1: config 0 descriptor?? [ 3153.577960][T12379] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 3153.843554][T12379] gspca_sonixj: reg_r err -71 [ 3153.848555][T12379] sonixj: probe of 1-1:0.237 failed with error -71 [ 3153.869676][T12379] usb 1-1: USB disconnect, device number 36 15:33:46 executing program 3: r0 = inotify_init1(0x0) fgetxattr(r0, &(0x7f0000000000)=@random={'security.', ']^system\x00'}, &(0x7f0000000100)=""/197, 0xc5) 15:33:46 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x68}, [@ldst={0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffec, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 15:33:46 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x5b, 0x92, 0xd8, 0x8, 0x13b1, 0x42, 0xf805, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x73, 0x0, 0x2, 0x9b, 0xc2, 0xec, 0x0, [], [{{0x9, 0x5, 0xb}}, {{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) 15:33:46 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x6, 0x21, 0x0, &(0x7f0000013000)) 15:33:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000100008077199131f56e8cd6a7e6"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0xc0010140], [0xc1]}) 15:33:46 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x38414261}) 15:33:46 executing program 5: r0 = io_uring_setup(0x5a, &(0x7f0000000200)) writev(r0, 0x0, 0x0) 15:33:46 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="d1691116f5ed3d3fbaed04f3340700000000"], 0x10001) 15:33:46 executing program 0: prctl$PR_MCE_KILL(0x35, 0x1, 0x8) 15:33:46 executing program 2: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x8}) r2 = epoll_create1(0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)) 15:33:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x0) 15:33:47 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) fchown(r0, 0x0, 0xffffffffffffffff) [ 3156.926065][T17582] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 3157.194109][T17582] usb 5-1: Using ep0 maxpacket: 8 [ 3157.333298][T17582] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 3157.341787][T17582] usb 5-1: config 0 has no interface number 0 [ 3157.348382][T17582] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f8.05 [ 3157.357586][T17582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3157.367762][T17582] usb 5-1: config 0 descriptor?? [ 3157.427341][T17582] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 3157.628817][T17582] usb 5-1: USB disconnect, device number 6 [ 3157.636830][ T8170] usb 5-1: Failed to submit usb control message: -71 [ 3157.643889][ T8170] usb 5-1: unable to send the bmi data to the device: -71 [ 3157.651200][ T8170] usb 5-1: unable to get target info from device [ 3157.658372][ T8170] usb 5-1: could not get target info (-71) [ 3157.664575][ T8170] usb 5-1: could not probe fw (-71) 15:33:50 executing program 0: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) 15:33:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000010c0)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="b4", 0x1}], 0x1}}], 0x1, 0x0) 15:33:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000040)) 15:33:50 executing program 1: socket$tipc(0x1e, 0x4, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) unshare(0x20020400) poll(&(0x7f0000000000)=[{}, {}], 0xac, 0x0) 15:33:50 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)={0x0, r1}) dup2(r1, r0) 15:33:50 executing program 2: unshare(0x400) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) 15:33:51 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x79c4}) ppoll(&(0x7f0000000280)=[{r0, 0xc8c30f17d1231b9}], 0x1, 0x0, 0x0, 0x0) 15:33:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000100)=0x0) close(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 15:33:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0xa) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0c00903e7a38107115b41df6d3991c16"], 0x10}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 15:33:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000400)=0x0) close(r0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 15:33:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000002400070500"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000004070001006671000034000800050000000000080006000000000008000200000000000800080000000000080001000000000008000700fffff3ff0000"], 0x60}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) 15:33:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3161.327258][T22685] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:33:51 executing program 5: io_setup(0x14, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x200000005, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r0, 0x8, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000080), 0xa}]) 15:33:58 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)={0x0, r1}) dup2(r1, r0) 15:33:58 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x5, 0x1, 0x88}]}, &(0x7f0000f6bffb)='GPL\x00'}, 0x48) 15:33:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:33:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185502, &(0x7f0000000080)={0x0, 0x1, [{}]}) 15:33:58 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000100)) 15:33:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000001040501ff0080fffdffff2e0a0000000c000100010000007f0000010c000600000022ff02f10000"], 0x2c}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000001040501ff0080fffdffff2e0a0000000c000100010000007f0000010c0006000005000000000000"], 0x2c}}, 0x0) 15:33:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3168.343301][T23060] netlink: 'syz-executor.5': attribute type 6 has an invalid length. [ 3168.375642][T23060] netlink: 'syz-executor.5': attribute type 6 has an invalid length. 15:33:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185502, &(0x7f0000000080)={0x0, 0x1, [{}]}) [ 3168.441967][T23060] netlink: 'syz-executor.5': attribute type 6 has an invalid length. 15:33:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:33:58 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x5, 0x400, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0xffffff7f}, 0x1, @can={{0x0, 0x0, 0xffffff7f}, 0x0, 0x0, 0x0, 0x0, "b63a878ce4a87a5a"}}, 0x48}}, 0x0) 15:33:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185502, &(0x7f0000000080)={0x0, 0x1, [{}]}) 15:33:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x456}, 0x8) close(r1) [ 3168.851147][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:34:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x27) 15:34:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) 15:34:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xffefffffffbffffe) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) close(r1) 15:34:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x7c, 0x0, [0x4b564d01, 0x0, 0x11e]}) 15:34:02 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)={0x0, r1}) dup2(r1, r0) 15:34:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0185502, &(0x7f0000000080)={0x0, 0x1, [{}]}) [ 3172.707994][T23499] kvm [23498]: vcpu0, guest rIP: 0xfff0 ignored wrmsr: 0x11e data 0x0 15:34:02 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000033bffc)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000}) socket$inet(0x2, 0x0, 0x0) 15:34:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'\b\x00\x00\x00e&\xa28\x00\x00\x00\x00\x02\x00\xef\f', 0x20000005003}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)=0x1) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f00000000c0)="45aae011586039363a64", 0xa}]) 15:34:03 executing program 5: socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x8004808000080003, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x8, 0xc, [{0x4e00}]}]}, 0x288}}, 0x0) 15:34:03 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f0000000280)="15", 0x1}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\vO\x17\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0) 15:34:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x1, @pix_mp}) 15:34:03 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:34:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'\b\x00\x00\x00e&\xa28\x00\x00\x00\x00\x02\x00\xef\f', 0x20000005003}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)=0x1) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f00000000c0)="45aae011586039363a64", 0xa}]) 15:34:09 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)={0x0, r1}) dup2(r1, r0) 15:34:09 executing program 0: msgrcv(0x0, 0x0, 0xffffff2e, 0x0, 0x24fa210b5244cf7b) 15:34:09 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xfffffffffffffff9, 0x2, {0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffffffff0000}], 0x1}}}) 15:34:09 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000100)='notify_on_release\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 15:34:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'\b\x00\x00\x00e&\xa28\x00\x00\x00\x00\x02\x00\xef\f', 0x20000005003}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)=0x1) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f00000000c0)="45aae011586039363a64", 0xa}]) 15:34:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)=@getstats={0x1c, 0x5e, 0x301}, 0x1c}}, 0x0) 15:34:09 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xfffffffffffffff9, 0x2, {0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffffffff0000}], 0x1}}}) 15:34:09 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x11, 0x65, 0x0, &(0x7f00007d0000)) 15:34:09 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)) 15:34:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'\b\x00\x00\x00e&\xa28\x00\x00\x00\x00\x02\x00\xef\f', 0x20000005003}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)=0x1) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f00000000c0)="45aae011586039363a64", 0xa}]) 15:34:09 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1c, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0x20000048) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x9}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x18, &(0x7f0000000280)={r1}, 0x8) 15:34:09 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xfffffffffffffff9, 0x2, {0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffffffff0000}], 0x1}}}) 15:34:13 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="a48b1bf72801002b4d2f2fba4fad", 0xe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:34:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x6}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:34:13 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x11, 0x65, 0x0, &(0x7f00007d0000)) 15:34:13 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xfffffffffffffff9, 0x2, {0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffffffff0000}], 0x1}}}) 15:34:13 executing program 5: unshare(0x400) r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 15:34:13 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0b01000092000000000000008400"/24], 0x18) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:34:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x6}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:34:13 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x11, 0x65, 0x0, &(0x7f00007d0000)) 15:34:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000005002000000000000000003"]) 15:34:13 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x11, 0x65, 0x0, &(0x7f00007d0000)) 15:34:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x6}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:34:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x24, 0x2, [@TCA_PIE_ALPHA={0x8}, @TCA_PIE_TUPDATE={0x8}, @TCA_PIE_ECN={0x8}, @TCA_PIE_LIMIT={0x8}]}}]}, 0x50}}, 0x0) 15:34:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000000a0a07031dfffd946fa2830020200a0009000100000000000000aba20400ff7e", 0x24}], 0x1}, 0x0) 15:34:16 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) write(r0, 0x0, 0x0) 15:34:16 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x6}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:34:16 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video36\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0585611, &(0x7f0000000040)={0x0, 0xa, "2a8f5865af490300b2997e693d9e9782bf915303f60000000000005f24f44d12", 0x0, 0x0, 0x0, 0x70f000, 0x500000003}) 15:34:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x24, 0x2, [@TCA_PIE_ALPHA={0x8}, @TCA_PIE_TUPDATE={0x8}, @TCA_PIE_ECN={0x8}, @TCA_PIE_LIMIT={0x8}]}}]}, 0x50}}, 0x0) 15:34:21 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0b01000092000000000000008400"/24], 0x18) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:34:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x24, 0x2, [@TCA_PIE_ALPHA={0x8}, @TCA_PIE_TUPDATE={0x8}, @TCA_PIE_ECN={0x8}, @TCA_PIE_LIMIT={0x8}]}}]}, 0x50}}, 0x0) 15:34:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={r5}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r6}) dup2(r0, r1) 15:34:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 15:34:21 executing program 2: unshare(0x600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8901, 0x0) 15:34:21 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) setpgid(r1, 0x0) [ 3191.814257][T25276] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 15:34:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x24, 0x2, [@TCA_PIE_ALPHA={0x8}, @TCA_PIE_TUPDATE={0x8}, @TCA_PIE_ECN={0x8}, @TCA_PIE_LIMIT={0x8}]}}]}, 0x50}}, 0x0) 15:34:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_eee={0x45}}) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 15:34:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a48b12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb15322e2df00000000000000960f53691a655eb6999d32772cf2eebb1f6c9ad54ac45a333c28785d6382fa7776ea267d", 0x4b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:34:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 15:34:22 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7c, 0xe3, 0xad, 0x20, 0x2001, 0x3309, 0x8a5e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb3, 0x0, 0x0, 0xc, 0xc1, 0x47}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000000080)=ANY=[@ANYBLOB="00000400000043e348"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3192.191952][T25578] input: syz0 as /devices/virtual/input/input327 15:34:22 executing program 5: r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) [ 3192.494412][T12808] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 3192.743092][T12808] usb 5-1: Using ep0 maxpacket: 32 [ 3192.863049][T12808] usb 5-1: config 0 has an invalid interface number: 179 but max is 0 [ 3192.871367][T12808] usb 5-1: config 0 has no interface number 0 [ 3192.877758][T12808] usb 5-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 3192.887008][T12808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3192.896714][T12808] usb 5-1: config 0 descriptor?? [ 3193.143193][T12808] rtl8192cu: Chip version 0x70 [ 3193.553183][T12808] rtl_usb: reg 0xa, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 3193.562086][T12808] rtl_usb: Too few input end points found [ 3193.572906][T12808] usb 5-1: USB disconnect, device number 7 [ 3194.123039][T12808] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 3194.382960][T12808] usb 5-1: Using ep0 maxpacket: 32 [ 3194.523231][T12808] usb 5-1: config 0 has an invalid interface number: 179 but max is 0 [ 3194.531666][T12808] usb 5-1: config 0 has no interface number 0 [ 3194.538074][T12808] usb 5-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 3194.547597][T12808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3194.557396][T12808] usb 5-1: config 0 descriptor?? [ 3195.053146][T12808] rtl_usb: reg 0xf0, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 3195.061907][T12808] rtl8192cu: Chip version 0x10 [ 3195.273313][T12808] rtl_usb: reg 0xa, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 3195.282159][T12808] rtl_usb: Too few input end points found [ 3195.292532][T12808] usb 5-1: USB disconnect, device number 8 15:34:28 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0b01000092000000000000008400"/24], 0x18) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:34:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) 15:34:28 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "2018f59e6fc82dd8"}}, 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)=@tipc=@name, 0x80, 0x0}}], 0x400000000000092, 0x10162, 0x0) 15:34:28 executing program 5: r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) 15:34:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x8e, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v$Q', 0x58, 0x3a, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "8b85c6", 0x0, 0x29, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@loopback]}], "199b98955ebdb2a72dd50695e130d128"}}}}}}}, 0x0) 15:34:28 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x1f, 0x0, 0x0, 0x0, 0x1a8}}], 0x40000000000041b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x2cc, 0x0) 15:34:28 executing program 5: r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) 15:34:28 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00') 15:34:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38f3c47fdba053c4d5415af2ed"], 0x0, 0xd}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:28 executing program 5: r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) 15:34:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x8e, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v$Q', 0x58, 0x3a, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "8b85c6", 0x0, 0x29, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@loopback]}], "199b98955ebdb2a72dd50695e130d128"}}}}}}}, 0x0) 15:34:28 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00') 15:34:33 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0b01000092000000000000008400"/24], 0x18) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:34:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000002840)={"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"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) 15:34:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041619140950b2a17e99b0000000109021200010000000009044e000019328200cce83c34e78ff219b343c854d106f967a6fe8635f6cd496a8065c95af47c50738204ee5751a21823ac42cc62bebc7d3994aa133c953fc32f39ec5208fce95ff11dddb34201c7eb7c7665a0135ff8f8de72f5b6fc392e7021e87ee2b6f1c7200445a2480ba13da2d19ada24bab6202f2a815903bca01acb3edc178369815440b39b29c9a6420062640ea9db36b21d4de8b3ddca0fd9a65a49a85db8179cec7a6fdf8d6578007b7fe25acf302e1699b0"], 0x0) 15:34:33 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\n\x00\x1a\x00\x00>\xd4\x1a\xec\r\xa0\xf2l\xa3\x1e\x9a\n7\x8c\xc6\x1c\xde\x8c\xeb\xe8\'U\x0e\x15\x94\xbe!\xe8\xa7-\x9d\xfd\xf0\xec\\\x1d\x06\x13\x15o\xdd\x0f\xbb\r\xa5\x04\xa0\xd2\v4\\\xc4\x15h\x14\x93\xe9\x8aPz\x8cN\xc8\xa8x\x9f\xcb\x1c\bY\x89\x89w|[\xf51\xbeTM\xb9Z\x9a[U\x00'/105, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4600e3ff00000000000000000003000300ccf4200000000000380000000000000000000000000020000100000000000005000000000300000000000000010500000000000007de94000010f3ffff8ff6b6ffffef8a"], 0x58) execveat(r0, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) 15:34:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x8e, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v$Q', 0x58, 0x3a, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "8b85c6", 0x0, 0x29, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@loopback]}], "199b98955ebdb2a72dd50695e130d128"}}}}}}}, 0x0) 15:34:33 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00') 15:34:33 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00') 15:34:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x8e, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v$Q', 0x58, 0x3a, 0x0, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "8b85c6", 0x0, 0x29, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@loopback]}], "199b98955ebdb2a72dd50695e130d128"}}}}}}}, 0x0) 15:34:33 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x1a7) write$UHID_INPUT2(r0, &(0x7f0000000040), 0x6) r1 = memfd_create(&(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRES16, @ANYPTR], 0x4) 15:34:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') fchdir(r0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='./file1\x00') [ 3203.467994][T12379] usb 6-1: new high-speed USB device number 47 using dummy_hcd 15:34:33 executing program 0: unshare(0x20040600) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0x0, 0x40, 0x0, [0xfffffffe]}) [ 3203.619744][T12808] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 3203.630114][T12808] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 3203.637797][T12808] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 3203.645461][T12808] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 3203.653138][T12808] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 3203.660834][T12808] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 15:34:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000002840)={"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"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) [ 3203.668495][T12808] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 3203.676115][T12808] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 3203.683761][T12808] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 3203.691388][T12808] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 3203.699023][T12808] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 3203.791487][T12808] hid-generic 0000:0000:0000.0082: hidraw0: HID v0.00 Device [syz1] on syz1 [ 3203.833554][T12379] usb 6-1: config 0 has an invalid interface number: 78 but max is 0 [ 3203.841870][T12379] usb 6-1: config 0 has no interface number 0 [ 3203.848524][T12379] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=9b.e9 [ 3203.857826][T12379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3203.874586][T12379] usb 6-1: config 0 descriptor?? [ 3204.133567][T12379] asix 6-1:0.78 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3204.144401][T12379] asix 6-1:0.78 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 3204.154738][T12379] asix: probe of 6-1:0.78 failed with error -71 [ 3204.170939][T12379] usb 6-1: USB disconnect, device number 47 15:34:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8000000006}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000000440), 0x7be86bbb7a0f557, 0x810) 15:34:37 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r0, &(0x7f00000001c0), 0x1000) read$FUSE(r0, &(0x7f00000011c0), 0x1000) 15:34:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008911, &(0x7f0000000080)="f97a569e51794accdd03fd3a") 15:34:37 executing program 1: memfd_create(&(0x7f0000000100)='\x00\x96f\x19\"Z\x8a\x01\x0f\nZ\xc7\x16\xa5\\Z:(\xde\x8e~\x9668\xa8\xf3\xad\"cl\x9f\xf2\xd4.\xcb\xb2~\xb7\x16\xbbU4\x02\xa7Q\xa3\xfc\x80\xb1f\xc0\x9aH^\xdbV\xaclo\xc5\x97[\xe0X_\xff6\xbe\x04\x9d\xef\x87\x1f\x920<\xda\xbe\x80\x02i\xb8\xc1G', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x26fbded78c8baa93, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_getmulticast={0x14}, 0x14}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x400}, 0x2c) 15:34:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = dup(r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 15:34:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000002840)={"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"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) 15:34:37 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x0, 0x1013, 0x7}}) 15:34:37 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0xa, 0x103}) 15:34:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000002840)={"6c64125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10010174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) 15:34:37 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x1, 0x4, 0x7}, 0xc) 15:34:37 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x8, 0x0, &(0x7f0000000040)) 15:34:37 executing program 1: r0 = socket$inet6(0xa, 0x40000000000006, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x7ff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x1000000000004e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xda, &(0x7f0000000140), &(0x7f0000000080)=0x4) 15:34:37 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$inet6(0xa, 0x100000000002, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe62, 0x0) 15:34:42 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001300)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x9}], 0x1c) 15:34:42 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000001c0)={{0x1}}) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x0, 0x3}}) 15:34:42 executing program 4: syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000240)='/dev/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x3ffffff}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00005eaff8)) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) 15:34:42 executing program 1: r0 = socket$inet6(0xa, 0x40000000000006, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x7ff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x1000000000004e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xda, &(0x7f0000000140), &(0x7f0000000080)=0x4) 15:34:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001e000500d25a80648c63940d0200fc00100006400200a06d053582c137153e370900018002000000d1bd", 0x2e}], 0x1}, 0x0) 15:34:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = dup2(r1, r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x0, r1}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000013c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/177, 0xb1}], 0x1) [ 3212.452517][T27143] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 3212.461173][T27143] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:34:42 executing program 1: r0 = socket$inet6(0xa, 0x40000000000006, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x7ff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x1000000000004e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xda, &(0x7f0000000140), &(0x7f0000000080)=0x4) 15:34:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae03, 0x8f) 15:34:42 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') exit(0x0) mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff) 15:34:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00\xec\xc5IT\xae\x86\x13\xa1\x06I\x13\x14\xca\xa4J\xb2\xb0BTSu\x84(\xd52\xf0tJm\xa9:}\xec\xe5\xdby\a\xbb\xab\a\x94\xc8\vH\x87\x119\xf8\xffC\xcf\xcb\x92I[q\x10\x93\xa3\xd3\xf1\x83\x16\xce\x10\xa9@J\xb8\x12t\xd0\x04X\xe6\xc1w\xf3\x9fH\x1c\n6\\\x8d\xab@\x87F\x8a\x18B}\f\x039}\x94\xc7K\xa9>\x1c\x18\xf7\x9f\x9e\xc6\x1c\x04\x00\x00\x00\t\x9f\x1e\x98\xc2\x84e\x9b\xe0\xcd\x7f\x81\x82I\xa9_\x8d,#\x1e\x02jh=f\x1e\xd3\x97\xcdxR3\xb5\x13a\xf2>\xf6\xd9\x05eL\x13\x9bN\xd3\x82\xe8\xc5\xa2\xa0S\x88\xc5:\x90\xac]') bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80000000000003) 15:34:42 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, 0x0, 0x0) 15:34:42 executing program 1: r0 = socket$inet6(0xa, 0x40000000000006, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x7ff) connect$inet(r1, &(0x7f0000000200)={0x2, 0x1000000000004e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xda, &(0x7f0000000140), &(0x7f0000000080)=0x4) 15:34:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000080)="000500f3", 0x4) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0xfea6) 15:34:48 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r2, 0x0, 0x1b3, 0x2}}, 0x20) 15:34:48 executing program 1: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0) pipe2(&(0x7f0000000080), 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xff16, &(0x7f00000005c0)={&(0x7f00000002c0)={0x1c}, 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)=""/143, &(0x7f0000000340)=0x8f) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000780)={0x0, 0x0, 0x4, 'queue0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:34:48 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") listen(r0, 0x4000000020000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000006400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 15:34:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x1}, {{@in=@dev, 0x0, 0x6c}, 0x0, @in6=@ipv4={[], [], @multicast2}}]}]}, 0x13c}}, 0x0) 15:34:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x24, &(0x7f0000000000), 0x20a1562f) 15:34:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x1}, {{@in=@dev, 0x0, 0x6c}, 0x0, @in6=@ipv4={[], [], @multicast2}}]}]}, 0x13c}}, 0x0) 15:34:49 executing program 0: keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="3cdd8b59a35461fc70d580b683f8cb9fcd998e7ca062f51b676edced57a471198b4e083fbdfda66d34cb29b1194ac30e4fc6b9c8e7f3945f726fd98397a58890a57e6b383ab672988b82bc28b38550c25c88b46571428bdd31d9f9813fd1eba1e3732d1b82555dbd64c099476b94eff3dd16b28d01044aa0dff3f01f28dd73f1fd10d9da32aef82878c533ed729e34bf2cc64a15128a1ce8bd711eb01c030f277dcc4f91320af05476062f9db7d240a18f88a6a368a9d2311acbfd419dc4669bacfcb8fb0eedebf3d4904e5752de519c0fb85309821576e78e58907f4bbf85bd", 0xe0}, {&(0x7f0000000140)="7985e8b1e46b7d4c327f35303e1361f69fd05702c9210000c3409d3ce62118d10a26dbe5d80ce35b94a229b2fbb268b6b56c6345acb189164103153fba01edeefdd46348b92261bf0386785ec61a2e2779344a372cf5ee93ec58814f45e1f16af9e67b5622bd70d869506bba64a61c59d553c5bae3c5b2ca16171a1a5173f86002d613b084ea8e49476de567a3daf859595cf3a6f8070843a0a6eb9f4c3e19c308e87e901f2bf1b643984d0f0c6dabeb8871c17ba62077ab88e36861c0e0", 0xfffffffffffffd87}, {&(0x7f0000000200)="a57b195644418ab55f46634e0c2fc3e781032ed5d483224acc3b45dbf67ecc2644d76b0887a3ded9beb6edd6806544d253241b7773b28dfa8e89f4dbe4ac89892a8fd447c1a73aa0602210c243826fd63f469a267fa7d2cb8861739a67c56a1517c631b1c298166899cec1d6fcc8ce761e9d5e61c091bf22e015b6fbf204789addceaa", 0x83}], 0x230, 0x0) 15:34:49 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x24, &(0x7f0000000000), 0x20a1562f) 15:34:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000200)={0x0, 0x17d287759b1cd2, 0x0, 0x0, &(0x7f0000000080)=[{}, {}, {}]}) 15:34:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x1}, {{@in=@dev, 0x0, 0x6c}, 0x0, @in6=@ipv4={[], [], @multicast2}}]}]}, 0x13c}}, 0x0) 15:34:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'veth0_to_bridge\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000080)) 15:34:55 executing program 3: futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa1f40001) 15:34:55 executing program 5: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x2d, &(0x7f00000000c0)) rt_sigqueueinfo(r0, 0x23, &(0x7f0000000000)={0x0, 0x0, 0xffffffff}) 15:34:55 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x24, &(0x7f0000000000), 0x20a1562f) 15:34:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x1}, {{@in=@dev, 0x0, 0x6c}, 0x0, @in6=@ipv4={[], [], @multicast2}}]}]}, 0x13c}}, 0x0) 15:34:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 15:34:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000080)) 15:34:56 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x24, &(0x7f0000000000), 0x20a1562f) 15:34:56 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:34:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00\x1c\x83\xa4\x13+\v\xcef\xc8\xe0O\xc7\xaa\xc5q\x8d\xe3\x1c\x9al\xca8%\xe0(\xa0Si\b\xa2\xe3\x82\x18\xd72\xad)\x00T\xf9\x12\xf6n2d\x92\xaf\xa4\xae?U\nv\xfa,\xc9\x10O\xf1D\xceEP,6\xfd~g\x9b\xc9\xe8') lseek(r2, 0x0, 0x2) 15:34:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x5000aea5, &(0x7f00000000c0)) 15:34:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 15:34:56 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x6d27}}) 15:35:00 executing program 4: unshare(0x2000400) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)) 15:35:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00\x1c\x83\xa4\x13+\v\xcef\xc8\xe0O\xc7\xaa\xc5q\x8d\xe3\x1c\x9al\xca8%\xe0(\xa0Si\b\xa2\xe3\x82\x18\xd72\xad)\x00T\xf9\x12\xf6n2d\x92\xaf\xa4\xae?U\nv\xfa,\xc9\x10O\xf1D\xceEP,6\xfd~g\x9b\xc9\xe8') lseek(r2, 0x0, 0x2) 15:35:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 15:35:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x71, 0x48, 0x1c, 0x400000000010, 0x1058, 0x631, 0x16c7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcb, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0x8f}}]}}]}}]}}, 0x0) 15:35:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_CROP(r1, 0xc01456b8, &(0x7f0000000040)={0x0, {0x14, 0x14, 0x50aebab6}}) 15:35:00 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00\x06\"\xce[\x94:\xc1F\xd4\xb7^\v\x1e;\xed\xc1\xe9\xd0R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f00000008c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\x01\x88\x1f\xfd\xb8\x99\x9c\x19\xb4\xac'], &(0x7f0000000080)=[&(0x7f0000000540)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9.%\xd1\xec\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa4\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4B\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\x95\xdb\x052\xbf\xa8#\x83\a\t\xcb\x04\x1f\x1e8\xe2\xa11\x8f\xbe\xe4o\xaf\xe6\xb2z\x11\xa9\xae\xaa\xc2Wi\xa8\x9aQ7\xea\x1b\x02\xf0\x82~=\x017\xa8\xaaF\xe6\x80t\xd8\xc7\xff\x9f\aT\xc4\x94\x9a\xe9\ty\x16)\x9b>\xca;\xf4\x94\x8a\x9f{a\xe0\x86\xf0\xffp\xfcXs\xf1F\x9a\xab\xf4\xf0\x80\x1e\x9cA\x95X\xf9\x10@\xa4\x89gp;\t\b\xa7\x87n\xc7\x93\x9e\x80!R:N\x82\x00'/597, &(0x7f0000001480)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001040)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000100)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xe1b|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5\n\x9f\xeb\xebt\xc3l\xf2\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xf9H\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]\x80\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1d\xa8\x9f\xcaxccU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xd2@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06j\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9\xd6\xde\x93\xc4\xb9G\xf2\xef\xc3\x0f~\x1c\xddBJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x0fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa4X\xc2\xd5QY=8\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$i\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb2\x91\xa1\xd4\xf36\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xb4\t\xe5PJ\xdb\xb7X\x13e\x8fM\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\x031\x00\x00\x00\x00\x00\x00\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3h\xdbx\x85\xb7\xa3U[\xd0\x9el\r$\xbf9\"', &(0x7f0000001680)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xe1b|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5\n\x9f\xeb\xebt\xc3l\xf2\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xf9H\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]\x80\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1d\xa8\x9f\xcaxccU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xd2@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06j\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\x00', &(0x7f0000001a80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4B\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4']) [ 3230.823552][T12379] usb 1-1: config 0 has an invalid interface number: 203 but max is 0 [ 3230.832056][T12379] usb 1-1: config 0 has no interface number 0 [ 3230.838529][T12379] usb 1-1: New USB device found, idVendor=1058, idProduct=0631, bcdDevice=16.c7 [ 3230.849134][T12379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3230.883935][T12379] usb 1-1: config 0 descriptor?? [ 3230.927098][T12379] usb 1-1: This Realtek USB WiFi dongle (0x1058:0x0631) is untested! [ 3230.936044][T12379] usb 1-1: Please report results to Jes.Sorensen@gmail.com [ 3231.183154][T12379] usb 1-1: Unsupported USB TX end-points [ 3231.188903][T12379] usb 1-1: Fatal - failed to identify chip [ 3231.195392][T12379] rtl8xxxu: probe of 1-1:0.203 failed with error -524 [ 3231.219822][T12379] usb 1-1: USB disconnect, device number 37 15:35:06 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10fffc) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) lseek(r0, 0xfffffffffffffffd, 0x1) 15:35:06 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0x0, &(0x7f0000000000)) 15:35:06 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000003fc0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x80003) 15:35:06 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x9b000}], 0x1, 0x0) 15:35:06 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x9b000}], 0x1, 0x0) 15:35:06 executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 15:35:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)}], 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x1) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_usb_connect(0x0, 0xa1, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xad, 0x8, 0x75, 0x10, 0x573, 0x4d21, 0x8391, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x2, 0xe1, 0xa7, 0xdf, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x83, 0x11}}]}}]}}]}}, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) 15:35:06 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000000e40)=[{{0x0, 0x170, 0x0}}, {{&(0x7f00000000c0)=@tipc=@name, 0xd, 0x0}}], 0x2, 0x101d0) 15:35:07 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x9b000}], 0x1, 0x0) 15:35:07 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x9b000}], 0x1, 0x0) 15:35:07 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000003fc0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x80003) 15:35:07 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000040086000a0002000a0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) [ 3237.277295][T29297] bridge: RTM_NEWNEIGH with invalid state 0x4 15:35:12 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x48, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x4000], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x608], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x5, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @loopback, [@dstopts={0x5, 0x1, [], [@jumbo, @ra]}]}}}}}}}, 0x0) 15:35:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000140)=0x0) close(r0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)) 15:35:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x24, 0x0, &(0x7f000095dffc)) 15:35:12 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x9b000}], 0x1, 0x0) 15:35:12 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000003fc0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x80003) 15:35:12 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x9b000}], 0x1, 0x0) 15:35:12 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001680)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000014c0)=0x200000000) write$vnet(r0, &(0x7f0000000280)={0x1, {&(0x7f00000000c0)=""/104, 0x68, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000200)={0x1, {&(0x7f0000001980)=""/24, 0x18, 0x0, 0x0, 0x2}}, 0x68) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="11dca50d5e0bcfe47bf070") dup2(r1, r0) 15:35:13 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000003fc0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x80003) 15:35:13 executing program 1: unshare(0x400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) bind$unix(r0, &(0x7f0000000300)=@abs={0x1}, 0x6e) 15:35:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x7c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:35:13 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000b42d87402e5286dd6006f52600303a00fe8000000000000000000000000000ffff0200000000000000000000000000018300907800000000600a07ec00000000fe80"], 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES64=r0], 0xfed3) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 15:35:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x50, 0x4, 0x8, 0x319, 0x0, 0x0, {}, [@nested={0x8, 0x2, [@generic="cf"]}, @typed={0x34, 0x3, @str='/eyringeth0vmnet1cgroupppp1[eth0vboxnet1user\x00'}]}, 0x50}}, 0x0) [ 3243.550665][T29548] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 3243.559074][T29548] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 15:35:16 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x8403d1c1554c4d56) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet6(0xa, 0x1000000000003, 0x4) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f00008c3000/0x1000)=nil, 0x1000) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mlock(&(0x7f00007ad000/0x1000)=nil, 0x1000) mbind(&(0x7f00005e6000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x2) 15:35:16 executing program 1: unshare(0x2000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0xd004, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 15:35:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380), 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x200000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50bd0b94a4956448cd4144cb88abeba582dc0a71367dc57a20001f62408fdffc7ef067966df29d18a575068d2df00000000000000000000001000", "81c7d401e1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) 15:35:16 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ftruncate(r0, 0x3f) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10001, 0x5}) lseek(r0, 0x0, 0x80000000000003) 15:35:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'eql\x00', 0x43732e5398416f1a}) r1 = memfd_create(&(0x7f0000000340)='/dev/net/tun\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0xa3}, 0x2e8) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)) 15:35:16 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000380)={{0x2, 0x0, @multicast2}, {0x0, @dev}, 0x0, {0x2, 0x0, @loopback}, 'team0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x7}, 0x269) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x6}) 15:35:17 executing program 1: pipe2(&(0x7f0000000080), 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)=""/143, &(0x7f0000000340)=0x8f) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:35:17 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf, 0x0, &(0x7f0000000000)) 15:35:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) unshare(0x8000400) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x20, 0xa9, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x4}, 0x3c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 15:35:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 15:35:17 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5a, 0x3a, 0x35, 0x8, 0x742, 0x2009, 0x5ee9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf9, 0x0, 0x2, 0x75, 0xbf, 0x88, 0x0, [], [{{0x9, 0x5, 0x7, 0x2}}, {{0x9, 0x5, 0x8c}}]}}]}}]}}, 0x0) [ 3247.433729][T30071] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 15:35:17 executing program 0: mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x2a, 0x4, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1}, {0x0, 0x989680}}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffdac}, 0x8, 0x0) read(r3, &(0x7f0000000080)=""/128, 0xae3f1a6) [ 3247.863188][T12808] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 3248.113289][T12808] usb 5-1: Using ep0 maxpacket: 8 [ 3248.243345][T12808] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 3248.251800][T12808] usb 5-1: config 0 has no interface number 0 [ 3248.258229][T12808] usb 5-1: config 0 interface 249 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 3248.268561][T12808] usb 5-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=5e.e9 [ 3248.277877][T12808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3248.287629][T12808] usb 5-1: config 0 descriptor?? [ 3248.338752][T12808] HFC-S_USB: probe of 5-1:0.249 failed with error -5 [ 3248.535921][T12808] usb 5-1: USB disconnect, device number 9 [ 3249.323090][T12808] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 3249.572933][T12808] usb 5-1: Using ep0 maxpacket: 8 [ 3249.693050][T12808] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 3249.701444][T12808] usb 5-1: config 0 has no interface number 0 [ 3249.707915][T12808] usb 5-1: config 0 interface 249 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 3249.718110][T12808] usb 5-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=5e.e9 [ 3249.727742][T12808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3249.737299][T12808] usb 5-1: config 0 descriptor?? [ 3249.778399][T12808] HFC-S_USB: probe of 5-1:0.249 failed with error -5 [ 3249.975001][T12808] usb 5-1: USB disconnect, device number 10 15:35:24 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x8403d1c1554c4d56) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet6(0xa, 0x1000000000003, 0x4) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f00008c3000/0x1000)=nil, 0x1000) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mlock(&(0x7f00007ad000/0x1000)=nil, 0x1000) mbind(&(0x7f00005e6000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x2) 15:35:24 executing program 1: pipe2(&(0x7f0000000080), 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)=""/143, &(0x7f0000000340)=0x8f) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:35:24 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 15:35:24 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/6, 0x6}], 0x1, 0x0) 15:35:24 executing program 2: rseq(0x0, 0x0, 0x1, 0x0) 15:35:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_names\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x4000) 15:35:24 executing program 2: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3f) ptrace$cont(0x18, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:35:24 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x40) 15:35:24 executing program 0: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:35:24 executing program 1: pipe2(&(0x7f0000000080), 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)=""/143, &(0x7f0000000340)=0x8f) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:35:24 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x0) unshare(0x20400) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x810c5701, 0x0) 15:35:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) 15:35:28 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x8403d1c1554c4d56) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet6(0xa, 0x1000000000003, 0x4) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f00008c3000/0x1000)=nil, 0x1000) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mlock(&(0x7f00007ad000/0x1000)=nil, 0x1000) mbind(&(0x7f00005e6000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x2) 15:35:28 executing program 0: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:35:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, 0x0, 0x2000, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x717000) 15:35:28 executing program 1: pipe2(&(0x7f0000000080), 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)=""/143, &(0x7f0000000340)=0x8f) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:35:28 executing program 5: capset(&(0x7f0000f0fffa)={0x19980330}, &(0x7f00008e7000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="208175611adafb8600dbdf2d20c401e0"}, 0x14) 15:35:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x72109c5fef5d34d3) r3 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)={0x0, r3}) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) fcntl$notify(r2, 0xa, 0x34) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r1, r4) 15:35:28 executing program 0: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:35:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x0, @remote}], 0x16) 15:35:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:35:28 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xba, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 15:35:28 executing program 0: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 15:35:28 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 15:35:34 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff03c}, {0x80000006}]}, 0x10) 15:35:34 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x8403d1c1554c4d56) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet6(0xa, 0x1000000000003, 0x4) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f00008c3000/0x1000)=nil, 0x1000) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mlock(&(0x7f00007ad000/0x1000)=nil, 0x1000) mbind(&(0x7f00005e6000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x2) 15:35:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r2, 0x2000) 15:35:34 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0900000001000000000d000000000000a0440a32e9cd1c14"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "461759009e050718"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3, 0xfffffffffffffffd, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "941f203c4eb816da3024ca8a4a8bcf1682157e0ab16cd708a7f182fe23e481020bf55a8fe1614535ae8c893b7e2f563e01cbf0411529a8754ec73988a63f94df"}}, 0x80}}, 0x0) 15:35:34 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x2406489c) 15:35:34 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) socketpair$unix(0x1, 0x8000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)) 15:35:35 executing program 2: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40286608, &(0x7f0000000000)) [ 3264.911383][T31099] x86/PAT: syz-executor.5:31099 map pfn RAM range req write-combining for [mem 0x1adc86000-0x1adc86fff], got write-back 15:35:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x18, 0x35, 0x7, 0x0, 0x0, {0x3801, 0x3}, [@nested={0x4}]}, 0x18}}, 0x0) r1 = socket(0x10, 0x80002, 0x8000000010) sendmmsg$alg(r1, &(0x7f0000000080), 0x492492492492751, 0x0) 15:35:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x25a, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xffffff86, 0xa}}}}}, 0x0) 15:35:35 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0900000001000000000d000000000000a0440a32e9cd1c14"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "461759009e050718"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3, 0xfffffffffffffffd, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "941f203c4eb816da3024ca8a4a8bcf1682157e0ab16cd708a7f182fe23e481020bf55a8fe1614535ae8c893b7e2f563e01cbf0411529a8754ec73988a63f94df"}}, 0x80}}, 0x0) 15:35:35 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe0, 0x6e, 0x2e, 0x8, 0x5ac, 0x249, 0xce1c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc4, 0x0, 0x0, 0x3, 0xdb, 0x2}}]}}]}}, 0x0) 15:35:35 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0900000001000000000d000000000000a0440a32e9cd1c14"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "461759009e050718"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3, 0xfffffffffffffffd, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "941f203c4eb816da3024ca8a4a8bcf1682157e0ab16cd708a7f182fe23e481020bf55a8fe1614535ae8c893b7e2f563e01cbf0411529a8754ec73988a63f94df"}}, 0x80}}, 0x0) 15:35:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r6, {}, {}, {0x3}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x14, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x106a}, @TCA_TCINDEX_MASK={0x8}]}}]}, 0x44}}, 0x0) [ 3265.703798][T12808] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 3265.953040][T12808] usb 6-1: Using ep0 maxpacket: 8 [ 3266.093267][T12808] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 3266.101751][T12808] usb 6-1: config 0 has no interface number 0 [ 3266.108198][T12808] usb 6-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=ce.1c [ 3266.117400][T12808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3266.127132][T12808] usb 6-1: config 0 descriptor?? [ 3266.168598][T12808] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.196/input/input328 [ 3266.366027][T12379] usb 6-1: USB disconnect, device number 48 [ 3267.132983][T12808] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 3267.373170][T12808] usb 6-1: Using ep0 maxpacket: 8 [ 3267.503289][T12808] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 3267.511665][T12808] usb 6-1: config 0 has no interface number 0 [ 3267.518046][T12808] usb 6-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=ce.1c [ 3267.527240][T12808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3267.536775][T12808] usb 6-1: config 0 descriptor?? [ 3267.589228][T12808] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.196/input/input329 [ 3267.801528][T12379] usb 6-1: USB disconnect, device number 49 15:35:41 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0900000001000000000d000000000000a0440a32e9cd1c14"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "461759009e050718"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3, 0xfffffffffffffffd, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "941f203c4eb816da3024ca8a4a8bcf1682157e0ab16cd708a7f182fe23e481020bf55a8fe1614535ae8c893b7e2f563e01cbf0411529a8754ec73988a63f94df"}}, 0x80}}, 0x0) 15:35:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000540)="191217", 0x3}], 0x1}}], 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:35:41 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fstat(r0, &(0x7f00000000c0)) 15:35:41 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa5, 0x72, 0x3e, 0x10, 0xc72, 0x13, 0xdcd6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x1, 0xf8, 0xdd, 0xa6, 0x0, [], [{{0x9, 0x5, 0x3}}]}}]}}]}}, 0x0) 15:35:41 executing program 5: rt_sigprocmask(0x1, &(0x7f0000000140), &(0x7f0000003ec0), 0x8) 15:35:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000140)=""/4096) 15:35:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x64b3cb7426d54726) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000f46000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff02000000000000000000000000000100"/400], 0x190) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/219, 0xdb}], 0x1) sendfile(r1, r2, 0x0, 0xff) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000200)=""/181, 0xb5}], 0x1) 15:35:41 executing program 5: rt_sigprocmask(0x1, &(0x7f0000000140), &(0x7f0000003ec0), 0x8) [ 3271.353469][T31556] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 15:35:41 executing program 2: r0 = socket$inet(0x2, 0xa, 0x8) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x20, 0x4) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500002414e054e62cfc4376ffffffffffffffff000000df03ab00000000000000a229965d98b03dfa7e6ea7afad03e734f792bfec8f469e36c2a12203005d"], 0x0) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) [ 3271.493236][T12379] usb 1-1: new high-speed USB device number 38 using dummy_hcd 15:35:41 executing program 5: rt_sigprocmask(0x1, &(0x7f0000000140), &(0x7f0000003ec0), 0x8) 15:35:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "d7b3d850ee296e57"}}, 0x48}}, 0x0) read(r2, &(0x7f0000000380)=""/101, 0x65) 15:35:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ac00002c000500cf182897f09730af000500000000000000ffc54c1960dbb7d58259483533a055a653b4a421556b3d5df500", 0x39}], 0x1}, 0x0) [ 3271.732998][T12379] usb 1-1: Using ep0 maxpacket: 16 15:35:41 executing program 5: rt_sigprocmask(0x1, &(0x7f0000000140), &(0x7f0000003ec0), 0x8) 15:35:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000140)={0x1}) 15:35:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3271.853638][T12379] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 3271.861858][T12379] usb 1-1: config 0 has no interface number 0 [ 3271.868187][T12379] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=dc.d6 [ 3271.877418][T12379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3271.975906][T12379] usb 1-1: config 0 descriptor?? [ 3272.233640][T12379] peak_usb 1-1:0.9 can0: unable to request usb[type=0 value=1] err=-71 [ 3272.242368][T12379] peak_usb 1-1:0.9: unable to read PCAN-Chip USB firmware info (err -71) [ 3272.294787][T12379] peak_usb: probe of 1-1:0.9 failed with error -71 [ 3272.316886][T12379] usb 1-1: USB disconnect, device number 38 [ 3272.995254][T12379] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 3273.242907][T12379] usb 1-1: Using ep0 maxpacket: 16 [ 3273.363127][T12379] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 3273.371248][T12379] usb 1-1: config 0 has no interface number 0 [ 3273.377643][T12379] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=dc.d6 [ 3273.387286][T12379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3273.398738][T12379] usb 1-1: config 0 descriptor?? [ 3273.663387][T12379] peak_usb 1-1:0.9 can0: unable to request usb[type=0 value=1] err=-71 [ 3273.671877][T12379] peak_usb 1-1:0.9: unable to read PCAN-Chip USB firmware info (err -71) [ 3273.747334][T12379] peak_usb: probe of 1-1:0.9 failed with error -71 [ 3273.786048][T12379] usb 1-1: USB disconnect, device number 39 15:35:44 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa5, 0x72, 0x3e, 0x10, 0xc72, 0x13, 0xdcd6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x1, 0xf8, 0xdd, 0xa6, 0x0, [], [{{0x9, 0x5, 0x3}}]}}]}}]}}, 0x0) 15:35:44 executing program 2: r0 = socket$inet(0x2, 0xa, 0x8) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x20, 0x4) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500002414e054e62cfc4376ffffffffffffffff000000df03ab00000000000000a229965d98b03dfa7e6ea7afad03e734f792bfec8f469e36c2a12203005d"], 0x0) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) [ 3274.503216][T12808] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 3274.753170][T12808] usb 1-1: Using ep0 maxpacket: 16 [ 3274.873322][T12808] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 3274.881586][T12808] usb 1-1: config 0 has no interface number 0 [ 3274.887964][T12808] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=dc.d6 [ 3274.897107][T12808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3274.907036][T12808] usb 1-1: config 0 descriptor?? [ 3275.173626][T12808] peak_usb 1-1:0.9 can0: unable to request usb[type=0 value=1] err=-71 [ 3275.182215][T12808] peak_usb 1-1:0.9: unable to read PCAN-Chip USB firmware info (err -71) [ 3275.227661][T12808] peak_usb: probe of 1-1:0.9 failed with error -71 [ 3275.255635][T12808] usb 1-1: USB disconnect, device number 40 15:35:46 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="100000400300"/16, 0x10}]) 15:35:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000bfcffc), &(0x7f0000000040)=0xff3b) 15:35:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'\x00\x00\x00\x00\x00\x00\x14\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'syzkaller0\x00', 0x200}) 15:35:46 executing program 4: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/16, 0x4}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)=0x19) clone(0x0, 0x0, 0x0, 0x0, 0x0) 15:35:46 executing program 2: r0 = socket$inet(0x2, 0xa, 0x8) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x20, 0x4) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500002414e054e62cfc4376ffffffffffffffff000000df03ab00000000000000a229965d98b03dfa7e6ea7afad03e734f792bfec8f469e36c2a12203005d"], 0x0) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) 15:35:46 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa5, 0x72, 0x3e, 0x10, 0xc72, 0x13, 0xdcd6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x1, 0xf8, 0xdd, 0xa6, 0x0, [], [{{0x9, 0x5, 0x3}}]}}]}}]}}, 0x0) 15:35:46 executing program 2: r0 = socket$inet(0x2, 0xa, 0x8) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x20, 0x4) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500002414e054e62cfc4376ffffffffffffffff000000df03ab00000000000000a229965d98b03dfa7e6ea7afad03e734f792bfec8f469e36c2a12203005d"], 0x0) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) 15:35:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 15:35:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f00000001c0)=0x0) close(r0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 15:35:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$int_out(r0, 0xa000002285, &(0x7f0000fd3ffc)) 15:35:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x14}]}, 0x30}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000001280)='/dev/vcs\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) setpgid(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 3276.643148][T12808] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 3276.740899][T32172] l2tp_ppp: tunl 4: set debug=464c457f [ 3276.774151][T15773] l2tp_core: tunl 4: closing all sessions... [ 3276.797113][T32180] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3276.805078][T32180] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3276.852910][ C1] l2tp_core: tunl 4: closing... 15:35:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x20, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8}], @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}]}, 0x54}}, 0x0) [ 3276.884187][T12808] usb 1-1: Using ep0 maxpacket: 16 [ 3277.007000][T12808] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 3277.015278][T12808] usb 1-1: config 0 has no interface number 0 [ 3277.021513][T12808] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=dc.d6 [ 3277.030751][T12808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3277.090093][T12808] usb 1-1: config 0 descriptor?? [ 3277.353463][T12808] peak_usb 1-1:0.9 can0: unable to request usb[type=0 value=1] err=-71 [ 3277.362004][T12808] peak_usb 1-1:0.9: unable to read PCAN-Chip USB firmware info (err -71) [ 3277.434445][T12808] peak_usb: probe of 1-1:0.9 failed with error -71 [ 3277.475814][T12808] usb 1-1: USB disconnect, device number 41 15:35:52 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) shutdown(r2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) 15:35:52 executing program 1: r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x3, &(0x7f0000000080)='mqueue\x00', &(0x7f00000000c0)='./file0\x00', r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='mqueue\x00', &(0x7f0000000500)='}selfselfposix_acl_access[&system\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='ppp1[\x10', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='/dev/audio\x00', &(0x7f0000000140)='nodevmd5sum,\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='\\(securityvboxnet1\x00', &(0x7f0000000440)='em0self\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x00', &(0x7f00000002c0)='&@em1trusted\\GPLsecurity}-em1\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r1, r0, 0x0) 15:35:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)) 15:35:52 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20a02, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7f) sendfile(r0, r2, 0x0, 0x800000000024) 15:35:52 executing program 4: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000), &(0x7f0000a8a000)=0x4) 15:35:52 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa5, 0x72, 0x3e, 0x10, 0xc72, 0x13, 0xdcd6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x1, 0xf8, 0xdd, 0xa6, 0x0, [], [{{0x9, 0x5, 0x3}}]}}]}}]}}, 0x0) 15:35:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0214f9f407000904000a00000000000000000000000800020000000000", 0x24) 15:35:53 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x0, &(0x7f0000000a00), &(0x7f0000048000), 0x0) 15:35:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x2000, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0124fc0010000b400c000200053582c137153e370900018004081700d1bd", 0x2e}], 0x1}, 0x0) [ 3283.083000][T12379] usb 1-1: new high-speed USB device number 42 using dummy_hcd 15:35:53 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x9, @pix_mp={0x0, 0x0, 0x32315258}}) 15:35:53 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x18, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) [ 3283.249356][ T398] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 3283.264664][ T398] device  entered promiscuous mode 15:35:53 executing program 1: r0 = socket$kcm(0x10, 0x800000000002, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="2e000000120081aee4050cecff0e00fa108b5bdb4cb904e473730e55cff26d1b060012800d0000005e510bef8d5b", 0x2e}], 0x1}, 0x0) [ 3283.343533][T12379] usb 1-1: Using ep0 maxpacket: 16 [ 3283.475999][T12379] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 3283.484577][T12379] usb 1-1: config 0 has no interface number 0 [ 3283.490833][T12379] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=dc.d6 [ 3283.500001][T12379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3283.541799][T12379] usb 1-1: config 0 descriptor?? [ 3283.813686][T12379] peak_usb 1-1:0.9 can0: unable to request usb[type=0 value=1] err=-71 [ 3283.822184][T12379] peak_usb 1-1:0.9: unable to read PCAN-Chip USB firmware info (err -71) [ 3283.887706][T12379] peak_usb: probe of 1-1:0.9 failed with error -71 [ 3283.927090][T12379] usb 1-1: USB disconnect, device number 42 15:36:00 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) bind$inet6(r0, &(0x7f0000012000)={0xa, 0x20000000020003, 0x0, @mcast1, 0x4}, 0x1c) 15:36:00 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000000702000020feffff7a0af0fff8ffffff79a4f0ff00000000b70600000018d1fe2d640500000000004504000000ffffff8407000000000000b7040000100000207a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) 15:36:00 executing program 4: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) close(r0) 15:36:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) dup2(r3, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r4) 15:36:00 executing program 0: pipe(&(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 15:36:00 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 15:36:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, r1, 0x18015578e1bfb4ef, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 15:36:00 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd0, 0xa6, 0x8, 0x1209, 0x2323, 0xdfb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0x63, 0x62}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000400)=ANY=[@ANYBLOB="080004000000c84b4b01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0xac, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:36:00 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)=@ll={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400000000000084, 0x0) 15:36:00 executing program 1: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000040)=[{0x2, 0xffffffff}, {0x0, 0x10000000000319}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x7fff, 0x0, 0xff]) 15:36:00 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) io_submit(r2, 0x2000000000000060, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000380)='Y', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r3, 0x0, 0xfffffcee}]) r4 = dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:36:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000080)="200000001a0001027d4800000000a000800000000023", 0xf4) [ 3290.488782][ T835] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3290.553212][T12808] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 3290.793188][T12808] usb 6-1: Using ep0 maxpacket: 8 [ 3290.913193][T12808] usb 6-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice= d.fb [ 3290.922695][T12808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3290.932654][T12808] usb 6-1: config 0 descriptor?? [ 3291.413112][T12808] gs_usb 6-1:0.0: Configuring for 2 interfaces [ 3291.855176][T12808] gs_usb 6-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 3291.924329][T12808] gs_usb: probe of 6-1:0.0 failed with error -71 [ 3291.961156][T12808] usb 6-1: USB disconnect, device number 50 [ 3292.613063][T12379] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 3292.852932][T12379] usb 6-1: Using ep0 maxpacket: 8 [ 3292.973110][T12379] usb 6-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice= d.fb [ 3292.982328][T12379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3292.992290][T12379] usb 6-1: config 0 descriptor?? [ 3293.293212][T12379] gs_usb 6-1:0.0: Couldn't get device config: (err=-71) [ 3293.300376][T12379] gs_usb: probe of 6-1:0.0 failed with error -71 [ 3293.326013][T12379] usb 6-1: USB disconnect, device number 51 15:36:06 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x2, 0x2b, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 15:36:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8921, &(0x7f0000000140)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @loopback}}) 15:36:06 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setpriority(0x1, 0x0, 0x0) 15:36:06 executing program 4: clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getsig(0x2, r0, 0x0, 0x0) 15:36:06 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x100000000011, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff}, 0x0, 0x0) 15:36:06 executing program 5: rt_sigaction(0x40, &(0x7f0000000080)={&(0x7f0000000040)="c4437d399ffeefffffff0f01d9c462cd019ea6000000416a24470fd448d3440f0f44dbd2bf40eff3470f58f6f044810709000000672666430f1ee3", {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/68, 0xfed1}], 0x1, 0x0) 15:36:06 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x4, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x2, r1}, 0x10) 15:36:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x0, 0x205211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x3}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:36:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001680)="a436ed80394e8b7cc42d2a694085f200c21d40e98e9463bcff20ee7cc54c6d8bf6c251a6b39ce5c3ee59608be2fb41456ac6b539562f3d1905a9ce858f096036a7e913a93fb15accade68b37762e12a7", 0x50}, {&(0x7f0000001800)="8ac71452860ed9350e2f0ae2ea98eadeef9d6dea150013fa43eb1898d9f429cdc4d58cb19ea51b145eda64764592f2e9f6f9bb9f4674a2776647a80b8e49f07628a78ee2bfaa5e4f76a121096f95ae9f6227cb14050ebc11c77635b3fa0a522d8cc686f5c08febb8d7560836cb5fb20fa5cf3bc473a553103d320d7ce95a5c4b327fdc153427df95c8d279bcf83634a2ef9f144656834e7f571546c88ca7540050f4ac55d748a6d6429a9e7f7c9cfce7dc7e37feaf989bc1b4e3001cb78f6a97b4ad4367eabd025de52abc3aba562ea0f978bc55376f0bd0e1149d822e22dc165791694bdb4dd160bd2ab67e32f5bd7bdd98ec359b", 0xf5}, {&(0x7f0000001900)="f029a7b06b1704e112dd99a56f7305be766618afa284ed77c7cb9b7e0aa5e818b9f93ab5057d773040a4d79bdc105bf915fd36057f5c9881e712d685339d176b6d50ab19881e25d25a0719b6ba1dc202ea1a4e4125f03812b243529dca088d3fb8df0751de4bf70e7d4e797a11f3bc031207301dba3923df2b6b9b5d6a847344fcd5c460b8258d8d406e106c0a52b48ff639b0c221420327aa98a2fbcf6ad75276dc6578a916c28e241ba96000abad18b7320d3904bf715e3dfc948e6fe02c492a7c52befb39c6accae15e3f5ba5e246d5766487e7d3ef0c3512", 0xda}, {&(0x7f0000001700)='>', 0x1}], 0x4}}], 0x1, 0x0) 15:36:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x4000000000007ff) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x18916c9}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TCSETAF(r2, 0x541a, &(0x7f0000000240)) 15:36:06 executing program 1: msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/123}, 0x83, 0x3, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x3}, 0x8, 0x0) 15:36:06 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcf, 0xd3, 0xee, 0x8, 0x1618, 0x9116, 0xc6a9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x86, 0x0, 0x0, 0xe4, 0xc0, 0xff}}]}}]}}, 0x0) [ 3297.163366][T12808] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 3297.403141][T12808] usb 1-1: Using ep0 maxpacket: 8 [ 3297.523480][T12808] usb 1-1: config 0 has an invalid interface number: 134 but max is 0 [ 3297.531982][T12808] usb 1-1: config 0 has no interface number 0 [ 3297.538362][T12808] usb 1-1: New USB device found, idVendor=1618, idProduct=9116, bcdDevice=c6.a9 [ 3297.547529][T12808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3297.557197][T12808] usb 1-1: config 0 descriptor?? [ 3297.597136][T12808] rsi_91x: rsi_probe: Initialized os intf ops [ 3297.803913][T12808] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 3297.813616][T12808] rsi_91x: rsi_probe: Failed in probe...Exiting [ 3297.819976][T12808] RSI-USB WLAN: probe of 1-1:0.134 failed with error -71 [ 3297.831729][T12808] usb 1-1: USB disconnect, device number 43 [ 3298.563058][T12808] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 3298.803076][T12808] usb 1-1: Using ep0 maxpacket: 8 [ 3298.923264][T12808] usb 1-1: config 0 has an invalid interface number: 134 but max is 0 [ 3298.931662][T12808] usb 1-1: config 0 has no interface number 0 [ 3298.938136][T12808] usb 1-1: New USB device found, idVendor=1618, idProduct=9116, bcdDevice=c6.a9 [ 3298.947474][T12808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3298.956954][T12808] usb 1-1: config 0 descriptor?? [ 3298.996687][T12808] rsi_91x: rsi_probe: Initialized os intf ops [ 3299.203781][T12808] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 3299.212678][T12808] rsi_91x: rsi_probe: Failed in probe...Exiting [ 3299.219227][T12808] RSI-USB WLAN: probe of 1-1:0.134 failed with error -71 [ 3299.230617][T12808] usb 1-1: USB disconnect, device number 44 15:36:10 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002740)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}, {&(0x7f0000000340)="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", 0xfb0}, {0x0}], 0x3}, {0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002440)=[@iv={0x18}, @iv={0x18}, @iv={0x18}], 0x48}], 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:36:10 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x2, 0x2b, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 15:36:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f20e06635000001000f22e0660f71d300dadec4c3c5cf600b010500002e660f388209677d00640f1a070f01df65670fc79b00580000", 0x36}], 0xaaaabb8, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:36:10 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xf7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0285628, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000200)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r1, 0x0, 0x0) 15:36:10 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}, 0x220) 15:36:10 executing program 0: syz_usb_connect(0x2, 0x48, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0xc3, 0x92, 0x64, 0x20, 0x8086, 0x181, 0x468f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd8, 0x0, 0x4, 0x13, 0x1a, 0xaa, 0x0, [], [{{0x9, 0x5, 0x8}}, {{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x87}}, {{0x9, 0x5, 0xee73dd15b2b98c8d}}]}}]}}]}}, 0x0) 15:36:10 executing program 5: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x2a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000190000000000000008006c6f00000000000000000000000000007465716e3000009fa3f0cdbc66daee006970365f76746930000000000000000062637366300000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000e2010000100200004002000069700000000000000000000000000000000000000000000000000000000000002000000000000000ac1414bbffffffff000000000000000000062d00000000000000000000000000636f6d6d656e740000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000b5b72e1ec479f8d600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d19c256938a3b919a0a9add4eaa4088500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800"/672]}, 0x318) 15:36:11 executing program 5: r0 = memfd_create(&(0x7f0000000000)='y+H\xdd\xf9\xb6', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="120001800004897db909b06cc3440698b31979fa22bcc8bdd7c9566a9c13d31ce70c482503a2e55a87a23b7a75c1a5db062027b7d3f8934623f7edf3c90986c2863da1e84d626c7f88683f52"], 0x4c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) semtimedop(0x0, &(0x7f0000000240), 0x1df, &(0x7f0000000040)={0x0, 0x1c9c380}) 15:36:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0xf, 0xfffffffffffffffd, 0x8b78) 15:36:11 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002740)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}, {&(0x7f0000000340)="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", 0xfb0}, {0x0}], 0x3}, {0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002440)=[@iv={0x18}, @iv={0x18}, @iv={0x18}], 0x48}], 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 3300.963653][T12808] usb 1-1: new full-speed USB device number 45 using dummy_hcd 15:36:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000180)) 15:36:11 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RSTATu(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x1f4}) 15:36:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x30, 0x2, 0x2, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x2, @pid}, @typed={0x14, 0x7, @ipv6=@mcast2}]}, 0x30}}, 0x0) [ 3301.487766][ T2381] netlink: 'syz-executor.5': attribute type 7 has an invalid length. [ 3301.496753][ T2381] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3301.547672][T12808] usb 1-1: config 0 has an invalid interface number: 216 but max is 0 [ 3301.556084][T12808] usb 1-1: config 0 has no interface number 0 [ 3301.562300][T12808] usb 1-1: New USB device found, idVendor=8086, idProduct=0181, bcdDevice=46.8f [ 3301.571509][T12808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3301.605713][T12808] usb 1-1: config 0 descriptor?? [ 3301.655405][T12808] i2400m_usb 1-1:0.216: device not connected as high speed [ 3301.665676][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.674901][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.683330][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.691678][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.700073][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.708464][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.717093][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.725615][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.734132][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.742454][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.750867][T12808] i2400m_usb 1-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3301.761679][T12808] i2400m_usb 1-1:0.216: warm reset failed (-8); trying USB reset [ 3301.769662][T12808] i2400m_usb 1-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 3301.777994][T12808] i2400m_usb 1-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 3301.788503][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.796969][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.805485][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.814026][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.822409][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.830892][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.839370][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.847756][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.856349][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.864787][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.873181][T12808] i2400m_usb 1-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3301.873274][T12808] i2400m_usb 1-1:0.216: warm reset failed (-8); trying USB reset [ 3301.891820][T12808] i2400m_usb 1-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 3301.900164][T12808] i2400m_usb 1-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 3301.910676][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.918988][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.927530][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.935947][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.944401][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.952951][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.961396][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.969796][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.978208][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.986779][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3301.995262][T12808] i2400m_usb 1-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3302.006229][T12808] i2400m_usb 1-1:0.216: warm reset failed (-8); trying USB reset [ 3302.014163][T12808] i2400m_usb 1-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 3302.022465][T12808] i2400m_usb 1-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 3302.032662][T12808] i2400m_usb 1-1:0.216: Timed out waiting for reboot ack [ 3302.039835][T12808] i2400m_usb 1-1:0.216: read mac addr: bootrom init failed: -110 [ 3302.047790][T12808] i2400m_usb 1-1:0.216: cannot setup device: -110 [ 3302.055269][T12808] i2400m_usb: probe of 1-1:0.216 failed with error -110 [ 3302.068364][T12808] usb 1-1: USB disconnect, device number 45 [ 3302.683011][T12808] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 3303.063330][T12808] usb 1-1: config 0 has an invalid interface number: 216 but max is 0 [ 3303.071888][T12808] usb 1-1: config 0 has no interface number 0 [ 3303.078219][T12808] usb 1-1: New USB device found, idVendor=8086, idProduct=0181, bcdDevice=46.8f [ 3303.087370][T12808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3303.096956][T12808] usb 1-1: config 0 descriptor?? [ 3303.144871][T12808] i2400m_usb 1-1:0.216: device not connected as high speed [ 3303.154211][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.162582][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.171029][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.179494][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.187810][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.196178][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.204659][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.213093][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.221429][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.229869][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.238194][T12808] i2400m_usb 1-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3303.249144][T12808] i2400m_usb 1-1:0.216: warm reset failed (-8); trying USB reset [ 3303.257036][T12808] i2400m_usb 1-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 3303.265404][T12808] i2400m_usb 1-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 3303.275713][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.284090][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.292362][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.300732][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.309055][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.317421][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.325724][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.334134][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.342681][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.351146][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.359507][T12808] i2400m_usb 1-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3303.370522][T12808] i2400m_usb 1-1:0.216: warm reset failed (-8); trying USB reset [ 3303.378492][T12808] i2400m_usb 1-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 3303.386920][T12808] i2400m_usb 1-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 3303.397238][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.405550][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.414039][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.422314][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.430704][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.439009][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.447770][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.456121][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.472079][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.480677][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3303.489171][T12808] i2400m_usb 1-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3303.500192][T12808] i2400m_usb 1-1:0.216: warm reset failed (-8); trying USB reset [ 3303.508038][T12808] i2400m_usb 1-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 3303.516403][T12808] i2400m_usb 1-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 3303.526634][T12808] i2400m_usb 1-1:0.216: Timed out waiting for reboot ack [ 3303.533796][T12808] i2400m_usb 1-1:0.216: read mac addr: bootrom init failed: -110 [ 3303.542879][T12808] i2400m_usb 1-1:0.216: cannot setup device: -110 [ 3303.549551][T12808] i2400m_usb: probe of 1-1:0.216 failed with error -110 [ 3303.568658][T12808] usb 1-1: USB disconnect, device number 46 15:36:14 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002740)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}, {&(0x7f0000000340)="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", 0xfb0}, {0x0}], 0x3}, {0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002440)=[@iv={0x18}, @iv={0x18}, @iv={0x18}], 0x48}], 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:36:14 executing program 0: syz_usb_connect(0x2, 0x48, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0xc3, 0x92, 0x64, 0x20, 0x8086, 0x181, 0x468f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd8, 0x0, 0x4, 0x13, 0x1a, 0xaa, 0x0, [], [{{0x9, 0x5, 0x8}}, {{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x87}}, {{0x9, 0x5, 0xee73dd15b2b98c8d}}]}}]}}]}}, 0x0) 15:36:14 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xf7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0285628, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000200)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r1, 0x0, 0x0) 15:36:14 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xf7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0285628, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000200)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r1, 0x0, 0x0) 15:36:14 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x2, 0x2b, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 15:36:14 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xf7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0285628, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000200)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r1, 0x0, 0x0) 15:36:15 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xf7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0285628, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000200)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r1, 0x0, 0x0) 15:36:15 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xf7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0285628, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000200)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r1, 0x0, 0x0) 15:36:15 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002740)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}, {&(0x7f0000000340)="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", 0xfb0}, {0x0}], 0x3}, {0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002440)=[@iv={0x18}, @iv={0x18}, @iv={0x18}], 0x48}], 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:36:15 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xf7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0285628, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000200)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r1, 0x0, 0x0) 15:36:15 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xf7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0285628, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000200)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r1, 0x0, 0x0) 15:36:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="b702000000000400bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b706000001130a00ad6402000000000045040400010000001704000001130a00b7040000000100006a0af2fe00000000850000001a000000b700000000000000950000000000000063e165cd846a8064d39f33db"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffb}, 0x48) [ 3305.554949][T12808] usb 1-1: new full-speed USB device number 47 using dummy_hcd 15:36:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xf7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0285628, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000200)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r1, 0x0, 0x0) [ 3305.923448][T12808] usb 1-1: config 0 has an invalid interface number: 216 but max is 0 [ 3305.931766][T12808] usb 1-1: config 0 has no interface number 0 [ 3305.938323][T12808] usb 1-1: New USB device found, idVendor=8086, idProduct=0181, bcdDevice=46.8f [ 3305.947806][T12808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3305.957403][T12808] usb 1-1: config 0 descriptor?? [ 3305.994799][T12808] i2400m_usb 1-1:0.216: device not connected as high speed [ 3306.004109][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.012473][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.021061][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.031291][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.039846][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.048916][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.057225][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.065631][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.074139][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.082488][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.090930][T12808] i2400m_usb 1-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3306.101831][T12808] i2400m_usb 1-1:0.216: warm reset failed (-8); trying USB reset [ 3306.109761][T12808] i2400m_usb 1-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 3306.118234][T12808] i2400m_usb 1-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 3306.128582][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.137120][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.145522][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.154061][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.162340][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.170888][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.179482][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.187916][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.196338][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.204789][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.204905][T12808] i2400m_usb 1-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3306.223902][T12808] i2400m_usb 1-1:0.216: warm reset failed (-8); trying USB reset [ 3306.231744][T12808] i2400m_usb 1-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 3306.240223][T12808] i2400m_usb 1-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 3306.250567][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.258946][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.267272][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.275812][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.284292][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.292536][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.300972][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.309711][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.318387][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.326778][T12808] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3306.335226][T12808] i2400m_usb 1-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3306.346056][T12808] i2400m_usb 1-1:0.216: warm reset failed (-8); trying USB reset [ 3306.354123][T12808] i2400m_usb 1-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 3306.362446][T12808] i2400m_usb 1-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 3306.372644][T12808] i2400m_usb 1-1:0.216: Timed out waiting for reboot ack [ 3306.379789][T12808] i2400m_usb 1-1:0.216: read mac addr: bootrom init failed: -110 [ 3306.387751][T12808] i2400m_usb 1-1:0.216: cannot setup device: -110 [ 3306.394486][T12808] i2400m_usb: probe of 1-1:0.216 failed with error -110 [ 3306.426430][T12808] usb 1-1: USB disconnect, device number 47 15:36:21 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"8bbb68e8f03f7f109ce6bbcb8e729e13"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r1, 0x2}}, 0x18) 15:36:21 executing program 0: syz_usb_connect(0x2, 0x48, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0xc3, 0x92, 0x64, 0x20, 0x8086, 0x181, 0x468f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd8, 0x0, 0x4, 0x13, 0x1a, 0xaa, 0x0, [], [{{0x9, 0x5, 0x8}}, {{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x87}}, {{0x9, 0x5, 0xee73dd15b2b98c8d}}]}}]}}]}}, 0x0) 15:36:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x5, 0x10, @ipv4=@multicast1=0x4000300}]}]}, 0x395}}, 0x0) 15:36:21 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x2, 0x2b, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 15:36:21 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xf7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0285628, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000200)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r1, 0x0, 0x0) 15:36:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 3311.308782][ T2663] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. 15:36:21 executing program 2: r0 = io_uring_setup(0xa1, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f00000002c0)=""/104, 0x68}], 0x2) dup3(r1, r0, 0x0) 15:36:21 executing program 4: r0 = syz_usb_connect(0x0, 0x320, &(0x7f0000001f40)={{0x12, 0x1, 0x0, 0xfd, 0x77, 0x89, 0x40, 0xac8, 0xc301, 0x8b4c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0xd6, 0xcb, 0xa4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d00)={0xac, &(0x7f0000001700), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 15:36:21 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000000)={@random="ade3345025fb", @local, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x29, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806]}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "c5771e", 0x0, 0x0, 0x0, @mcast1, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f]}}}}}}}}, 0x0) [ 3311.563196][T12379] usb 1-1: new full-speed USB device number 48 using dummy_hcd 15:36:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000004080501ff0080fffdffff3e8a0000000c00030088ffffff7d0a00010c000200000022ff02f14000"], 0x2c}}, 0x0) 15:36:21 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101842, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000540)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000180)=0x17642c1) write$binfmt_misc(r0, 0x0, 0x0) preadv(r0, &(0x7f0000001640)=[{&(0x7f0000000240)=""/122, 0x7a}], 0x1, 0x0) [ 3311.687921][ T2974] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 3311.696618][ T2974] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 15:36:21 executing program 2: r0 = io_uring_setup(0xa1, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f00000002c0)=""/104, 0x68}], 0x2) dup3(r1, r0, 0x0) [ 3311.785122][T12808] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 3311.923578][T12379] usb 1-1: config 0 has an invalid interface number: 216 but max is 0 [ 3311.931995][T12379] usb 1-1: config 0 has no interface number 0 [ 3311.938507][T12379] usb 1-1: New USB device found, idVendor=8086, idProduct=0181, bcdDevice=46.8f [ 3311.947734][T12379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:36:22 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x289, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x8240, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "a300"}, @main=@item_4={0x3, 0x0, 0x0, "09e8cf03"}, @global=@item_4={0x3, 0x1, 0x0, "7fe52845"}, @local, @global=@item_4={0x3, 0x1, 0x0, "a344820d"}, @main=@item_4={0x3, 0x0, 0x0, "77fdff0f"}, @local=@item_4={0x3, 0x2, 0x0, "a4bd7faa"}, @local=@item_4={0x3, 0x2, 0x2, "5d8c2dda"}]}}, 0x0}, 0x0) [ 3311.982701][T12379] usb 1-1: config 0 descriptor?? [ 3312.036944][T12379] i2400m_usb 1-1:0.216: device not connected as high speed [ 3312.046098][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.054606][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.063455][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.071796][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.080238][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.088797][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.097211][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.105629][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.114080][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.122429][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.130866][T12379] i2400m_usb 1-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3312.141770][T12379] i2400m_usb 1-1:0.216: warm reset failed (-8); trying USB reset [ 3312.150773][T12379] i2400m_usb 1-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 3312.159640][T12379] i2400m_usb 1-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 3312.170076][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.179028][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.187483][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.193287][T12808] usb 5-1: config 0 has an invalid interface number: 22 but max is 0 [ 3312.195900][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.204081][T12808] usb 5-1: config 0 has no interface number 0 [ 3312.212295][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.218507][T12808] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=8b.4c [ 3312.226953][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.235798][T12808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3312.244093][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.260379][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.268806][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.277313][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.285727][T12379] i2400m_usb 1-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3312.296708][T12379] i2400m_usb 1-1:0.216: warm reset failed (-8); trying USB reset [ 3312.297649][T12808] usb 5-1: config 0 descriptor?? [ 3312.305572][T12379] i2400m_usb 1-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 3312.305628][T12379] i2400m_usb 1-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 3312.329341][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.337788][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.346292][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.354700][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.363114][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.371444][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.373364][T12808] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 3312.379913][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.394430][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.402710][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.411145][T12379] i2400m_usb 1-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 3312.419600][T12379] i2400m_usb 1-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 3312.430555][T12379] i2400m_usb 1-1:0.216: warm reset failed (-8); trying USB reset [ 3312.438557][T12379] i2400m_usb 1-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 3312.447032][T12379] i2400m_usb 1-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 3312.457320][T12379] i2400m_usb 1-1:0.216: Timed out waiting for reboot ack [ 3312.464557][T12379] i2400m_usb 1-1:0.216: read mac addr: bootrom init failed: -110 [ 3312.472507][T12379] i2400m_usb 1-1:0.216: cannot setup device: -110 [ 3312.479308][T12379] i2400m_usb: probe of 1-1:0.216 failed with error -110 [ 3312.507686][T12379] usb 1-1: USB disconnect, device number 48 [ 3312.563180][T17582] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 3312.813158][T17582] usb 6-1: Using ep0 maxpacket: 8 [ 3312.933483][T17582] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3312.944788][T17582] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3312.957834][T17582] usb 6-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 3312.967072][T17582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3312.978955][T17582] usb 6-1: config 0 descriptor?? [ 3313.466561][T17582] appleir 0003:05AC:8240.0083: unknown main item tag 0x0 [ 3313.474024][T17582] appleir 0003:05AC:8240.0083: unknown main item tag 0x0 [ 3313.481352][T17582] appleir 0003:05AC:8240.0083: ignoring exceeding usage max [ 3313.493022][T17582] appleir 0003:05AC:8240.0083: No inputs registered, leaving [ 3313.505913][T17582] appleir 0003:05AC:8240.0083: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8240] on usb-dummy_hcd.5-1/input0 [ 3313.663320][T12808] gspca_vc032x: reg_w err -71 [ 3313.668210][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.673826][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.679135][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.684529][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.685198][T12379] usb 6-1: USB disconnect, device number 52 [ 3313.689862][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.701142][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.706603][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.711977][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.717431][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.722855][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.728194][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.733632][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.738974][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.744424][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.749749][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.755309][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.760804][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.766293][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.771644][T12808] gspca_vc032x: I2c Bus Busy Wait 40 [ 3313.777030][T12808] gspca_vc032x: Unknown sensor... [ 3313.782239][T12808] vc032x: probe of 5-1:0.22 failed with error -22 [ 3313.791860][T12808] usb 5-1: USB disconnect, device number 11 [ 3314.423094][T12808] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 3314.473140][T17582] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 3314.743166][T17582] usb 6-1: Using ep0 maxpacket: 8 [ 3314.833418][T12808] usb 5-1: config 0 has an invalid interface number: 22 but max is 0 [ 3314.841674][T12808] usb 5-1: config 0 has no interface number 0 [ 3314.848045][T12808] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=8b.4c [ 3314.857286][T12808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3314.867149][T12808] usb 5-1: config 0 descriptor?? [ 3314.913408][T17582] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3314.924592][T17582] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3314.937594][T17582] usb 6-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 3314.946940][T17582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3314.960853][T12808] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 3314.968279][T17582] usb 6-1: config 0 descriptor?? [ 3315.153660][T12808] gspca_vc032x: reg_w err -71 [ 3315.158459][T12808] ===================================================== [ 3315.165527][T12808] BUG: KMSAN: uninit-value in read_sensor_register+0x4b7/0xd30 [ 3315.173074][T12808] CPU: 0 PID: 12808 Comm: kworker/0:5 Not tainted 5.4.0-rc2+ #0 [ 3315.180701][T12808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3315.190780][T12808] Workqueue: usb_hub_wq hub_event [ 3315.195812][T12808] Call Trace: [ 3315.199104][T12808] dump_stack+0x191/0x1f0 [ 3315.203457][T12808] kmsan_report+0x14e/0x2c0 [ 3315.207981][T12808] __msan_warning+0x73/0xe0 [ 3315.212498][T12808] read_sensor_register+0x4b7/0xd30 [ 3315.217717][T12808] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 3315.223696][T12808] sd_init+0x2cf3/0x4530 [ 3315.227967][T12808] ? sd_config+0x270/0x270 [ 3315.227988][T12808] gspca_dev_probe2+0xe93/0x2230 [ 3315.228031][T12808] gspca_dev_probe+0x346/0x3b0 [ 3315.237401][T12808] sd_probe+0x8d/0xa0 [ 3315.246107][T12808] ? sd_s_ctrl+0xdd0/0xdd0 [ 3315.246128][T12808] usb_probe_interface+0xd19/0x1310 [ 3315.246157][T12808] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 3315.246180][T12808] ? usb_register_driver+0x860/0x860 [ 3315.246197][T12808] really_probe+0xd91/0x1f90 [ 3315.246222][T12808] driver_probe_device+0x1ba/0x510 [ 3315.246266][T12808] __device_attach_driver+0x5b8/0x790 [ 3315.282064][T12808] bus_for_each_drv+0x28e/0x3b0 [ 3315.286927][T12808] ? deferred_probe_work_func+0x400/0x400 [ 3315.292648][T12808] __device_attach+0x489/0x750 [ 3315.297414][T12808] device_initial_probe+0x4a/0x60 [ 3315.302430][T12808] bus_probe_device+0x131/0x390 [ 3315.307292][T12808] device_add+0x25b5/0x2df0 [ 3315.311810][T12808] usb_set_configuration+0x309f/0x3710 [ 3315.317294][T12808] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 3315.323367][T12808] generic_probe+0xe7/0x280 [ 3315.327876][T12808] ? usb_choose_configuration+0xae0/0xae0 [ 3315.333597][T12808] usb_probe_device+0x146/0x200 [ 3315.338452][T12808] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 3315.344353][T12808] ? usb_register_device_driver+0x500/0x500 [ 3315.350260][T12808] really_probe+0xd91/0x1f90 [ 3315.354853][T12808] driver_probe_device+0x1ba/0x510 [ 3315.359969][T12808] __device_attach_driver+0x5b8/0x790 [ 3315.365380][T12808] bus_for_each_drv+0x28e/0x3b0 [ 3315.370238][T12808] ? deferred_probe_work_func+0x400/0x400 [ 3315.375971][T12808] __device_attach+0x489/0x750 [ 3315.380746][T12808] device_initial_probe+0x4a/0x60 [ 3315.385796][T12808] bus_probe_device+0x131/0x390 [ 3315.390651][T12808] device_add+0x25b5/0x2df0 [ 3315.395178][T12808] usb_new_device+0x23e5/0x2fb0 [ 3315.400044][T12808] hub_event+0x581d/0x72f0 [ 3315.404676][T12808] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 3315.410564][T12808] ? led_work+0x720/0x720 [ 3315.414893][T12808] ? led_work+0x720/0x720 [ 3315.419226][T12808] process_one_work+0x1572/0x1ef0 [ 3315.424269][T12808] worker_thread+0x111b/0x2460 [ 3315.429050][T12808] kthread+0x4b5/0x4f0 [ 3315.433116][T12808] ? process_one_work+0x1ef0/0x1ef0 [ 3315.438321][T12808] ? kthread_blkcg+0xf0/0xf0 [ 3315.442912][T12808] ret_from_fork+0x35/0x40 [ 3315.447324][T12808] [ 3315.449640][T12808] Uninit was created at: [ 3315.453879][T12808] kmsan_internal_poison_shadow+0x60/0x120 [ 3315.459687][T12808] kmsan_slab_alloc+0xaa/0x120 [ 3315.464453][T12808] kmem_cache_alloc_trace+0x8c5/0xd20 [ 3315.469858][T12808] gspca_dev_probe2+0x30d/0x2230 [ 3315.474805][T12808] gspca_dev_probe+0x346/0x3b0 [ 3315.479583][T12808] sd_probe+0x8d/0xa0 [ 3315.483560][T12808] usb_probe_interface+0xd19/0x1310 [ 3315.488753][T12808] really_probe+0xd91/0x1f90 [ 3315.493335][T12808] driver_probe_device+0x1ba/0x510 [ 3315.498441][T12808] __device_attach_driver+0x5b8/0x790 [ 3315.503805][T12808] bus_for_each_drv+0x28e/0x3b0 [ 3315.508648][T12808] __device_attach+0x489/0x750 [ 3315.513403][T12808] device_initial_probe+0x4a/0x60 [ 3315.518420][T12808] bus_probe_device+0x131/0x390 [ 3315.523261][T12808] device_add+0x25b5/0x2df0 [ 3315.527759][T12808] usb_set_configuration+0x309f/0x3710 [ 3315.533228][T12808] generic_probe+0xe7/0x280 [ 3315.537732][T12808] usb_probe_device+0x146/0x200 [ 3315.542584][T12808] really_probe+0xd91/0x1f90 [ 3315.547173][T12808] driver_probe_device+0x1ba/0x510 [ 3315.552438][T12808] __device_attach_driver+0x5b8/0x790 [ 3315.557822][T12808] bus_for_each_drv+0x28e/0x3b0 [ 3315.562678][T12808] __device_attach+0x489/0x750 [ 3315.567611][T12808] device_initial_probe+0x4a/0x60 [ 3315.572656][T12808] bus_probe_device+0x131/0x390 [ 3315.577501][T12808] device_add+0x25b5/0x2df0 [ 3315.581997][T12808] usb_new_device+0x23e5/0x2fb0 [ 3315.586841][T12808] hub_event+0x581d/0x72f0 [ 3315.591254][T12808] process_one_work+0x1572/0x1ef0 [ 3315.596385][T12808] worker_thread+0x111b/0x2460 [ 3315.601144][T12808] kthread+0x4b5/0x4f0 [ 3315.605224][T12808] ret_from_fork+0x35/0x40 [ 3315.609632][T12808] ===================================================== [ 3315.616566][T12808] Disabling lock debugging due to kernel taint [ 3315.622709][T12808] Kernel panic - not syncing: panic_on_warn set ... [ 3315.629301][T12808] CPU: 0 PID: 12808 Comm: kworker/0:5 Tainted: G B 5.4.0-rc2+ #0 [ 3315.638310][T12808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3315.648463][T12808] Workqueue: usb_hub_wq hub_event [ 3315.653484][T12808] Call Trace: [ 3315.656772][T12808] dump_stack+0x191/0x1f0 [ 3315.661108][T12808] panic+0x3c9/0xc1e [ 3315.665021][T12808] kmsan_report+0x2b6/0x2c0 [ 3315.669525][T12808] __msan_warning+0x73/0xe0 [ 3315.674120][T12808] read_sensor_register+0x4b7/0xd30 [ 3315.679318][T12808] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 3315.685326][T12808] sd_init+0x2cf3/0x4530 [ 3315.689583][T12808] ? sd_config+0x270/0x270 [ 3315.693997][T12808] gspca_dev_probe2+0xe93/0x2230 [ 3315.698961][T12808] gspca_dev_probe+0x346/0x3b0 [ 3315.703746][T12808] sd_probe+0x8d/0xa0 [ 3315.707726][T12808] ? sd_s_ctrl+0xdd0/0xdd0 [ 3315.712140][T12808] usb_probe_interface+0xd19/0x1310 [ 3315.717345][T12808] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 3315.723236][T12808] ? usb_register_driver+0x860/0x860 [ 3315.728513][T12808] really_probe+0xd91/0x1f90 [ 3315.733111][T12808] driver_probe_device+0x1ba/0x510 [ 3315.738239][T12808] __device_attach_driver+0x5b8/0x790 [ 3315.743621][T12808] bus_for_each_drv+0x28e/0x3b0 [ 3315.748481][T12808] ? deferred_probe_work_func+0x400/0x400 [ 3315.754202][T12808] __device_attach+0x489/0x750 [ 3315.759252][T12808] device_initial_probe+0x4a/0x60 [ 3315.764275][T12808] bus_probe_device+0x131/0x390 [ 3315.769140][T12808] device_add+0x25b5/0x2df0 [ 3315.773675][T12808] usb_set_configuration+0x309f/0x3710 [ 3315.779156][T12808] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 3315.785240][T12808] generic_probe+0xe7/0x280 [ 3315.791048][T12808] ? usb_choose_configuration+0xae0/0xae0 [ 3315.796764][T12808] usb_probe_device+0x146/0x200 [ 3315.801614][T12808] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 3315.807507][T12808] ? usb_register_device_driver+0x500/0x500 [ 3315.813398][T12808] really_probe+0xd91/0x1f90 [ 3315.818006][T12808] driver_probe_device+0x1ba/0x510 [ 3315.823147][T12808] __device_attach_driver+0x5b8/0x790 [ 3315.828526][T12808] bus_for_each_drv+0x28e/0x3b0 [ 3315.833458][T12808] ? deferred_probe_work_func+0x400/0x400 [ 3315.839192][T12808] __device_attach+0x489/0x750 [ 3315.843980][T12808] device_initial_probe+0x4a/0x60 [ 3315.849001][T12808] bus_probe_device+0x131/0x390 [ 3315.853856][T12808] device_add+0x25b5/0x2df0 [ 3315.858374][T12808] usb_new_device+0x23e5/0x2fb0 [ 3315.863240][T12808] hub_event+0x581d/0x72f0 [ 3315.867694][T12808] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 3315.873581][T12808] ? led_work+0x720/0x720 [ 3315.877902][T12808] ? led_work+0x720/0x720 [ 3315.882228][T12808] process_one_work+0x1572/0x1ef0 [ 3315.887267][T12808] worker_thread+0x111b/0x2460 [ 3315.892042][T12808] kthread+0x4b5/0x4f0 [ 3315.896275][T12808] ? process_one_work+0x1ef0/0x1ef0 [ 3315.901492][T12808] ? kthread_blkcg+0xf0/0xf0 [ 3315.906097][T12808] ret_from_fork+0x35/0x40 [ 3315.912065][T12808] Kernel Offset: disabled [ 3315.916488][T12808] Rebooting in 86400 seconds..